$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa File: cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa (raw, json) Hash identifier: wZ3bgYFHZesjrTE0w5jI5w+o7eYiFWhYyXIupfCBlx0= Subject key identifier: BB:AC:B9:F7:2A:B4:11:FF:7A:00:B2:1A:F5:7B:4F:63:48:12:07:5A Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584F0D6CE90F37D2883DD7849480 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 21928 IP address blocks: 24.221.0.0/16 maxlen: 24 52.144.16.0/21 maxlen: 24 75.122.0.0/15 maxlen: 24 104.152.20.0/22 maxlen: 24 173.4.0.0/14 maxlen: 24 174.141.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e9:0f:37:d2:88:3d:d7:84:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=69a7db12-c092-44ea-8d2a-f857ab40888b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:41:c0:20:3b:26:ad:d0:5e:c6:cc:17:ca:f7: 0c:43:fe:7f:32:2d:c8:94:52:b4:99:c7:78:da:93: c9:8f:3f:58:f5:8f:d3:26:8b:fc:ed:63:26:25:f9: e0:79:03:a4:3b:c3:b7:f5:fd:3f:5e:a0:e1:ba:9b: 6d:5d:d4:e8:53:a9:12:08:71:44:58:aa:8b:06:cb: 9d:a3:dd:f3:a1:d7:2e:3a:a8:93:49:18:95:a0:f1: 06:35:d1:d3:f1:b6:8d:56:bb:bf:f5:63:32:5f:c7: 0e:e8:f0:d5:0f:64:7d:09:65:df:75:10:f0:a3:71: c1:32:8a:cd:21:35:ec:07:cf:00:f9:a2:d2:2c:1d: 69:bf:9c:b8:18:79:dc:8b:fe:8e:17:6b:c2:ea:38: 60:ed:ae:b6:a7:7e:97:69:9e:76:41:7a:db:44:88: cc:56:b2:d4:aa:27:86:fb:68:52:5a:8f:d0:3e:1a: 1b:49:e6:fe:12:bf:4a:14:35:ec:26:53:c6:be:a1: 1a:cb:f3:43:15:7a:6e:b1:3e:e0:44:ba:80:24:dc: b9:8a:b8:94:7e:b2:2e:2a:4b:d1:82:59:d1:aa:c7: 6e:5a:4e:0a:7f:29:2c:26:99:5e:00:6d:14:04:4d: 65:86:c8:ae:35:a4:cd:44:f1:0d:ab:9e:b1:38:7b: 57:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AC:B9:F7:2A:B4:11:FF:7A:00:B2:1A:F5:7B:4F:63:48:12:07:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 24.221.0.0/16 52.144.16.0/21 75.122.0.0/15 104.152.20.0/22 173.4.0.0/14 174.141.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e1:84:13:fc:78:da:1e:74:ff:8d:c1:dd:4d:7d:76:dc:77: 5b:15:7b:6a:5b:c4:fd:e8:14:d0:f7:bb:41:05:1e:18:49:b9: 2c:0c:5e:c3:91:2b:7e:6a:0d:26:52:16:8a:4a:7d:8c:a0:7a: 1e:89:4f:bc:01:5c:3b:68:6a:c8:ed:4b:b9:0a:55:12:06:47: ad:f9:54:2a:91:97:65:1b:13:e4:5e:da:bc:b0:85:2e:65:32: b5:61:bb:62:bf:f1:2a:99:ac:f0:ed:26:b9:45:77:fe:68:98: 5a:f7:2a:1a:09:1e:e6:1e:71:24:09:f4:6b:75:75:85:a4:5c: 71:78:d9:da:0c:8d:19:24:85:dd:4e:09:fb:9a:77:f4:ad:da: d7:66:39:1e:d6:4a:88:c2:ec:dc:4f:ee:a6:8a:f0:10:d8:93: a8:a7:15:fd:5e:fe:f1:17:f8:4a:98:f5:26:7e:9b:0e:b8:8a: 7c:3a:38:3c:89:ff:65:bc:c4:a8:43:91:b2:9f:04:3e:86:5d: 88:ea:66:6e:34:90:43:0f:bf:d4:99:8f:89:38:7b:10:a0:a8: e4:a6:95:73:e5:7c:c7:5a:5e:fe:75:2e:46:31:44:89:f1:1b: 17:16:f8:b4:9f:b4:71:24:7e:93:d9:12:46:f2:5b:0e:a3:a9: dc:51:8c:a9 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE8NbOkPN9KIPdeElIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NjlhN2RiMTItYzA5Mi00NGVhLThkMmEtZjg1N2FiNDA4ODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokHAIDsmrdBexswXyvcMQ/5/Mi3IlFK0mcd4 2pPJjz9Y9Y/TJov87WMmJfngeQOkO8O39f0/XqDhupttXdToU6kSCHFEWKqLBsud o93zodcuOqiTSRiVoPEGNdHT8baNVru/9WMyX8cO6PDVD2R9CWXfdRDwo3HBMorN ITXsB88A+aLSLB1pv5y4GHnci/6OF2vC6jhg7a62p36XaZ52QXrbRIjMVrLUqieG +2hSWo/QPhobSeb+Er9KFDXsJlPGvqEay/NDFXpusT7gRLqAJNy5iriUfrIuKkvR glnRqsduWk4KfyksJpleAG0UBE1lhsiuNaTNRPENq56xOHtXrQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFLusufcqtBH/egCyGvV7T2NIEgdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvY2M5NDBmN2QtMTEwYy0z NzRjLTlmYmQtNjE2ZDZmOGEwZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAGN0DBAM0 kBADAwFLegMEAmiYFAMDAq0EAwQEro3QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFPhhBP8eNoedP+Nwd1N fXbcd1sVe2pbxP3oFND3u0EFHhhJuSwMXsORK35qDSZSFopKfYygeh6JT7wBXDto asjtS7kKVRIGR635VCqRl2UbE+Re2rywhS5lMrVhu2K/8SqZrPDtJrlFd/5omFr3 KhoJHuYecSQJ9Gt1dYWkXHF42doMjRkkhd1OCfuad/St2tdmOR7WSojC7NxP7qaK 8BDYk6inFf1e/vEX+EqY9SZ+mw64inw6ODyJ/2W8xKhDkbKfBD6GXYjqZm40kEMP v9SZj4k4exCgqOSmlXPlfMdaXv51LkYxRInxGxcW+LSftHEkfpPZEkbyWw6jqdxR jKk= -----END CERTIFICATE-----Generated at Tue Sep 22 09:42:28 2026 by rpki-client