$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/3950370e-8c40-395e-afe3-17d64fefd85e.roa File: 3950370e-8c40-395e-afe3-17d64fefd85e.roa (raw, json) Hash identifier: DWVvmEkLM4r+MuvmDaPDL5mmYvXDskGHhMVtgCx+664= Subject key identifier: C5:18:2C:78:A5:6A:EC:0F:8B:84:0C:5C:2A:63:EF:F2:05:37:96:A6 Certificate issuer: /CN=d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb Certificate serial: 010D0C9F4328584F1E2CFAF893D3018BF7F4C208 Authority key identifier: D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/3950370e-8c40-395e-afe3-17d64fefd85e.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 54262 IP address blocks: 66.51.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:fa:f8:93:d3:01:8b:f7:f4:c2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=797d589c-75b8-44ff-8d0d-def62da70c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9d:6a:0b:d8:2b:7e:24:50:93:1b:a1:b3:1f: 87:03:e2:ff:91:00:27:1f:3f:33:73:8c:c4:01:35: cb:ca:65:c0:22:28:3e:26:68:13:be:51:7f:1f:f8: 2c:5b:9d:39:d8:3e:cf:a4:0e:14:e2:d4:d8:8a:f9: 3e:fb:f1:e4:6d:da:7f:dc:59:c0:5a:ee:08:9b:e0: e8:b2:24:b1:71:85:78:9d:7c:87:67:bc:35:c2:eb: a8:ad:91:ed:fb:53:cb:85:9b:c1:b0:fa:a0:79:6c: 16:03:ab:02:9e:13:e1:96:5f:8e:eb:ff:fa:67:03: 9d:d3:16:35:c9:ba:3e:5b:3c:ff:01:da:45:73:cc: 95:a8:2d:9e:08:54:45:7d:22:65:42:10:d2:55:4b: 42:c6:4d:ce:f0:78:6f:6b:94:77:87:b7:cd:d9:5b: 4c:fd:f0:c5:8a:e1:0e:a5:7f:5d:06:4c:92:1c:60: da:37:dc:96:1b:ec:12:81:a4:5a:66:bf:32:0c:fd: c8:a8:a2:c2:b9:69:eb:7c:6f:86:07:40:3f:82:69: a8:d0:3f:86:e0:d3:3e:39:ba:e1:a3:ae:e0:87:8a: dc:f0:d6:d6:17:9e:c1:04:22:b5:2c:21:99:a0:d8: 26:4e:bc:33:85:ce:5b:74:a4:5e:f5:9f:92:68:5c: 71:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:18:2C:78:A5:6A:EC:0F:8B:84:0C:5C:2A:63:EF:F2:05:37:96:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/3950370e-8c40-395e-afe3-17d64fefd85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.crl X509v3 Authority Key Identifier: keyid:D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer sbgp-ipAddrBlock: critical IPv4: 66.51.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f0:d1:7d:f0:41:f8:ad:51:5a:46:69:af:79:cf:a7:4c:43: 66:d3:fd:8d:a5:37:08:5d:e3:b5:61:b3:a9:af:3b:33:c0:ce: 33:29:4b:8d:38:8a:34:cc:1e:4a:c9:73:1e:c0:02:b3:77:d4: 68:c0:02:b9:96:5c:c8:a3:8d:37:6c:87:08:d2:56:06:42:a7: f5:b1:24:97:d2:04:64:e4:3f:cc:c3:a8:e0:3f:46:17:96:9a: 05:a5:2a:8d:a4:56:c1:a3:43:0b:09:83:9c:e5:83:85:71:76: 8b:b3:ef:44:f7:2e:db:fd:cc:b4:8c:8b:7f:24:c0:bd:45:0c: b7:37:e3:1d:ee:26:82:15:e3:fc:15:36:51:86:df:ad:8b:94: 46:26:ad:13:df:79:a5:0c:9a:64:43:d9:22:b7:3a:2a:c0:26: 8f:ae:e1:60:ec:0c:41:b5:f6:03:1c:69:07:fe:0e:df:1a:61: 5b:47:f4:e3:9b:48:35:03:91:3c:5c:03:75:03:d3:96:c1:af: c4:a6:4f:44:9f:ea:85:26:3a:f2:90:7e:92:ac:18:54:7f:c7: 23:ab:1f:9b:7b:e5:6c:2d:52:85:1e:44:5a:78:05:8a:d6:b8: 4b:a8:87:ae:72:a8:d3:6c:03:46:7b:da:e8:e3:1a:35:ef:31: c4:b0:ac:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPr4k9MBi/f0wggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDllYzIzMDItYzllNy00OWQ4LThmYzgtZGEyNzIxZmZl MmJiMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk Nzk3ZDU4OWMtNzViOC00NGZmLThkMGQtZGVmNjJkYTcwYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj51qC9grfiRQkxuhsx+HA+L/kQAnHz8zc4zE ATXLymXAIig+JmgTvlF/H/gsW5052D7PpA4U4tTYivk++/Hkbdp/3FnAWu4Im+Do siSxcYV4nXyHZ7w1wuuorZHt+1PLhZvBsPqgeWwWA6sCnhPhll+O6//6ZwOd0xY1 ybo+Wzz/AdpFc8yVqC2eCFRFfSJlQhDSVUtCxk3O8Hhva5R3h7fN2VtM/fDFiuEO pX9dBkySHGDaN9yWG+wSgaRaZr8yDP3IqKLCuWnrfG+GB0A/gmmo0D+G4NM+Obrh o67gh4rc8NbWF57BBCK1LCGZoNgmTrwzhc5bdKRe9Z+SaFxxgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUYLHilauwPi4QMXCpj7/IFN5amMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWVj MjMwMi1jOWU3LTQ5ZDgtOGZjOC1kYTI3MjFmZmUyYmIvMzk1MDM3MGUtOGM0MC0z OTVlLWFmZTMtMTdkNjRmZWZkODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDllYzIzMDItYzllNy00OWQ4LThm YzgtZGEyNzIxZmZlMmJiL2Q5ZWMyMzAyLWM5ZTctNDlkOC04ZmM4LWRhMjcyMWZm ZTJiYi5jcmwwHwYDVR0jBBgwFoAU0/PWhM+bD52imKEdmJlh/rvtXRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOWVjMjMwMi1jOWU3LTQ5ZDgtOGZjOC1kYTI3 MjFmZmUyYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjNqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXw0X3wQfitUVpGaa95z6dMQ2bT/Y2lNwhd47Vhs6mvOzPAzjMpS404 ijTMHkrJcx7AArN31GjAArmWXMijjTdshwjSVgZCp/WxJJfSBGTkP8zDqOA/RheW mgWlKo2kVsGjQwsJg5zlg4Vxdouz70T3Ltv9zLSMi38kwL1FDLc34x3uJoIV4/wV NlGG362LlEYmrRPfeaUMmmRD2SK3OirAJo+u4WDsDEG19gMcaQf+Dt8aYVtH9OOb SDUDkTxcA3UD05bBr8SmT0Sf6oUmOvKQfpKsGFR/xyOrH5t75WwtUoUeRFp4BYrW uEuoh65yqNNsA0Z72ujjGjXvMcSwrF4= -----END CERTIFICATE-----Generated at Tue Sep 22 07:43:03 2026 by rpki-client