$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa File: 3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa (raw, json) Hash identifier: Biz9CNDCkpa5zoFdLIx7NLUwXA8nfdo+PgfJIjTauOQ= Subject key identifier: 58:5A:92:6B:63:8F:05:3C:DE:49:17:02:93:C2:04:AD:38:A2:F4:71 Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Certificate serial: 010D0C9F4328584F13024A8B913261D47B749760 Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 22351 IP address blocks: 66.205.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:4a:8b:91:32:61:d4:7b:74:97:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=4ffea3a0-0b6d-43fa-b14a-bf86518d2a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:71:40:97:e7:3b:16:00:53:d0:11:f3:f4: 9f:29:a4:51:2a:85:cb:3f:ef:93:44:eb:75:f4:f9: 5d:52:36:9a:02:95:63:59:d8:d9:3d:04:f6:dd:e3: 08:8d:2c:71:a6:af:23:e4:28:c5:a0:56:e0:8a:89: 14:d4:ca:30:7b:27:bb:3b:a2:57:46:97:11:c0:9c: da:ca:e5:52:0e:68:80:7d:73:87:6d:48:c7:ba:22: 1e:32:7a:e2:44:fd:82:31:91:9b:2c:52:0a:ba:9f: aa:08:11:3c:73:6b:11:17:76:cc:f3:6a:8d:ea:ad: b8:c0:13:a7:ce:89:98:05:85:90:ed:0b:f0:03:e3: dd:f1:3c:c8:66:4b:84:86:10:57:53:76:b4:57:1e: b0:a0:11:8a:a7:5a:56:f0:e4:6b:a3:23:c0:2c:58: 89:8d:25:3b:c8:04:6f:31:27:13:bd:3e:6f:0c:d2: f7:b0:c9:a6:db:df:e7:4e:c1:2c:b9:67:22:dc:26: ce:72:3a:c5:e0:ee:be:44:40:cf:61:be:4f:18:3c: bf:52:6d:0c:8a:0e:a1:f3:51:6a:2d:1b:12:87:e4: f8:fd:fb:02:ea:bb:44:66:d6:dd:6f:1e:82:9d:42: dc:66:19:25:55:01:45:ce:f8:0e:3d:d3:f3:55:37: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:92:6B:63:8F:05:3C:DE:49:17:02:93:C2:04:AD:38:A2:F4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl X509v3 Authority Key Identifier: keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer sbgp-ipAddrBlock: critical IPv4: 66.205.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:53:f7:2c:17:39:cb:a7:87:9e:88:1b:c6:d5:96:7b:a8:f4: 83:f7:f3:8f:c4:5a:85:67:38:bf:40:a5:f4:e9:7e:37:cb:f8: a3:b9:b2:98:c4:25:89:98:06:35:91:4f:37:b1:f0:b8:ed:d3: 18:72:49:8f:bd:c9:21:bf:8e:e8:15:77:3b:e0:36:46:28:0b: 59:13:97:cd:77:42:36:2c:89:ae:1e:1a:a1:69:fc:d5:4a:0a: 6e:fb:c0:18:a2:fc:e8:42:ed:19:3b:64:65:3d:6f:b1:f8:8f: 37:9f:90:5d:1f:5e:0f:3f:0b:d0:9d:b4:4d:24:74:b6:32:98: e7:76:e0:fa:55:27:3f:94:7c:8c:43:26:44:9a:29:d6:03:b6: ff:82:c2:aa:3b:62:2f:34:e0:28:ac:ac:31:03:9e:53:28:31: b5:02:11:01:78:6f:c2:25:4a:3e:80:45:5b:b5:ea:2b:7d:30: 65:cf:20:8e:7e:02:77:7e:9d:2c:8a:e2:ce:bd:08:80:67:33: 3c:1c:82:fc:5e:27:04:d1:ab:8c:32:6c:51:e3:bb:b1:52:96: 4f:b6:4d:8c:80:90:6c:30:a0:8f:42:5f:00:26:18:f2:7b:96: e3:e1:28:29:90:63:dd:66:30:66:32:37:b4:6d:db:77:68:5c: 4f:da:a6:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkqLkTJh1Ht0l2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm YTUzMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk NGZmZWEzYTAtMGI2ZC00M2ZhLWIxNGEtYmY4NjUxOGQyYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/hxQJfnOxYAU9AR8/SfKaRRKoXLP++TROt1 9PldUjaaApVjWdjZPQT23eMIjSxxpq8j5CjFoFbgiokU1Moweye7O6JXRpcRwJza yuVSDmiAfXOHbUjHuiIeMnriRP2CMZGbLFIKup+qCBE8c2sRF3bM82qN6q24wBOn zomYBYWQ7QvwA+Pd8TzIZkuEhhBXU3a0Vx6woBGKp1pW8ORroyPALFiJjSU7yARv MScTvT5vDNL3sMmm29/nTsEsuWci3CbOcjrF4O6+REDPYb5PGDy/Um0Mig6h81Fq LRsSh+T4/fsC6rtEZtbdbx6CnULcZhklVQFFzvgOPdPzVTd3/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhakmtjjwU83kkXApPCBK04ovRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0 YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvM2QzYTA3MmEtMjFkZS0z ZTVhLThlMmYtODIxM2U0ODkwM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3 NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5 ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQs0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdT9ywXOcunh56IG8bVlnuo9IP384/EWoVnOL9ApfTpfjfL+KO5spjE JYmYBjWRTzex8Ljt0xhySY+9ySG/jugVdzvgNkYoC1kTl813QjYsia4eGqFp/NVK Cm77wBii/OhC7Rk7ZGU9b7H4jzefkF0fXg8/C9CdtE0kdLYymOd24PpVJz+UfIxD JkSaKdYDtv+Cwqo7Yi804CisrDEDnlMoMbUCEQF4b8IlSj6ARVu16it9MGXPII5+ And+nSyK4s69CIBnMzwcgvxeJwTRq4wybFHju7FSlk+2TYyAkGwwoI9CXwAmGPJ7 luPhKCmQY91mMGYyN7Rt23doXE/apoM= -----END CERTIFICATE-----Generated at Thu Sep 24 20:39:57 2026 by rpki-client