$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/3d8b75da-f9ad-3bd1-92fb-ba789e52f156.roa File: 3d8b75da-f9ad-3bd1-92fb-ba789e52f156.roa (raw, json) Hash identifier: x/SmQodtLUFHXMxkIU25bCZK5/D2Kbvj+ZsaOZJizRU= Subject key identifier: 38:86:66:3E:09:36:A0:C0:03:08:79:61:DA:5B:5C:86:55:68:5E:B4 Certificate issuer: /CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843 Certificate serial: 010D0C9F4328584F351E6C5A65E45EC366659B80 Authority key identifier: 4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/3d8b75da-f9ad-3bd1-92fb-ba789e52f156.roa Signing time: Thu 17 Sep 2026 18:14:35 +0000 ROA not before: Thu 17 Sep 2026 18:14:35 +0000 ROA not after: Wed 16 Dec 2026 19:14:35 +0000 asID: 40676 IP address blocks: 66.117.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:1e:6c:5a:65:e4:5e:c3:66:65:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843 Validity Not Before: Sep 17 18:14:35 2026 GMT Not After : Dec 16 19:14:35 2026 GMT Subject: CN=2b70c12c-9822-4c6e-aafd-515954b3ac0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c7:21:ee:53:c8:83:d4:a4:21:b3:b6:e4:90: e8:9b:22:09:9b:09:42:2f:29:4f:5f:e6:e4:ce:96: 09:a2:0a:11:e4:21:99:d1:bd:05:17:a7:52:81:4b: 85:2f:46:ce:c5:7c:78:b9:15:a4:a1:7c:d8:98:20: df:c8:27:07:6e:4b:24:02:67:02:33:9d:72:e9:55: 90:1c:22:23:f4:57:ae:c6:0b:9c:24:c0:32:73:02: 30:9b:fa:5c:ec:f8:e6:f3:e0:2e:34:dd:ee:7d:e4: 45:bb:e3:95:f6:24:3c:f1:b5:05:de:76:fc:83:16: 8a:6c:ef:de:63:e1:28:40:81:21:42:37:3d:a4:a2: 16:fd:cc:01:29:d6:b7:ec:21:5d:18:0f:7f:79:13: 10:4a:b7:e7:8c:07:30:8a:98:be:ab:79:6c:a4:fa: bc:9c:50:3b:d4:44:47:62:01:31:f0:d9:89:ae:d5: 7d:40:37:ca:7d:c9:4e:d6:0d:e4:07:44:67:c7:95: 60:20:6b:2d:fe:7f:ab:9a:f0:73:a0:29:54:fd:c2: b2:51:b9:6f:2c:8d:a2:37:d8:bf:29:f8:7e:cc:48: d9:4d:c1:10:f6:e6:96:65:be:29:1c:d6:89:a1:3c: 41:d1:1f:72:4c:e0:28:c8:80:38:07:aa:36:80:87: fb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:86:66:3E:09:36:A0:C0:03:08:79:61:DA:5B:5C:86:55:68:5E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/3d8b75da-f9ad-3bd1-92fb-ba789e52f156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl X509v3 Authority Key Identifier: keyid:4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer sbgp-ipAddrBlock: critical IPv4: 66.117.