$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa File: 0de08070-992e-334f-8090-a4c3a88677f1.roa (raw, json) Hash identifier: q/OO1IVtRGFRAV70OazmndSoR4grdHtFPSoT+kT1/7Q= Subject key identifier: C6:05:C3:90:E9:6F:0A:FD:93:95:D4:30:99:3C:18:9A:05:F1:46:D3 Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584F71ED9044C55331D3518B0400 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 30148 IP address blocks: 66.248.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:90:44:c5:53:31:d3:51:8b:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=97862739-f735-4475-9411-65343df0c9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c0:f8:d0:f6:9d:1a:3e:a5:3e:05:8c:2e:3f: c4:28:0c:54:ba:39:38:8e:4c:12:e0:e4:dd:53:53: 54:f8:f3:8d:53:30:9a:d1:88:79:0d:5f:f9:81:38: 9a:43:8e:a2:5b:dc:c2:0e:4d:a1:5d:4d:db:0a:31: 76:88:4f:bf:85:20:ad:93:a4:7e:4a:dd:a7:f2:e0: 50:1b:5f:11:5c:ff:b2:85:50:03:59:e8:2e:a5:62: ce:47:b0:03:d7:45:75:c9:a5:62:70:f1:67:cf:24: 3d:14:96:e7:89:2c:40:c8:53:bc:f9:58:a8:ad:65: 29:53:7b:cb:f4:7b:4e:9d:f7:43:1b:16:6a:75:70: 25:4f:9e:88:27:f3:10:44:58:64:e1:19:9a:d8:9a: af:58:0d:da:6f:56:61:5c:97:2b:bb:d1:2b:3c:70: 56:21:a8:f6:b7:55:f7:e7:93:5d:f4:1a:15:f9:d7: 54:4e:7d:7c:00:3f:36:29:6f:75:f5:97:03:39:a3: 2f:29:04:a1:50:da:5b:f0:92:7c:af:0b:0c:32:be: 43:16:f6:eb:84:aa:c4:e2:17:4f:4d:32:2f:a8:08: d5:46:f7:bd:76:ec:93:94:2b:33:d6:b2:d0:89:87: eb:2d:e6:53:a5:93:17:90:50:f2:04:a3:62:7a:8e: b9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:05:C3:90:E9:6F:0A:FD:93:95:D4:30:99:3C:18:9A:05:F1:46:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 66.248.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:36:50:06:f7:b2:1b:ed:fd:7a:21:3a:67:9d:fe:c6:9f:cd: 83:3e:ca:39:74:8d:b4:87:8c:c8:eb:2d:fd:b5:96:4b:85:0f: fd:2e:90:bb:45:92:16:5c:68:cf:87:1b:55:81:26:d1:d5:29: e3:0c:37:29:4a:05:2a:3d:1c:b7:52:43:e1:22:b4:d7:38:50: f3:46:7b:58:db:59:04:31:b6:6d:26:b3:63:a0:a6:c5:8f:61: b3:bb:41:d2:fc:47:52:a5:52:6e:76:5b:29:8e:ed:ec:32:60: dd:b6:2b:cd:a1:01:d3:d1:3e:07:57:90:f8:40:6f:37:9b:9c: c9:32:9b:b4:a1:cf:73:06:8b:84:a4:f2:88:4c:d3:22:2c:da: 55:5c:ee:40:05:21:20:bf:d7:9e:b9:e1:68:ff:4e:7f:ac:9c: 96:03:f9:2f:74:3e:71:60:d4:e5:9f:6a:8c:5b:b0:6e:2b:e1: e4:77:34:8f:68:36:74:4a:72:ee:38:b9:8a:44:bb:62:04:67: 45:42:8d:f8:29:d3:7c:75:de:f3:56:63:44:9d:e1:9d:6b:24: 9b:40:14:d5:03:ac:1a:93:65:ac:89:a1:41:b0:88:0f:aa:1a: db:e7:bd:08:70:ec:2c:fd:fe:88:f0:50:6d:b9:1d:86:a0:19: a0:38:33:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ZBExVMx01GLBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk OTc4NjI3MzktZjczNS00NDc1LTk0MTEtNjUzNDNkZjBjOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMD40PadGj6lPgWMLj/EKAxUujk4jkwS4OTd U1NU+PONUzCa0Yh5DV/5gTiaQ46iW9zCDk2hXU3bCjF2iE+/hSCtk6R+St2n8uBQ G18RXP+yhVADWegupWLOR7AD10V1yaVicPFnzyQ9FJbniSxAyFO8+ViorWUpU3vL 9HtOnfdDGxZqdXAlT56IJ/MQRFhk4Rma2JqvWA3ab1ZhXJcru9ErPHBWIaj2t1X3 55Nd9BoV+ddUTn18AD82KW919ZcDOaMvKQShUNpb8JJ8rwsMMr5DFvbrhKrE4hdP TTIvqAjVRve9duyTlCsz1rLQiYfrLeZTpZMXkFDyBKNieo65zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYFw5Dpbwr9k5XUMJk8GJoF8UbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvMGRlMDgwNzAtOTkyZS0z MzRmLTgwOTAtYTRjM2E4ODY3N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg2UAb3shvt/XohOmed/safzYM+yjl0jbSHjMjrLf21lkuFD/0ukLtF khZcaM+HG1WBJtHVKeMMNylKBSo9HLdSQ+EitNc4UPNGe1jbWQQxtm0ms2OgpsWP YbO7QdL8R1KlUm52WymO7ewyYN22K82hAdPRPgdXkPhAbzebnMkym7Shz3MGi4Sk 8ohM0yIs2lVc7kAFISC/15654Wj/Tn+snJYD+S90PnFg1OWfaoxbsG4r4eR3NI9o NnRKcu44uYpEu2IEZ0VCjfgp03x13vNWY0Sd4Z1rJJtAFNUDrBqTZayJoUGwiA+q GtvnvQhw7Cz9/ojwUG25HYagGaA4M1M= -----END CERTIFICATE-----Generated at Sat Oct 10 16:23:29 2026 by rpki-client