$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/607dbe8c-8963-3fe1-b68f-3e3ba0469e63.roa File: 607dbe8c-8963-3fe1-b68f-3e3ba0469e63.roa (raw, json) Hash identifier: hYzSJQK/wY5MIHzI3dlEeqo/d+z7D3EtxVn1j5726fA= Subject key identifier: 0F:E5:19:41:F9:FE:01:F0:B6:D7:DD:02:BB:49:4F:4F:02:C5:BD:7C Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584EF87CB52F02BEDE236DE58580 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/607dbe8c-8963-3fe1-b68f-3e3ba0469e63.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 1403 IP address blocks: 66.158.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:b5:2f:02:be:de:23:6d:e5:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=2a966023-e140-43b4-b308-d8814c9837d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:00:54:b7:0d:69:10:5f:a6:43:b2:9b:cf:ef: dd:fb:ad:f8:33:2d:8b:78:5e:39:bb:0e:ed:35:e5: bd:c8:02:36:12:27:eb:ad:6f:52:c2:06:9f:61:da: 83:85:39:54:d9:1a:44:62:e8:67:34:d0:75:34:49: dc:3e:82:a8:3b:82:c7:11:22:17:61:4f:d2:d1:f1: 71:94:81:fd:88:14:52:bf:3a:b6:25:65:6a:b5:db: f9:12:f6:75:d7:96:7b:f3:9a:cd:2f:5e:4a:0e:c7: 04:ea:f4:2a:6d:b4:e7:d2:e7:d0:71:2b:34:9a:0a: 7d:54:1e:35:eb:9a:fe:2d:f8:03:02:5e:b1:0f:9e: 7e:74:cb:20:c6:d8:91:97:f0:05:2f:3e:23:a0:26: 9f:db:ad:18:b0:05:84:14:36:86:3a:e5:22:54:c6: 89:4b:c7:7d:77:fd:5e:42:b8:0e:3a:75:86:12:fd: 50:9a:db:94:f0:8f:b7:62:36:b5:3e:5d:1e:bd:5c: ca:de:18:18:fb:d0:83:9d:a8:63:d7:8d:fe:f4:63: fd:d6:3b:82:8c:ff:81:93:d1:29:5e:95:91:d0:c1: 8c:21:bb:43:47:c2:f8:ce:c6:71:a1:af:17:98:89: 24:4b:9a:41:b5:6d:52:19:2c:7e:c6:25:00:9f:eb: f3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E5:19:41:F9:FE:01:F0:B6:D7:DD:02:BB:49:4F:4F:02:C5:BD:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/607dbe8c-8963-3fe1-b68f-3e3ba0469e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.158.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9f:95:6e:2c:bb:5e:bc:30:1b:a8:d7:87:8d:f6:68:4d:9f: 06:d2:94:a7:f2:79:84:d4:cb:84:ee:5d:d9:47:d5:be:db:48: 2a:bb:e9:1d:37:cb:74:6a:36:2a:c3:21:61:a9:f2:8c:33:3d: 62:59:d6:0b:f1:12:d3:0b:c9:ed:c6:4f:4e:18:94:73:37:0f: e5:e8:57:68:8a:96:81:32:79:89:02:bb:c9:04:e5:1c:8a:c1: a6:0f:6b:6d:07:d9:a5:77:bf:f4:e6:9f:1e:7a:da:b0:f4:c9: 51:38:74:2e:20:52:e9:14:00:09:42:15:ff:46:91:4c:58:f1: d8:1e:cc:d7:8d:a1:e1:8f:20:50:d5:d8:2b:14:f2:2b:31:f0: 1d:a6:bc:dd:5f:af:8c:2e:87:a7:df:30:62:8f:07:d1:f5:c1: ec:30:40:a2:29:80:d3:a8:80:67:c3:7f:5e:2f:0a:35:ff:fb: 03:13:df:2e:f1:51:91:d3:50:f2:88:61:d2:41:d0:75:99:17: 89:c3:13:d3:a9:a4:86:74:7c:15:f1:5c:04:da:f8:8b:d2:3a: b6:55:39:cf:c6:00:1c:89:d3:5a:f6:45:cb:de:21:40:27:86: de:81:a1:55:17:fd:09:13:34:ae:a6:f5:18:34:cc:07:32:a8: e7:0a:04:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLUvAr7eI23lhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk MmE5NjYwMjMtZTE0MC00M2I0LWIzMDgtZDg4MTRjOTgzN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgBUtw1pEF+mQ7Kbz+/d+634My2LeF45uw7t NeW9yAI2EifrrW9SwgafYdqDhTlU2RpEYuhnNNB1NEncPoKoO4LHESIXYU/S0fFx lIH9iBRSvzq2JWVqtdv5EvZ115Z785rNL15KDscE6vQqbbTn0ufQcSs0mgp9VB41 65r+LfgDAl6xD55+dMsgxtiRl/AFLz4joCaf260YsAWEFDaGOuUiVMaJS8d9d/1e QrgOOnWGEv1QmtuU8I+3Yja1Pl0evVzK3hgY+9CDnahj143+9GP91juCjP+Bk9Ep XpWR0MGMIbtDR8L4zsZxoa8XmIkkS5pBtW1SGSx+xiUAn+vzUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/lGUH5/gHwttfdArtJT08Cxb18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvNjA3ZGJlOGMtODk2My0z ZmUxLWI2OGYtM2UzYmEwNDY5ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQp6PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECflW4su168MBuo14eN9mhNnwbSlKfyeYTUy4TuXdlH1b7bSCq76R03 y3RqNirDIWGp8owzPWJZ1gvxEtMLye3GT04YlHM3D+XoV2iKloEyeYkCu8kE5RyK waYPa20H2aV3v/Tmnx562rD0yVE4dC4gUukUAAlCFf9GkUxY8dgezNeNoeGPIFDV 2CsU8isx8B2mvN1fr4wuh6ffMGKPB9H1wewwQKIpgNOogGfDf14vCjX/+wMT3y7x UZHTUPKIYdJB0HWZF4nDE9OppIZ0fBXxXATa+IvSOrZVOc/GAByJ01r2RcveIUAn ht6BoVUX/QkTNK6m9Rg0zAcyqOcKBK4= -----END CERTIFICATE-----Generated at Sun Sep 20 17:35:25 2026 by rpki-client