$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/1af61e6b-62f9-3373-82a9-97bc64fd3088.roa File: 1af61e6b-62f9-3373-82a9-97bc64fd3088.roa (raw, json) Hash identifier: buBA9sHajdfREl3nCUWv3h7YO8KRgxkixYeY+g94Irs= Subject key identifier: 20:98:9C:6C:59:0A:EC:80:11:72:CE:8E:F7:12:4C:7C:76:42:D8:8C Certificate issuer: /CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843 Certificate serial: 010D0C9F4328584F246726111EA3E403EB02AE00 Authority key identifier: 4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/1af61e6b-62f9-3373-82a9-97bc64fd3088.roa Signing time: Fri 11 Sep 2026 18:32:23 +0000 ROA not before: Fri 11 Sep 2026 18:32:23 +0000 ROA not after: Thu 10 Dec 2026 19:32:23 +0000 asID: 40676 IP address blocks: 66.117.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:24:67:26:11:1e:a3:e4:03:eb:02:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843 Validity Not Before: Sep 11 18:32:23 2026 GMT Not After : Dec 10 19:32:23 2026 GMT Subject: CN=754e4ced-6317-46b5-87fb-829317629152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f5:0e:22:d6:d9:18:bf:25:40:0a:c6:33:95: c3:99:c4:98:03:14:33:cc:7c:9a:61:a6:16:10:4b: 0d:3d:a8:7c:cd:e5:d6:6a:c8:b4:f2:e3:2b:96:9e: ab:06:df:6c:11:1a:ec:1d:8a:0b:ec:e8:e4:24:0f: 66:a9:9b:87:e8:1c:24:83:40:14:27:60:cd:1c:b4: d5:3f:7d:ad:08:56:55:b6:99:f9:9d:80:51:71:b8: a1:3b:a0:fa:3f:6a:ff:e0:f8:ce:4f:3e:28:04:07: 59:b5:2d:4a:4e:aa:0a:e8:af:76:ea:cc:25:20:57: 5c:e0:6b:64:1d:48:43:ce:37:89:c7:1e:48:f1:78: 56:a8:87:45:3c:65:4a:4a:fe:19:c7:30:1e:06:67: bb:ec:b7:cc:cd:3d:03:55:e1:ed:1d:42:6e:3d:14: d3:b5:52:dc:a8:0e:e9:e6:ca:80:40:01:9b:5e:80: 61:d7:45:49:3e:25:09:5e:d4:e2:75:04:1d:7a:8a: dc:35:42:f3:b4:a9:b3:ae:5e:c5:82:f7:f5:c8:5e: 9c:ba:fe:ef:25:25:ff:fd:3e:53:25:70:c5:8a:7a: 93:0b:3d:11:88:4b:10:96:78:37:ad:a8:c8:33:43: 6c:13:a0:87:87:25:48:47:09:d3:05:c2:cc:fd:ee: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:98:9C:6C:59:0A:EC:80:11:72:CE:8E:F7:12:4C:7C:76:42:D8:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/1af61e6b-62f9-3373-82a9-97bc64fd3088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl X509v3 Authority Key Identifier: keyid:4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer sbgp-ipAddrBlock: critical IPv4: 66.117.