$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/dbe42001-aa81-3042-997d-8ad5de40c36d.roa File: dbe42001-aa81-3042-997d-8ad5de40c36d.roa (raw, json) Hash identifier: WskYzsiWujf0H0/dNJfPXNpK8t/D8+CGz8b/6Iedj/g= Subject key identifier: 09:33:D7:CD:B7:0C:4E:6E:76:54:17:F2:ED:12:C7:C7:85:CD:E3:45 Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584F19FCFC866CCB81A7157F31C0 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/dbe42001-aa81-3042-997d-8ad5de40c36d.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 23525 IP address blocks: 66.152.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fc:86:6c:cb:81:a7:15:7f:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=5aa0f454-7a02-4358-90fb-89a4234d94ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:20:ea:3f:39:84:b9:8f:08:23:73:9a:a4:bd: d8:9b:d6:9b:27:fb:a4:ca:dd:2d:ee:67:b2:9a:bf: 27:fe:cf:c0:53:ce:84:13:20:8e:92:c6:de:d8:5f: 3b:15:d9:83:bb:53:15:aa:2e:ca:f6:ec:31:ad:4c: e0:08:7e:ec:e0:76:8e:49:56:21:df:2b:03:33:d8: 81:1a:5d:dd:1b:ad:74:0e:ad:fe:ee:f5:90:50:7d: ec:ce:e9:8a:47:a0:c5:3e:23:d7:b7:6a:f7:66:d9: 14:b9:62:4f:e4:2c:df:ad:01:55:cf:fc:34:4c:2e: 65:11:32:94:4d:69:3a:76:18:eb:94:5f:75:af:5e: 36:d8:cb:85:c7:b9:30:ad:90:71:30:87:6f:b1:a6: 54:3e:91:7d:5e:39:3c:b3:74:35:fb:ad:24:25:34: 6c:ce:3c:11:80:e1:ef:57:b3:30:7c:4e:39:00:f3: 32:d0:b1:2e:80:62:80:bc:23:e6:47:2e:71:77:95: 19:ba:c7:4e:b3:ca:d6:86:55:cb:2e:60:64:89:05: 0a:ce:5a:2c:f2:fa:8d:88:72:19:7c:78:db:24:79: e0:6e:59:a8:e7:15:e1:a9:fd:a2:89:3e:9a:a2:4b: 14:f2:31:ba:ad:9d:93:13:b4:e7:b6:22:3d:1b:45: 78:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:33:D7:CD:B7:0C:4E:6E:76:54:17:F2:ED:12:C7:C7:85:CD:E3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/dbe42001-aa81-3042-997d-8ad5de40c36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 66.152.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5c:c2:08:30:f8:ba:73:c2:98:bb:7b:ec:2d:bc:9c:fc:01: 84:82:92:76:cb:fd:ae:21:69:64:9a:98:56:9d:ae:d1:b2:24: 63:d7:ab:13:41:8a:ff:8b:f8:41:19:a1:7a:91:a8:98:25:b9: 6c:a9:24:54:a8:ad:0f:d8:b0:6f:52:91:76:e9:02:b7:28:5f: 02:30:ad:00:6e:48:6a:48:ce:2d:80:c6:25:b1:76:bc:72:a0: b8:78:e5:64:b9:63:c2:43:3e:f5:a2:05:0d:e4:b2:74:ee:9e: d2:62:b4:d2:0b:ea:12:30:4c:22:9c:6a:4c:d9:d1:5e:8c:03: 1e:0c:90:5e:aa:72:ba:7d:59:39:bb:e5:89:c4:a9:3c:af:f6: b3:63:76:bb:2c:65:86:23:a8:56:d0:62:bd:b8:18:03:c3:38: 5d:ab:a9:6e:ad:1d:6b:39:64:32:23:03:14:f3:c6:7b:72:9e: 84:c7:38:e8:f1:12:79:f1:97:c7:41:2c:49:5d:63:8f:b5:62: b5:88:e6:b5:3d:a2:bb:92:63:9b:6f:fa:e4:8b:9d:34:aa:62: 66:28:e6:05:1b:1c:5e:d0:de:e1:67:df:e2:51:86:16:fc:39: be:4d:63:4b:6b:4e:d3:d0:63:b8:ef:dd:0c:d5:bb:21:0b:57: 8e:ef:e0:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PyGbMuBpxV/McAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk NWFhMGY0NTQtN2EwMi00MzU4LTkwZmItODlhNDIzNGQ5NGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniDqPzmEuY8II3OapL3Ym9abJ/ukyt0t7mey mr8n/s/AU86EEyCOksbe2F87FdmDu1MVqi7K9uwxrUzgCH7s4HaOSVYh3ysDM9iB Gl3dG610Dq3+7vWQUH3szumKR6DFPiPXt2r3ZtkUuWJP5CzfrQFVz/w0TC5lETKU TWk6dhjrlF91r1422MuFx7kwrZBxMIdvsaZUPpF9Xjk8s3Q1+60kJTRszjwRgOHv V7MwfE45APMy0LEugGKAvCPmRy5xd5UZusdOs8rWhlXLLmBkiQUKzlos8vqNiHIZ fHjbJHngblmo5xXhqf2iiT6aoksU8jG6rZ2TE7TntiI9G0V4rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkz1823DE5udlQX8u0Sx8eFzeNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvZGJlNDIwMDEtYWE4MS0z MDQyLTk5N2QtOGFkNWRlNDBjMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQph+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhcwggw+Lpzwpi7e+wtvJz8AYSCknbL/a4haWSamFadrtGyJGPXqxNB iv+L+EEZoXqRqJgluWypJFSorQ/YsG9SkXbpArcoXwIwrQBuSGpIzi2AxiWxdrxy oLh45WS5Y8JDPvWiBQ3ksnTuntJitNIL6hIwTCKcakzZ0V6MAx4MkF6qcrp9WTm7 5YnEqTyv9rNjdrssZYYjqFbQYr24GAPDOF2rqW6tHWs5ZDIjAxTzxntynoTHOOjx Ennxl8dBLEldY4+1YrWI5rU9oruSY5tv+uSLnTSqYmYo5gUbHF7Q3uFn3+JRhhb8 Ob5NY0trTtPQY7jv3QzVuyELV47v4Iw= -----END CERTIFICATE-----Generated at Sat Oct 3 14:25:17 2026 by rpki-client