$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/ca1da6d2-0a25-37d7-96fc-c6e268d7490c.roa File: ca1da6d2-0a25-37d7-96fc-c6e268d7490c.roa (raw, json) Hash identifier: kgxp+8ymg2X2xIJsHA8IgweA/UWcit8k/iTRM7scid0= Subject key identifier: AB:27:93:A5:54:6B:CC:33:F8:FA:4B:14:33:44:41:FB:D8:C8:CB:6B Certificate issuer: /CN=da75b606-ecb7-46cc-97b0-43d83e37f979 Certificate serial: 010D0C9F4328584F1CC7929DC1656C3BBBE31B00 Authority key identifier: 93:BB:9B:A8:EB:6D:9F:EA:0C:F9:7B:19:09:0A:7A:3F:6A:C6:90:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/ca1da6d2-0a25-37d7-96fc-c6e268d7490c.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 7361 IP address blocks: 66.208.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/da75b606-ecb7-46cc-97b0-43d83e37f979.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/da75b606-ecb7-46cc-97b0-43d83e37f979.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:92:9d:c1:65:6c:3b:bb:e3:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da75b606-ecb7-46cc-97b0-43d83e37f979 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=ea12e39b-3d61-4428-8007-09a4f105e846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:54:f9:4b:37:be:b4:f8:6d:9b:df:da:8b:16: 76:b1:eb:ca:45:de:57:ef:3c:5c:cd:ac:4e:f4:91: 36:8c:bf:32:e4:90:f7:68:a8:c4:c8:63:85:dd:3e: 01:5a:ee:cc:b9:e0:8f:e0:5b:93:28:f1:94:38:cc: 89:e6:4d:72:1d:5b:68:83:10:44:0e:7c:9d:c9:76: 20:f9:ff:20:fa:f9:64:a3:89:a1:16:3a:b8:31:7f: 68:16:89:d3:76:a8:78:6e:77:3e:4d:d3:66:74:33: 16:de:49:5e:e6:18:49:40:4b:5a:30:1b:d7:76:5e: 1c:9b:55:bc:f5:17:d1:59:9d:84:64:29:87:c3:6f: 0d:27:8d:a8:da:dc:c3:32:07:bc:20:3c:f3:67:b3: b1:c1:df:50:f9:9d:c0:e3:b8:cd:af:13:f8:99:a1: 57:9b:69:ff:77:e3:8e:5a:91:a3:4b:3d:dd:78:68: b7:12:26:92:ad:0f:d2:98:d7:98:09:12:48:81:7a: c9:fc:b0:ea:5b:3f:6b:8e:cf:2e:d1:47:81:7c:0a: 33:42:00:c5:88:a4:90:f4:19:bf:0f:ed:60:da:01: c9:20:35:15:36:07:31:65:35:42:b5:c7:2d:bb:3f: 2c:88:8d:bb:76:5f:07:ec:bf:74:6a:a1:6b:f3:8d: 04:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:27:93:A5:54:6B:CC:33:F8:FA:4B:14:33:44:41:FB:D8:C8:CB:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/ca1da6d2-0a25-37d7-96fc-c6e268d7490c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979/da75b606-ecb7-46cc-97b0-43d83e37f979.crl X509v3 Authority Key Identifier: keyid:93:BB:9B:A8:EB:6D:9F:EA:0C:F9:7B:19:09:0A:7A:3F:6A:C6:90:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da75b606-ecb7-46cc-97b0-43d83e37f979.cer sbgp-ipAddrBlock: critical IPv4: 66.208.