$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3628f8d8-7226-34ca-9b24-9227bea9b080.roa File: 3628f8d8-7226-34ca-9b24-9227bea9b080.roa (raw, json) Hash identifier: /6Z3srFxjvrlTDassO3bkBwNmxPuuqUgZC2Lg0tAtW4= Subject key identifier: BF:A7:18:76:7A:55:87:77:5C:D1:A0:59:C2:5D:20:D7:5D:D3:FA:AC Certificate issuer: /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751 Certificate serial: 010D0C9F4328584F498BD29F1AAC195F3A552340 Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3628f8d8-7226-34ca-9b24-9227bea9b080.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394284 IP address blocks: 66.207.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:d2:9f:1a:ac:19:5f:3a:55:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f07a9fc3-a205-4499-a946-004f5efc1454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:8a:d2:e2:98:cf:78:45:07:98:a7:a8:bf: 5b:e4:7b:2d:00:67:fe:57:46:39:bf:e0:ca:81:74: 2e:8d:ae:17:3e:84:21:1e:9b:5c:df:20:6d:e1:50: e7:5e:df:6f:5e:ef:e1:12:33:35:74:2a:a5:72:2b: 3e:b7:9f:de:d3:33:ce:a9:18:c6:d5:cc:57:63:b8: 91:dd:f8:45:6d:fe:48:4c:10:b8:f3:a1:bd:e9:5b: 0e:08:14:44:74:a8:46:b9:95:82:dc:47:a3:36:16: 9a:c2:a6:fd:68:ec:14:f2:75:9e:5d:17:5e:5d:79: e2:65:e7:c6:21:ee:1c:ea:c2:45:e7:a7:b1:b6:3a: 4d:8c:d4:98:bf:5c:5c:8a:e5:7f:08:8f:4e:f3:48: 0a:a1:7c:a7:96:5e:0e:e9:2c:2a:a3:ff:6d:6f:d3: 81:3c:9d:91:ff:59:2b:9e:14:eb:7c:01:e4:14:1d: 13:86:4e:e2:b6:1d:7e:2a:83:6d:15:9c:66:db:2f: 4a:0e:a0:a6:6f:ee:79:8c:74:34:2a:28:6c:f8:7e: 99:5e:16:bb:e4:9d:5d:7c:a5:b4:eb:88:9b:90:c5: f9:cb:26:b3:6e:96:0d:45:db:18:00:dc:39:cf:31: d3:8a:59:86:b8:b6:17:e8:76:7f:88:7c:04:59:04: be:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A7:18:76:7A:55:87:77:5C:D1:A0:59:C2:5D:20:D7:5D:D3:FA:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3628f8d8-7226-34ca-9b24-9227bea9b080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl X509v3 Authority Key Identifier: keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer sbgp-ipAddrBlock: critical IPv4: 66.207.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:25:4c:0d:af:91:3c:ba:89:29:6b:11:b9:fb:6c:5a:69:96: ca:2d:ee:e8:be:80:f9:4b:53:ac:77:03:0f:8f:6c:92:c2:be: 2c:e5:55:ee:01:31:32:8f:71:31:02:18:46:6e:9a:f6:3a:bb: 65:e2:2e:1d:a6:fa:58:e6:fa:4d:ef:0d:c7:8c:4e:e6:51:d7: 56:a1:f1:87:9a:eb:7a:e2:a4:31:bb:75:e5:5a:f2:30:81:48: 06:c9:d3:2a:95:67:a1:bb:44:29:53:44:85:9d:a7:70:29:4e: 4a:36:21:bc:8f:68:05:df:1e:fe:16:44:32:b1:cd:21:da:be: ea:45:26:eb:f3:6b:82:f0:a0:1b:89:b0:78:6f:f2:dc:81:40: 95:88:f3:6e:61:1d:db:52:45:a0:05:e6:5c:e1:39:f8:8e:8e: 01:6e:11:38:df:f9:1b:87:7a:ba:c3:49:d9:f0:d0:bb:56:a6: b4:d2:65:f8:0f:51:af:78:6d:71:0c:51:04:27:57:cd:f8:6c: 1c:86:40:fb:ac:e1:dd:53:69:c0:12:ec:c7:ef:86:1a:b8:4e: a2:75:4f:a3:ea:e8:5f:e6:b4:f8:e5:ab:3b:57:7f:39:fe:9b: 75:a2:ac:4a:9a:11:88:f0:dd:9f:91:3d:37:a0:c3:08:d4:d4: a1:5d:a7:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji9KfGqwZXzpVI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY3YzkxYWUtMDI2Yy00NzlkLTljYjUtZDM4MzdlM2Q0 NzUxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjA3YTlmYzMtYTIwNS00NDk5LWE5NDYtMDA0ZjVlZmMxNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE2K0uKYz3hFB5inqL9b5HstAGf+V0Y5v+DK gXQuja4XPoQhHptc3yBt4VDnXt9vXu/hEjM1dCqlcis+t5/e0zPOqRjG1cxXY7iR 3fhFbf5ITBC486G96VsOCBREdKhGuZWC3EejNhaawqb9aOwU8nWeXRdeXXniZefG Ie4c6sJF56extjpNjNSYv1xciuV/CI9O80gKoXynll4O6Swqo/9tb9OBPJ2R/1kr nhTrfAHkFB0Thk7ith1+KoNtFZxm2y9KDqCmb+55jHQ0Kihs+H6ZXha75J1dfKW0 64ibkMX5yyazbpYNRdsYANw5zzHTilmGuLYX6HZ/iHwEWQS+VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+nGHZ6VYd3XNGgWcJdINdd0/qsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdj OTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgzN2UzZDQ3NTEvMzYyOGY4ZDgtNzIyNi0z NGNhLTliMjQtOTIyN2JlYTliMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWY3YzkxYWUtMDI2Yy00NzlkLTlj YjUtZDM4MzdlM2Q0NzUxLzFmN2M5MWFlLTAyNmMtNDc5ZC05Y2I1LWQzODM3ZTNk NDc1MS5jcmwwHwYDVR0jBBgwFoAUtjEg3DBLGyb0H+RbK5J9YlJ+E8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdjOTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgz N2UzZDQ3NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQs98MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIlTA2vkTy6iSlrEbn7bFpplsot7ui+gPlLU6x3Aw+PbJLCvizlVe4B MTKPcTECGEZumvY6u2XiLh2m+ljm+k3vDceMTuZR11ah8Yea63ripDG7deVa8jCB SAbJ0yqVZ6G7RClTRIWdp3ApTko2IbyPaAXfHv4WRDKxzSHavupFJuvza4LwoBuJ sHhv8tyBQJWI825hHdtSRaAF5lzhOfiOjgFuETjf+RuHerrDSdnw0LtWprTSZfgP Ua94bXEMUQQnV834bByGQPus4d1TacAS7Mfvhhq4TqJ1T6Pq6F/mtPjlqztXfzn+ m3WirEqaEYjw3Z+RPTegwwjU1KFdp2Q= -----END CERTIFICATE-----Generated at Sat Sep 26 14:44:41 2026 by rpki-client