$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/67bfb4e8-8de2-35bd-95be-5b907f37ee5d.roa File: 67bfb4e8-8de2-35bd-95be-5b907f37ee5d.roa (raw, json) Hash identifier: 3mrBuug14sdTCdCrCOl8StCi89Z7DvSSmj/NP9PaKJE= Subject key identifier: 08:F8:40:C6:0B:F1:04:E5:C8:CD:75:C3:BF:B7:AB:94:79:C4:6D:41 Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584F19FCF0125A86018903FC1B00 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/67bfb4e8-8de2-35bd-95be-5b907f37ee5d.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 397311 IP address blocks: 216.59.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f0:12:5a:86:01:89:03:fc:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=45b604e7-f154-4f2d-a1cc-05750a0de147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:2a:f9:19:d4:62:8d:f9:5d:a7:e1:d0:21: 6a:0d:e0:39:70:63:5a:f0:8b:79:21:bf:71:3b:ca: f0:56:d5:db:59:d5:55:c2:a9:c6:81:1a:d8:7d:c1: 8f:44:34:e6:f2:6a:48:6b:91:00:44:97:d6:03:15: 47:1b:a4:cf:71:a6:cc:b8:6d:4a:fd:28:ac:61:4f: 47:94:ea:39:07:9c:3c:65:27:d3:a9:7c:e3:88:92: 5e:d1:0d:2e:7c:03:2f:39:81:b5:97:fb:1f:5c:9d: f6:14:66:66:69:03:68:ee:b4:92:18:eb:dd:a1:dc: ae:4f:d0:ba:fd:85:13:17:30:20:e5:92:8d:06:81: a9:50:4f:8c:18:59:dd:bd:27:a8:d6:a8:02:27:ba: e9:ed:4a:87:c6:e1:47:1d:a1:d8:81:cd:56:3e:95: f1:ed:59:27:72:b8:a8:28:9d:57:13:17:b9:55:47: 62:f8:3d:65:ca:33:78:9c:e6:36:72:b8:56:63:e7: 6e:49:ec:1b:f7:96:5a:c0:c5:3b:81:54:dc:48:83: 66:b0:9f:f0:bf:75:2f:80:08:06:5a:3e:e9:63:e1: 8b:2f:9f:29:16:f0:e2:c3:d9:35:a2:5d:e7:c2:50: e0:e2:95:e9:54:fc:bf:19:69:95:1b:be:e5:b0:a9: 8d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F8:40:C6:0B:F1:04:E5:C8:CD:75:C3:BF:B7:AB:94:79:C4:6D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/67bfb4e8-8de2-35bd-95be-5b907f37ee5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 216.59.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ea:83:a2:c8:fd:96:4d:45:8f:eb:72:f8:52:9f:b9:5e:b9: d4:fa:58:96:e5:93:12:16:45:03:55:f2:41:a0:e3:e5:db:34: 28:24:6a:5a:a7:2e:07:5e:46:52:6c:05:4b:d1:09:a1:47:de: d2:64:47:e0:e4:04:2c:4f:53:43:a2:8d:a7:53:41:4f:5e:52: 84:77:18:f0:4b:1d:e5:91:86:9c:77:50:d2:f4:c0:41:25:3c: 4d:c7:e8:35:1b:ac:37:85:72:9a:72:b0:aa:79:37:59:37:98: fc:9f:ba:f5:43:66:9f:e2:49:2c:aa:43:28:f9:29:65:ad:5e: 66:99:72:48:5e:9e:aa:51:f1:ab:1a:7d:7f:a8:84:de:10:09: cf:c0:2a:03:0a:39:41:6e:7a:d4:d4:fd:87:2d:55:48:77:39: 36:b6:a7:e0:9d:be:85:2f:35:3d:e7:6f:c1:86:2b:18:96:be: 00:21:3c:70:05:64:9b:08:9c:7e:bc:f5:a2:23:0f:39:2b:ca: c7:24:a4:1b:49:65:9f:31:f4:ef:cf:a5:00:86:a9:ae:4c:dd: 85:e1:1b:df:08:b2:5a:95:3e:5e:44:0b:ae:a5:2f:f1:78:a1: 38:97:fc:bf:e5:4d:fc:e9:bd:78:e2:56:d2:26:54:a2:36:6e: 5a:af:97:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PASWoYBiQP8GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk NDViNjA0ZTctZjE1NC00ZjJkLWExY2MtMDU3NTBhMGRlMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEkq+RnUYo35Xafh0CFqDeA5cGNa8It5Ib9x O8rwVtXbWdVVwqnGgRrYfcGPRDTm8mpIa5EARJfWAxVHG6TPcabMuG1K/SisYU9H lOo5B5w8ZSfTqXzjiJJe0Q0ufAMvOYG1l/sfXJ32FGZmaQNo7rSSGOvdodyuT9C6 /YUTFzAg5ZKNBoGpUE+MGFndvSeo1qgCJ7rp7UqHxuFHHaHYgc1WPpXx7Vkncrio KJ1XExe5VUdi+D1lyjN4nOY2crhWY+duSewb95ZawMU7gVTcSINmsJ/wv3UvgAgG Wj7pY+GLL58pFvDiw9k1ol3nwlDg4pXpVPy/GWmVG77lsKmNXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAj4QMYL8QTlyM11w7+3q5R5xG1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvNjdiZmI0ZTgtOGRlMi0z NWJkLTk1YmUtNWI5MDdmMzdlZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DtBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvqg6LI/ZZNRY/rcvhSn7leudT6WJblkxIWRQNV8kGg4+XbNCgkalqn LgdeRlJsBUvRCaFH3tJkR+DkBCxPU0OijadTQU9eUoR3GPBLHeWRhpx3UNL0wEEl PE3H6DUbrDeFcppysKp5N1k3mPyfuvVDZp/iSSyqQyj5KWWtXmaZckhenqpR8asa fX+ohN4QCc/AKgMKOUFuetTU/YctVUh3OTa2p+CdvoUvNT3nb8GGKxiWvgAhPHAF ZJsInH689aIjDzkrysckpBtJZZ8x9O/PpQCGqa5M3YXhG98IslqVPl5EC66lL/F4 oTiX/L/lTfzpvXjiVtImVKI2blqvl5A= -----END CERTIFICATE-----Generated at Mon Sep 28 16:40:10 2026 by rpki-client