$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/59a34be2-df64-3f0c-9f0e-53bfe364e193.roa File: 59a34be2-df64-3f0c-9f0e-53bfe364e193.roa (raw, json) Hash identifier: W/l0rRQD8WqLyjSPDCoMktRRuMIfB2CKxR0u+8ZrD88= Subject key identifier: C7:6B:A2:C1:D2:B8:05:0E:6C:02:AC:84:A3:F9:36:7B:C8:77:34:7D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F331D2DCF2D5D83A12DDE08E0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/59a34be2-df64-3f0c-9f0e-53bfe364e193.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 201207 IP address blocks: 66.95.202.0/23 maxlen: 23 68.166.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:2d:cf:2d:5d:83:a1:2d:de:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=10a4c25f-6f98-4371-8635-bcff0ea79bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:58:fa:b0:2e:45:74:38:42:d9:7d:55:c1: 81:8d:17:26:6e:02:9e:4c:52:d2:e6:66:79:d7:ac: 64:80:3d:5b:ef:71:f7:a7:0d:f6:ef:bf:fb:c6:27: ce:9a:d7:4e:8d:0e:4b:f1:3f:54:a8:13:55:e6:08: c1:10:bb:a7:ed:63:d0:43:1e:51:42:5b:b1:66:59: b5:39:2c:1c:7c:a3:ed:8b:74:54:2b:31:f5:b2:b7: 78:f4:4a:70:69:98:82:cc:f6:8a:83:fb:8e:15:e5: e1:6f:7e:8c:ea:79:ca:be:f2:3d:bb:66:d6:1f:51: 13:43:ab:e8:16:16:ca:0b:f4:3d:4f:34:1d:ae:d3: c5:2a:85:fc:fc:73:ed:92:74:4c:8a:15:78:c6:58: 74:3a:06:f2:15:97:16:32:85:cc:6c:7e:42:98:05: 8a:3a:ea:91:42:68:95:ca:9e:39:c6:55:13:36:72: e9:af:57:4e:73:6b:f5:1d:52:a1:09:32:58:72:25: e7:e0:11:8b:29:fa:9c:e7:bb:68:01:93:66:ef:f2: 0f:a7:8a:34:94:cb:83:e0:7a:a8:6d:59:80:be:ef: 1b:47:5a:f0:2c:01:2b:8d:e8:3b:69:2a:69:b7:f3: 95:d2:f9:f5:bf:4d:3b:bc:4d:3e:c3:b9:3a:71:f8: de:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6B:A2:C1:D2:B8:05:0E:6C:02:AC:84:A3:F9:36:7B:C8:77:34:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/59a34be2-df64-3f0c-9f0e-53bfe364e193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.95.202.0/23 68.166.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:74:dc:79:60:57:69:7d:98:33:5c:d9:77:c6:c8:51:9e:de: 22:c0:4b:36:1e:8a:da:45:aa:98:db:63:d0:d3:2b:ef:93:cf: 92:81:1c:14:bb:6f:2b:9c:5a:52:30:f5:04:20:b4:f9:c2:c4: 3d:88:86:1c:90:c6:a6:6c:35:32:27:29:c9:01:63:f1:2b:63: db:f1:c7:36:4b:10:11:e2:7c:2a:68:a6:42:21:6b:84:51:0f: b7:bc:d0:4e:57:af:46:d6:71:10:47:b8:7e:c3:f1:d4:e1:f6: b6:26:91:49:54:14:32:dc:3c:8a:f4:86:ff:3b:e8:a6:d8:71: d4:dc:00:d7:d5:f9:97:05:56:4c:f2:92:75:ce:7b:c6:7f:ca: 4c:51:96:3a:e7:b6:43:07:bd:19:57:dd:3d:1b:74:bc:5c:ae: ca:a3:c1:cb:ef:26:a7:04:02:13:d0:95:8b:1a:dc:30:73:3c: a2:f1:b4:eb:42:c4:73:52:d2:20:e7:9f:a4:b3:ba:4d:c0:0b: c8:60:78:19:b6:9c:74:45:7a:16:3d:30:52:45:07:19:d1:73: 96:9d:fa:79:2b:bf:f2:5e:e5:9b:13:36:17:b8:27:c0:ec:29: b0:4e:ec:cd:cc:37:5b:95:05:21:1a:08:a0:cb:a6:15:34:4a: 6a:13:f2:8f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8zHS3PLV2DoS3eCOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk MTBhNGMyNWYtNmY5OC00MzcxLTg2MzUtYmNmZjBlYTc5YmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQtY+rAuRXQ4Qtl9VcGBjRcmbgKeTFLS5mZ5 16xkgD1b73H3pw3277/7xifOmtdOjQ5L8T9UqBNV5gjBELun7WPQQx5RQluxZlm1 OSwcfKPti3RUKzH1srd49EpwaZiCzPaKg/uOFeXhb36M6nnKvvI9u2bWH1ETQ6vo FhbKC/Q9TzQdrtPFKoX8/HPtknRMihV4xlh0OgbyFZcWMoXMbH5CmAWKOuqRQmiV yp45xlUTNnLpr1dOc2v1HVKhCTJYciXn4BGLKfqc57toAZNm7/IPp4o0lMuD4Hqo bVmAvu8bR1rwLAErjeg7aSppt/OV0vn1v007vE0+w7k6cfjemQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMdrosHSuAUObAKshKP5NnvIdzR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTlhMzRiZTItZGY2NC0z ZjBjLTlmMGUtNTNiZmUzNjRlMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQl/KAwQB RKa2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK903HlgV2l9mDNc2XfGyFGe3iLASzYeitpFqpjbY9DTK++T z5KBHBS7byucWlIw9QQgtPnCxD2IhhyQxqZsNTInKckBY/ErY9vxxzZLEBHifCpo pkIha4RRD7e80E5Xr0bWcRBHuH7D8dTh9rYmkUlUFDLcPIr0hv876KbYcdTcANfV +ZcFVkzyknXOe8Z/ykxRljrntkMHvRlX3T0bdLxcrsqjwcvvJqcEAhPQlYsa3DBz PKLxtOtCxHNS0iDnn6Szuk3AC8hgeBm2nHRFehY9MFJFBxnRc5ad+nkrv/Je5ZsT Nhe4J8DsKbBO7M3MN1uVBSEaCKDLphU0SmoT8o8= -----END CERTIFICATE-----Generated at Tue Sep 22 23:02:04 2026 by rpki-client