$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dcfaa0a1-b7a0-4661-9885-125363e2be50/b67d8b95-e124-34cc-9414-a79cb3244cef.roa File: b67d8b95-e124-34cc-9414-a79cb3244cef.roa (raw, json) Hash identifier: 7MQdRRJvO6gXDF+udG9POJJCObnr+OHZUAWenADf/kw= Subject key identifier: F0:E1:BE:4F:30:56:CC:1D:29:06:47:E5:14:E4:09:24:62:01:6B:0E Certificate issuer: /CN=dcfaa0a1-b7a0-4661-9885-125363e2be50 Certificate serial: 010D0C9F4328584F218167A66CAB50CC2978FF80 Authority key identifier: 7F:76:81:5B:26:7E:62:70:E2:DB:91:F9:90:01:38:F3:72:D8:85:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dcfaa0a1-b7a0-4661-9885-125363e2be50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dcfaa0a1-b7a0-4661-9885-125363e2be50/b67d8b95-e124-34cc-9414-a79cb3244cef.roa Signing time: Thu 10 Sep 2026 17:37:52 +0000 ROA not before: Thu 10 Sep 2026 17:37:52 +0000 ROA not after: Wed 09 Dec 2026 18:37:52 +0000 asID: 1299 IP address blocks: 66.226.96.0/19 maxlen: 24 75.98.176.0/20 maxlen: 24 159.48.96.0/19 maxlen: 24 206.71.192.0/19 maxlen: 24 216.138.0.0/20 maxlen: 24 216.138.16.0/20 maxlen: 24 216.138.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dcfaa0a1-b7a0-4661-9885-125363e2be50/dcfaa0a1-b7a0-4661-9885-125363e2be50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dcfaa0a1-b7a0-4661-9885-125363e2be50/dcfaa0a1-b7a0-4661-9885-125363e2be50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dcfaa0a1-b7a0-4661-9885-125363e2be50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:21:81:67:a6:6c:ab:50:cc:29:78:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcfaa0a1-b7a0-4661-9885-125363e2be50 Validity Not Before: Sep 10 17:37:52 2026 GMT Not After : Dec 9 18:37:52 2026 GMT Subject: CN=e4717fa9-f671-48e5-bf25-0b2b81c76254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:eb:c0:b4:8a:33:0e:04:d3:b1:07:db:d1:42: 50:a3:b1:80:09:4d:d7:9a:92:5e:1b:77:05:ec:c4: 6a:43:60:f9:87:d5:ac:cd:ef:b5:0a:2c:9e:e2:cf: f6:5d:68:c4:2d:f8:db:40:c0:fd:f7:e7:4b:54:89: 44:d7:f5:3c:f0:17:e6:6e:ba:70:dd:c4:04:da:5c: b4:b6:ba:c8:fe:5a:a0:4a:a3:72:04:4b:b4:fd:7f: 96:3b:f8:6a:61:3c:4e:10:5d:5c:14:34:7d:4f:f5: 9b:46:4d:1d:ed:b9:43:82:61:52:3e:c4:76:e0:4a: b9:23:2e:26:32:cb:fe:1c:1b:f9:c3:f7:39:63:ca: f8:25:56:d7:91:b2:3b:23:38:7f:22:a8:b6:8d:40: 0f:6d:da:bd:b1:b4:a6:86:97:b9:35:32:1d:9d:81: 2a:64:e3:fd:59:c5:5d:4d:47:9f:d8:8b:c3:1d:e4: a3:0c:ba:7f:fa:a7:b8:a2:3a:95:e5:01:a3:b3:47: 2e:82:ff:eb:a8:aa:29:be:65:6e:21:07:da:0b:87: 46:3a:78:e2:13:f8:a3:ab:f0:b1:ce:b3:eb:b1:bd: 03:b1:f2:c0:43:fc:fb:d4:b2:43:b4:9f:7d:ea:b8: 5b:2e:6d:a7:91:51:a1:2b:d1:50:82:6e:db:74:6a: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E1:BE:4F:30:56:CC:1D:29:06:47:E5:14:E4:09:24:62:01:6B:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dcfaa0a1-b7a0-4661-9885-125363e2be50/b67d8b95-e124-34cc-9414-a79cb3244cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dcfaa0a1-b7a0-4661-9885-125363e2be50/dcfaa0a1-b7a0-4661-9885-125363e2be50.crl X509v3 Authority Key Identifier: keyid:7F:76:81:5B:26:7E:62:70:E2:DB:91:F9:90:01:38:F3:72:D8:85:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dcfaa0a1-b7a0-4661-9885-125363e2be50.cer sbgp-ipAddrBlock: critical IPv4: 66.226.96.0/19 75.98.176.0/20 159.48.96.0/19 206.71.192.0/19 216.138.0.0-216.138.47.