$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/b649d6f8-f1ca-3138-b38f-579d69a6c479.roa File: b649d6f8-f1ca-3138-b38f-579d69a6c479.roa (raw, json) Hash identifier: qx/aDO+M+qFQ7UPaOQDKXWlc71bHyf3+ON11/wifF6w= Subject key identifier: 20:DC:19:51:6E:80:D6:1B:70:89:B1:E5:D2:6E:44:EA:C5:FA:1D:8B Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584F19FCE8CA11AA8F11CBC07400 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/b649d6f8-f1ca-3138-b38f-579d69a6c479.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 13536 IP address blocks: 66.231.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:e8:ca:11:aa:8f:11:cb:c0:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=7c3e7530-613f-4d3d-b09b-0657bf295c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:29:be:92:73:8b:e5:68:f3:d3:9a:0a:25:2c: 1b:d1:ee:0a:95:dd:c2:b7:16:7c:7d:e4:da:74:93: bf:f1:07:62:7b:d6:25:66:6c:e1:00:8a:f0:11:e1: 99:40:b9:2e:06:dc:e5:43:81:c4:95:1e:dc:81:85: f6:c2:04:08:18:0a:94:84:d2:9a:85:c9:9e:32:72: 2e:a2:75:23:5e:e9:d5:06:1a:0a:31:13:04:4c:e8: 71:49:4f:55:a1:a5:b8:a3:f4:e8:68:f1:d4:04:53: 35:f3:5a:38:c9:4e:02:ae:c1:2e:7f:03:dd:b7:dd: a0:ee:0c:05:f4:74:b8:1f:57:81:29:ba:4a:83:1b: 0c:21:68:d0:45:2a:ed:97:86:99:d1:36:c5:ca:b7: 7a:8a:33:31:db:f1:ab:5e:28:23:6d:c7:9c:63:c5: bd:f2:4a:89:de:cf:6f:7a:e1:b3:ce:c2:ff:7d:28: 5a:d8:1c:f9:17:b4:e2:1e:e3:f3:80:35:04:40:0a: 06:02:9d:c2:68:57:da:05:88:0b:4e:40:ad:e7:f1: 62:e9:4d:ca:07:8e:fd:64:16:68:c6:8e:1a:e2:6b: 5a:d4:4c:4d:c3:19:cd:ca:72:7e:e0:93:a4:1a:f7: 46:7b:06:14:df:af:d6:6d:58:79:a9:35:5a:ee:93: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DC:19:51:6E:80:D6:1B:70:89:B1:E5:D2:6E:44:EA:C5:FA:1D:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/b649d6f8-f1ca-3138-b38f-579d69a6c479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 66.231.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a8:d2:5c:d4:1e:63:d6:15:5b:e5:3a:c2:04:e2:c9:03:ca: 34:a7:e0:0b:3b:e6:b4:6a:f2:3d:8f:ac:00:47:be:d6:69:82: 68:b0:1c:b9:14:a9:9a:40:b4:d4:ea:3e:45:68:55:eb:dc:49: 6e:59:c4:a5:82:18:48:31:6e:bd:44:3d:7b:7d:ed:2b:4f:ed: 93:c7:4b:9a:9c:a1:1f:d0:59:10:cf:b4:fb:15:fe:ac:da:ba: 07:af:2d:dd:85:9a:8d:18:d1:bb:79:7b:d7:25:59:7e:81:e3: f5:74:f1:de:5c:9b:b7:14:1d:96:ca:6e:36:85:d5:ce:de:2b: 46:d0:a8:ed:c4:ef:4a:58:ac:fc:05:a3:71:64:20:9c:60:2e: 75:30:1c:88:07:d3:93:c6:e8:60:cb:a6:a5:6e:88:34:f2:71: 9e:0e:9e:1b:f5:c6:0f:0b:c6:fb:fb:94:e4:b4:fa:78:32:7c: 74:18:b4:e2:fe:3d:c0:76:0d:82:38:db:4f:c9:13:3b:d1:34: b7:31:43:33:5d:b6:39:83:1d:fb:81:c3:cb:f3:28:f5:40:76: 30:8d:4f:ac:75:02:fe:fc:f3:ed:72:e7:20:d2:93:c2:38:7c: f5:b2:df:ac:8f:b8:69:69:b6:29:21:af:2c:8a:5c:6b:33:9b: a7:87:3a:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/OjKEaqPEcvAdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk N2MzZTc1MzAtNjEzZi00ZDNkLWIwOWItMDY1N2JmMjk1Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgim+knOL5Wjz05oKJSwb0e4Kld3CtxZ8feTa dJO/8Qdie9YlZmzhAIrwEeGZQLkuBtzlQ4HElR7cgYX2wgQIGAqUhNKahcmeMnIu onUjXunVBhoKMRMETOhxSU9VoaW4o/ToaPHUBFM181o4yU4CrsEufwPdt92g7gwF 9HS4H1eBKbpKgxsMIWjQRSrtl4aZ0TbFyrd6ijMx2/GrXigjbcecY8W98kqJ3s9v euGzzsL/fSha2Bz5F7TiHuPzgDUEQAoGAp3CaFfaBYgLTkCt5/Fi6U3KB479ZBZo xo4a4mta1ExNwxnNynJ+4JOkGvdGewYU36/WbVh5qTVa7pNObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDcGVFugNYbcImx5dJuROrF+h2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvYjY0OWQ2ZjgtZjFjYS0z MTM4LWIzOGYtNTc5ZDY5YTZjNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQufYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+o0lzUHmPWFVvlOsIE4skDyjSn4As75rRq8j2PrABHvtZpgmiwHLkU qZpAtNTqPkVoVevcSW5ZxKWCGEgxbr1EPXt97StP7ZPHS5qcoR/QWRDPtPsV/qza ugevLd2Fmo0Y0bt5e9clWX6B4/V08d5cm7cUHZbKbjaF1c7eK0bQqO3E70pYrPwF o3FkIJxgLnUwHIgH05PG6GDLpqVuiDTycZ4Onhv1xg8Lxvv7lOS0+ngyfHQYtOL+ PcB2DYI420/JEzvRNLcxQzNdtjmDHfuBw8vzKPVAdjCNT6x1Av788+1y5yDSk8I4 fPWy36yPuGlptikhryyKXGszm6eHOtU= -----END CERTIFICATE-----Generated at Sat Oct 10 14:46:11 2026 by rpki-client