$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82f5c06-9741-4099-959a-977c789cc34f/ed36510e-2a78-3e72-86b0-a4b7849f897c.roa File: ed36510e-2a78-3e72-86b0-a4b7849f897c.roa (raw, json) Hash identifier: 9AqcHps9rhYh1I+KiMOOA64l2cDF5eR+TqUpnUrcf7Q= Subject key identifier: F9:B2:E6:4D:9D:AC:57:77:9B:96:9C:42:DB:ED:9A:9F:48:9E:DD:4E Certificate issuer: /CN=d82f5c06-9741-4099-959a-977c789cc34f Certificate serial: 010D0C9F4328584F7782E414CB4327704BC37780 Authority key identifier: 83:4C:F0:CF:9D:54:B1:3A:40:6A:A3:18:96:3C:78:86:BE:55:BE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82f5c06-9741-4099-959a-977c789cc34f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82f5c06-9741-4099-959a-977c789cc34f/ed36510e-2a78-3e72-86b0-a4b7849f897c.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 54354 IP address blocks: 66.59.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82f5c06-9741-4099-959a-977c789cc34f/d82f5c06-9741-4099-959a-977c789cc34f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82f5c06-9741-4099-959a-977c789cc34f/d82f5c06-9741-4099-959a-977c789cc34f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82f5c06-9741-4099-959a-977c789cc34f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:e4:14:cb:43:27:70:4b:c3:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82f5c06-9741-4099-959a-977c789cc34f Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=860a8864-bedd-4f70-b0b5-2bb2c90c4ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:9f:f1:b4:c3:80:38:f0:1d:39:dd:fa:e8: 05:e0:df:ef:1b:0d:dc:0a:2c:f7:e3:78:87:a1:cb: 0a:ca:a7:44:99:27:d0:34:3d:6d:a0:86:f0:fc:aa: 9f:f1:ea:e5:2b:b5:60:ea:54:49:92:6e:eb:55:7f: f7:01:36:07:c0:68:a3:f3:57:97:c6:3f:42:d9:10: f5:68:4f:74:25:eb:02:e6:27:a0:1d:82:f6:b5:19: ea:f4:42:7d:b9:f4:0e:bc:0e:cf:c8:59:fc:d0:69: 92:93:ca:4d:8e:ba:4b:19:91:80:56:2d:d4:a3:cc: bc:60:34:33:92:e5:99:ee:6f:d9:7a:94:1c:68:79: fc:1a:15:d4:13:e1:b3:2f:43:11:95:39:66:03:c9: c5:7d:76:e6:38:5a:c0:da:dd:96:31:34:01:5e:a3: da:4f:8f:9b:5f:35:de:de:51:45:9f:e8:66:e8:a3: 37:12:f4:64:3a:70:99:03:59:e9:85:fe:e4:ec:81: a6:4b:af:b4:3a:6d:ba:e3:7c:7a:53:96:23:f8:16: c6:0f:1f:99:ae:79:f6:a6:75:32:b6:7f:83:97:c8: 46:55:79:93:d9:22:da:07:50:a7:a3:83:3c:0c:e2: 36:6a:51:23:ba:3c:c5:c4:20:78:1a:1c:51:14:8b: 26:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B2:E6:4D:9D:AC:57:77:9B:96:9C:42:DB:ED:9A:9F:48:9E:DD:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82f5c06-9741-4099-959a-977c789cc34f/ed36510e-2a78-3e72-86b0-a4b7849f897c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82f5c06-9741-4099-959a-977c789cc34f/d82f5c06-9741-4099-959a-977c789cc34f.crl X509v3 Authority Key Identifier: keyid:83:4C:F0:CF:9D:54:B1:3A:40:6A:A3:18:96:3C:78:86:BE:55:BE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82f5c06-9741-4099-959a-977c789cc34f.cer sbgp-ipAddrBlock: critical IPv4: 66.59.