$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/6df6246c-85e0-39d2-86e4-b13761c73466.roa File: 6df6246c-85e0-39d2-86e4-b13761c73466.roa (raw, json) Hash identifier: On4mF5w6clTCnXxph4YE7wq1VAEqBu0DDh1AZnyBFTM= Subject key identifier: F1:76:DC:43:6E:00:D8:28:AD:BE:DF:FD:55:DC:77:0A:A2:68:86:D0 Certificate issuer: /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3 Certificate serial: 010D0C9F4328584FA5934732A9DD63970980B800 Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/6df6246c-85e0-39d2-86e4-b13761c73466.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 29066 IP address blocks: 104.244.168.0/21 maxlen: 24 162.254.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:47:32:a9:dd:63:97:09:80:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=3d3353dd-c418-4f91-8bce-937c1fdf6cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:b2:9e:e6:c4:12:d4:5c:10:21:16:31:de: 30:c2:90:e4:12:a5:4e:b9:e8:f1:e3:fe:c4:57:c6: f7:a0:48:90:ad:f0:71:68:be:d6:fe:54:77:c5:a9: 37:d5:52:59:8b:12:ea:7f:38:30:90:54:77:55:ad: 65:29:af:75:de:f0:cb:d8:13:9e:7b:35:f4:b3:9c: 1d:7c:59:cc:ce:7a:96:70:22:b5:fc:0b:32:cb:41: 71:51:01:7b:f8:6f:a7:34:a9:ab:26:59:d1:60:32: 00:af:ad:f1:ff:ce:9c:a7:30:90:16:3d:f4:fa:73: 21:aa:f9:ed:04:d9:8f:b6:9d:eb:a9:69:72:60:d5: 9c:ca:05:31:f5:8c:b6:95:74:76:7f:d3:f9:f1:1a: 4a:47:04:da:bf:ff:34:f5:1c:9d:e9:af:b0:d4:e9: 14:2f:08:ae:0a:d7:54:5e:48:e9:08:b5:42:9a:37: dc:be:a2:21:00:6f:37:47:e9:54:e1:a4:e3:05:1f: 76:67:bc:0c:d3:ba:4e:67:c3:db:48:fd:51:8a:a2: 4a:5e:b6:dd:7a:26:83:47:60:8c:a5:21:6c:11:22: 04:28:9e:86:1f:25:21:97:b3:44:7e:70:e5:66:22: bf:9d:fd:e5:4a:34:1d:38:94:60:9b:70:bd:a0:9c: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:76:DC:43:6E:00:D8:28:AD:BE:DF:FD:55:DC:77:0A:A2:68:86:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/6df6246c-85e0-39d2-86e4-b13761c73466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl X509v3 Authority Key Identifier: keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer sbgp-ipAddrBlock: critical IPv4: 104.244.168.0/21 162.254.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:39:7a:43:11:e3:ab:79:66:95:4c:81:72:a0:b2:e3:7a:f4: e7:d6:98:bc:61:93:5e:9f:ed:93:95:05:26:d5:5d:ad:0e:09: 5c:f7:bd:5f:bf:ea:76:5b:2c:15:2a:4c:c6:e4:41:e7:1d:f8: 68:4a:8a:ab:f2:a8:95:63:2d:e6:9e:32:38:5c:4a:22:39:8e: bc:63:c2:d9:1e:56:3f:5e:bf:0b:86:f1:5d:41:be:26:bc:18: 87:ab:dc:7a:df:cb:a0:fe:50:8f:8a:e5:22:28:8d:fd:01:9d: 8e:2e:b8:6e:f0:11:6b:01:78:53:47:c0:fa:10:9e:2a:d4:2e: 69:ac:3a:1b:bc:43:c5:1f:ec:39:b0:7a:d6:cb:03:df:e8:97: cf:1d:e3:b2:da:2f:ba:b4:d1:9a:d3:b9:95:07:64:85:88:58: d8:49:9a:d5:61:75:82:8a:02:6a:a2:01:02:d2:b2:81:ba:82: 7e:d5:f8:dc:9f:d2:50:2b:77:85:d7:1c:c8:ca:f5:e4:e4:6a: 1a:35:8d:9d:e1:25:5e:db:c9:f8:fc:e3:e5:91:7b:6d:2a:fa: 1e:cf:20:cd:34:cb:4d:73:db:6d:c5:27:a0:cb:9a:f8:fa:3c: be:7d:bb:90:fe:21:42:15:c0:bd:f6:0b:9c:dd:7c:cd:ff:bb: d4:ff:5f:ef -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+lk0cyqd1jlwmAuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZjNjhhYTMtYWJjNS00ZDM0LThmMWMtMTdiYjExZDky YmEzMB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk M2QzMzUzZGQtYzQxOC00ZjkxLThiY2UtOTM3YzFmZGY2Y2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwCynubEEtRcECEWMd4wwpDkEqVOuejx4/7E V8b3oEiQrfBxaL7W/lR3xak31VJZixLqfzgwkFR3Va1lKa913vDL2BOeezX0s5wd fFnMznqWcCK1/Asyy0FxUQF7+G+nNKmrJlnRYDIAr63x/86cpzCQFj30+nMhqvnt BNmPtp3rqWlyYNWcygUx9Yy2lXR2f9P58RpKRwTav/809Ryd6a+w1OkULwiuCtdU XkjpCLVCmjfcvqIhAG83R+lU4aTjBR92Z7wM07pOZ8PbSP1RiqJKXrbdeiaDR2CM pSFsESIEKJ6GHyUhl7NEfnDlZiK/nf3lSjQdOJRgm3C9oJxVtwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPF23ENuANgorb7f/VXcdwqiaIbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZmM2 OGFhMy1hYmM1LTRkMzQtOGYxYy0xN2JiMTFkOTJiYTMvNmRmNjI0NmMtODVlMC0z OWQyLTg2ZTQtYjEzNzYxYzczNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWZjNjhhYTMtYWJjNS00ZDM0LThm MWMtMTdiYjExZDkyYmEzL2VmYzY4YWEzLWFiYzUtNGQzNC04ZjFjLTE3YmIxMWQ5 MmJhMy5jcmwwHwYDVR0jBBgwFoAUGjV0+uDTzjmDRIFr6CLuJyWOF6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZmM2OGFhMy1hYmM1LTRkMzQtOGYxYy0xN2Ji MTFkOTJiYTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDaPSoAwQD ov7IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEI5ekMR46t5ZpVMgXKgsuN69OfWmLxhk16f7ZOVBSbVXa0O CVz3vV+/6nZbLBUqTMbkQecd+GhKiqvyqJVjLeaeMjhcSiI5jrxjwtkeVj9evwuG 8V1Bvia8GIer3Hrfy6D+UI+K5SIojf0BnY4uuG7wEWsBeFNHwPoQnirULmmsOhu8 Q8Uf7DmwetbLA9/ol88d47LaL7q00ZrTuZUHZIWIWNhJmtVhdYKKAmqiAQLSsoG6 gn7V+Nyf0lArd4XXHMjK9eTkaho1jZ3hJV7byfj84+WRe20q+h7PIM00y01z223F J6DLmvj6PL59u5D+IUIVwL32C5zdfM3/u9T/X+8= -----END CERTIFICATE-----Generated at Sun Nov 15 14:58:24 2026 by rpki-client