$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/35e8f772-c87c-3251-99a5-f15a1f573010.roa File: 35e8f772-c87c-3251-99a5-f15a1f573010.roa (raw, json) Hash identifier: u/EtbF+0KJ15xTgdzLSjU1R41X7rN7V6F7J80UDym2g= Subject key identifier: BD:73:78:CF:EE:60:81:65:C9:C7:2B:65:22:DF:0D:86:2E:4F:A4:82 Certificate issuer: /CN=2ac27e5e-1654-448f-b4a0-409a732a286a Certificate serial: 010D0C9F4328584F6DBD6E6CD10AD35653DBFB40 Authority key identifier: 98:F6:CC:57:75:0B:E7:6E:6B:2B:23:D9:82:3F:AF:17:64:A3:9E:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/35e8f772-c87c-3251-99a5-f15a1f573010.roa Signing time: Thu 08 Oct 2026 01:00:11 +0000 ROA not before: Thu 08 Oct 2026 01:00:11 +0000 ROA not after: Wed 06 Jan 2027 02:00:11 +0000 asID: 20119 IP address blocks: 23.151.96.0/24 maxlen: 24 142.202.12.0/22 maxlen: 24 144.208.88.0/24 maxlen: 24 172.83.127.0/24 maxlen: 24 2602:fe3a::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/2ac27e5e-1654-448f-b4a0-409a732a286a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/2ac27e5e-1654-448f-b4a0-409a732a286a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:bd:6e:6c:d1:0a:d3:56:53:db:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac27e5e-1654-448f-b4a0-409a732a286a Validity Not Before: Oct 8 01:00:11 2026 GMT Not After : Jan 6 02:00:11 2027 GMT Subject: CN=66d8e620-fbfb-4601-bbf4-73f884942fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ff:7b:dd:a1:c8:f9:3f:53:ac:35:03:ba:01: cd:3c:b5:ea:9b:29:6e:d2:bd:8a:69:53:7d:92:85: c0:0b:04:9e:f0:bb:52:17:5d:86:65:9e:53:1a:63: 5b:0d:6f:98:1c:09:6f:a5:1d:12:a5:cf:d3:54:5e: e9:3d:aa:de:1e:cd:8e:80:15:63:0c:9e:c3:c4:4e: d7:7f:74:fd:30:df:cf:0c:15:93:ac:11:ef:c7:50: ac:85:20:5c:cd:98:ba:52:28:df:64:19:84:b8:e8: 35:fe:4c:6a:a8:80:8a:fd:48:6b:ca:e8:8b:ee:84: a9:1a:0f:72:f3:ef:2a:fa:6b:43:f6:87:0d:3c:0c: 43:cb:67:26:d3:45:ac:a9:10:b7:85:0a:df:7c:67: 4e:7d:48:b8:39:5b:47:17:cd:8f:6a:af:1a:0b:ff: aa:e4:35:9b:f8:80:dd:61:b5:79:e4:2e:ca:0b:a2: ff:8f:76:5c:b2:99:50:24:04:4b:a2:7d:94:45:a6: be:b7:aa:e4:14:b7:e3:d5:db:df:e2:38:60:71:43: 0f:d8:19:06:32:b0:a3:86:f6:bd:b1:57:0b:15:8e: 75:08:a3:24:5b:5f:0a:19:ea:ea:2f:c8:a2:8b:65: 7d:09:f6:cc:8c:4f:fc:e6:3c:97:41:49:b2:4c:0b: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:73:78:CF:EE:60:81:65:C9:C7:2B:65:22:DF:0D:86:2E:4F:A4:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/35e8f772-c87c-3251-99a5-f15a1f573010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/2ac27e5e-1654-448f-b4a0-409a732a286a.crl X509v3 Authority Key Identifier: keyid:98:F6:CC:57:75:0B:E7:6E:6B:2B:23:D9:82:3F:AF:17:64:A3:9E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a.cer sbgp-ipAddrBlock: critical IPv4: 23.151.96.0/24 