$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa File: 2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa (raw, json) Hash identifier: qWy59wdjoMOZjbJAmyXZjZgNvtwFOmzzJbDwGj/4hMk= Subject key identifier: 57:2E:41:1D:F3:D2:91:77:5F:DF:4C:B1:7E:6E:80:16:36:21:B7:5E Certificate issuer: /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Certificate serial: 010D0C9F4328584F119CF9CFD97140A644D72B40 Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 26223 IP address blocks: 162.248.128.0/23 maxlen: 24 192.64.2.0/23 maxlen: 24 192.187.62.0/23 maxlen: 24 192.243.36.0/24 maxlen: 24 199.19.112.0/21 maxlen: 24 199.66.104.0/22 maxlen: 24 199.192.124.0/22 maxlen: 24 204.8.60.0/22 maxlen: 24 204.8.68.0/22 maxlen: 24 207.183.160.0/19 maxlen: 24 216.21.208.0/22 maxlen: 24 216.128.224.0/20 maxlen: 24 217.147.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f9:cf:d9:71:40:a6:44:d7:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=6ffafb45-eca0-4f6a-afa6-af853f8c17e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:65:ef:ec:a4:e1:03:1c:b9:64:2f:da:fb: 56:20:c4:96:ec:c1:4e:6d:b9:3d:b4:f1:31:ea:3a: 3f:12:2e:80:20:d7:20:53:77:3b:eb:a2:91:22:ee: 6d:1f:68:9f:4f:87:ee:68:08:b0:50:fd:b8:2e:61: 30:98:5a:ac:a9:ef:bc:27:18:63:00:63:2e:b8:9b: b6:88:01:50:70:d7:37:c6:74:4e:c5:f4:da:5b:b2: c8:b1:12:28:14:f1:d7:f2:1a:2e:4e:a7:04:19:f5: ca:97:8e:6c:6e:d0:30:2e:18:07:35:c2:97:66:b9: 1a:ff:20:f4:4c:82:38:59:23:db:a7:66:f8:1b:71: 98:94:db:9e:67:8c:50:7c:0f:96:79:07:a0:65:54: 74:de:6b:d2:e5:4d:f7:4b:e7:1a:b0:0f:68:87:50: c0:a7:74:25:6d:70:64:69:60:f5:b0:c5:98:a7:af: 96:b8:e8:d6:0a:81:01:a2:63:85:a1:97:8f:52:29: f6:53:ac:d4:60:fa:29:4f:5b:e3:48:ba:db:f8:69: e8:99:d8:c7:05:5e:4e:37:dc:2f:9a:97:10:69:e3: 59:a6:3d:bf:43:89:32:b3:d1:a1:71:a4:01:2a:c0: 2a:fb:f5:96:21:3c:40:b4:f3:5c:98:25:b0:ca:0f: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2E:41:1D:F3:D2:91:77:5F:DF:4C:B1:7E:6E:80:16:36:21:B7:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl X509v3 Authority Key Identifier: keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer sbgp-ipAddrBlock: critical IPv4: 162.248.128.0/23 192.64.2.0/23 192.187.62.0/23 192.243.36.0/24 199.19.112.0/21 199.66.104.0/22 199.192.124.0/22 204.8.60.0/22 204.8.68.0/22 207.183.160.0/19 216.21.208.0/22 216.128.224.0/20 217.147.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:26:4d:83:6b:4a:a0:75:8d:11:61:50:85:9b:82:84:d4:52: 0c:11:06:bc:59:66:0b:ad:1b:6a:09:17:93:f0:0e:37:04:21: ec:8f:37:fd:28:25:4e:07:81:e5:4a:6b:c0:8a:a0:de:39:4e: 89:b3:26:7d:bb:e9:7c:45:2c:b3:ee:78:88:a5:4e:69:5b:de: e7:d2:b6:00:dc:83:32:45:04:aa:40:33:c2:30:5a:11:67:9f: 51:32:b2:64:dc:d1:f5:fb:24:94:38:9d:d5:28:53:b5:5c:42: d1:78:9f:2a:3c:a7:4b:e5:0a:c6:d7:e7:a6:f3:33:d7:5b:21: 57:ce:da:b3:29:bc:bb:cc:1c:fd:b2:da:57:e9:57:09:a2:42: 55:86:aa:ea:a6:9a:15:9c:c5:bd:05:5c:62:3c:d5:34:1c:d2: 2b:64:08:72:20:50:21:62:1e:d4:ac:13:e1:d7:68:fe:65:15: fa:65:d2:8a:bf:a8:8f:9a:24:24:b8:78:6f:3e:9d:b4:d4:21: ad:29:46:02:ab:e9:77:ee:64:56:3e:75:b3:d7:b1:bb:3d:45: 54:f6:f6:ee:0c:1f:a9:df:63:75:39:5a:b7:97:13:25:1f:d8: 42:6a:a0:78:24:96:58:59:43:36:20:13:9d:ce:6d:91:3d:13: 0f:cb:f1:9d -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWE8RnPnP2XFApkTXK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm ODJlMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NmZmYWZiNDUtZWNhMC00ZjZhLWFmYTYtYWY4NTNmOGMxN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/Vl7+yk4QMcuWQv2vtWIMSW7MFObbk9tPEx 6jo/Ei6AINcgU3c766KRIu5tH2ifT4fuaAiwUP24LmEwmFqsqe+8JxhjAGMuuJu2 iAFQcNc3xnROxfTaW7LIsRIoFPHX8houTqcEGfXKl45sbtAwLhgHNcKXZrka/yD0 TII4WSPbp2b4G3GYlNueZ4xQfA+WeQegZVR03mvS5U33S+casA9oh1DAp3QlbXBk aWD1sMWYp6+WuOjWCoEBomOFoZePUin2U6zUYPopT1vjSLrb+GnomdjHBV5ON9wv mpcQaeNZpj2/Q4kys9GhcaQBKsAq+/WWITxAtPNcmCWwyg9XxwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFFcuQR3z0pF3X99MsX5ugBY2IbdeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvMmFmZGQyYzgtZDYwOS0z YzYzLTk4ZjgtMGNmZGQwZDFkNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2 MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw ZWNmMmY4MmUuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBoviAAwQB wEACAwQBwLs+AwQAwPMkAwQDxxNwAwQCx0JoAwQCx8B8AwQCzAg8AwQCzAhEAwQF z7egAwQC2BXQAwQE2IDgAwQD2ZO4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGgmTYNrSqB1jRFhUIWbgoTU UgwRBrxZZgutG2oJF5PwDjcEIeyPN/0oJU4HgeVKa8CKoN45TomzJn276XxFLLPu eIilTmlb3ufStgDcgzJFBKpAM8IwWhFnn1EysmTc0fX7JJQ4ndUoU7VcQtF4nyo8 p0vlCsbX56bzM9dbIVfO2rMpvLvMHP2y2lfpVwmiQlWGquqmmhWcxb0FXGI81TQc 0itkCHIgUCFiHtSsE+HXaP5lFfpl0oq/qI+aJCS4eG8+nbTUIa0pRgKr6XfuZFY+ dbPXsbs9RVT29u4MH6nfY3U5WreXEyUf2EJqoHgkllhZQzYgE53ObZE9Ew/L8Z0= -----END CERTIFICATE-----Generated at Thu Sep 24 13:12:21 2026 by rpki-client