$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/fdc5e12f-e50e-3a64-893c-ead544e920ce.roa File: fdc5e12f-e50e-3a64-893c-ead544e920ce.roa (raw, json) Hash identifier: zskj0gfECqFTlCpiqyqV89Yt5QMUgtYMusPhPsG/HRs= Subject key identifier: 22:0B:8E:5C:2B:6E:D1:9F:E0:ED:42:C5:C0:3F:CF:BE:32:FB:8F:DE Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F4328584F00DCC499A74185BD1884A280 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/fdc5e12f-e50e-3a64-893c-ead544e920ce.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 13518 IP address blocks: 66.252.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:c4:99:a7:41:85:bd:18:84:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=19d7286f-11f2-47ab-8361-a6608ef65fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:97:55:ff:04:da:41:75:93:e0:8b:9b:df: d6:5c:6c:80:12:c0:6f:fb:ff:6a:f2:94:6c:24:2b: 88:2d:d3:05:41:96:6d:1d:0a:59:ee:ec:43:89:7f: da:93:b3:7e:40:7b:4d:26:53:e0:2a:23:b1:14:55: ea:fc:7e:41:76:36:0e:41:d4:65:9c:c9:24:d5:2c: 3a:4d:fe:af:6f:e5:75:e0:80:c2:83:cf:83:df:36: 3d:5c:f8:a1:f2:05:0c:33:c5:e0:62:ea:18:08:f2: 6d:9a:d5:24:a4:aa:07:0d:e4:6b:cd:bb:18:be:0c: aa:5b:f5:51:50:64:38:89:1f:2e:19:71:1b:4d:23: 67:bc:0a:e3:f0:fd:76:d1:23:f1:c0:af:e5:f1:2e: 7b:6e:32:2a:5f:27:9c:8d:c1:39:8e:f0:f0:e0:20: e1:24:56:19:d3:0c:6a:87:49:a7:4a:a1:bf:2b:50: 43:03:e1:5c:23:3d:7c:d3:2b:6b:74:bf:4a:6b:6b: b4:02:60:33:e5:a1:b8:59:b1:17:dd:94:57:2c:a1: 08:c9:4c:64:2c:72:11:42:80:bb:a2:fd:b9:43:42: 06:70:7f:d4:be:06:ee:2d:d4:67:4b:ba:57:d7:a7: c5:3c:58:24:28:9b:76:89:8f:37:28:de:00:91:d3: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0B:8E:5C:2B:6E:D1:9F:E0:ED:42:C5:C0:3F:CF:BE:32:FB:8F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/fdc5e12f-e50e-3a64-893c-ead544e920ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: 66.252.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e6:81:2f:60:3c:32:1a:b7:98:f9:de:ef:fc:36:1e:ca:d7: 02:72:24:09:83:0d:b1:56:7e:29:aa:08:59:28:98:45:cb:ce: dc:e1:f0:3f:5e:f2:2e:59:a3:17:94:d7:89:7a:47:73:39:8c: a8:5f:95:a7:4e:29:13:ff:ce:aa:ba:86:48:bd:17:c5:be:35: 35:34:ec:1d:54:29:c1:54:72:d8:f4:4b:3f:a2:f5:3a:67:3f: 60:12:dd:57:ae:e6:40:3b:7e:f1:82:de:bc:d6:ef:c8:34:0c: 02:7c:0b:1c:2c:47:2d:f2:0c:10:15:e7:f8:38:17:18:1e:68: 6b:1a:30:dd:b0:57:83:9e:fa:d9:65:4c:7e:ad:0c:d1:1c:c1: b7:fd:4e:4c:ee:50:1a:a9:da:1b:e3:01:f0:08:41:b6:6d:8b: 5e:10:e6:a8:6f:3d:de:bb:8a:f5:6e:7b:12:26:55:7e:ca:6e: c7:8b:a3:98:11:4a:ab:a2:48:45:3b:7b:73:b4:09:65:25:a3: 49:9f:29:0e:f6:8c:04:f9:13:79:94:09:b1:1d:89:a7:31:b6: d3:23:e6:83:29:b1:32:6f:12:81:c7:6a:27:67:bd:10:d9:f2: c2:d6:83:f1:43:7d:c6:27:02:5b:0c:fc:da:1b:7e:8f:c9:ad: 72:41:2f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3MSZp0GFvRiEooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk MTlkNzI4NmYtMTFmMi00N2FiLTgzNjEtYTY2MDhlZjY1ZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz+XVf8E2kF1k+CLm9/WXGyAEsBv+/9q8pRs JCuILdMFQZZtHQpZ7uxDiX/ak7N+QHtNJlPgKiOxFFXq/H5BdjYOQdRlnMkk1Sw6 Tf6vb+V14IDCg8+D3zY9XPih8gUMM8XgYuoYCPJtmtUkpKoHDeRrzbsYvgyqW/VR UGQ4iR8uGXEbTSNnvArj8P120SPxwK/l8S57bjIqXyecjcE5jvDw4CDhJFYZ0wxq h0mnSqG/K1BDA+FcIz180ytrdL9Ka2u0AmAz5aG4WbEX3ZRXLKEIyUxkLHIRQoC7 ov25Q0IGcH/UvgbuLdRnS7pX16fFPFgkKJt2iY83KN4AkdPDOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCILjlwrbtGf4O1CxcA/z74y+4/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvZmRjNWUxMmYtZTUwZS0z YTY0LTg5M2MtZWFkNTQ0ZTkyMGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXmgS9gPDIat5j53u/8Nh7K1wJyJAmDDbFWfimqCFkomEXLztzh8D9e 8i5ZoxeU14l6R3M5jKhfladOKRP/zqq6hki9F8W+NTU07B1UKcFUctj0Sz+i9Tpn P2AS3Veu5kA7fvGC3rzW78g0DAJ8CxwsRy3yDBAV5/g4FxgeaGsaMN2wV4Oe+tll TH6tDNEcwbf9TkzuUBqp2hvjAfAIQbZti14Q5qhvPd67ivVuexImVX7KbseLo5gR SquiSEU7e3O0CWUlo0mfKQ72jAT5E3mUCbEdiacxttMj5oMpsTJvEoHHaidnvRDZ 8sLWg/FDfcYnAlsM/Nobfo/JrXJBLwo= -----END CERTIFICATE-----Generated at Mon Sep 21 19:43:53 2026 by rpki-client