$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f605a850-6882-3ff4-8e5a-22633ce98113.roa File: f605a850-6882-3ff4-8e5a-22633ce98113.roa (raw, json) Hash identifier: euzsWruDVFcaAT0ubs3r7SmopA6qBoScAoQd62p5psY= Subject key identifier: 47:F3:FE:EF:92:F3:F2:34:66:0F:FF:02:2F:3D:12:F2:99:D6:0E:CB Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F15CCEB62119661A6DEF42E80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f605a850-6882-3ff4-8e5a-22633ce98113.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 402159 IP address blocks: 66.128.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:eb:62:11:96:61:a6:de:f4:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=a3c2945e-e716-41eb-b16e-81ba4247120d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:11:53:e2:d0:12:91:b4:df:8c:2d:57:d4:4f: de:18:af:89:44:a0:e5:66:0c:3b:0a:96:b4:b2:53: 74:26:69:80:83:23:c3:96:d3:a1:ff:a3:12:0a:72: 08:0c:cd:65:87:0d:32:6a:d1:fd:0a:71:dc:9e:b7: 5a:a9:e6:29:5a:51:00:02:34:31:67:b4:af:a0:ab: 6e:bf:33:40:5f:9c:e9:5f:f7:59:0a:9b:fc:b1:88: da:5c:67:a3:7a:14:d3:13:27:32:89:00:f1:b3:f5: 7e:34:78:66:f2:00:76:46:8f:47:02:ea:f5:0e:c1: 0d:d9:08:31:42:73:24:bf:85:0d:ac:46:37:7c:c6: 05:84:73:fc:73:fe:97:f9:8b:f9:71:ff:9c:5f:60: c7:a8:ed:91:30:50:b8:eb:09:5d:4b:a1:44:b3:68: 1e:6d:91:1c:69:e5:3f:11:7e:c1:b6:f6:1f:be:8f: 33:60:7d:27:d2:21:8e:c1:ce:c5:a2:93:e6:b8:2a: ac:96:68:90:d3:16:17:a4:37:b1:22:fd:35:3e:3c: e3:e3:ef:67:60:02:9b:ab:b0:0a:7b:22:4f:35:18: 8d:11:69:fa:f9:69:65:f1:e9:c0:98:30:7e:5f:35: 06:35:4d:a8:8c:e7:b8:fd:ab:01:41:35:a0:96:b4: e3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F3:FE:EF:92:F3:F2:34:66:0F:FF:02:2F:3D:12:F2:99:D6:0E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f605a850-6882-3ff4-8e5a-22633ce98113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:a3:9d:cd:03:a6:1c:f7:3f:f2:ca:6d:94:dd:cf:76:6c:37: c1:53:61:c4:ae:da:2a:12:41:8c:4a:3c:3a:1a:cd:f5:52:9f: 28:88:da:80:80:69:20:26:0c:d6:8f:b2:f2:f8:16:c4:b0:f9: 99:73:4c:d4:0e:80:c3:ae:5b:7a:b0:38:48:cd:61:c2:7c:6b: 87:09:ab:25:dc:3b:7f:65:b4:f6:e3:2f:01:01:29:2e:be:83: 09:9a:85:99:bf:92:ad:6a:c2:a7:ba:75:66:1e:94:7c:37:0a: 18:cd:ee:fb:48:e6:87:a7:43:a8:78:70:39:21:20:00:80:a0: 7f:9b:53:ab:40:0f:5f:f3:fd:8e:96:8b:87:06:8c:9e:08:56: 51:39:5f:9b:3a:0a:9f:2f:f1:aa:a4:63:eb:c6:11:1e:f0:13: 10:e2:c0:63:13:cf:1c:58:e5:9c:67:82:0c:89:43:bc:a2:2e: 23:45:25:d1:6a:ed:d4:d1:d3:d2:09:03:3f:98:32:df:71:f7: 41:44:25:38:7a:35:f0:58:14:32:90:e6:da:b3:cb:f0:36:fa: 98:19:40:a7:1f:bf:10:65:f9:2a:1e:aa:2f:84:47:20:b4:35: 2d:fb:be:dc:49:9a:7b:ec:7d:9b:24:92:98:53:0f:86:5b:35: 9f:c9:66:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOtiEZZhpt70LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YTNjMjk0NWUtZTcxNi00MWViLWIxNmUtODFiYTQyNDcxMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BFT4tASkbTfjC1X1E/eGK+JRKDlZgw7Cpa0 slN0JmmAgyPDltOh/6MSCnIIDM1lhw0yatH9CnHcnrdaqeYpWlEAAjQxZ7SvoKtu vzNAX5zpX/dZCpv8sYjaXGejehTTEycyiQDxs/V+NHhm8gB2Ro9HAur1DsEN2Qgx QnMkv4UNrEY3fMYFhHP8c/6X+Yv5cf+cX2DHqO2RMFC46wldS6FEs2gebZEcaeU/ EX7BtvYfvo8zYH0n0iGOwc7FopPmuCqslmiQ0xYXpDexIv01Pjzj4+9nYAKbq7AK eyJPNRiNEWn6+Wll8enAmDB+XzUGNU2ojOe4/asBQTWglrTjKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfz/u+S8/I0Zg//Ai89EvKZ1g7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjYwNWE4NTAtNjg4Mi0z ZmY0LThlNWEtMjI2MzNjZTk4MTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCjnc0Dphz3P/LKbZTdz3ZsN8FTYcSu2ioSQYxKPDoazfVSnyiI2oCA aSAmDNaPsvL4FsSw+ZlzTNQOgMOuW3qwOEjNYcJ8a4cJqyXcO39ltPbjLwEBKS6+ gwmahZm/kq1qwqe6dWYelHw3ChjN7vtI5oenQ6h4cDkhIACAoH+bU6tAD1/z/Y6W i4cGjJ4IVlE5X5s6Cp8v8aqkY+vGER7wExDiwGMTzxxY5ZxnggyJQ7yiLiNFJdFq 7dTR09IJAz+YMt9x90FEJTh6NfBYFDKQ5tqzy/A2+pgZQKcfvxBl+Soeqi+ERyC0 NS37vtxJmnvsfZskkphTD4ZbNZ/JZio= -----END CERTIFICATE-----Generated at Sun Sep 20 12:30:30 2026 by rpki-client