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:14:1e:7b:14:13:72:57:91:48:eb:c2:b1:68:4d:bc:d5:a0: df:83:d2:f6:dd:d5:73:17:63:fe:c4:0a:5b:1c:94:b1:ec:f5: 55:b3:b4:04:06:e2:50:a1:43:95:cd:cf:3f:cc:e2:fc:46:eb: c5:01:71:36:d7:04:6a:cb:f9:6b:a4:32:d5:c2:9d:ae:e7:f1: ed:cf:6a:f9:7b:87:eb:3a:97:d7:34:b4:e5:22:67:4e:6f:b9: e9:0c:b6:ff:54:2f:fe:67:c0:9a:73:e3:5c:81:24:46:7b:2d: 05:e0:d5:31:2d:ce:cb:84:9c:f7:e7:0c:18:a2:49:62:91:6c: f6:d4:08:0a:6c:27:68:41:08:45:b1:46:82:f1:5c:81:70:1c: ac:9a:a7:23:13:49:34:66:56:c1:3e:d7:5f:fc:96:05:5b:d6: cf:96:03:2e:0c:1c:e0:a8:0d:74:40:ad:7f:ad:98:76:a4:81: 2e:ca:6c:80:41:c1:df:e5:3a:e0:a3:f0:d8:91:8b:0d:f1:7d: 93:aa:bb:30:d7:7b:2a:83:34:a0:b2:2c:5e:6a:15:a9:0d:76: e1:9c:f4:79:0a:92:98:4a:45:a9:f7:5e:84:5e:9d:10:f3:46: a8:6b:60:b9:72:61:b6:60:6f:c6:b0:4d:54:1f:64:10:93:58: c4:44:ca:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx5KdwWVsO7vjGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE3NWI2MDYtZWNiNy00NmNjLTk3YjAtNDNkODNlMzdm OTc5MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk ZWExMmUzOWItM2Q2MS00NDI4LTgwMDctMDlhNGYxMDVlODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVT5Sze+tPhtm9/aixZ2sevKRd5X7zxczaxO 9JE2jL8y5JD3aKjEyGOF3T4BWu7MueCP4FuTKPGUOMyJ5k1yHVtogxBEDnydyXYg +f8g+vlko4mhFjq4MX9oFonTdqh4bnc+TdNmdDMW3kle5hhJQEtaMBvXdl4cm1W8 9RfRWZ2EZCmHw28NJ42o2tzDMge8IDzzZ7Oxwd9Q+Z3A47jNrxP4maFXm2n/d+OO WpGjSz3deGi3EiaSrQ/SmNeYCRJIgXrJ/LDqWz9rjs8u0UeBfAozQgDFiKSQ9Bm/ D+1g2gHJIDUVNgcxZTVCtcctuz8siI27dl8H7L90aqFr840EUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsnk6VUa8wz+PpLFDNEQfvYyMtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTc1 YjYwNi1lY2I3LTQ2Y2MtOTdiMC00M2Q4M2UzN2Y5NzkvY2ExZGE2ZDItMGEyNS0z N2Q3LTk2ZmMtYzZlMjY4ZDc0OTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGE3NWI2MDYtZWNiNy00NmNjLTk3 YjAtNDNkODNlMzdmOTc5L2RhNzViNjA2LWVjYjctNDZjYy05N2IwLTQzZDgzZTM3 Zjk3OS5jcmwwHwYDVR0jBBgwFoAUk7ubqOttn+oM+XsZCQp6P2rGkOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTc1YjYwNi1lY2I3LTQ2Y2MtOTdiMC00M2Q4 M2UzN2Y5NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQtBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAUHnsUE3JXkUjrwrFoTbzVoN+D0vbd1XMXY/7EClsclLHs9VWztAQG 4lChQ5XNzz/M4vxG68UBcTbXBGrL+WukMtXCna7n8e3Pavl7h+s6l9c0tOUiZ05v uekMtv9UL/5nwJpz41yBJEZ7LQXg1TEtzsuEnPfnDBiiSWKRbPbUCApsJ2hBCEWx RoLxXIFwHKyapyMTSTRmVsE+11/8lgVb1s+WAy4MHOCoDXRArX+tmHakgS7KbIBB wd/lOuCj8NiRiw3xfZOquzDXeyqDNKCyLF5qFakNduGc9HkKkphKRan3XoRenRDz RqhrYLlyYbZgb8awTVQfZBCTWMREypg= -----END CERTIFICATE-----Generated at Mon Sep 21 02:38:11 2026 by rpki-client