142.202.12.0/22 144.208.88.0/24 172.83.127.0/24 IPv6: 2602:fe3a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:52:cf:e5:dd:78:c9:7f:72:9a:73:ab:ab:01:17:cb:d0:24: 18:ed:3f:fc:de:4c:ce:d3:5c:81:b5:94:4f:68:36:df:24:97: 7b:e6:10:e3:5d:1f:a8:23:33:de:95:a5:8b:98:71:d9:8f:29: 33:eb:ed:06:ad:d3:d7:64:cf:f6:00:f7:69:e4:41:1d:26:44: 01:db:d6:f2:e4:0c:6d:b8:46:40:5e:39:88:bd:92:6e:2e:c2: b1:55:cc:e5:e1:76:a2:f0:30:2f:e4:c7:92:33:a6:0e:13:d0: cc:f1:54:b0:d0:d8:41:90:84:f7:68:5c:64:a0:f8:54:2b:95: 21:41:f5:6c:d5:88:9f:17:17:03:15:32:d3:d3:e1:05:27:ec: 92:01:12:5c:92:33:f0:6c:8c:c2:10:89:b1:92:b7:56:fc:da: 91:55:2f:3a:18:c0:ad:63:40:f7:57:fa:92:6d:68:90:00:1f: a4:e7:d1:05:60:e7:af:89:09:ee:85:23:80:a7:67:c4:7e:49: 02:3b:27:bc:ac:ee:8c:e8:60:e2:53:91:f6:a3:ea:59:16:ca: 32:64:ce:de:cc:8b:b5:de:de:a4:e1:59:99:a5:cb:e6:5b:92: d4:f9:be:76:41:3e:27:99:f1:b4:2e:6e:3e:54:c7:69:fa:60: cf:f3:75:47 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE9tvW5s0QrTVlPb+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjMjdlNWUtMTY1NC00NDhmLWI0YTAtNDA5YTczMmEy ODZhMB4XDTI2MTAwODAxMDAxMVoXDTI3MDEwNjAyMDAxMVowLzEtMCsGA1UEAxMk NjZkOGU2MjAtZmJmYi00NjAxLWJiZjQtNzNmODg0OTQyZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf973aHI+T9TrDUDugHNPLXqmylu0r2KaVN9 koXACwSe8LtSF12GZZ5TGmNbDW+YHAlvpR0Spc/TVF7pPareHs2OgBVjDJ7DxE7X f3T9MN/PDBWTrBHvx1CshSBczZi6UijfZBmEuOg1/kxqqICK/UhryuiL7oSpGg9y 8+8q+mtD9ocNPAxDy2cm00WsqRC3hQrffGdOfUi4OVtHF82Paq8aC/+q5DWb+IDd YbV55C7KC6L/j3ZcsplQJARLon2URaa+t6rkFLfj1dvf4jhgcUMP2BkGMrCjhva9 sVcLFY51CKMkW18KGerqL8iii2V9CfbMjE/85jyXQUmyTAtL4QIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFL1zeM/uYIFlyccrZSLfDYYuT6SCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYWMy N2U1ZS0xNjU0LTQ0OGYtYjRhMC00MDlhNzMyYTI4NmEvMzVlOGY3NzItYzg3Yy0z MjUxLTk5YTUtZjE1YTFmNTczMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmFjMjdlNWUtMTY1NC00NDhmLWI0 YTAtNDA5YTczMmEyODZhLzJhYzI3ZTVlLTE2NTQtNDQ4Zi1iNGEwLTQwOWE3MzJh Mjg2YS5jcmwwHwYDVR0jBBgwFoAUmPbMV3UL525rKyPZgj+vF2Sjns0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYWMyN2U1ZS0xNjU0LTQ0OGYtYjRhMC00MDlh NzMyYTI4NmEuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQAF5dgAwQC jsoMAwQAkNBYAwQArFN/MA4EAgACMAgDBgQmAv46ADBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCoUs/l3XjJ f3Kac6urARfL0CQY7T/83kzO01yBtZRPaDbfJJd75hDjXR+oIzPelaWLmHHZjykz 6+0GrdPXZM/2APdp5EEdJkQB29by5AxtuEZAXjmIvZJuLsKxVczl4Xai8DAv5MeS M6YOE9DM8VSw0NhBkIT3aFxkoPhUK5UhQfVs1YifFxcDFTLT0+EFJ+ySARJckjPw bIzCEImxkrdW/NqRVS86GMCtY0D3V/qSbWiQAB+k59EFYOeviQnuhSOAp2fEfkkC Oye8rO6M6GDiU5H2o+pZFsoyZM7ezIu13t6k4VmZpcvmW5LU+b52QT4nmfG0Lm4+ VMdp+mDP83VH -----END CERTIFICATE-----Generated at Sun Oct 11 17:56:17 2026 by rpki-client