$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/15128e09-a444-376e-8f7f-22c8cef959a8.roa File: 15128e09-a444-376e-8f7f-22c8cef959a8.roa (raw, json) Hash identifier: sRxgz2Dd1hyygidZpyfz/y0rrMGYjDxRL1aErxcyf8s= Subject key identifier: A9:05:1F:2E:4F:50:F6:9A:2C:DE:00:C1:0F:4B:3B:08:98:0F:50:49 Certificate issuer: /CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493 Certificate serial: 010D0C9F4328584EF4FBF7FA81191E991280E180 Authority key identifier: E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/15128e09-a444-376e-8f7f-22c8cef959a8.roa Signing time: Tue 25 Aug 2026 18:53:26 +0000 ROA not before: Tue 25 Aug 2026 18:53:26 +0000 ROA not after: Mon 23 Nov 2026 19:53:26 +0000 asID: 14374 IP address blocks: 66.211.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:fb:f7:fa:81:19:1e:99:12:80:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493 Validity Not Before: Aug 25 18:53:26 2026 GMT Not After : Nov 23 19:53:26 2026 GMT Subject: CN=28c46669-0316-4636-9839-c1aa9689c0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d6:5f:5f:d5:57:36:9a:7b:69:71:d8:8c:55: bb:4b:b9:91:17:97:52:52:87:4d:30:a3:ec:1b:48: bf:0e:ad:26:2f:2c:17:94:a9:14:e2:83:ee:aa:64: 7c:04:6b:93:95:60:bb:49:9e:6e:4f:64:94:8c:0a: 4c:72:95:c3:ac:fd:64:e8:59:97:cb:ce:08:61:b8: 73:7a:9e:64:d2:dd:53:01:66:b4:a3:37:0e:6a:03: 27:77:ba:32:78:44:34:7f:12:2b:67:15:cf:18:43: c3:bd:8c:d8:8f:b9:ad:48:03:71:32:55:cb:03:ca: 5d:be:31:df:88:d9:e4:91:6f:92:15:ae:7a:b1:7a: 33:2d:03:4c:9c:3b:17:82:4a:2c:10:2d:a8:78:23: 9a:ad:c8:69:ef:6d:b2:4c:99:6e:7e:a8:20:17:e6: 47:b6:95:59:be:25:91:f6:a4:0a:d6:49:d2:79:02: dc:ef:32:93:6c:a8:b9:15:89:66:86:b4:e1:97:4b: 85:17:a6:80:32:d9:51:38:05:e1:92:8d:2e:d4:77: b5:b8:08:11:18:53:d2:ac:8a:c3:ad:13:cf:c2:7b: 86:f5:90:8f:83:98:50:dd:e6:9d:6a:76:79:83:3f: cf:04:80:2b:ff:ad:3f:4e:29:a2:5e:d7:46:50:32: bb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:05:1F:2E:4F:50:F6:9A:2C:DE:00:C1:0F:4B:3B:08:98:0F:50:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/15128e09-a444-376e-8f7f-22c8cef959a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl X509v3 Authority Key Identifier: keyid:E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer sbgp-ipAddrBlock: critical IPv4: 66.211.