$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/66c487a4-5908-3ed4-bdfd-82dbeed62c2a.roa File: 66c487a4-5908-3ed4-bdfd-82dbeed62c2a.roa (raw, json) Hash identifier: xcCrHhFehPTfp6xXAKlBZLIceJDvg+JbyzXuSrnE7Fw= Subject key identifier: 53:37:86:77:5F:EE:A2:96:CE:66:24:2D:8A:0A:FE:E3:99:BD:5D:F0 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584F71ED9E2495997DA696566670 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/66c487a4-5908-3ed4-bdfd-82dbeed62c2a.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 2734 IP address blocks: 192.34.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9e:24:95:99:7d:a6:96:56:66:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=8973711d-db06-4fe4-a67c-39e7b3ac7d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b4:a8:3b:bd:f6:31:0d:23:fe:09:e8:95:a5: d9:0f:b5:dc:67:a7:a2:01:32:05:92:3f:ae:9b:90: 3c:58:ba:60:12:a6:65:8a:b9:c3:d5:d0:f0:ef:f6: fa:85:49:68:d4:05:54:f1:2c:22:4d:94:85:62:90: dc:78:2b:6c:75:4e:27:d4:54:c7:57:d5:17:71:2c: 2c:8a:e5:32:9f:dd:9a:60:0b:cd:fc:fa:46:56:4a: 07:dc:78:bb:7b:9f:b5:21:5a:22:64:6d:9a:95:14: 9d:8a:fa:a7:1a:9c:2a:d5:09:be:ee:31:9e:51:9c: fb:bb:00:97:d6:1a:35:b8:52:c4:56:38:b4:6b:96: 9d:92:fa:d1:28:af:ae:ce:71:b9:f5:6b:30:2d:e2: 75:be:c4:e2:a2:5e:57:4b:0a:42:41:c4:bb:e9:09: 7e:bd:49:69:e1:a3:0f:b1:a5:c7:11:42:7f:28:4f: b1:39:f4:3d:8a:5f:fc:90:0c:e4:51:60:72:fb:58: dc:20:41:c4:67:ee:7f:0d:97:df:c9:86:da:f0:b3: 32:0b:6e:0f:eb:08:85:90:08:3d:63:b5:e0:9c:0e: e1:aa:e1:34:48:e9:8b:1e:1c:a4:d6:ff:a4:dd:79: cc:34:a2:83:60:74:14:d8:08:77:ae:aa:8c:14:c7: 9f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:37:86:77:5F:EE:A2:96:CE:66:24:2D:8A:0A:FE:E3:99:BD:5D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/66c487a4-5908-3ed4-bdfd-82dbeed62c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 192.34.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:dc:f1:bf:83:4a:06:3f:e4:04:e6:72:ff:53:ea:04:5f:6e: 9b:46:fa:b2:eb:6a:d6:d7:ea:d2:46:11:7d:f9:31:0d:81:6d: f4:f1:66:a0:04:3b:4c:54:aa:bd:31:3b:0f:d4:ba:0d:4a:32: 21:11:c7:06:41:00:f3:b1:74:e0:ea:76:46:f6:cf:78:13:74: aa:dd:26:16:f3:3d:06:15:f7:1f:dd:70:e3:8c:55:53:25:1d: 70:83:b9:28:f8:c8:0b:8e:4c:df:11:87:f6:dc:ae:36:07:9f: 76:61:d6:2d:e0:9e:64:fc:39:2e:fc:aa:1f:7e:8c:61:a3:73: df:d4:2b:c9:ef:c4:0c:cc:a0:a7:94:4a:64:39:d1:f6:b6:10: 79:e5:e2:c4:78:71:08:c9:58:f7:54:ef:07:f7:16:94:72:13: d0:21:9e:be:fb:d1:0a:f9:13:29:23:ab:b6:ed:51:cc:5c:ff: c8:fa:b2:34:76:4f:0d:f9:ee:f2:a0:ae:f9:5d:8e:0f:c8:0c: d0:e1:03:2d:1f:72:65:b1:24:8c:72:ed:ab:17:7c:54:06:b0: 57:7d:3b:58:7a:32:2b:17:bc:6c:1a:fa:f5:4c:ba:14:2e:8e: be:40:bf:6d:7e:ad:1a:cb:74:bd:0a:4e:02:37:b9:b2:83:be: 96:f7:40:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Z4klZl9ppZWZnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ODk3MzcxMWQtZGIwNi00ZmU0LWE2N2MtMzllN2IzYWM3ZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7SoO732MQ0j/gnolaXZD7XcZ6eiATIFkj+u m5A8WLpgEqZlirnD1dDw7/b6hUlo1AVU8SwiTZSFYpDceCtsdU4n1FTHV9UXcSws iuUyn92aYAvN/PpGVkoH3Hi7e5+1IVoiZG2alRSdivqnGpwq1Qm+7jGeUZz7uwCX 1ho1uFLEVji0a5adkvrRKK+uznG59WswLeJ1vsTiol5XSwpCQcS76Ql+vUlp4aMP saXHEUJ/KE+xOfQ9il/8kAzkUWBy+1jcIEHEZ+5/DZffyYba8LMyC24P6wiFkAg9 Y7XgnA7hquE0SOmLHhyk1v+k3XnMNKKDYHQU2Ah3rqqMFMef1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFM3hndf7qKWzmYkLYoK/uOZvV3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvNjZjNDg3YTQtNTkwOC0z ZWQ0LWJkZmQtODJkYmVlZDYyYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwCIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfc8b+DSgY/5ATmcv9T6gRfbptG+rLratbX6tJGEX35MQ2BbfTxZqAE O0xUqr0xOw/Uug1KMiERxwZBAPOxdODqdkb2z3gTdKrdJhbzPQYV9x/dcOOMVVMl HXCDuSj4yAuOTN8Rh/bcrjYHn3Zh1i3gnmT8OS78qh9+jGGjc9/UK8nvxAzMoKeU SmQ50fa2EHnl4sR4cQjJWPdU7wf3FpRyE9Ahnr770Qr5Eykjq7btUcxc/8j6sjR2 Tw357vKgrvldjg/IDNDhAy0fcmWxJIxy7asXfFQGsFd9O1h6MisXvGwa+vVMuhQu jr5Av21+rRrLdL0KTgI3ubKDvpb3QG0= -----END CERTIFICATE-----Generated at Sun Oct 11 13:48:19 2026 by rpki-client