$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa File: c289adc8-f56d-36ed-9305-ee284f075f34.roa (raw, json) Hash identifier: hd8wRC/tHyRtos1DWC66dCZnzQpQ7z/kQVqLNxTxDr4= Subject key identifier: 49:F3:A5:13:C6:25:D4:26:C1:20:A1:6C:49:75:D9:20:FB:F4:87:23 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584F71EDBAB24838DE46FF95FEA0 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 3527 IP address blocks: 128.231.0.0/16 maxlen: 25 137.187.0.0/16 maxlen: 25 156.40.0.0/18 maxlen: 25 156.40.64.0/20 maxlen: 25 156.40.80.0/21 maxlen: 25 156.40.88.0/22 maxlen: 25 156.40.92.0/24 maxlen: 25 156.40.96.0/19 maxlen: 25 156.40.128.0/18 maxlen: 25 156.40.192.0/22 maxlen: 25 156.40.196.0/24 maxlen: 25 156.40.198.0/23 maxlen: 25 156.40.200.0/21 maxlen: 25 156.40.208.0/20 maxlen: 25 156.40.224.0/19 maxlen: 25 165.112.0.0/16 maxlen: 25 192.231.145.0/24 maxlen: 29 192.231.146.0/23 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:ba:b2:48:38:de:46:ff:95:fe:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=436a1cae-892a-46f8-8463-6d34b3f43c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:ea:2c:68:2b:0e:b3:73:d5:c2:c8:c3:60: 31:ac:0c:4f:7e:98:ce:1a:17:90:e4:c1:8d:2c:6d: 56:b8:52:9b:67:e5:5c:0b:ad:01:ca:12:9f:60:34: 2f:29:bf:63:f2:cf:1d:12:75:77:73:ba:5f:2d:a4: 9b:fc:c2:b3:e4:76:0e:58:e8:4e:ae:ba:1a:6f:26: 2f:82:66:3e:c3:eb:6d:65:a8:0b:f8:72:92:18:47: 46:15:3c:90:28:d8:a5:47:ea:c5:3b:17:44:03:fe: de:f4:42:a3:56:f6:de:5c:98:24:65:ae:ae:ad:76: 03:12:c1:64:77:da:67:c4:ce:5c:fb:7a:be:9c:b5: 54:3a:c1:7c:11:4e:0d:aa:a3:28:97:34:2d:d6:6a: f2:01:92:96:26:71:09:62:3b:fd:11:38:7c:c3:82: 53:51:38:65:a5:87:fd:8f:22:4e:34:4a:7b:fa:91: 71:af:7f:00:76:8d:9d:e5:7a:b6:0b:52:71:79:fd: a0:99:92:ae:66:25:cb:8c:06:9e:c4:96:3c:87:10: 5d:72:5b:48:2b:56:5a:3d:9e:78:a7:02:6c:b7:5b: 85:b1:3c:5a:e7:65:3c:93:bb:19:3d:66:a6:6d:9a: c3:37:64:07:01:be:09:74:2a:d8:b7:8a:c0:67:0f: 43:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F3:A5:13:C6:25:D4:26:C1:20:A1:6C:49:75:D9:20:FB:F4:87:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 128.231.0.0/16 137.187.0.0/16 156.40.0.0-156.40.92.255 156.40.96.0-156.40.196.255 156.40.198.0-156.40.255.255 165.112.0.0/16 192.231.145.0-192.231.147.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f2:ea:bd:de:2e:df:6b:95:99:81:1b:1d:61:86:11:19:8d: eb:39:3e:e3:57:e0:6b:91:ac:0e:d3:84:a0:61:66:0d:92:3b: dd:39:55:72:f3:aa:95:e6:14:1c:66:fc:66:29:28:6e:65:c5: 8d:c9:3f:a5:04:46:f2:ac:78:82:87:32:52:82:9a:86:f8:4c: f2:f9:d4:15:1d:ee:7f:94:10:ae:45:24:fe:13:06:7d:a7:80: 83:34:1c:2c:f0:3c:bf:88:62:1b:5f:d5:f8:ec:dd:a9:f5:90: f5:34:5d:d7:67:35:fd:9d:aa:3e:7b:f9:e9:a5:1d:c5:2a:2a: 6c:39:0e:cb:67:d6:77:ed:c8:59:16:1a:82:3d:c7:40:cd:17: fd:a4:6b:28:15:a8:a7:3c:49:22:4c:53:88:2e:7b:6c:9e:7d: 57:41:b7:a2:9b:a2:0f:23:75:cb:0d:96:7b:69:6e:5d:22:c1: bb:0f:ec:a6:a0:b7:b6:dc:a1:32:0c:74:bb:89:ef:e0:a6:23: e5:43:22:f8:13:72:13:02:29:7c:b1:d2:5e:0b:ac:e0:d4:f6: 85:a2:10:55:80:99:22:13:57:8b:d9:28:ff:dd:57:2f:b6:91: 30:b3:13:5a:8c:52:ad:56:1e:27:d7:37:23:9f:d3:d6:47:fd: 73:e9:59:61 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWE9x7bqySDjeRv+V/qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NDM2YTFjYWUtODkyYS00NmY4LTg0NjMtNmQzNGIzZjQzYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJDqLGgrDrNz1cLIw2AxrAxPfpjOGheQ5MGN LG1WuFKbZ+VcC60ByhKfYDQvKb9j8s8dEnV3c7pfLaSb/MKz5HYOWOhOrroabyYv gmY+w+ttZagL+HKSGEdGFTyQKNilR+rFOxdEA/7e9EKjVvbeXJgkZa6urXYDEsFk d9pnxM5c+3q+nLVUOsF8EU4NqqMolzQt1mryAZKWJnEJYjv9ETh8w4JTUThlpYf9 jyJONEp7+pFxr38Ado2d5Xq2C1Jxef2gmZKuZiXLjAaexJY8hxBdcltIK1ZaPZ54 pwJst1uFsTxa52U8k7sZPWambZrDN2QHAb4JdCrYt4rAZw9DSwIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFEnzpRPGJdQmwSChbEl12SD79IcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYzI4OWFkYzgtZjU2ZC0z NmVkLTkzMDUtZWUyODRmMDc1ZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTBLBAIAATBFAwMAgOcDAwCJ uzALAwMDnCgDBACcKFwwDAMEBZwoYAMEAJwoxDALAwQBnCjGAwMAnCgDAwClcDAM AwQAwOeRAwQCwOeQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAC/y6r3eLt9rlZmBGx1hhhEZjes5PuNX4GuR rA7ThKBhZg2SO905VXLzqpXmFBxm/GYpKG5lxY3JP6UERvKseIKHMlKCmob4TPL5 1BUd7n+UEK5FJP4TBn2ngIM0HCzwPL+IYhtf1fjs3an1kPU0XddnNf2dqj57+eml HcUqKmw5Dstn1nftyFkWGoI9x0DNF/2kaygVqKc8SSJMU4gue2yefVdBt6Kbog8j dcsNlntpbl0iwbsP7Kagt7bcoTIMdLuJ7+CmI+VDIvgTchMCKXyx0l4LrODU9oWi EFWAmSITV4vZKP/dVy+2kTCzE1qMUq1WHifXNyOf09ZH/XPpWWE= -----END CERTIFICATE-----Generated at Sun Oct 11 20:17:43 2026 by rpki-client