$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/ca8c306f-89a9-35fc-b355-78f19545a54a.roa File: ca8c306f-89a9-35fc-b355-78f19545a54a.roa (raw, json) Hash identifier: NbKpaBNTh6EnqQY6gIRckK6SKiacEaqsLRkG6B1VNEE= Subject key identifier: 7F:68:07:01:9A:46:0B:D1:7C:EE:58:94:A0:C7:41:87:3B:B9:43:4D Certificate issuer: /CN=72ef9c16-2d45-4e8c-b035-49d30318c10f Certificate serial: 010D0C9F4328584F498A72DE2FFD9AFFACD36B80 Authority key identifier: C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/ca8c306f-89a9-35fc-b355-78f19545a54a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10352 IP address blocks: 66.208.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:72:de:2f:fd:9a:ff:ac:d3:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ef9c16-2d45-4e8c-b035-49d30318c10f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c3a77d72-cd28-458d-a24e-fd2cecf1e0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5e:be:00:ea:fa:dc:fb:83:b7:d2:6c:a8:da: 3b:68:be:98:c1:e8:2f:d0:3e:05:ec:eb:ce:5f:7c: 1c:7e:42:30:2e:6f:27:8a:49:07:f3:ec:41:2e:46: 64:12:d1:db:16:9d:78:94:cd:7c:44:ea:55:c5:73: 9b:63:46:7f:0c:73:3a:e9:ff:33:75:7b:58:d0:40: ea:3b:ae:4f:2a:b8:81:0a:ef:81:1c:7a:70:38:c0: c6:6a:09:a1:17:f8:49:ae:99:1c:c7:5f:4f:fe:70: c0:9a:31:da:c8:65:45:0b:35:0d:60:93:9b:87:d1: ae:6d:67:c9:89:5d:ce:c7:75:82:90:5c:6d:44:7a: f0:1f:06:da:12:56:10:31:6b:18:e2:ef:f8:c4:e6: f2:5f:23:50:3a:68:ed:8c:3d:f1:24:f2:06:50:e3: 1e:50:6e:58:56:d6:71:ba:2f:a8:3a:16:75:cf:d0: 19:4a:55:56:0a:e7:98:1a:75:1c:91:d6:d0:fb:2c: 87:4f:5f:19:30:5d:bc:06:42:ea:61:d1:af:47:05: 4c:13:eb:dd:03:29:03:9e:86:2b:fc:d9:0d:03:d8: b2:88:fb:1b:73:c6:a6:69:31:2c:77:1a:f4:bf:3d: 01:5b:9a:d3:64:9c:b6:8e:5e:0d:18:a7:eb:96:25: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:68:07:01:9A:46:0B:D1:7C:EE:58:94:A0:C7:41:87:3B:B9:43:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/ca8c306f-89a9-35fc-b355-78f19545a54a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.crl X509v3 Authority Key Identifier: keyid:C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer sbgp-ipAddrBlock: critical IPv4: 66.208.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:75:a5:0e:7d:d4:22:d2:c6:3d:5e:60:3c:53:44:d7:0b:5f: 4f:fc:2e:a2:b4:58:75:63:d1:4f:b7:1c:7a:8c:88:58:d7:0a: dc:f6:6d:db:fe:5c:ad:01:2f:fa:d1:6d:03:06:2e:36:b2:1e: a3:d9:19:e7:28:36:32:b3:91:a8:4f:ff:77:6b:92:24:4a:5a: aa:2f:5b:4c:fb:20:e5:3a:5b:d7:9c:05:cd:eb:b2:b9:76:d9: 94:a1:be:17:d4:f0:75:0f:fe:d2:2f:af:e3:ea:f7:cc:b0:6a: 88:7c:7e:25:e4:6b:a9:38:49:82:87:e9:62:4f:ba:a8:0f:69: fd:ea:50:43:2f:31:59:6d:bb:68:46:38:ee:cd:68:8a:2f:5e: 2c:ed:fc:47:86:66:71:81:0f:1f:da:8c:68:c3:1a:83:76:ab: f6:e2:11:e3:1e:f4:7e:6d:d5:93:12:97:ed:2b:57:39:b9:de: b3:cc:c7:76:77:67:b2:5f:af:32:94:90:65:34:25:c9:4f:33: e3:49:82:f5:5b:81:60:ed:32:9c:90:f6:a0:94:92:fa:74:a8: 9c:6f:d3:3d:10:af:e1:66:f5:b6:cb:69:cc:1a:c6:00:c5:10: 80:12:9b:3e:06:0c:d6:39:57:dc:fd:16:e2:59:3f:2e:77:97: 06:5e:73:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JinLeL/2a/6zTa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJlZjljMTYtMmQ0NS00ZThjLWIwMzUtNDlkMzAzMThj MTBmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzNhNzdkNzItY2QyOC00NThkLWEyNGUtZmQyY2VjZjFlMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF6+AOr63PuDt9JsqNo7aL6Ywegv0D4F7OvO X3wcfkIwLm8nikkH8+xBLkZkEtHbFp14lM18ROpVxXObY0Z/DHM66f8zdXtY0EDq O65PKriBCu+BHHpwOMDGagmhF/hJrpkcx19P/nDAmjHayGVFCzUNYJObh9GubWfJ iV3Ox3WCkFxtRHrwHwbaElYQMWsY4u/4xObyXyNQOmjtjD3xJPIGUOMeUG5YVtZx ui+oOhZ1z9AZSlVWCueYGnUckdbQ+yyHT18ZMF28BkLqYdGvRwVME+vdAykDnoYr /NkNA9iyiPsbc8amaTEsdxr0vz0BW5rTZJy2jl4NGKfrliWSvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9oBwGaRgvRfO5YlKDHQYc7uUNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MmVm OWMxNi0yZDQ1LTRlOGMtYjAzNS00OWQzMDMxOGMxMGYvY2E4YzMwNmYtODlhOS0z NWZjLWIzNTUtNzhmMTk1NDVhNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzJlZjljMTYtMmQ0NS00ZThjLWIw MzUtNDlkMzAzMThjMTBmLzcyZWY5YzE2LTJkNDUtNGU4Yy1iMDM1LTQ5ZDMwMzE4 YzEwZi5jcmwwHwYDVR0jBBgwFoAUwJQaHpV5r81TL2aPT9JfY/dqqIgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MmVmOWMxNi0yZDQ1LTRlOGMtYjAzNS00OWQz MDMxOGMxMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQtBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG91pQ591CLSxj1eYDxTRNcLX0/8LqK0WHVj0U+3HHqMiFjXCtz2bdv+ XK0BL/rRbQMGLjayHqPZGecoNjKzkahP/3drkiRKWqovW0z7IOU6W9ecBc3rsrl2 2ZShvhfU8HUP/tIvr+Pq98ywaoh8fiXka6k4SYKH6WJPuqgPaf3qUEMvMVltu2hG OO7NaIovXizt/EeGZnGBDx/ajGjDGoN2q/biEeMe9H5t1ZMSl+0rVzm53rPMx3Z3 Z7JfrzKUkGU0JclPM+NJgvVbgWDtMpyQ9qCUkvp0qJxv0z0Qr+Fm9bbLacwaxgDF EIASmz4GDNY5V9z9FuJZPy53lwZecxc= -----END CERTIFICATE-----Generated at Fri Sep 25 04:27:10 2026 by rpki-client