$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bad120b8-8503-344a-8e33-655ad28b7df1.roa File: bad120b8-8503-344a-8e33-655ad28b7df1.roa (raw, json) Hash identifier: Qnu6+eneF1H4TrsGtiXjmUkULIH56uZCTR1amgJx1Ks= Subject key identifier: E3:C7:94:A1:1C:6A:46:1A:FB:AD:2F:D3:2E:E0:01:26:C8:E4:A3:9B Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ED001F6B6C720B3A73BBB6940 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bad120b8-8503-344a-8e33-655ad28b7df1.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 16696 IP address blocks: 66.255.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f6:b6:c7:20:b3:a7:3b:bb:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=7777af0e-de87-4cc3-82f0-8b1a11906fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f5:d2:c1:ab:25:7f:7e:12:f7:50:13:dc:0b: 58:b2:37:8f:0c:b3:b8:d9:43:e6:60:1d:f9:56:ff: bc:a7:c3:ef:2e:58:9b:42:15:c3:0d:74:37:f2:d9: 0d:0b:53:5c:95:d7:8c:a1:26:eb:b3:25:c6:15:53: 10:14:4d:07:80:5a:bc:d2:79:e2:3a:5a:fb:49:11: 73:8f:92:fd:36:ef:10:b4:3b:2d:b7:d1:21:34:ce: d2:f6:6c:76:ba:66:1b:cb:6f:ae:0c:fb:62:61:68: 3c:c4:5a:47:73:3e:b9:05:25:1c:fe:4f:36:07:9e: 62:eb:f4:ec:8a:78:ae:b1:bb:da:02:09:13:ef:de: df:5f:c1:bb:a3:e1:37:18:6d:a0:58:7c:79:61:51: a2:f3:9f:a5:19:9a:fc:5d:2b:f3:d3:e6:81:42:ee: d0:d3:12:26:9a:c1:d0:9c:e6:48:99:96:35:e6:65: 88:23:d2:53:68:29:d5:a9:82:5e:89:b7:f6:5e:59: 38:62:c2:16:81:96:6c:c9:a8:40:bd:46:dd:08:68: 44:63:f3:47:90:e6:59:52:c3:4e:c1:27:b0:b9:88: e5:4e:26:44:0e:94:1c:3f:ed:bb:e3:0e:60:b1:80: cd:52:08:f2:7a:97:8f:ee:7e:2f:40:4a:d0:25:d4: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C7:94:A1:1C:6A:46:1A:FB:AD:2F:D3:2E:E0:01:26:C8:E4:A3:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bad120b8-8503-344a-8e33-655ad28b7df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 66.255.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:2f:37:c6:4e:9f:70:47:a4:71:24:eb:5c:dc:33:7b:e1:d8: 00:64:1e:af:a3:9f:45:37:e2:c4:14:16:c9:db:cf:b5:22:8b: 88:bf:5e:59:ca:f2:9a:22:3c:f6:a8:00:11:fa:8f:06:3a:00: 6c:2a:6a:0e:22:d5:5c:ad:4c:73:e6:6f:93:53:02:20:c0:8e: 19:71:58:47:73:4d:c7:cb:75:77:90:2f:61:f9:98:b1:fd:11: b5:76:41:09:32:a3:f6:f4:40:6a:d1:6d:75:94:1b:6d:e8:f4: 13:bc:a4:79:62:a3:ba:8a:e1:f5:58:22:d3:12:6d:ab:ad:b1: f0:ff:75:4d:5a:91:27:91:d3:a6:94:e5:60:3f:57:fe:bd:8e: 14:57:53:23:48:76:7b:7f:61:fb:d3:0c:8f:0e:1f:b2:40:b9: 62:09:c8:3c:61:5f:79:49:57:8b:4d:f0:10:50:5b:7c:f8:6f: a3:c0:88:92:fd:4e:89:e6:85:fe:98:b3:05:d8:b4:40:ce:8c: e3:78:03:a9:f3:98:b2:b3:ce:83:70:8c:23:13:b0:6a:1e:98: 89:d4:15:b5:40:f1:9a:2d:d3:11:ba:a7:4c:23:7d:1d:73:22: a4:01:41:ea:65:53:f0:2d:fe:20:f5:2b:2d:b7:04:4f:23:17: e5:0a:79:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfa2xyCzpzu7aUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk Nzc3N2FmMGUtZGU4Ny00Y2MzLTgyZjAtOGIxYTExOTA2ZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/XSwaslf34S91AT3AtYsjePDLO42UPmYB35 Vv+8p8PvLlibQhXDDXQ38tkNC1NcldeMoSbrsyXGFVMQFE0HgFq80nniOlr7SRFz j5L9Nu8QtDstt9EhNM7S9mx2umYby2+uDPtiYWg8xFpHcz65BSUc/k82B55i6/Ts iniusbvaAgkT797fX8G7o+E3GG2gWHx5YVGi85+lGZr8XSvz0+aBQu7Q0xImmsHQ nOZImZY15mWII9JTaCnVqYJeibf2Xlk4YsIWgZZsyahAvUbdCGhEY/NHkOZZUsNO wSewuYjlTiZEDpQcP+274w5gsYDNUgjyepeP7n4vQErQJdQRkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPHlKEcakYa+60v0y7gASbI5KObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYmFkMTIwYjgtODUwMy0z NDRhLThlMzMtNjU1YWQyOGI3ZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv/NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADovN8ZOn3BHpHEk61zcM3vh2ABkHq+jn0U34sQUFsnbz7Uii4i/XlnK 8poiPPaoABH6jwY6AGwqag4i1VytTHPmb5NTAiDAjhlxWEdzTcfLdXeQL2H5mLH9 EbV2QQkyo/b0QGrRbXWUG23o9BO8pHlio7qK4fVYItMSbautsfD/dU1akSeR06aU 5WA/V/69jhRXUyNIdnt/YfvTDI8OH7JAuWIJyDxhX3lJV4tN8BBQW3z4b6PAiJL9 Tonmhf6YswXYtEDOjON4A6nzmLKzzoNwjCMTsGoemInUFbVA8Zot0xG6p0wjfR1z IqQBQeplU/At/iD1Ky23BE8jF+UKeWw= -----END CERTIFICATE-----Generated at Sat Sep 26 09:11:04 2026 by rpki-client