$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8078de36-7b1b-3865-b855-e65f3fd049b7.roa File: 8078de36-7b1b-3865-b855-e65f3fd049b7.roa (raw, json) Hash identifier: GzaKeoL+aeYKhZDgNJQFmgNfFPS3EWugCDwqytyH6Ps= Subject key identifier: B3:E7:02:C1:A3:2B:5C:9D:1E:8D:E7:36:F2:5D:9C:2F:2C:EA:DA:9E Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584F19FCE7F9DEA43995F87EC2C0 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8078de36-7b1b-3865-b855-e65f3fd049b7.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 15320 IP address blocks: 216.238.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:e7:f9:de:a4:39:95:f8:7e:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=9dd59ff0-d9f8-4fdd-bd0a-ffceb1f954f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:8d:d9:ce:c7:a9:8d:76:48:23:b0:c3:88: dd:cb:43:ec:bc:e4:3b:f0:53:2c:11:2c:8d:c3:68: 65:66:c5:a5:38:82:96:36:f8:03:9d:35:d5:46:1a: 23:e8:6a:38:8c:a3:de:36:ec:65:ca:02:60:77:98: 74:ce:4d:de:a2:a6:ed:c4:40:d0:e7:36:a7:5a:8f: c5:36:81:16:24:47:b0:39:8c:d2:94:fc:28:ed:d9: ea:ac:48:01:3e:3d:01:ce:28:05:e3:e0:a8:14:61: 44:82:5e:66:d2:17:ff:63:17:eb:ce:a8:86:b9:d4: 30:dd:08:30:31:69:d7:fe:63:ba:6c:40:4f:f8:04: 8f:ab:ed:fd:75:be:66:a9:35:20:25:69:a9:93:da: 35:fb:bf:60:db:d3:43:f5:99:53:6c:40:a5:a3:ae: 43:4f:e8:2f:c8:6c:59:6f:27:77:01:8d:ab:98:af: 85:c0:94:de:35:5f:1a:70:2c:ce:d5:6a:65:43:e6: 37:77:5b:67:3e:28:c1:9b:a1:f2:a3:dc:c1:3b:d9: b4:da:d3:c6:dd:ea:f4:b1:b0:6d:e6:85:ee:47:e3: f0:3f:4a:c1:09:47:bd:06:d3:b0:fb:26:d8:6f:b1: 89:27:3a:c3:64:9b:42:df:c5:81:e0:20:60:f2:1a: a1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E7:02:C1:A3:2B:5C:9D:1E:8D:E7:36:F2:5D:9C:2F:2C:EA:DA:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8078de36-7b1b-3865-b855-e65f3fd049b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 216.238.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:dd:8d:b2:32:7c:9d:14:1c:48:1f:de:2f:12:34:c9:d1:59: 51:dd:ad:10:e1:8f:4a:f6:d3:7d:24:e5:2a:0f:f2:64:70:ae: 97:7b:22:8d:62:f2:ab:fb:f2:05:f2:f5:cd:e1:aa:cd:49:a4: 15:39:ab:a7:a5:10:ca:9e:d3:51:54:4a:3e:82:99:9b:a2:6e: c4:bc:c8:da:23:df:9a:cd:d1:c2:1d:5e:8b:69:b0:a6:57:7e: 4d:19:8b:d1:e3:8e:49:1a:c5:69:23:f6:4e:c2:0c:b1:d2:d0: 12:d5:2d:fe:b1:e9:38:75:41:8e:be:3e:db:f5:25:61:50:53: 6d:5f:e0:bc:be:77:1f:66:87:28:37:66:88:71:9d:bc:36:9e: ce:2f:70:6f:2f:99:f3:8e:fb:77:a9:d6:74:fb:4b:bf:0c:8d: 6c:34:6a:5d:a4:c0:fb:96:d4:91:26:4e:bd:e5:d3:3a:0f:e4: e4:ac:62:90:a5:d8:18:4a:54:a2:fc:48:ac:1d:9e:a0:21:b5: 54:0f:0b:01:8c:e9:f2:c4:38:33:d4:c7:0a:8d:1f:d7:cf:88: 0e:38:b0:85:4b:67:c8:c6:86:e1:31:a5:19:43:52:cc:3e:a8: 72:85:38:7e:86:73:35:72:6e:20:30:03:a7:f3:79:5b:a2:1e: 00:5f:8c:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/Of53qQ5lfh+wsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk OWRkNTlmZjAtZDlmOC00ZmRkLWJkMGEtZmZjZWIxZjk1NGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5uN2c7HqY12SCOww4jdy0PsvOQ78FMsESyN w2hlZsWlOIKWNvgDnTXVRhoj6Go4jKPeNuxlygJgd5h0zk3eoqbtxEDQ5zanWo/F NoEWJEewOYzSlPwo7dnqrEgBPj0BzigF4+CoFGFEgl5m0hf/YxfrzqiGudQw3Qgw MWnX/mO6bEBP+ASPq+39db5mqTUgJWmpk9o1+79g29ND9ZlTbEClo65DT+gvyGxZ byd3AY2rmK+FwJTeNV8acCzO1WplQ+Y3d1tnPijBm6Hyo9zBO9m02tPG3er0sbBt 5oXuR+PwP0rBCUe9BtOw+ybYb7GJJzrDZJtC38WB4CBg8hqhQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPnAsGjK1ydHo3nNvJdnC8s6tqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvODA3OGRlMzYtN2IxYi0z ODY1LWI4NTUtZTY1ZjNmZDA0OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2O6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTdjbIyfJ0UHEgf3i8SNMnRWVHdrRDhj0r2030k5SoP8mRwrpd7Io1i 8qv78gXy9c3hqs1JpBU5q6elEMqe01FUSj6CmZuibsS8yNoj35rN0cIdXotpsKZX fk0Zi9HjjkkaxWkj9k7CDLHS0BLVLf6x6Th1QY6+Ptv1JWFQU21f4Ly+dx9mhyg3 Zohxnbw2ns4vcG8vmfOO+3ep1nT7S78MjWw0al2kwPuW1JEmTr3l0zoP5OSsYpCl 2BhKVKL8SKwdnqAhtVQPCwGM6fLEODPUxwqNH9fPiA44sIVLZ8jGhuExpRlDUsw+ qHKFOH6GczVybiAwA6fzeVuiHgBfjDc= -----END CERTIFICATE-----Generated at Sun Oct 4 07:45:53 2026 by rpki-client