$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa File: fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa (raw, json) Hash identifier: UKXC90HAWA4SMms8QiVrlaHlMfR8YGv33e3aIuhMeRs= Subject key identifier: FC:CA:73:EF:89:CA:4A:22:5C:1D:1E:DB:6C:0C:63:3B:6B:88:AA:8C Certificate issuer: /CN=0f27cf1f-c7c6-435c-a313-992cc63104f9 Certificate serial: 010D0C9F4328584F4973CEBE82565F7B554A10E0 Authority key identifier: A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30528 IP address blocks: 66.96.16.0/20 maxlen: 20 72.0.64.0/20 maxlen: 20 2001:1928::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ce:be:82:56:5f:7b:55:4a:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f27cf1f-c7c6-435c-a313-992cc63104f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dcdc2956-9d9e-4357-9b00-8f6e6ef56191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e5:0a:1d:3b:94:70:a2:4d:ec:6f:0c:82:6b: c0:3a:ed:a5:ae:18:ba:3a:eb:ae:35:0a:c9:86:ef: 61:7d:b7:c2:c9:ba:28:f9:e9:42:d4:52:65:02:b9: 61:0b:6b:cd:8a:cf:5e:2e:7a:3b:ab:19:e4:ca:5c: 77:34:e3:9b:88:6a:8f:8e:5b:39:b9:11:e5:8b:16: 09:88:56:56:e5:3e:bd:14:52:19:65:cf:87:8c:2b: b5:90:26:4a:76:f5:e5:9d:f4:b7:21:32:e9:3a:2b: 3d:94:90:0c:e5:72:74:0b:a3:e8:68:4a:b5:08:ee: cc:96:19:b4:bd:31:74:7e:2e:00:1f:cb:20:0e:44: 77:d1:f3:fc:38:ab:a6:3c:6d:ef:df:20:98:3e:62: 88:7d:14:2c:e3:0d:18:da:9b:10:85:bf:93:78:37: cf:c6:36:6c:01:11:63:8d:2a:69:d9:48:4d:4f:e4: a8:5f:8c:76:90:f9:3b:f9:24:7f:69:77:d3:21:84: d3:cc:c7:db:e6:1a:a8:0f:c3:42:a6:5b:d6:87:96: 15:af:cc:09:09:26:ea:39:58:84:61:18:84:a6:7e: 39:01:9f:d1:94:ea:7c:8c:c6:2e:db:32:72:69:08: 91:aa:ab:28:6d:8a:34:19:f5:57:a9:ca:6d:a7:f5: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CA:73:EF:89:CA:4A:22:5C:1D:1E:DB:6C:0C:63:3B:6B:88:AA:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl X509v3 Authority Key Identifier: keyid:A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer sbgp-ipAddrBlock: critical IPv4: 66.96.16.0/20 72.0.64.0/20 IPv6: 2001:1928::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c6:5c:be:fc:77:0e:ea:ef:09:54:df:e1:41:af:cc:f7:fa: 44:ac:33:72:2e:02:41:4a:f1:02:63:2e:71:97:2c:91:c0:61: 2b:b5:d8:ab:e8:b7:2d:d0:c9:7f:56:cd:be:2f:e6:f6:f7:b4: fe:8c:96:9c:11:b9:70:14:7e:4a:97:38:42:0e:f0:35:9a:78: e4:c9:01:ab:5c:b3:17:d5:46:96:a0:bc:d9:84:00:2c:cb:f2: d0:4a:e6:61:38:5a:8a:e3:38:ce:56:45:25:70:96:57:37:b2: 2c:82:65:4c:0b:02:03:c7:e4:3e:3c:c8:91:cc:d3:e0:dd:a7: 41:ff:ce:ec:40:ba:b2:26:02:45:5b:05:bb:fa:78:16:b0:2b: 36:b0:af:15:aa:21:1f:5c:2c:22:90:b1:10:86:e8:d9:91:a8: 56:fc:b8:80:00:a8:d6:2f:1a:3c:1b:58:9c:54:82:5e:68:1b: 1c:e2:3e:bc:e1:f2:df:3b:77:7a:d7:5d:f4:1a:ee:ea:5f:7d: 45:e5:87:1a:6d:67:57:c8:c4:f8:db:ba:7c:bc:10:66:bb:db: 0b:1f:17:de:34:5c:3a:0f:98:86:9f:2c:cb:92:72:26:c1:0a: 19:ca:95:85:c5:21:cc:dd:0f:07:fd:56:3f:65:0c:28:4f:bb: b4:c3:5d:27 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9Jc86+glZfe1VKEOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYyN2NmMWYtYzdjNi00MzVjLWEzMTMtOTkyY2M2MzEw NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGNkYzI5NTYtOWQ5ZS00MzU3LTliMDAtOGY2ZTZlZjU2MTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eUKHTuUcKJN7G8MgmvAOu2lrhi6OuuuNQrJ hu9hfbfCyboo+elC1FJlArlhC2vNis9eLno7qxnkylx3NOObiGqPjls5uRHlixYJ iFZW5T69FFIZZc+HjCu1kCZKdvXlnfS3ITLpOis9lJAM5XJ0C6PoaEq1CO7Mlhm0 vTF0fi4AH8sgDkR30fP8OKumPG3v3yCYPmKIfRQs4w0Y2psQhb+TeDfPxjZsARFj jSpp2UhNT+SoX4x2kPk7+SR/aXfTIYTTzMfb5hqoD8NCplvWh5YVr8wJCSbqOViE YRiEpn45AZ/RlOp8jMYu2zJyaQiRqqsobYo0GfVXqcptp/XM1QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFPzKc++JykoiXB0e22wMYztriKqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3 Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJjYzYzMTA0ZjkvZmI1NjlkNDktYTNkNS0z NmI3LTlkNWEtMzkwMGNhOWYwZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGYyN2NmMWYtYzdjNi00MzVjLWEz MTMtOTkyY2M2MzEwNGY5LzBmMjdjZjFmLWM3YzYtNDM1Yy1hMzEzLTk5MmNjNjMx MDRmOS5jcmwwHwYDVR0jBBgwFoAUo152Mp1514H4Ylc1CoZ/eeY9K4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJj YzYzMTA0ZjkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQmAQAwQE SABAMA0EAgACMAcDBQAgARkoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACfGXL78dw7q7wlU3+FBr8z3+kSs M3IuAkFK8QJjLnGXLJHAYSu12Kvoty3QyX9Wzb4v5vb3tP6MlpwRuXAUfkqXOEIO 8DWaeOTJAatcsxfVRpagvNmEACzL8tBK5mE4WorjOM5WRSVwllc3siyCZUwLAgPH 5D48yJHM0+Ddp0H/zuxAurImAkVbBbv6eBawKzawrxWqIR9cLCKQsRCG6NmRqFb8 uIAAqNYvGjwbWJxUgl5oGxziPrzh8t87d3rXXfQa7upffUXlhxptZ1fIxPjbuny8 EGa72wsfF940XDoPmIafLMuScibBChnKlYXFIczdDwf9Vj9lDChPu7TDXSc= -----END CERTIFICATE-----Generated at Fri Sep 25 17:52:22 2026 by rpki-client