$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/1576933c-c5ab-3379-be69-048ef80ea2e1.roa File: 1576933c-c5ab-3379-be69-048ef80ea2e1.roa (raw, json) Hash identifier: N4XKyoAxyYXbgk2nW2n1Y+LYXPhDPjv8hC/ysnNrYLM= Subject key identifier: 14:C4:2F:1A:15:1D:AC:A1:3E:E0:88:6A:E8:50:93:97:57:5E:4B:B0 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F2ABD033B91E9CD615F1C4980 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/1576933c-c5ab-3379-be69-048ef80ea2e1.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 16740 IP address blocks: 66.39.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:03:3b:91:e9:cd:61:5f:1c:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=a297d30b-e1cc-454c-9d44-378cd3680c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ee:18:4f:4d:38:bc:29:e6:70:88:95:9e:fe: 6f:0f:62:73:2d:81:e5:cc:dc:1c:1f:8a:89:30:36: 4d:4d:d1:6d:f5:e5:89:14:23:8f:6f:42:f4:22:d2: 74:52:97:2b:d9:8b:e6:a1:7b:d1:cd:11:cc:41:b9: 72:92:bb:fc:98:ec:2d:7b:3e:04:79:a9:70:99:6e: 18:28:a1:94:de:1c:7c:1e:b4:44:bf:ff:de:de:a5: 41:24:47:5b:cc:8f:d9:b0:86:79:b2:5e:bb:a6:35: 3b:ab:e6:07:6c:b0:c3:50:08:16:01:6c:55:cc:ec: ed:a2:10:0b:d9:3c:9d:f0:84:17:f2:75:0e:57:b5: 18:67:17:11:c8:b4:05:ff:93:ab:18:05:c6:0b:e5: d6:16:de:15:85:e3:5b:d0:a2:ac:44:25:28:f3:c3: 2e:61:3c:7b:89:62:c4:b3:23:88:ba:e4:24:53:d6: 4d:51:9c:e3:a0:10:dd:5f:52:de:c7:3a:3b:16:5f: e1:1a:1d:fb:52:8d:8c:e7:ba:89:aa:89:46:81:0e: 95:84:7f:6d:af:f5:3b:6c:26:11:d0:04:e7:5f:59: 1a:d7:b9:8e:fb:a8:ef:c8:a3:17:64:e6:05:8f:ca: cf:7f:78:75:c5:b9:5e:2b:30:96:e8:5b:69:c7:57: a2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C4:2F:1A:15:1D:AC:A1:3E:E0:88:6A:E8:50:93:97:57:5E:4B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/1576933c-c5ab-3379-be69-048ef80ea2e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 66.39.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:bf:f8:3e:dc:39:fc:3f:5d:a8:5d:f3:a8:e4:72:b1:ca:6d: 01:6f:5d:7f:12:a1:e7:90:d3:38:10:f4:07:c1:2e:c6:4b:31: ec:ea:77:10:9f:1b:5c:61:db:57:df:bb:f6:e6:0b:72:44:a9: 24:7c:51:af:14:2f:4d:7e:7d:fa:51:4b:bd:4d:55:72:b8:f6: 0c:97:5c:b6:f4:99:c1:6c:cb:a3:57:33:dd:af:26:7c:05:0e: 04:cd:aa:97:3a:da:54:de:31:ce:2d:fc:46:8f:ca:be:6c:39: 28:f4:4d:1a:3e:b3:88:9e:6f:48:95:72:18:75:6c:7f:8d:04: 09:64:83:80:5d:79:53:57:f1:7b:65:36:db:52:67:38:9c:78: a1:26:b1:29:24:76:9f:49:c8:ca:ec:2f:3a:e4:80:5e:18:4f: 98:33:43:b1:77:01:b8:7a:31:6c:2f:fb:ae:68:6c:cc:6d:8f: 3b:cd:45:fb:7a:aa:2b:22:af:ed:29:61:49:26:4f:34:3c:d6: ab:ed:d6:b9:fc:24:f5:40:ba:8b:b4:7d:0e:f8:8b:d1:da:87: 95:b7:7b:ac:aa:52:9e:bc:73:fa:df:d0:be:cc:aa:34:bc:09: de:a6:4d:8e:10:0c:a4:1e:6d:0e:d0:bd:43:5b:64:5e:fa:d7: 13:43:5a:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQM7kenNYV8cSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YTI5N2QzMGItZTFjYy00NTRjLTlkNDQtMzc4Y2QzNjgwYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe4YT004vCnmcIiVnv5vD2JzLYHlzNwcH4qJ MDZNTdFt9eWJFCOPb0L0ItJ0Upcr2YvmoXvRzRHMQblykrv8mOwtez4EealwmW4Y KKGU3hx8HrREv//e3qVBJEdbzI/ZsIZ5sl67pjU7q+YHbLDDUAgWAWxVzOztohAL 2Tyd8IQX8nUOV7UYZxcRyLQF/5OrGAXGC+XWFt4VheNb0KKsRCUo88MuYTx7iWLE syOIuuQkU9ZNUZzjoBDdX1Lexzo7Fl/hGh37Uo2M57qJqolGgQ6VhH9tr/U7bCYR 0ATnX1ka17mO+6jvyKMXZOYFj8rPf3h1xbleKzCW6Ftpx1eiWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTELxoVHayhPuCIauhQk5dXXkuwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMTU3NjkzM2MtYzVhYi0z Mzc5LWJlNjktMDQ4ZWY4MGVhMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQifTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW/+D7cOfw/Xahd86jkcrHKbQFvXX8SoeeQ0zgQ9AfBLsZLMezqdxCf G1xh21ffu/bmC3JEqSR8Ua8UL01+ffpRS71NVXK49gyXXLb0mcFsy6NXM92vJnwF DgTNqpc62lTeMc4t/EaPyr5sOSj0TRo+s4ieb0iVchh1bH+NBAlkg4BdeVNX8Xtl NttSZziceKEmsSkkdp9JyMrsLzrkgF4YT5gzQ7F3Abh6MWwv+65obMxtjzvNRft6 qisir+0pYUkmTzQ81qvt1rn8JPVAuou0fQ74i9Hah5W3e6yqUp68c/rf0L7MqjS8 Cd6mTY4QDKQebQ7QvUNbZF761xNDWrc= -----END CERTIFICATE-----Generated at Tue Sep 22 18:11:16 2026 by rpki-client