$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b8b53a3-66e9-3c77-a579-e7a7b8dabcf2.roa File: 3b8b53a3-66e9-3c77-a579-e7a7b8dabcf2.roa (raw, json) Hash identifier: UCnL74gsuWBSxMBLUQyEBivj9wsuetr/fImbP78uiT4= Subject key identifier: C1:CB:45:DA:4F:D4:FE:8E:DA:04:45:E9:52:D2:BA:D8:34:C4:61:F3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F30528CD016C5F795F062D980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b8b53a3-66e9-3c77-a579-e7a7b8dabcf2.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 66.253.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:8c:d0:16:c5:f7:95:f0:62:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=c249f34f-8b0a-448a-a4d3-a693fc3008c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:fc:b8:82:60:7e:9f:d7:34:e0:cc:32:96: a5:91:18:8f:23:ce:8c:13:17:7a:35:0d:8e:66:ed: 24:b9:1d:89:a3:30:71:22:34:54:3b:eb:11:fe:12: 90:59:dd:5f:7a:4c:cb:47:12:12:f8:1b:13:f6:e7: 28:49:b7:98:ef:e1:5a:d9:de:b5:87:e2:79:2e:99: 87:82:cd:af:75:3f:c7:2b:d5:3a:0c:ab:d4:99:d2: 30:9d:b7:58:26:63:a7:2c:3a:a9:ad:f4:2c:6f:c9: 43:a5:e7:54:15:03:45:22:9c:a8:12:70:46:64:03: 70:2d:86:99:d8:d8:44:6b:14:c0:82:a3:f7:96:f9: 4f:b0:7e:4e:96:da:59:da:44:ce:8a:27:bd:2a:b1: 7d:1c:77:93:36:f5:64:b0:87:b4:76:aa:40:db:fb: 6a:92:4c:e8:2d:33:80:83:e1:08:cd:da:db:26:b6: ca:58:80:bf:03:16:b9:79:c1:20:92:a3:5d:54:5f: e9:8e:39:97:eb:54:ce:f1:59:69:c9:ad:cb:e3:e7: ed:3b:99:52:81:f5:84:78:c2:92:e0:87:6e:1a:8b: 4d:42:d2:00:a9:ed:01:44:99:fe:12:d0:6b:62:32: e4:15:ad:7f:64:51:18:b0:ce:d4:be:2e:ab:54:98: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CB:45:DA:4F:D4:FE:8E:DA:04:45:E9:52:D2:BA:D8:34:C4:61:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b8b53a3-66e9-3c77-a579-e7a7b8dabcf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c2:ce:99:83:ab:32:38:24:a6:af:06:8e:72:62:22:1a:d4: ca:99:a8:82:c3:49:55:6d:64:c8:3a:b0:3f:ed:61:ff:42:ce: 56:af:81:45:b5:1b:c9:59:ae:12:76:c0:a1:ed:4b:d3:15:a2: 56:59:74:2b:4c:e9:d4:57:5e:b5:ea:45:df:7a:dc:e8:c8:f3: 87:c9:54:e1:8d:d9:0b:8f:87:b0:64:13:27:3d:3d:da:6b:37: ca:f7:38:2e:ab:d8:3a:de:51:3d:6d:7b:5e:08:f0:b3:57:b3: 68:e3:63:cf:02:17:55:72:c5:52:f3:78:e8:02:81:5c:09:71: 64:ae:f6:dd:2d:72:84:f5:5b:2f:16:c5:e5:0c:3b:dd:9c:42: 3e:da:6e:f9:56:d4:78:0e:02:20:b0:6d:60:07:fc:0c:1b:1b: 27:09:d6:41:d2:b0:13:62:99:9a:5b:52:07:f2:81:be:b3:cf: fd:be:81:52:f3:69:7d:8b:d8:11:0b:f9:82:08:ee:2d:f6:a1: 65:28:21:a4:61:15:07:17:89:93:21:c5:57:29:5c:8e:d7:0a: f2:04:c1:04:5d:72:4c:9e:bf:5a:8f:b8:f1:13:68:f4:9b:16: ca:ba:a8:e8:65:b8:77:f2:6f:a7:de:e5:9b:79:5f:4c:db:a7: 92:14:5c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUozQFsX3lfBi2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YzI0OWYzNGYtOGIwYS00NDhhLWE0ZDMtYTY5M2ZjMzAwOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSD8uIJgfp/XNODMMpalkRiPI86MExd6NQ2O Zu0kuR2JozBxIjRUO+sR/hKQWd1fekzLRxIS+BsT9ucoSbeY7+Fa2d61h+J5LpmH gs2vdT/HK9U6DKvUmdIwnbdYJmOnLDqprfQsb8lDpedUFQNFIpyoEnBGZANwLYaZ 2NhEaxTAgqP3lvlPsH5OltpZ2kTOiie9KrF9HHeTNvVksIe0dqpA2/tqkkzoLTOA g+EIzdrbJrbKWIC/Axa5ecEgkqNdVF/pjjmX61TO8Vlpya3L4+ftO5lSgfWEeMKS 4IduGotNQtIAqe0BRJn+EtBrYjLkFa1/ZFEYsM7Uvi6rVJjjFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHLRdpP1P6O2gRF6VLSutg0xGHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2I4YjUzYTMtNjZlOS0z Yzc3LWE1NzktZTdhN2I4ZGFiY2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDCzpmDqzI4JKavBo5yYiIa1MqZqILDSVVtZMg6sD/tYf9CzlavgUW1 G8lZrhJ2wKHtS9MVolZZdCtM6dRXXrXqRd963OjI84fJVOGN2QuPh7BkEyc9Pdpr N8r3OC6r2DreUT1te14I8LNXs2jjY88CF1VyxVLzeOgCgVwJcWSu9t0tcoT1Wy8W xeUMO92cQj7abvlW1HgOAiCwbWAH/AwbGycJ1kHSsBNimZpbUgfygb6zz/2+gVLz aX2L2BEL+YII7i32oWUoIaRhFQcXiZMhxVcpXI7XCvIEwQRdckyev1qPuPETaPSb Fsq6qOhluHfyb6fe5Zt5X0zbp5IUXEA= -----END CERTIFICATE-----Generated at Wed Sep 23 11:00:54 2026 by rpki-client