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:8b:86:77:54:c8:c2:da:39:c6:9d:a7:57:38:cd:b1:0a:8e: a2:69:ec:4b:fb:d1:a1:ec:08:25:70:d6:5c:7c:4b:72:77:06: 06:07:08:64:96:e5:25:61:a4:21:f3:aa:99:a0:35:4d:af:0d: 71:27:c9:bc:75:96:28:03:2c:3d:f2:0c:67:da:66:75:62:fc: 1c:58:98:24:0c:a2:99:ad:09:69:6e:7a:b0:4d:a8:6c:f8:dc: ea:20:75:ea:1f:4a:82:fb:80:a5:53:c7:1f:07:54:7c:2c:3b: 2b:70:b7:cf:ae:65:61:cb:24:e1:ba:8b:10:88:61:dd:08:11: 4e:2c:e1:fe:76:97:03:42:b9:23:44:c1:64:39:93:c3:52:d6: 42:7f:b5:51:0e:d2:51:4c:2e:c7:e7:17:23:6b:07:43:52:be: 07:88:ca:ab:a6:4b:fe:f6:e4:b5:cf:3f:76:e0:b9:8a:a7:89: 8e:35:42:09:57:b2:4f:15:7a:63:fc:60:51:43:c5:3c:93:a4: c2:d0:ce:f1:36:9b:61:4d:c0:4c:61:a5:83:21:cc:00:3f:e5: be:4a:30:db:76:4c:ab:66:3a:86:0e:40:6d:e0:2c:63:93:e6: fb:02:7c:d4:c4:cf:d6:b3:9d:68:3c:ac:a4:17:4c:73:93:ce: 30:c4:e9:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70+/f6gRkemRKA4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5YmM0NDctNjdmOS00MGQxLThmM2QtYjg0Y2NhOTRj NDkzMB4XDTI2MDgyNTE4NTMyNloXDTI2MTEyMzE5NTMyNlowLzEtMCsGA1UEAxMk MjhjNDY2NjktMDMxNi00NjM2LTk4MzktYzFhYTk2ODljMGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9ZfX9VXNpp7aXHYjFW7S7mRF5dSUodNMKPs G0i/Dq0mLywXlKkU4oPuqmR8BGuTlWC7SZ5uT2SUjApMcpXDrP1k6FmXy84IYbhz ep5k0t1TAWa0ozcOagMnd7oyeEQ0fxIrZxXPGEPDvYzYj7mtSANxMlXLA8pdvjHf iNnkkW+SFa56sXozLQNMnDsXgkosEC2oeCOarchp722yTJlufqggF+ZHtpVZviWR 9qQK1knSeQLc7zKTbKi5FYlmhrThl0uFF6aAMtlROAXhko0u1He1uAgRGFPSrIrD rRPPwnuG9ZCPg5hQ3eadanZ5gz/PBIAr/60/TimiXtdGUDK7PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkFHy5PUPaaLN4AwQ9LOwiYD1BJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYTli YzQ0Ny02N2Y5LTQwZDEtOGYzZC1iODRjY2E5NGM0OTMvMTUxMjhlMDktYTQ0NC0z NzZlLThmN2YtMjJjOGNlZjk1OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvM2E5YmM0NDctNjdmOS00MGQxLThm M2QtYjg0Y2NhOTRjNDkzLzNhOWJjNDQ3LTY3ZjktNDBkMS04ZjNkLWI4NGNjYTk0 YzQ5My5jcmwwHwYDVR0jBBgwFoAU4BkXaXyFNkFc9GNzTtnvrH1dgt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYTliYzQ0Ny02N2Y5LTQwZDEtOGYzZC1iODRj Y2E5NGM0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQtNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqLhndUyMLaOcadp1c4zbEKjqJp7Ev70aHsCCVw1lx8S3J3BgYHCGSW 5SVhpCHzqpmgNU2vDXEnybx1ligDLD3yDGfaZnVi/BxYmCQMopmtCWluerBNqGz4 3OogdeofSoL7gKVTxx8HVHwsOytwt8+uZWHLJOG6ixCIYd0IEU4s4f52lwNCuSNE wWQ5k8NS1kJ/tVEO0lFMLsfnFyNrB0NSvgeIyqumS/725LXPP3bguYqniY41QglX sk8VemP8YFFDxTyTpMLQzvE2m2FNwExhpYMhzAA/5b5KMNt2TKtmOoYOQG3gLGOT 5vsCfNTEz9aznWg8rKQXTHOTzjDE6T4= -----END CERTIFICATE-----Generated at Mon Sep 21 11:48:09 2026 by rpki-client