$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa File: db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa (raw, json) Hash identifier: ieRClN8LlUSD4YcYEuiSOfA8T4WGyJDoZrynMq7uOfU= Subject key identifier: 98:10:58:37:1D:66:BA:19:53:22:C6:30:57:1D:7D:BC:B7:DC:B1:D9 Certificate issuer: /CN=670a3755-a570-42cf-846d-b0190d7ff61a Certificate serial: 010D0C9F4328584F71EDB7EE4EBFEF2BE8BC9E40 Authority key identifier: E2:43:A4:1F:D0:08:46:21:E1:94:C4:17:1F:18:DE:3F:DB:4B:29:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 393887 IP address blocks: 66.179.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:b7:ee:4e:bf:ef:2b:e8:bc:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670a3755-a570-42cf-846d-b0190d7ff61a Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=371b287b-394d-403f-9650-c3931ecf414f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:59:35:25:44:3a:48:10:b9:62:1d:78:61: 20:86:2b:1c:fc:80:be:2c:48:c5:9d:c4:ec:42:1d: 5c:ad:a1:8a:35:87:4d:70:92:f4:60:b3:5c:3c:7b: 47:c2:b4:b4:09:0d:db:07:1c:25:d7:bd:29:cb:18: 40:75:44:83:64:c6:02:9c:e1:2f:58:f2:0c:24:21: 7b:ef:0d:5c:8f:b1:e1:d1:15:d2:c6:b6:fb:3b:64: f6:29:dc:06:94:1e:16:a4:92:9f:16:2e:a5:57:0e: c5:b3:ff:b9:b6:12:6c:b6:15:13:9d:4b:39:60:ca: 3d:2f:10:2d:e2:ec:d3:a2:cd:53:2c:0f:8d:b6:aa: 6d:25:47:f5:09:8d:c8:66:52:68:a1:7f:72:2c:5c: 5b:70:1c:97:24:26:2e:a5:80:1b:b4:9f:62:cc:48: 59:4c:b9:61:58:6a:1d:5b:88:72:0b:51:6e:6a:10: 62:88:3c:d7:51:f8:fe:eb:5d:b6:04:3f:94:3e:5d: 61:66:95:ec:c0:18:77:f1:d7:82:23:f3:13:b1:09: 6d:76:fa:5f:6a:1e:cb:6f:ca:8a:be:49:88:4c:55: de:4a:16:2f:6e:21:c1:46:ad:c4:89:cc:02:e4:e8: f9:4c:ac:a6:ab:c5:18:cb:11:75:2d:f4:05:0f:a1: c8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:10:58:37:1D:66:BA:19:53:22:C6:30:57:1D:7D:BC:B7:DC:B1:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.crl X509v3 Authority Key Identifier: keyid:E2:43:A4:1F:D0:08:46:21:E1:94:C4:17:1F:18:DE:3F:DB:4B:29:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer sbgp-ipAddrBlock: critical IPv4: 66.179.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1f:57:c9:c5:ce:f7:42:af:03:1b:5f:e6:22:0e:a4:e5:5e: c5:45:24:43:07:77:a7:4a:cc:15:16:74:64:ad:a6:7e:f7:62: 46:12:b5:69:aa:a1:f7:cc:5e:f7:29:35:32:ae:b0:5a:4e:ef: 85:4a:8d:fe:b1:81:98:6c:1d:2e:d8:fc:06:e0:32:48:b6:27: cf:9e:05:2b:97:b5:6a:43:f9:ac:79:d8:d2:f9:8a:83:f6:69: 98:0f:1b:e7:f0:ad:12:36:8b:da:19:dc:ae:b6:7b:85:13:5b: e7:e6:0e:e3:d7:5e:42:67:2e:2d:20:d9:79:6d:e8:a6:5c:d5: 84:d7:67:40:4d:82:a3:4e:b2:c2:95:37:8d:a3:fe:e0:9b:3a: 4a:df:64:3d:b6:50:49:5a:ae:e7:56:75:7b:fe:6e:91:4d:35: af:40:1a:ec:b4:d4:ec:56:2d:0a:bc:df:7f:28:c5:65:e7:d5: 80:fb:50:be:b0:75:84:49:bb:3d:72:ba:f9:b9:09:6a:fd:d2: 9b:74:14:e4:aa:06:ac:84:b0:71:3a:94:b7:80:59:5e:97:eb: 0a:0a:f7:76:e0:6e:5c:5e:38:55:a8:9c:8b:16:8a:e4:a7:c3: d4:a4:2e:d8:5a:63:f0:72:34:69:bc:77:14:33:9e:ce:a1:c4: 9c:1a:65:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7bfuTr/vK+i8nkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjcwYTM3NTUtYTU3MC00MmNmLTg0NmQtYjAxOTBkN2Zm NjFhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MzcxYjI4N2ItMzk0ZC00MDNmLTk2NTAtYzM5MzFlY2Y0MTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLNZNSVEOkgQuWIdeGEghisc/IC+LEjFncTs Qh1craGKNYdNcJL0YLNcPHtHwrS0CQ3bBxwl170pyxhAdUSDZMYCnOEvWPIMJCF7 7w1cj7Hh0RXSxrb7O2T2KdwGlB4WpJKfFi6lVw7Fs/+5thJsthUTnUs5YMo9LxAt 4uzTos1TLA+NtqptJUf1CY3IZlJooX9yLFxbcByXJCYupYAbtJ9izEhZTLlhWGod W4hyC1FuahBiiDzXUfj+6122BD+UPl1hZpXswBh38deCI/MTsQltdvpfah7Lb8qK vkmITFXeShYvbiHBRq3EicwC5Oj5TKymq8UYyxF1LfQFD6HIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgQWDcdZroZUyLGMFcdfby33LHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NzBh Mzc1NS1hNTcwLTQyY2YtODQ2ZC1iMDE5MGQ3ZmY2MWEvZGIyZmM4ZDMtYzViMS0z YTUzLTgxYTYtOTZhNmQ1MGRkZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjcwYTM3NTUtYTU3MC00MmNmLTg0 NmQtYjAxOTBkN2ZmNjFhLzY3MGEzNzU1LWE1NzAtNDJjZi04NDZkLWIwMTkwZDdm ZjYxYS5jcmwwHwYDVR0jBBgwFoAU4kOkH9AIRiHhlMQXHxjeP9tLKdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NzBhMzc1NS1hNTcwLTQyY2YtODQ2ZC1iMDE5 MGQ3ZmY2MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8fV8nFzvdCrwMbX+YiDqTlXsVFJEMHd6dKzBUWdGStpn73YkYStWmq offMXvcpNTKusFpO74VKjf6xgZhsHS7Y/AbgMki2J8+eBSuXtWpD+ax52NL5ioP2 aZgPG+fwrRI2i9oZ3K62e4UTW+fmDuPXXkJnLi0g2Xlt6KZc1YTXZ0BNgqNOssKV N42j/uCbOkrfZD22UElarudWdXv+bpFNNa9AGuy01OxWLQq8338oxWXn1YD7UL6w dYRJuz1yuvm5CWr90pt0FOSqBqyEsHE6lLeAWV6X6woK93bgblxeOFWonIsWiuSn w9SkLthaY/ByNGm8dxQzns6hxJwaZXI= -----END CERTIFICATE-----Generated at Mon Oct 12 18:06:17 2026 by rpki-client