$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa File: 0708b39d-1d52-36df-8431-01f06fe04df4.roa (raw, json) Hash identifier: BCAVtBF2d61AsSZ2ALR8FbOHsyXKjQxZLXJv5s+y/vY= Subject key identifier: 64:53:C9:AA:8F:13:93:4D:9D:C4:77:B8:E6:D3:19:BF:37:B3:17:A1 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584F1897A259724D2CEB70DEAAC0 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 396905 IP address blocks: 66.187.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a2:59:72:4d:2c:eb:70:de:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=97ba5a22-ecb2-47ca-8978-f6d66e5bcc51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f8:89:94:61:d5:3d:73:1b:92:70:2b:7b:f6: d9:75:4f:ff:06:1f:80:d7:82:54:f1:d6:2b:6e:7b: 5c:39:73:0b:13:3b:46:bc:26:27:93:1f:e0:10:c2: 5b:04:f4:6d:af:d6:96:54:f4:97:6a:47:f0:c2:bc: 07:cd:1d:29:e8:40:f9:de:e8:66:a9:f0:2a:e2:3a: 1f:3f:5b:c0:51:e3:ee:52:29:32:20:5e:32:2e:b4: cf:82:4f:1e:1b:c8:db:d4:c6:28:4e:97:d4:5e:ca: 16:c0:48:08:a3:62:02:16:56:7c:74:47:3e:3f:63: 22:23:2b:13:62:21:7f:61:9c:bb:e2:99:30:4c:c3: 70:15:60:12:62:81:2b:e8:33:4a:37:8d:ae:38:4b: 30:31:a5:66:9d:81:a1:9d:ad:aa:5b:bd:b4:40:69: 70:3c:b1:40:a0:76:b2:d8:81:2b:6f:d9:71:ec:5b: 67:9d:2d:df:6d:bc:c7:d5:78:15:79:83:72:ac:c5: d7:ef:a6:b8:32:32:b5:7f:a9:4b:48:4b:d0:e9:15: d0:1d:3d:74:48:88:b6:97:ac:ef:14:47:c6:83:5a: 37:e8:3e:1f:95:0a:f5:b5:73:3d:3c:e1:87:ef:81: 86:2c:2f:0a:e4:70:d2:cf:90:f6:d8:78:79:ee:43: 62:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:53:C9:AA:8F:13:93:4D:9D:C4:77:B8:E6:D3:19:BF:37:B3:17:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 66.187.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7c:5d:c9:67:75:b5:de:7d:80:15:f0:8d:bc:da:2a:ce:08: 24:3c:c5:e0:26:c7:53:99:b3:70:07:4a:cc:62:e8:bf:0e:a4: bc:e5:13:41:04:0d:06:b7:d5:1c:08:3e:f1:12:55:8a:bf:56: 3d:7f:11:f9:4c:18:aa:67:89:00:f1:53:ef:0c:7b:17:9d:49: 61:f2:9d:e4:7a:01:ec:b6:41:bd:97:aa:52:24:8e:64:14:1f: fa:b5:eb:38:16:c8:6d:1b:89:49:25:c6:b2:99:04:56:70:4b: 95:ff:06:35:f5:0d:f9:a8:16:8b:65:e9:3d:d1:70:58:74:04: c8:a3:3d:6a:c1:7d:f2:b7:9c:6d:13:3a:56:67:c5:f5:71:56: 1c:7d:87:b7:7f:3f:ba:27:2e:2a:ee:91:26:d3:95:18:8f:98: 68:5e:a1:ba:47:29:27:bb:25:27:84:df:96:6e:1b:a3:29:a1: 39:90:7f:ef:06:bf:02:72:f0:1a:fb:fd:38:bf:d2:c3:84:7e: f6:2b:5d:60:72:2c:4f:0c:9e:14:f3:00:1f:01:d1:8c:c9:87: cc:6d:78:4a:17:33:f2:59:22:8e:46:c8:1a:68:72:d9:bb:b4: 23:0a:67:50:20:c2:72:c5:a2:80:9c:13:9f:72:65:c0:f1:26: c7:3f:48:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6JZck0s63DeqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk OTdiYTVhMjItZWNiMi00N2NhLTg5NzgtZjZkNjZlNWJjYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkviJlGHVPXMbknAre/bZdU//Bh+A14JU8dYr bntcOXMLEztGvCYnkx/gEMJbBPRtr9aWVPSXakfwwrwHzR0p6ED53uhmqfAq4jof P1vAUePuUikyIF4yLrTPgk8eG8jb1MYoTpfUXsoWwEgIo2ICFlZ8dEc+P2MiIysT YiF/YZy74pkwTMNwFWASYoEr6DNKN42uOEswMaVmnYGhna2qW720QGlwPLFAoHay 2IErb9lx7FtnnS3fbbzH1XgVeYNyrMXX76a4MjK1f6lLSEvQ6RXQHT10SIi2l6zv FEfGg1o36D4flQr1tXM9POGH74GGLC8K5HDSz5D22Hh57kNiWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRTyaqPE5NNncR3uObTGb83sxehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvMDcwOGIzOWQtMWQ1Mi0z NmRmLTg0MzEtMDFmMDZmZTA0ZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt8XclndbXefYAV8I282irOCCQ8xeAmx1OZs3AHSsxi6L8OpLzlE0EE DQa31RwIPvESVYq/Vj1/EflMGKpniQDxU+8MexedSWHyneR6Aey2Qb2XqlIkjmQU H/q16zgWyG0biUklxrKZBFZwS5X/BjX1DfmoFotl6T3RcFh0BMijPWrBffK3nG0T OlZnxfVxVhx9h7d/P7onLirukSbTlRiPmGheobpHKSe7JSeE35ZuG6MpoTmQf+8G vwJy8Br7/Ti/0sOEfvYrXWByLE8MnhTzAB8B0YzJh8xteEoXM/JZIo5GyBpoctm7 tCMKZ1AgwnLFooCcE59yZcDxJsc/SOY= -----END CERTIFICATE-----Generated at Tue Sep 22 03:39:20 2026 by rpki-client