$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/9dc53a9b-384c-3962-a145-367406483154.roa File: 9dc53a9b-384c-3962-a145-367406483154.roa (raw, json) Hash identifier: JrnPXQlxM3d0LKOHxHuy0Y264t7swugjRYptDTkTCMA= Subject key identifier: 11:84:6F:50:92:39:3F:FF:50:52:73:33:0F:1A:BF:BE:E2:AC:5F:A9 Certificate issuer: /CN=c17eacde-68de-455f-97dc-4d67847c03ff Certificate serial: 010D0C9F4328584F6F22E41EEFD39C7654706380 Authority key identifier: 34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/9dc53a9b-384c-3962-a145-367406483154.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 21577 IP address blocks: 173.250.240.0/20 maxlen: 22 199.15.216.0/21 maxlen: 23 208.70.48.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e4:1e:ef:d3:9c:76:54:70:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c17eacde-68de-455f-97dc-4d67847c03ff Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=1bfa7405-0165-4241-a91a-13ff5ca65024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:26:bd:f0:15:02:65:68:7f:5a:d6:f7:99: 6d:fd:15:5a:85:5d:e1:41:ef:d6:c8:ac:78:b7:5c: d6:36:eb:89:a1:69:fb:3d:69:6d:71:1d:c8:4d:0b: 07:76:86:cc:e4:20:9e:07:26:d2:b9:1d:69:21:50: d3:93:85:f8:c6:94:34:b7:e7:c4:f5:a7:40:00:63: 3e:23:d0:ba:4e:fe:3f:26:71:b0:60:ae:5b:89:f6: 11:ec:03:25:14:dc:1c:97:89:ba:9f:24:af:ec:e9: 09:4a:b6:ba:ba:63:ac:aa:d6:36:63:82:6b:85:f1: 30:d2:87:76:a2:7d:38:c5:5e:ff:a7:66:43:61:47: e7:28:a6:4e:6c:e2:94:26:7e:20:86:fa:ae:f6:85: d7:22:09:a6:d3:3c:ba:13:26:02:99:7e:9f:5b:f1: cf:37:9e:e4:56:4f:7d:3c:a3:68:c7:78:17:4f:cd: 7f:38:49:c7:a6:1a:df:1c:6f:12:2d:31:33:8f:fe: 9a:75:ee:c2:bb:d8:60:e3:e5:a8:bb:5a:96:b6:ab: 70:58:c7:8b:87:c8:b5:65:a1:d0:df:c1:84:6b:a8: 3d:a8:ac:44:51:ef:56:9a:6c:22:26:b1:22:23:4d: 4d:e4:58:50:04:4f:53:59:71:f9:4d:c2:a0:74:9b: 09:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:84:6F:50:92:39:3F:FF:50:52:73:33:0F:1A:BF:BE:E2:AC:5F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/9dc53a9b-384c-3962-a145-367406483154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl X509v3 Authority Key Identifier: keyid:34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer sbgp-ipAddrBlock: critical IPv4: 173.250.240.0/20 199.15.216.0/21 208.70.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:04:5a:20:75:33:4e:93:9e:38:09:8c:ea:97:7a:4a:f6:91: 0d:41:96:fc:18:9e:6d:93:0d:c2:87:7c:e1:1c:76:9c:d9:af: 35:03:8d:13:46:d1:f3:f0:93:66:e3:97:8f:d2:e3:d9:5c:46: c5:08:81:8c:27:30:b8:cb:3e:81:c4:1a:d3:e5:f3:fb:ee:b5: a8:02:5b:92:46:46:19:74:c3:1e:65:26:76:93:69:56:69:54: b1:54:26:01:a1:ff:b8:40:f5:80:aa:22:3d:d3:3f:34:c9:4e: e3:5a:c4:b8:ea:9c:f5:01:73:64:2d:37:a1:4b:6d:5f:13:a5: 94:a8:a7:7f:8b:ba:5a:d1:e8:60:ca:85:c8:96:36:4b:00:ca: 85:66:37:73:57:17:b2:6a:71:fe:73:77:88:1f:4c:bd:e8:3c: 81:18:9c:cb:8e:e3:6b:f4:b6:a9:a5:70:ca:db:99:6e:30:7d: c6:97:1e:a2:36:02:38:f4:ec:28:01:4c:bd:c5:09:4b:e3:a6: dd:d5:3a:ef:3d:62:c5:35:7b:67:9f:c5:d6:32:22:91:ab:4b: 25:a0:95:3a:c0:df:35:49:55:34:e5:77:c4:bd:e5:5f:0c:b3: 50:e3:65:cd:99:4c:58:a8:eb:40:64:2d:d0:60:aa:4e:43:f0: 36:67:94:2c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9vIuQe79OcdlRwY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE3ZWFjZGUtNjhkZS00NTVmLTk3ZGMtNGQ2Nzg0N2Mw M2ZmMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MWJmYTc0MDUtMDE2NS00MjQxLWE5MWEtMTNmZjVjYTY1MDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse8mvfAVAmVof1rW95lt/RVahV3hQe/WyKx4 t1zWNuuJoWn7PWltcR3ITQsHdobM5CCeBybSuR1pIVDTk4X4xpQ0t+fE9adAAGM+ I9C6Tv4/JnGwYK5bifYR7AMlFNwcl4m6nySv7OkJSra6umOsqtY2Y4JrhfEw0od2 on04xV7/p2ZDYUfnKKZObOKUJn4ghvqu9oXXIgmm0zy6EyYCmX6fW/HPN57kVk99 PKNox3gXT81/OEnHphrfHG8SLTEzj/6ade7Cu9hg4+Wou1qWtqtwWMeLh8i1ZaHQ 38GEa6g9qKxEUe9WmmwiJrEiI01N5FhQBE9TWXH5TcKgdJsJUQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBGEb1CSOT//UFJzMw8av77irF+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdl YWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3ODQ3YzAzZmYvOWRjNTNhOWItMzg0Yy0z OTYyLWExNDUtMzY3NDA2NDgzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzE3ZWFjZGUtNjhkZS00NTVmLTk3 ZGMtNGQ2Nzg0N2MwM2ZmL2MxN2VhY2RlLTY4ZGUtNDU1Zi05N2RjLTRkNjc4NDdj MDNmZi5jcmwwHwYDVR0jBBgwFoAUNPoZkyy8mDwALlB7+J68csnzvK8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdlYWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3 ODQ3YzAzZmYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQErfrwAwQD xw/YAwQD0EYwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADsEWiB1M06TnjgJjOqXekr2kQ1BlvwYnm2TDcKH fOEcdpzZrzUDjRNG0fPwk2bjl4/S49lcRsUIgYwnMLjLPoHEGtPl8/vutagCW5JG Rhl0wx5lJnaTaVZpVLFUJgGh/7hA9YCqIj3TPzTJTuNaxLjqnPUBc2QtN6FLbV8T pZSop3+LulrR6GDKhciWNksAyoVmN3NXF7Jqcf5zd4gfTL3oPIEYnMuO42v0tqml cMrbmW4wfcaXHqI2Ajj07CgBTL3FCUvjpt3VOu89YsU1e2efxdYyIpGrSyWglTrA 3zVJVTTld8S95V8Ms1DjZc2ZTFio60BkLdBgqk5D8DZnlCw= -----END CERTIFICATE-----Generated at Sun Oct 11 13:52:41 2026 by rpki-client