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:12:00:3f:f4:a9:69:21:1f:77:a0:b4:49:5e:d1:9d:42:08: cb:c9:e7:70:fc:a6:b3:73:c8:ac:0c:7e:7f:35:33:77:59:f3: 91:4f:25:99:b9:ba:f8:49:2c:07:a7:c6:06:25:da:ea:f3:67: 69:2f:3f:6c:85:9b:72:d7:09:46:9a:69:d7:5b:12:40:cf:59: 13:e9:63:27:d8:52:53:4b:5e:8b:b1:57:e9:78:e1:bd:a9:e7: c4:de:85:63:11:53:36:83:3e:51:81:af:83:b2:ce:7d:a3:02: 66:b6:42:f5:1e:96:bb:8c:bf:46:cc:9f:cb:a5:10:83:50:0e: d9:1f:17:a6:c2:23:74:38:e5:ff:d2:b0:5c:3a:ca:05:8e:59: ac:b4:28:c2:55:52:c6:6e:75:2e:1d:3e:db:3d:07:51:87:01: 2e:0e:91:f2:d5:af:4d:39:af:b8:42:da:74:3f:99:2e:13:66: 8b:f5:58:c6:b0:72:6e:a2:bf:06:94:93:1f:5b:aa:b7:e3:e3: d2:9f:b0:0b:f5:ec:be:4a:96:7e:5b:81:39:87:54:7c:89:69: 52:97:11:3f:a7:76:76:a5:bb:28:93:ec:c5:48:d9:b1:10:c9: d7:2f:22:02:16:cb:7d:9d:c9:b2:84:0c:4c:c3:3b:ad:2d:4b: 92:e9:56:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93guQUy0MncEvDd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgyZjVjMDYtOTc0MS00MDk5LTk1OWEtOTc3Yzc4OWNj MzRmMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODYwYTg4NjQtYmVkZC00ZjcwLWIwYjUtMmJiMmM5MGM0YWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8+f8bTDgDjwHTnd+ugF4N/vGw3cCiz343iH ocsKyqdEmSfQND1toIbw/Kqf8erlK7Vg6lRJkm7rVX/3ATYHwGij81eXxj9C2RD1 aE90JesC5iegHYL2tRnq9EJ9ufQOvA7PyFn80GmSk8pNjrpLGZGAVi3Uo8y8YDQz kuWZ7m/ZepQcaHn8GhXUE+GzL0MRlTlmA8nFfXbmOFrA2t2WMTQBXqPaT4+bXzXe 3lFFn+hm6KM3EvRkOnCZA1nphf7k7IGmS6+0Om2643x6U5Yj+BbGDx+Zrnn2pnUy tn+Dl8hGVXmT2SLaB1Cno4M8DOI2alEjujzFxCB4GhxRFIsmkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmy5k2drFd3m5acQtvtmp9Int1OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kODJm NWMwNi05NzQxLTQwOTktOTU5YS05NzdjNzg5Y2MzNGYvZWQzNjUxMGUtMmE3OC0z ZTcyLTg2YjAtYTRiNzg0OWY4OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZDgyZjVjMDYtOTc0MS00MDk5LTk1 OWEtOTc3Yzc4OWNjMzRmL2Q4MmY1YzA2LTk3NDEtNDA5OS05NTlhLTk3N2M3ODlj YzM0Zi5jcmwwHwYDVR0jBBgwFoAUg0zwz51UsTpAaqMYljx4hr5VvnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kODJmNWMwNi05NzQxLTQwOTktOTU5YS05Nzdj Nzg5Y2MzNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQjtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4SAD/0qWkhH3egtEle0Z1CCMvJ53D8prNzyKwMfn81M3dZ85FPJZm5 uvhJLAenxgYl2urzZ2kvP2yFm3LXCUaaaddbEkDPWRPpYyfYUlNLXouxV+l44b2p 58TehWMRUzaDPlGBr4Oyzn2jAma2QvUelruMv0bMn8ulEINQDtkfF6bCI3Q45f/S sFw6ygWOWay0KMJVUsZudS4dPts9B1GHAS4OkfLVr005r7hC2nQ/mS4TZov1WMaw cm6ivwaUkx9bqrfj49KfsAv17L5Kln5bgTmHVHyJaVKXET+ndnaluyiT7MVI2bEQ ydcvIgIWy32dybKEDEzDO60tS5LpVsQ= -----END CERTIFICATE-----Generated at Sun Oct 11 22:32:21 2026 by rpki-client