$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00a89a33-7bd3-3985-bfd7-7eac9fa760f8.roa File: 00a89a33-7bd3-3985-bfd7-7eac9fa760f8.roa (raw, json) Hash identifier: 9NMGXV9t/9UYXt/wxQnbBVk0h1EvlxfkPfofWjtrfUA= Subject key identifier: 15:56:5D:80:52:DF:B6:7E:F8:35:DA:3A:26:3E:2E:2D:F4:C7:19:61 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F3E47FDBADB33A7BF4DF24DA8 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00a89a33-7bd3-3985-bfd7-7eac9fa760f8.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 57043 IP address blocks: 166.1.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fd:ba:db:33:a7:bf:4d:f2:4d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=b38eefaa-d30b-4bbd-83ce-19a95269819f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:06:1b:e9:3b:a0:91:60:d6:08:a7:df:12: b3:84:4c:76:18:85:d7:07:33:5e:d0:bf:c2:33:0c: 04:d5:f8:c6:1c:ee:90:27:dd:64:d3:87:d7:53:cf: 2a:16:4f:2c:2e:d5:16:c2:0e:e2:b6:68:dc:36:14: d5:7a:29:28:68:9d:ea:19:11:aa:07:56:65:eb:f7: 39:f7:b4:a0:b4:02:8a:3b:55:73:e2:7d:48:1c:01: 6a:e2:47:02:10:d0:cc:0c:02:81:51:8d:b2:23:e2: 79:74:4c:a7:b9:b6:0c:ef:d4:3a:89:c6:77:ce:5d: 09:a8:e4:77:bc:a1:61:83:b9:ef:cf:c0:6a:7e:50: 80:e2:d4:00:2a:5c:05:42:b5:65:92:04:1b:49:9f: c7:f7:67:90:0e:bf:88:00:65:a7:5c:dd:c2:54:e0: 04:22:5b:f5:28:b6:ef:b1:3b:52:bb:1f:0f:2e:b3: 72:64:01:c7:7b:d8:d8:0b:42:34:fe:2d:b5:41:cc: dc:f1:cc:38:15:cf:95:69:c0:46:60:53:7d:e1:6d: 84:5c:28:26:96:f6:1c:88:fa:09:1d:ca:24:b2:a7: 0b:6d:89:f6:0a:04:cd:d8:74:53:d6:21:06:fe:da: 61:6c:68:1b:b3:e8:1b:84:bf:68:53:f6:1d:47:d7: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:56:5D:80:52:DF:B6:7E:F8:35:DA:3A:26:3E:2E:2D:F4:C7:19:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00a89a33-7bd3-3985-bfd7-7eac9fa760f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:0f:0f:7f:a4:aa:5d:9d:d8:89:28:2c:ef:22:bd:2e:69:04: b7:e9:14:93:9f:9e:69:6d:13:f1:2d:30:75:f2:2e:02:61:31: fa:ec:34:1c:0b:7d:58:4e:88:24:dd:3f:61:e4:36:e6:0b:6f: 85:48:67:1a:c1:88:7b:d2:0a:79:4b:72:49:15:78:5b:07:39: 81:9e:b5:86:99:2d:27:a2:e4:22:d8:0f:d2:ee:75:5b:23:10: 6a:49:1b:c0:96:e6:74:f5:fd:d7:ee:11:e1:54:53:18:b9:fa: a2:c0:a6:c6:10:8f:1d:1b:54:40:c6:66:83:f0:46:e5:d5:7c: d6:1d:6c:dc:d5:38:36:d6:cf:fc:7c:9c:45:5e:86:b3:59:22: a3:82:1e:eb:6f:18:cc:db:a1:af:71:97:88:a1:38:30:37:34: f5:a7:52:a1:26:59:07:bf:4e:aa:8a:2e:e0:59:06:c1:bd:e9: f9:40:68:a5:22:9c:37:49:6b:6e:f5:57:79:61:d2:27:2d:6f: 22:26:88:40:69:d1:b2:11:4e:07:42:a7:32:4e:f5:b9:10:1b: e3:60:0d:20:09:40:d4:a3:bb:ff:ec:82:a2:56:47:73:cf:05: 8d:b4:75:91:9a:24:1c:6e:14:45:c4:2d:40:ab:ee:a0:3f:dc: 9f:96:87:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/262zOnv03yTagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YjM4ZWVmYWEtZDMwYi00YmJkLTgzY2UtMTlhOTUyNjk4MTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB4GG+k7oJFg1gin3xKzhEx2GIXXBzNe0L/C MwwE1fjGHO6QJ91k04fXU88qFk8sLtUWwg7itmjcNhTVeikoaJ3qGRGqB1Zl6/c5 97SgtAKKO1Vz4n1IHAFq4kcCENDMDAKBUY2yI+J5dEynubYM79Q6icZ3zl0JqOR3 vKFhg7nvz8BqflCA4tQAKlwFQrVlkgQbSZ/H92eQDr+IAGWnXN3CVOAEIlv1KLbv sTtSux8PLrNyZAHHe9jYC0I0/i21Qczc8cw4Fc+VacBGYFN94W2EXCgmlvYciPoJ HcoksqcLbYn2CgTN2HRT1iEG/tphbGgbs+gbhL9oU/YdR9dzJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVWXYBS37Z++DXaOiY+Li30xxlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDBhODlhMzMtN2JkMy0z OTg1LWJmZDctN2VhYzlmYTc2MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4PD3+kql2d2IkoLO8ivS5pBLfpFJOfnmltE/EtMHXyLgJhMfrsNBwL fVhOiCTdP2HkNuYLb4VIZxrBiHvSCnlLckkVeFsHOYGetYaZLSei5CLYD9LudVsj EGpJG8CW5nT1/dfuEeFUUxi5+qLApsYQjx0bVEDGZoPwRuXVfNYdbNzVODbWz/x8 nEVehrNZIqOCHutvGMzboa9xl4ihODA3NPWnUqEmWQe/TqqKLuBZBsG96flAaKUi nDdJa271V3lh0ictbyImiEBp0bIRTgdCpzJO9bkQG+NgDSAJQNSju//sgqJWR3PP BY20dZGaJBxuFEXELUCr7qA/3J+Wh84= -----END CERTIFICATE-----Generated at Tue Sep 22 00:29:14 2026 by rpki-client