$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/cbead79d-ff0d-37f3-afad-826ece0735f0.roa File: cbead79d-ff0d-37f3-afad-826ece0735f0.roa (raw, json) Hash identifier: aPJV8ZPN6+0OvAbNZeReTr6orh5RNMIXNS/l/1E+g/o= Subject key identifier: BE:5D:6F:8F:8B:AC:F1:86:93:B8:41:F3:2F:33:91:B8:9F:AE:1E:3F Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584F1CC7C27C7470EEEF26EC9CC0 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/cbead79d-ff0d-37f3-afad-826ece0735f0.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 1403 IP address blocks: 66.158.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:c2:7c:74:70:ee:ef:26:ec:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=7c5c86e5-d39c-4515-a20f-a38119866a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e5:79:aa:3a:63:7c:17:81:05:01:39:86:e4: 18:06:08:e6:99:5d:ad:af:31:0d:92:75:c3:83:84: cd:a6:02:53:e9:29:cb:42:10:50:f3:c7:01:4a:14: cf:7e:ac:aa:95:d6:0f:64:32:ad:1d:f4:65:58:d1: b9:31:3e:91:ad:51:0d:2e:be:18:09:32:ce:ed:81: 35:78:a3:29:f1:80:55:a7:c9:15:86:5e:bb:23:a5: 5c:59:5c:85:ab:e7:ad:06:d8:05:24:60:cf:bf:34: 41:29:33:3d:36:24:2b:2d:a7:ed:76:00:00:76:ec: b6:9c:65:9f:80:fe:1b:e6:8a:2d:2b:27:60:11:81: 14:ee:35:20:65:8d:2e:9d:90:56:e1:29:ef:f0:36: b6:72:7b:ca:d4:88:63:8e:bd:da:91:98:d8:36:5c: 3a:3d:a5:32:41:79:15:32:66:cd:82:82:24:36:d9: 4d:66:a1:87:5c:c8:d5:06:06:a0:10:88:be:19:5b: 93:cc:d8:7e:f8:6a:b9:66:ad:12:67:36:78:33:3e: a3:a8:6c:e2:ec:db:c2:d6:13:1c:37:a6:42:af:28: 07:6f:6c:f4:f6:79:53:36:bd:2f:13:ac:4b:3c:34: 40:f9:7f:0d:12:d4:66:b0:53:b9:45:88:f2:c0:58: e8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:6F:8F:8B:AC:F1:86:93:B8:41:F3:2F:33:91:B8:9F:AE:1E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/cbead79d-ff0d-37f3-afad-826ece0735f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.158.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:bc:68:76:a0:14:16:af:a8:e9:df:a5:6c:8f:22:3c:c1:e6: b9:5d:91:75:f3:fb:a0:0c:84:0a:02:60:64:a1:35:b2:06:ea: 27:22:09:ce:da:b8:02:99:5a:46:d7:e9:62:1f:ff:93:76:33: 4f:c9:fc:dc:72:c9:8b:f3:17:d9:c4:b4:9a:7e:81:0d:c6:ab: 29:ff:c3:2e:dd:88:4c:08:10:8d:16:56:1e:d2:53:54:d8:d4: d6:cc:08:30:83:ee:39:23:0a:6a:bb:1f:de:13:ca:fe:7b:42: 13:80:03:3a:c8:43:a3:c9:88:2c:9d:91:3a:ac:1f:6c:48:fa: 15:3f:42:e9:e2:1c:6d:8b:78:e6:45:88:ae:f9:bc:7c:5a:fd: 14:e8:cc:b8:ce:5a:a6:e6:f4:7e:6f:24:33:cc:c4:06:c7:36: da:54:39:45:8d:3b:86:20:43:4b:6d:0a:97:fe:23:f2:c3:64: 9a:c2:2c:94:aa:c6:8a:8f:04:95:af:03:0b:f9:1d:be:57:c8: ee:cd:08:61:fa:9f:13:d0:f8:ab:f9:14:ff:7a:d7:ec:74:a1: c9:54:91:57:36:3c:d1:df:ab:e3:7f:6c:18:80:29:5d:60:9c: b8:dc:4e:39:a5:30:d9:f8:7b:da:07:40:09:d4:20:bd:99:1f: 17:2b:84:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx8J8dHDu7ybsnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk N2M1Yzg2ZTUtZDM5Yy00NTE1LWEyMGYtYTM4MTE5ODY2YTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+V5qjpjfBeBBQE5huQYBgjmmV2trzENknXD g4TNpgJT6SnLQhBQ88cBShTPfqyqldYPZDKtHfRlWNG5MT6RrVENLr4YCTLO7YE1 eKMp8YBVp8kVhl67I6VcWVyFq+etBtgFJGDPvzRBKTM9NiQrLaftdgAAduy2nGWf gP4b5ootKydgEYEU7jUgZY0unZBW4Snv8Da2cnvK1Ihjjr3akZjYNlw6PaUyQXkV MmbNgoIkNtlNZqGHXMjVBgagEIi+GVuTzNh++Gq5Zq0SZzZ4Mz6jqGzi7NvC1hMc N6ZCrygHb2z09nlTNr0vE6xLPDRA+X8NEtRmsFO5RYjywFjo/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5db4+LrPGGk7hB8y8zkbifrh4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvY2JlYWQ3OWQtZmYwZC0z N2YzLWFmYWQtODI2ZWNlMDczNWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQp6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK28aHagFBavqOnfpWyPIjzB5rldkXXz+6AMhAoCYGShNbIG6iciCc7a uAKZWkbX6WIf/5N2M0/J/NxyyYvzF9nEtJp+gQ3Gqyn/wy7diEwIEI0WVh7SU1TY 1NbMCDCD7jkjCmq7H94Tyv57QhOAAzrIQ6PJiCydkTqsH2xI+hU/QuniHG2LeOZF iK75vHxa/RTozLjOWqbm9H5vJDPMxAbHNtpUOUWNO4YgQ0ttCpf+I/LDZJrCLJSq xoqPBJWvAwv5Hb5XyO7NCGH6nxPQ+Kv5FP961+x0oclUkVc2PNHfq+N/bBiAKV1g nLjcTjmlMNn4e9oHQAnUIL2ZHxcrhFY= -----END CERTIFICATE-----Generated at Tue Sep 22 19:21:00 2026 by rpki-client