$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa File: 4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa (raw, json) Hash identifier: JQi5h1Ib3M9ovmuZsbkEbMMQguwUuS6GXPUObbWTLrY= Subject key identifier: 19:D5:35:71:5B:B0:D9:4B:53:59:18:47:3A:71:E2:D2:3C:87:B7:46 Certificate issuer: /CN=0b60a007-9fb6-4096-9503-20f30414834b Certificate serial: 010D0C9F4328584EF87CCC0AF5A28AC9EDB68FA0 Authority key identifier: 9F:37:ED:89:6C:B5:EB:1F:A8:8B:B6:C5:90:AE:F9:15:1C:9D:07:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 395800 IP address blocks: 66.133.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:cc:0a:f5:a2:8a:c9:ed:b6:8f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b60a007-9fb6-4096-9503-20f30414834b Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=9723e334-06b7-4217-b385-5ef953c487f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:be:e9:67:aa:ee:07:f0:2f:ff:c3:8b:af:cf: b8:2f:34:f6:82:88:25:3b:37:de:3c:b1:74:8d:55: 6c:6a:d9:30:70:b2:29:c7:05:da:cc:1a:77:8d:62: a2:a4:66:81:e2:43:41:ef:8b:34:0a:fd:95:47:e0: 9d:0f:af:d4:59:08:68:82:97:4a:a7:35:76:a5:4d: 55:a1:67:45:48:41:a0:bb:a1:66:2b:fd:ce:5d:fe: 38:b7:24:72:31:15:5b:4b:36:5d:e7:20:bb:f8:47: c8:77:dd:0a:20:20:fc:e1:82:d5:98:81:c5:98:9d: da:22:1a:9c:11:2e:d9:f7:00:7c:bc:2a:d4:17:a5: 50:68:01:26:03:5f:6c:87:e4:b8:68:3b:44:7e:8a: 29:c6:f9:fb:16:a8:db:e6:f6:d5:0f:4e:5f:77:0e: 8b:b5:85:7f:87:f4:4d:7a:30:6e:65:7c:a9:1b:40: f8:91:59:df:a7:cd:95:fd:b4:25:46:59:23:d5:bc: 75:de:9f:d6:3d:e7:2f:e5:09:50:c4:2c:6f:6f:0a: 81:d6:a5:26:83:2f:80:9e:16:26:eb:ce:2a:b9:7a: 98:8b:f6:f6:10:79:a9:0d:96:ce:1d:fd:80:76:63: 74:f2:a2:00:f5:38:62:3c:9d:b9:bb:f0:fd:14:9f: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D5:35:71:5B:B0:D9:4B:53:59:18:47:3A:71:E2:D2:3C:87:B7:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.crl X509v3 Authority Key Identifier: keyid:9F:37:ED:89:6C:B5:EB:1F:A8:8B:B6:C5:90:AE:F9:15:1C:9D:07:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer sbgp-ipAddrBlock: critical IPv4: 66.133.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ef:b8:5a:59:62:4c:e9:58:8b:6f:e1:54:4e:80:b6:c1:70: 2e:01:60:3b:5b:6a:ac:d5:a3:e8:a4:ee:b8:3b:f4:8b:8d:50: 48:cf:8c:c8:0b:31:0d:97:18:ff:7d:41:65:06:34:c2:f4:51: d4:84:35:18:cd:e6:c3:cb:52:94:7b:63:29:67:91:06:80:25: 33:3c:09:44:bf:e6:0e:1e:5b:97:c5:e4:52:d9:aa:01:19:22: 5e:4e:87:9b:8c:0c:5b:86:ee:70:e0:b6:40:77:f5:ca:69:fb: 6b:5d:69:65:75:ba:4c:18:d6:df:80:e3:4a:40:77:17:ad:84: d5:39:60:cf:cf:c0:0c:ab:a5:18:49:89:94:f3:40:b6:99:21: 87:99:05:27:fa:fb:c0:19:cb:d7:8a:84:d1:35:98:20:90:8e: 08:65:97:b6:ba:35:70:e8:62:e1:60:fd:f5:9a:96:75:dd:48: 74:2a:09:c9:f2:99:58:23:f0:0e:4d:92:1c:f2:f6:38:d8:e4: 36:f6:fd:db:db:df:69:ff:49:9d:36:30:64:1e:e0:5a:89:25: 64:09:b0:c1:bc:29:64:8c:28:bf:47:91:33:44:44:67:ad:68: c8:a9:f2:1a:50:70:07:c0:34:92:8f:79:b1:b3:d6:82:44:db: 4b:76:e2:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMwK9aKKye22j6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2MGEwMDctOWZiNi00MDk2LTk1MDMtMjBmMzA0MTQ4 MzRiMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk OTcyM2UzMzQtMDZiNy00MjE3LWIzODUtNWVmOTUzYzQ4N2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn77pZ6ruB/Av/8OLr8+4LzT2goglOzfePLF0 jVVsatkwcLIpxwXazBp3jWKipGaB4kNB74s0Cv2VR+CdD6/UWQhogpdKpzV2pU1V oWdFSEGgu6FmK/3OXf44tyRyMRVbSzZd5yC7+EfId90KICD84YLVmIHFmJ3aIhqc ES7Z9wB8vCrUF6VQaAEmA19sh+S4aDtEfoopxvn7Fqjb5vbVD05fdw6LtYV/h/RN ejBuZXypG0D4kVnfp82V/bQlRlkj1bx13p/WPecv5QlQxCxvbwqB1qUmgy+AnhYm 684quXqYi/b2EHmpDZbOHf2AdmN08qIA9ThiPJ25u/D9FJ88/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnVNXFbsNlLU1kYRzpx4tI8h7dGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYjYw YTAwNy05ZmI2LTQwOTYtOTUwMy0yMGYzMDQxNDgzNGIvNGI5NGVhN2EtZmQ4YS0z YzA0LWJmMWYtN2ZmZDk1NTdmNzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGI2MGEwMDctOWZiNi00MDk2LTk1 MDMtMjBmMzA0MTQ4MzRiLzBiNjBhMDA3LTlmYjYtNDA5Ni05NTAzLTIwZjMwNDE0 ODM0Yi5jcmwwHwYDVR0jBBgwFoAUnzftiWy16x+oi7bFkK75FRydBwAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYjYwYTAwNy05ZmI2LTQwOTYtOTUwMy0yMGYz MDQxNDgzNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoU6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfvuFpZYkzpWItv4VROgLbBcC4BYDtbaqzVo+ik7rg79IuNUEjPjMgL MQ2XGP99QWUGNML0UdSENRjN5sPLUpR7YylnkQaAJTM8CUS/5g4eW5fF5FLZqgEZ Il5Oh5uMDFuG7nDgtkB39cpp+2tdaWV1ukwY1t+A40pAdxethNU5YM/PwAyrpRhJ iZTzQLaZIYeZBSf6+8AZy9eKhNE1mCCQjghll7a6NXDoYuFg/fWalnXdSHQqCcny mVgj8A5Nkhzy9jjY5Db2/dvb32n/SZ02MGQe4FqJJWQJsMG8KWSMKL9HkTNERGet aMip8hpQcAfANJKPebGz1oJE20t24kc= -----END CERTIFICATE-----Generated at Wed Sep 23 22:51:36 2026 by rpki-client