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:46:78:a3:4b:f4:6a:32:55:3f:24:1c:23:ae:19:52:d9:53: fe:61:0d:ee:ee:00:8f:95:22:67:c1:b0:43:ea:04:38:a7:31: 54:0c:b6:ad:ac:7b:cf:15:fc:00:6f:2e:44:58:2a:d4:e4:e0: 2e:1a:77:13:95:6c:e0:f9:be:9e:98:72:96:44:7a:e6:59:0a: 07:5d:94:a8:17:60:00:68:81:08:28:30:4b:74:e6:0e:52:78: cb:f2:9e:fd:89:f1:cc:b4:bf:33:60:a5:30:b1:3d:4f:fa:8a: 8b:ac:fa:4d:09:cb:cb:ab:c0:16:3c:a5:1d:6f:4d:30:3a:03: 8c:0f:11:b7:0f:83:5d:6d:7e:9e:47:b8:f3:b3:44:91:b0:aa: eb:74:8e:96:75:7e:f0:d1:e9:70:52:43:33:24:24:c6:46:7b: 82:fd:93:5a:51:dc:6e:28:36:a2:83:12:1c:86:85:d7:9d:8e: 10:9e:03:ea:0e:ff:5b:c3:e7:b3:06:ed:97:4c:89:6a:74:02: 18:76:36:9e:d5:24:64:2b:61:98:38:a0:20:14:0f:61:20:00: 4c:c5:0a:5b:1a:9e:0b:69:ff:a2:6c:01:4b:0a:3a:4b:eb:07: 5b:37:35:f5:d3:53:5c:a6:db:35:f8:4f:e4:92:68:c1:e6:62: 99:e6:65:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8kZyYRHqPkA+sCrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1ZjE2YTItNTlmMi00M2Q2LTk3ODMtYjU5YzNiOWFk ODQzMB4XDTI2MDkxMTE4MzIyM1oXDTI2MTIxMDE5MzIyM1owLzEtMCsGA1UEAxMk NzU0ZTRjZWQtNjMxNy00NmI1LTg3ZmItODI5MzE3NjI5MTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvUOItbZGL8lQArGM5XDmcSYAxQzzHyaYaYW EEsNPah8zeXWasi08uMrlp6rBt9sERrsHYoL7OjkJA9mqZuH6Bwkg0AUJ2DNHLTV P32tCFZVtpn5nYBRcbihO6D6P2r/4PjOTz4oBAdZtS1KTqoK6K926swlIFdc4Gtk HUhDzjeJxx5I8XhWqIdFPGVKSv4ZxzAeBme77LfMzT0DVeHtHUJuPRTTtVLcqA7p 5sqAQAGbXoBh10VJPiUJXtTidQQdeorcNULztKmzrl7Fgvf1yF6cuv7vJSX//T5T JXDFinqTCz0RiEsQlng3rajIM0NsE6CHhyVIRwnTBcLM/e57aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCYnGxZCuyAEXLOjvcSTHx2QtiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVm MTZhMi01OWYyLTQzZDYtOTc4My1iNTljM2I5YWQ4NDMvMWFmNjFlNmItNjJmOS0z MzczLTgyYTktOTdiYzY0ZmQzMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmE1ZjE2YTItNTlmMi00M2Q2LTk3 ODMtYjU5YzNiOWFkODQzLzJhNWYxNmEyLTU5ZjItNDNkNi05NzgzLWI1OWMzYjlh ZDg0My5jcmwwHwYDVR0jBBgwFoAUShal8/wXMG6gD99HdWeZ+wqqZU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVmMTZhMi01OWYyLTQzZDYtOTc4My1iNTlj M2I5YWQ4NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnWfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRGeKNL9GoyVT8kHCOuGVLZU/5hDe7uAI+VImfBsEPqBDinMVQMtq2s e88V/ABvLkRYKtTk4C4adxOVbOD5vp6YcpZEeuZZCgddlKgXYABogQgoMEt05g5S eMvynv2J8cy0vzNgpTCxPU/6ious+k0Jy8urwBY8pR1vTTA6A4wPEbcPg11tfp5H uPOzRJGwqut0jpZ1fvDR6XBSQzMkJMZGe4L9k1pR3G4oNqKDEhyGhdedjhCeA+oO /1vD57MG7ZdMiWp0Ahh2Np7VJGQrYZg4oCAUD2EgAEzFClsangtp/6JsAUsKOkvr B1s3NfXTU1ym2zX4T+SSaMHmYpnmZT4= -----END CERTIFICATE-----Generated at Sun Sep 20 20:03:42 2026 by rpki-client