$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa File: 248dd090-9420-37f9-9305-b5cd56b24a28.roa (raw, json) Hash identifier: SrKjiU7T/BKqTsoYpuNEKc+EppP6H+/R8zo+QT8ARao= Subject key identifier: 9B:9B:0F:C3:B7:E0:55:29:25:A9:15:5E:BA:8F:44:A3:F3:BC:98:0D Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584F7782E002E10FB3BB7C3EF380 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 25820 IP address blocks: 74.118.192.0/22 maxlen: 24 104.193.8.0/22 maxlen: 24 104.245.96.0/21 maxlen: 24 104.255.64.0/21 maxlen: 24 142.0.32.0/20 maxlen: 24 162.213.24.0/21 maxlen: 24 162.248.72.0/21 maxlen: 24 204.124.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:e0:02:e1:0f:b3:bb:7c:3e:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=a715d277-b428-45e8-bc79-a2e1f534fd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:84:72:69:ab:49:a4:9b:71:24:af:b7:7f: ee:f1:4d:05:62:9c:d8:ed:92:e1:81:b4:79:86:e0: e9:35:d2:b7:45:c6:93:d9:a3:9d:50:35:64:3b:24: 73:fa:07:f4:bb:8a:8e:5d:c8:3d:b1:f8:de:d5:1f: b8:24:25:a2:20:f1:3e:b4:d7:66:83:45:84:e1:6a: f2:4d:af:21:43:1a:83:cf:41:18:2c:09:85:0a:58: 31:3d:e8:f4:ef:f3:a3:19:d5:f2:14:7f:f0:63:8b: ec:62:81:29:14:b9:23:74:2a:14:16:8d:57:1f:a5: 7e:5a:7d:96:e6:b1:35:93:8b:fd:c6:f2:d5:6c:76: 63:eb:67:c8:45:1a:4c:06:9e:7c:ba:be:77:a0:ec: d8:97:00:5f:a1:83:3d:21:b4:f6:26:39:16:d2:13: 3f:19:ec:94:4a:d0:73:7e:ab:f8:59:42:52:8c:57: 33:ea:8b:e0:ae:21:ba:04:e3:3b:27:99:85:79:17: 03:db:d8:39:ca:c6:44:ae:76:91:92:5b:d0:57:e1: 87:fa:5c:fa:35:17:09:ee:dc:25:c0:dd:af:64:d4: a4:7b:85:cd:9c:10:3f:07:27:f9:66:ba:b9:f8:05: ed:12:3f:3a:10:86:af:11:7a:61:da:cf:b9:ad:cb: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9B:0F:C3:B7:E0:55:29:25:A9:15:5E:BA:8F:44:A3:F3:BC:98:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 74.118.192.0/22 104.193.8.0/22 104.245.96.0/21 104.255.64.0/21 142.0.32.0/20 162.213.24.0/21 162.248.72.0/21 204.124.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:88:a7:b0:64:17:e5:01:63:ae:bf:e8:70:46:6f:6f:cb:72: 2c:32:1c:0c:97:de:85:26:03:67:33:2e:ab:d0:46:47:12:5a: ab:e6:48:20:8e:cd:cd:6c:8c:68:4c:9d:b4:bb:f0:1e:d2:f9: 27:10:2b:02:b4:51:0e:90:e4:c2:fb:00:60:eb:29:be:af:c1: 30:60:91:5e:b9:05:c1:7e:23:4f:99:57:d1:37:d6:07:81:5e: 34:61:ab:ad:5d:e8:71:09:95:1d:7e:79:4c:e0:76:5d:83:9f: 63:85:43:9d:3d:39:97:a7:a0:91:ca:20:d1:5b:24:60:7a:5f: cf:00:9d:a7:63:26:ea:c7:43:85:de:5d:18:56:d9:6f:0b:f2: 93:af:7e:0f:bf:fe:65:2e:77:b9:1e:2d:e9:4b:4c:5b:3e:c6: 28:ff:9f:0f:18:d7:19:9e:a2:4b:7d:8e:d1:82:d8:d2:8f:fb: 91:65:8a:05:15:d7:aa:3f:85:c3:22:48:29:6f:20:86:ba:ae: b9:f8:f3:ad:34:1d:45:89:66:b6:85:52:50:84:f1:a8:78:a5: e2:bd:51:69:5e:c7:6a:5f:84:25:10:6a:a1:12:cb:da:b7:26: 53:ab:6b:1c:ec:cd:08:ae:28:ea:ae:ba:1e:58:0b:39:49:a1: f4:ba:b2:18 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE93guAC4Q+zu3w+84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YTcxNWQyNzctYjQyOC00NWU4LWJjNzktYTJlMWY1MzRmZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoyEcmmrSaSbcSSvt3/u8U0FYpzY7ZLhgbR5 huDpNdK3RcaT2aOdUDVkOyRz+gf0u4qOXcg9sfje1R+4JCWiIPE+tNdmg0WE4Wry Ta8hQxqDz0EYLAmFClgxPej07/OjGdXyFH/wY4vsYoEpFLkjdCoUFo1XH6V+Wn2W 5rE1k4v9xvLVbHZj62fIRRpMBp58ur53oOzYlwBfoYM9IbT2JjkW0hM/GeyUStBz fqv4WUJSjFcz6ovgriG6BOM7J5mFeRcD29g5ysZErnaRklvQV+GH+lz6NRcJ7twl wN2vZNSke4XNnBA/Byf5Zrq5+AXtEj86EIavEXph2s+5rcvcTwIDAQABo4IDfzCC A3swHQYDVR0OBBYEFJubD8O34FUpJakVXrqPRKPzvJgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvMjQ4ZGQwOTAtOTQyMC0z N2Y5LTkzMDUtYjVjZDU2YjI0YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSnbAAwQC aMEIAwQDaPVgAwQDaP9AAwQEjgAgAwQDotUYAwQDovhIAwQCzHy0MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AAeIp7BkF+UBY66/6HBGb2/LciwyHAyX3oUmA2czLqvQRkcSWqvmSCCOzc1sjGhM nbS78B7S+ScQKwK0UQ6Q5ML7AGDrKb6vwTBgkV65BcF+I0+ZV9E31geBXjRhq61d 6HEJlR1+eUzgdl2Dn2OFQ509OZenoJHKINFbJGB6X88AnadjJurHQ4XeXRhW2W8L 8pOvfg+//mUud7keLelLTFs+xij/nw8Y1xmeokt9jtGC2NKP+5FligUV16o/hcMi SClvIIa6rrn48600HUWJZraFUlCE8ah4peK9UWlex2pfhCUQaqESy9q3JlOraxzs zQiuKOquuh5YCzlJofS6shg= -----END CERTIFICATE-----Generated at Sun Oct 11 20:55:22 2026 by rpki-client