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d1:a5:78:9b:d2:80:91:11:3c:0d:7a:0b:35:7d:fe:70:c9: a8:3f:3f:c0:c2:1d:19:2e:80:b4:13:a6:a1:db:e1:59:86:8f: 78:1c:48:1f:ca:d4:fc:f7:45:ad:be:ac:bc:59:48:16:ad:c8: de:3b:2a:02:df:36:e2:0c:7d:ae:c4:98:bf:29:78:29:e7:18: 0a:49:91:e4:8a:9b:b6:49:1f:bf:04:bb:8f:86:0a:2b:39:69: 58:f2:05:72:bc:fd:b4:0f:45:bc:18:d3:f1:3a:39:43:35:32: 09:7c:a3:8f:aa:d9:1b:35:10:0c:2c:d2:41:1a:11:a7:8a:1d: d5:bc:f9:5a:17:59:c8:a3:6f:72:fc:74:74:1b:8d:c6:d0:d0: 27:0b:b6:18:ba:17:cd:a7:ab:7a:10:fb:01:53:a3:0f:1a:db: 2e:7e:18:18:bc:61:14:60:65:85:32:c3:f0:ac:16:c4:cf:28: 3c:49:26:06:52:0c:4c:b3:7b:41:52:20:f3:a8:93:ae:d7:a6: 4c:d4:70:32:c0:f8:72:7e:2e:f0:10:96:78:cc:7c:6e:8b:6e: 49:2e:98:ed:8a:13:b7:07:76:3d:99:f4:b4:83:b5:61:c0:cd: 23:90:74:1b:8e:f1:a4:c8:54:d0:62:ec:3f:82:33:62:e2:a3: 1c:0a:c9:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE81HmxaZeRew2Zlm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1ZjE2YTItNTlmMi00M2Q2LTk3ODMtYjU5YzNiOWFk ODQzMB4XDTI2MDkxNzE4MTQzNVoXDTI2MTIxNjE5MTQzNVowLzEtMCsGA1UEAxMk MmI3MGMxMmMtOTgyMi00YzZlLWFhZmQtNTE1OTU0YjNhYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcch7lPIg9SkIbO25JDomyIJmwlCLylPX+bk zpYJogoR5CGZ0b0FF6dSgUuFL0bOxXx4uRWkoXzYmCDfyCcHbkskAmcCM51y6VWQ HCIj9FeuxgucJMAycwIwm/pc7Pjm8+AuNN3ufeRFu+OV9iQ88bUF3nb8gxaKbO/e Y+EoQIEhQjc9pKIW/cwBKda37CFdGA9/eRMQSrfnjAcwipi+q3lspPq8nFA71ERH YgEx8NmJrtV9QDfKfclO1g3kB0Rnx5VgIGst/n+rmvBzoClU/cKyUblvLI2iN9i/ Kfh+zEjZTcEQ9uaWZb4pHNaJoTxB0R9yTOAoyIA4B6o2gIf7rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiGZj4JNqDAAwh5YdpbXIZVaF60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVm MTZhMi01OWYyLTQzZDYtOTc4My1iNTljM2I5YWQ4NDMvM2Q4Yjc1ZGEtZjlhZC0z YmQxLTkyZmItYmE3ODllNTJmMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmE1ZjE2YTItNTlmMi00M2Q2LTk3 ODMtYjU5YzNiOWFkODQzLzJhNWYxNmEyLTU5ZjItNDNkNi05NzgzLWI1OWMzYjlh ZDg0My5jcmwwHwYDVR0jBBgwFoAUShal8/wXMG6gD99HdWeZ+wqqZU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVmMTZhMi01OWYyLTQzZDYtOTc4My1iNTlj M2I5YWQ4NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHRpXib0oCRETwNegs1ff5wyag/P8DCHRkugLQTpqHb4VmGj3gcSB/K 1Pz3Ra2+rLxZSBatyN47KgLfNuIMfa7EmL8peCnnGApJkeSKm7ZJH78Eu4+GCis5 aVjyBXK8/bQPRbwY0/E6OUM1Mgl8o4+q2Rs1EAws0kEaEaeKHdW8+VoXWcijb3L8 dHQbjcbQ0CcLthi6F82nq3oQ+wFTow8a2y5+GBi8YRRgZYUyw/CsFsTPKDxJJgZS DEyze0FSIPOok67XpkzUcDLA+HJ+LvAQlnjMfG6LbkkumO2KE7cHdj2Z9LSDtWHA zSOQdBuO8aTIVNBi7D+CM2LioxwKyQw= -----END CERTIFICATE-----Generated at Sun Sep 20 17:54:05 2026 by rpki-client