$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/4813f2a7-c5a3-3d8e-bbc1-363a5eb7a802.roa File: 4813f2a7-c5a3-3d8e-bbc1-363a5eb7a802.roa (raw, json) Hash identifier: i8fcbqm0I9eaY3B2M6JHcORs/0WHvdGtWQVsPKzg5Ig= Subject key identifier: 51:54:60:85:CC:87:22:AB:DE:A5:12:2C:D3:1A:FA:14:3A:56:55:76 Certificate issuer: /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61 Certificate serial: 010D0C9F4328584EF7177868028B1F8C70019300 Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/4813f2a7-c5a3-3d8e-bbc1-363a5eb7a802.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 6954 IP address blocks: 66.181.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:78:68:02:8b:1f:8c:70:01:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=cb22e30b-6508-46de-9b70-818294e81beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:80:05:c0:2d:9b:e9:e2:fc:f2:25:b3:99:f4: bf:37:d9:b4:f4:b1:53:ab:8b:40:d5:be:78:77:73: 6e:6b:26:c2:73:59:ab:57:f1:a9:1d:45:71:a9:aa: 66:02:1b:dd:9b:03:48:53:10:ae:4f:44:e7:30:eb: 05:41:90:bd:68:32:53:6f:bc:74:79:e4:c0:f7:bb: e1:6f:9c:9e:23:be:f5:cc:0d:34:43:88:a4:7d:cf: 83:90:87:4a:26:fc:c8:5d:a8:a2:5d:b7:24:fe:b2: b3:db:ba:8f:da:85:fd:dc:ad:82:96:25:f4:a5:8e: 18:1f:1b:00:4d:7a:74:9d:93:30:1b:4e:50:3e:a6: 4a:c3:a4:a5:e5:04:db:01:8e:c7:f0:fe:e8:22:d0: 8e:54:55:25:00:a9:df:23:1d:8e:ba:3a:95:29:4f: 7b:07:4d:6b:db:bd:ed:b2:16:dc:6c:48:e3:4c:72: 4e:58:be:f9:6f:47:99:b0:4f:c2:2b:b1:33:6e:40: 73:48:e2:9d:2c:21:c2:27:9b:2e:9b:05:95:5c:93: 2c:b9:fa:b8:b0:8d:a0:ab:ce:ca:21:e9:44:d0:0e: 74:68:b3:73:60:a0:c3:67:54:34:ab:22:1b:9d:39: 9d:b1:9f:90:ab:3a:45:69:3a:a7:9d:5e:6f:a1:31: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:54:60:85:CC:87:22:AB:DE:A5:12:2C:D3:1A:FA:14:3A:56:55:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/4813f2a7-c5a3-3d8e-bbc1-363a5eb7a802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl X509v3 Authority Key Identifier: keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer sbgp-ipAddrBlock: critical IPv4: 66.181.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3b:d0:07:61:25:59:c5:ca:0d:08:c1:5e:a9:ed:e4:81:56: a8:19:58:77:0d:ed:5a:6e:cc:78:ad:ce:71:4a:e1:bc:8c:52: c8:5a:03:b3:a0:f6:9a:42:2c:15:9f:fa:9f:6c:dc:af:4e:54: 69:9b:cc:d6:43:c5:c5:49:9d:d0:a5:97:2a:50:32:78:7d:3f: 7c:92:45:c1:00:51:54:34:99:02:17:ec:c8:db:88:5a:a2:36: a9:13:d5:ed:19:9c:f0:50:d9:bb:12:b0:e3:00:a7:25:e6:38: 89:d7:e9:d5:5d:83:0c:5d:40:a8:20:e9:86:a5:ad:e3:1d:53: 2d:a6:6f:08:1f:89:b8:ab:5d:89:69:5d:ac:80:f6:97:bc:1e: 05:b9:c1:21:f5:47:ef:a6:b7:e1:f3:94:28:45:7e:0a:5a:d0: 83:3b:c6:d2:fb:4c:8b:72:de:c7:db:95:bb:ef:c4:a3:49:2e: db:15:1a:58:df:48:09:ed:c2:c1:6f:63:81:e8:43:51:ef:79: 28:90:e2:cc:7f:1e:f1:02:3d:49:5d:c7:a8:7d:71:10:96:84: 2c:1c:bd:0a:7b:57:5c:eb:d2:08:f6:c9:cd:d4:db:13:a6:9e: 2d:09:f2:40:20:48:a9:17:a9:ab:de:ab:95:ee:94:4e:a3:55: 80:cf:29:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3hoAosfjHABkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY5ZjUwMjEtZDc4MC00NzU5LWFjMGYtMTg2NWFiOGQ1 YTYxMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk Y2IyMmUzMGItNjUwOC00NmRlLTliNzAtODE4Mjk0ZTgxYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YAFwC2b6eL88iWzmfS/N9m09LFTq4tA1b54 d3NuaybCc1mrV/GpHUVxqapmAhvdmwNIUxCuT0TnMOsFQZC9aDJTb7x0eeTA97vh b5yeI771zA00Q4ikfc+DkIdKJvzIXaiiXbck/rKz27qP2oX93K2CliX0pY4YHxsA TXp0nZMwG05QPqZKw6Sl5QTbAY7H8P7oItCOVFUlAKnfIx2OujqVKU97B01r273t shbcbEjjTHJOWL75b0eZsE/CK7EzbkBzSOKdLCHCJ5sumwWVXJMsufq4sI2gq87K IelE0A50aLNzYKDDZ1Q0qyIbnTmdsZ+QqzpFaTqnnV5voTGKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFUYIXMhyKr3qUSLNMa+hQ6VlV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85Zjlm NTAyMS1kNzgwLTQ3NTktYWMwZi0xODY1YWI4ZDVhNjEvNDgxM2YyYTctYzVhMy0z ZDhlLWJiYzEtMzYzYTVlYjdhODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWY5ZjUwMjEtZDc4MC00NzU5LWFj MGYtMTg2NWFiOGQ1YTYxLzlmOWY1MDIxLWQ3ODAtNDc1OS1hYzBmLTE4NjVhYjhk NWE2MS5jcmwwHwYDVR0jBBgwFoAUp/VgwYDsJYqP+aKoTe3Ru9XHB18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZjlmNTAyMS1kNzgwLTQ3NTktYWMwZi0xODY1 YWI4ZDVhNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD070AdhJVnFyg0IwV6p7eSBVqgZWHcN7VpuzHitznFK4byMUshaA7Og 9ppCLBWf+p9s3K9OVGmbzNZDxcVJndCllypQMnh9P3ySRcEAUVQ0mQIX7MjbiFqi NqkT1e0ZnPBQ2bsSsOMApyXmOInX6dVdgwxdQKgg6YalreMdUy2mbwgfibirXYlp XayA9pe8HgW5wSH1R++mt+HzlChFfgpa0IM7xtL7TIty3sfblbvvxKNJLtsVGljf SAntwsFvY4HoQ1HveSiQ4sx/HvECPUldx6h9cRCWhCwcvQp7V1zr0gj2yc3U2xOm ni0J8kAgSKkXqaveq5XulE6jVYDPKc0= -----END CERTIFICATE-----Generated at Sat Oct 10 23:02:28 2026 by rpki-client