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:05:47:2d:18:69:57:a4:77:29:1e:91:b1:05:c6:e1:45:b3: cb:13:ba:55:5a:c9:15:e8:e2:d8:86:52:ef:b8:27:3d:6a:2a: 1b:11:32:f1:02:48:ac:fc:57:74:c4:28:84:c6:ca:dc:27:d9: 18:19:d2:f3:09:30:71:b2:d6:6a:db:3f:c7:a6:19:80:c7:96: 78:ab:f7:44:66:6a:84:7e:e6:1b:76:3b:5a:ac:a2:0e:d6:4e: 9f:f0:29:7f:5c:d4:81:8c:db:75:b2:aa:6b:19:08:67:ed:71: 1a:e6:15:2b:7d:c6:1e:60:28:37:51:9e:89:08:e1:da:d6:9d: e0:9b:f0:87:f9:72:cc:9f:3c:e4:fe:d7:fd:7e:c0:52:4f:e3: 8b:22:62:01:d3:5d:ec:c1:ac:49:be:57:11:84:f0:38:7b:ce: 84:aa:9c:39:0c:c2:3e:d6:21:b6:b2:bd:f6:62:a5:5c:9c:7b: ab:ee:7a:35:e9:1c:b3:83:6f:4c:36:5b:1f:64:42:ee:36:ba: dd:08:e5:71:1e:a5:ab:14:3c:43:6a:bf:61:5f:ce:b1:0d:e6: 99:87:82:0e:d1:b6:8c:74:44:e0:10:b5:54:dc:40:c4:48:10: ad:da:ae:80:4b:c2:b5:88:24:18:60:35:13:8a:b4:8c:9f:2f: 6b:11:8a:0b -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWE8hgWembKtQzCl4/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmYWEwYTEtYjdhMC00NjYxLTk4ODUtMTI1MzYzZTJi ZTUwMB4XDTI2MDkxMDE3Mzc1MloXDTI2MTIwOTE4Mzc1MlowLzEtMCsGA1UEAxMk ZTQ3MTdmYTktZjY3MS00OGU1LWJmMjUtMGIyYjgxYzc2MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuvAtIozDgTTsQfb0UJQo7GACU3XmpJeG3cF 7MRqQ2D5h9Wsze+1Ciye4s/2XWjELfjbQMD99+dLVIlE1/U88Bfmbrpw3cQE2ly0 trrI/lqgSqNyBEu0/X+WO/hqYTxOEF1cFDR9T/WbRk0d7blDgmFSPsR24Eq5Iy4m Msv+HBv5w/c5Y8r4JVbXkbI7Izh/Iqi2jUAPbdq9sbSmhpe5NTIdnYEqZOP9WcVd TUef2IvDHeSjDLp/+qe4ojqV5QGjs0cugv/rqKopvmVuIQfaC4dGOnjiE/ijq/Cx zrPrsb0DsfLAQ/z71LJDtJ996rhbLm2nkVGhK9FQgm7bdGrtGQIDAQABo4IDdDCC A3AwHQYDVR0OBBYEFPDhvk8wVswdKQZH5RTkCSRiAWsOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kY2Zh YTBhMS1iN2EwLTQ2NjEtOTg4NS0xMjUzNjNlMmJlNTAvYjY3ZDhiOTUtZTEyNC0z NGNjLTk0MTQtYTc5Y2IzMjQ0Y2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZGNmYWEwYTEtYjdhMC00NjYxLTk4 ODUtMTI1MzYzZTJiZTUwL2RjZmFhMGExLWI3YTAtNDY2MS05ODg1LTEyNTM2M2Uy YmU1MC5jcmwwHwYDVR0jBBgwFoAUf3aBWyZ+YnDi25H5kAE483LYhcEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9kY2ZhYTBhMS1iN2EwLTQ2NjEtOTg4NS0xMjUz NjNlMmJlNTAuY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAATAlAwQFQuJgAwQE S2KwAwQFnzBgAwQFzkfAMAsDAwHYigMEBNiKIDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHBUctGGlXpHcp HpGxBcbhRbPLE7pVWskV6OLYhlLvuCc9aiobETLxAkis/Fd0xCiExsrcJ9kYGdLz CTBxstZq2z/HphmAx5Z4q/dEZmqEfuYbdjtarKIO1k6f8Cl/XNSBjNt1sqprGQhn 7XEa5hUrfcYeYCg3UZ6JCOHa1p3gm/CH+XLMnzzk/tf9fsBST+OLImIB013swaxJ vlcRhPA4e86Eqpw5DMI+1iG2sr32YqVcnHur7no16Ryzg29MNlsfZELuNrrdCOVx HqWrFDxDar9hX86xDeaZh4IO0baMdETgELVU3EDESBCt2q6AS8K1iCQYYDUTirSM ny9rEYoL -----END CERTIFICATE-----Generated at Tue Sep 22 18:49:36 2026 by rpki-client