$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/70ea6789-2fd4-317d-917d-d00ed4bb6cce.roa File: 70ea6789-2fd4-317d-917d-d00ed4bb6cce.roa (raw, json) Hash identifier: FZ5aKRpShnuXM2uS1pRuYBTIczk0NqWqD0Z36AldmR0= Subject key identifier: E7:64:6E:F2:2D:42:57:DF:AA:0B:4D:06:BE:F5:52:02:0D:71:77:36 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F0672439FC7B38D0AA0C24700 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/70ea6789-2fd4-317d-917d-d00ed4bb6cce.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 401092 IP address blocks: 66.186.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:43:9f:c7:b3:8d:0a:a0:c2:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=590ab988-15a9-4af8-8061-f7879af80210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c1:24:f6:45:04:f5:0b:d8:2d:ed:57:f3:f6: f8:c4:be:ed:99:62:d5:0a:b7:66:3e:35:93:31:d9: 1f:d5:a7:2e:e4:41:80:89:9f:0f:ba:cf:41:46:54: af:5c:2c:1a:39:1a:c3:02:87:87:20:2e:31:13:6a: 87:dc:2e:dc:b4:b1:e8:69:e2:6b:ea:42:5b:49:59: 93:b9:b1:a1:46:aa:49:9d:d1:d2:ca:8a:d0:39:f8: 6c:21:26:26:9a:54:62:44:83:fd:12:06:76:62:64: 3c:f2:4c:b3:3c:9d:49:e8:0a:91:6f:dc:0c:69:98: da:f9:19:92:05:ce:bf:19:d0:f1:67:2c:be:a3:6e: 43:01:2f:04:d9:f4:ac:4c:12:69:5f:65:05:f0:43: f5:eb:dc:c0:58:fb:28:b0:f4:0a:61:15:ad:74:79: b8:2f:38:a7:94:01:6e:37:1e:3f:63:44:69:1c:b3: ae:65:2b:f4:af:02:b5:d1:2e:13:6c:f2:e5:43:aa: 40:e8:52:28:bd:fe:0e:38:db:68:aa:4f:a9:48:7e: 59:1b:ba:b1:ed:72:dc:9e:be:f0:72:6d:00:28:56: 25:21:4f:d9:e7:7c:01:6d:4f:c5:bc:1a:92:af:a2: 4a:d6:97:c3:da:85:19:a4:c5:ec:f1:5f:b4:82:84: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:64:6E:F2:2D:42:57:DF:AA:0B:4D:06:BE:F5:52:02:0D:71:77:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/70ea6789-2fd4-317d-917d-d00ed4bb6cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 66.186.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6d:db:e9:f2:59:64:67:76:3c:c9:dd:75:4f:d5:01:84:59: c2:53:9b:4c:a1:b5:35:a3:b0:bb:af:94:75:02:7d:89:35:b4: df:d6:20:dd:9a:7f:2c:cc:f0:2d:e6:09:74:e3:bd:f3:96:4b: 44:cc:76:63:4a:67:af:07:4b:cb:75:20:d2:49:87:62:6b:f7: 43:a0:20:d9:e8:1c:e2:e9:4b:8a:b6:29:b7:f4:d2:35:57:7c: 84:84:81:30:fe:35:28:5a:a2:4e:48:b1:46:99:9f:9a:b5:91: d4:49:e8:0b:81:8c:b6:34:20:e6:39:42:5d:02:80:89:c8:d3: 5b:e1:06:d8:25:05:0c:4f:88:c6:d2:50:fa:c3:e3:c0:9c:e9: 4c:b7:b4:bf:f0:fd:d1:94:1f:74:1d:57:35:46:62:c4:e0:d8: cf:a7:de:aa:47:05:1b:80:a6:f6:02:0c:c3:c8:f8:cf:15:3a: d3:86:82:5d:c0:f6:8a:a3:19:e6:9e:bc:63:11:b8:e9:a5:16: aa:e1:3b:ad:b7:d6:83:47:1e:cf:b7:76:e9:fd:7a:5c:0a:c3: 1b:31:e0:52:b1:bb:b3:1f:54:b3:b4:c6:87:b5:26:a7:92:a2: cd:7f:06:2b:e8:c2:b3:0a:82:8f:f0:42:ca:c4:69:4e:80:6b: 47:90:10:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GckOfx7ONCqDCRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NTkwYWI5ODgtMTVhOS00YWY4LTgwNjEtZjc4NzlhZjgwMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8Ek9kUE9QvYLe1X8/b4xL7tmWLVCrdmPjWT Mdkf1acu5EGAiZ8Pus9BRlSvXCwaORrDAoeHIC4xE2qH3C7ctLHoaeJr6kJbSVmT ubGhRqpJndHSyorQOfhsISYmmlRiRIP9EgZ2YmQ88kyzPJ1J6AqRb9wMaZja+RmS Bc6/GdDxZyy+o25DAS8E2fSsTBJpX2UF8EP169zAWPsosPQKYRWtdHm4LzinlAFu Nx4/Y0RpHLOuZSv0rwK10S4TbPLlQ6pA6FIovf4OONtoqk+pSH5ZG7qx7XLcnr7w cm0AKFYlIU/Z53wBbU/FvBqSr6JK1pfD2oUZpMXs8V+0goSIUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdkbvItQlffqgtNBr71UgINcXc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNzBlYTY3ODktMmZkNC0z MTdkLTkxN2QtZDAwZWQ0YmI2Y2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQro9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtt2+nyWWRndjzJ3XVP1QGEWcJTm0yhtTWjsLuvlHUCfYk1tN/WIN2a fyzM8C3mCXTjvfOWS0TMdmNKZ68HS8t1INJJh2Jr90OgINnoHOLpS4q2Kbf00jVX fISEgTD+NShaok5IsUaZn5q1kdRJ6AuBjLY0IOY5Ql0CgInI01vhBtglBQxPiMbS UPrD48Cc6Uy3tL/w/dGUH3QdVzVGYsTg2M+n3qpHBRuApvYCDMPI+M8VOtOGgl3A 9oqjGeaevGMRuOmlFqrhO6231oNHHs+3dun9elwKwxsx4FKxu7MfVLO0xoe1JqeS os1/BivowrMKgo/wQsrEaU6Aa0eQELI= -----END CERTIFICATE-----Generated at Mon Sep 21 19:50:12 2026 by rpki-client