$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa File: f3af561f-6e70-31c4-86f8-a11b4790170b.roa (raw, json) Hash identifier: 4+VV+bGhVNU/ocFC3o7DPaBK57L7PTzopxl5p7ha7oY= Subject key identifier: F3:F4:7E:23:13:B4:EE:EF:6F:42:26:03:3E:44:AE:10:68:F7:50:B6 Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Certificate serial: 010D0C9F4328584F77836C5BB81662AB9DACBA00 Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa Signing time: Sun 11 Oct 2026 13:01:27 +0000 ROA not before: Sun 11 Oct 2026 13:01:27 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46307 IP address blocks: 23.144.248.0/24 maxlen: 24 199.26.151.0/24 maxlen: 24 2602:fb3c::/36 maxlen: 36 2602:fb3c::/38 maxlen: 38 2602:fb3c::/48 maxlen: 48 2602:fb3c:10::/48 maxlen: 48 2602:fb3c:13::/48 maxlen: 48 2602:fb3c:20::/48 maxlen: 48 2602:fb3c:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:6c:5b:b8:16:62:ab:9d:ac:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Validity Not Before: Oct 11 13:01:27 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8aa2a945-8994-4772-a028-6408b1c0b59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:ae:c8:7c:5c:f3:1c:7b:28:15:c1:6c:a6: 11:0a:b9:11:74:df:27:59:0e:7d:ea:29:c1:12:a5: 3a:6a:b8:ac:7f:eb:99:e9:0a:86:f2:df:ec:14:7b: 5d:b2:f9:50:42:cb:8d:56:d8:c5:33:e8:1b:b4:4e: 60:1d:40:cf:b7:37:5e:0d:49:d9:d6:a3:27:0d:a7: a8:7f:fd:7d:ca:77:81:25:52:91:0e:43:37:4b:e3: 68:d1:0d:11:bf:50:bc:a7:a9:a5:56:66:b8:47:8b: 14:4e:dd:4a:87:28:21:42:01:62:7e:eb:2b:b7:59: b7:95:21:9f:b4:0b:38:66:b8:38:9e:58:8e:ec:ab: 4c:17:29:56:47:c8:b7:01:ef:f8:12:47:e7:d6:28: 18:8c:c1:04:0e:5a:77:89:97:44:b6:d1:04:5c:f6: 00:6a:af:87:17:be:21:d4:e8:1d:20:f0:69:91:1d: 1c:43:74:85:8e:f9:23:6d:62:46:8f:84:d5:4e:c3: dc:7c:4a:92:b3:8e:6b:6d:fc:c5:79:ff:22:75:30: 31:c3:11:4d:37:bb:fe:04:bc:5c:3a:da:8e:68:ac: 27:a6:4e:77:d0:31:9f:ed:70:5f:4b:09:e2:29:9f: c4:da:62:0c:50:42:f8:72:f0:df:5c:f0:2c:ef:ce: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F4:7E:23:13:B4:EE:EF:6F:42:26:03:3E:44:AE:10:68:F7:50:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl X509v3 Authority Key Identifier: keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer sbgp-ipAddrBlock: critical IPv4: 23.144.248.0/24 199.26.151.0/24 IPv6: 2602:fb3c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:08:27:c3:97:02:65:da:27:46:df:39:9f:0d:ca:33:c7:2e: ff:67:71:73:05:eb:8a:4d:0c:b8:54:3b:49:68:1d:83:ea:7c: 18:59:e6:54:e7:b4:5c:4a:d7:06:d2:83:9f:69:c7:b1:cc:74: ca:19:ff:cf:47:03:0b:58:55:9e:ae:03:4a:0d:0f:9b:be:aa: 82:fa:aa:66:4e:3c:98:a2:1a:a6:ca:13:81:64:47:3e:a3:7a: e1:15:84:4f:4d:7f:72:1a:3c:0a:aa:bf:41:22:b0:c6:e3:dd: b3:68:a4:0e:e0:11:28:46:f6:e0:b1:38:c8:0a:b6:6c:d2:b5: 2f:1c:08:53:c9:b5:55:3f:d6:73:ae:96:69:da:1d:ff:8e:b5: b4:42:a6:c7:7b:70:b3:19:3a:4b:fc:6c:01:e1:80:d5:8a:82: 06:35:d2:39:73:af:48:c9:c3:97:f5:67:e3:fc:69:21:28:70: 1d:d1:8d:e6:24:00:67:6d:76:39:12:b1:2c:87:f3:af:62:62: e4:26:c5:6a:c0:e8:da:3f:23:5e:b7:52:ac:1b:6c:3f:d0:54: 0a:f5:17:18:83:bd:e7:6b:04:a4:fc:fa:50:7c:4e:3f:c4:b4: 6e:32:d7:2f:85:31:77:cb:14:4e:d5:5f:cd:27:c0:e0:0f:b8: 95:29:a6:fa -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE93g2xbuBZiq52sugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx NjkwMB4XDTI2MTAxMTEzMDEyN1oXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGFhMmE5NDUtODk5NC00NzcyLWEwMjgtNjQwOGIxYzBiNTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SKuyHxc8xx7KBXBbKYRCrkRdN8nWQ596inB EqU6arisf+uZ6QqG8t/sFHtdsvlQQsuNVtjFM+gbtE5gHUDPtzdeDUnZ1qMnDaeo f/19yneBJVKRDkM3S+No0Q0Rv1C8p6mlVma4R4sUTt1KhyghQgFifusrt1m3lSGf tAs4Zrg4nliO7KtMFylWR8i3Ae/4Ekfn1igYjMEEDlp3iZdEttEEXPYAaq+HF74h 1OgdIPBpkR0cQ3SFjvkjbWJGj4TVTsPcfEqSs45rbfzFef8idTAxwxFNN7v+BLxc OtqOaKwnpk530DGf7XBfSwniKZ/E2mIMUEL4cvDfXPAs785/HQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFPP0fiMTtO7vb0ImAz5ErhBo91C2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvZjNhZjU2MWYtNmU3MC0z MWM0LTg2ZjgtYTExYjQ3OTAxNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5 MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5 MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2 ZGQxOTE2OTAuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5D4AwQA xxqXMA4EAgACMAgDBgQmAvs8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCnCCfDlwJl2idG3zmfDcozxy7/ Z3FzBeuKTQy4VDtJaB2D6nwYWeZU57RcStcG0oOfacexzHTKGf/PRwMLWFWergNK DQ+bvqqC+qpmTjyYohqmyhOBZEc+o3rhFYRPTX9yGjwKqr9BIrDG492zaKQO4BEo RvbgsTjICrZs0rUvHAhTybVVP9ZzrpZp2h3/jrW0QqbHe3CzGTpL/GwB4YDVioIG NdI5c69IycOX9Wfj/GkhKHAd0Y3mJABnbXY5ErEsh/OvYmLkJsVqwOjaPyNet1Ks G2w/0FQK9RcYg73nawSk/PpQfE4/xLRuMtcvhTF3yxRO1V/NJ8DgD7iVKab6 -----END CERTIFICATE-----Generated at Sun Oct 11 22:12:40 2026 by rpki-client