$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/85cbb6c4-4e7c-3203-b6d2-8f575353be1c.roa File: 85cbb6c4-4e7c-3203-b6d2-8f575353be1c.roa (raw, json) Hash identifier: m9yyOY8/Dd23j+yE4HdpCBROQQwlxqgdDyzf/lenH/E= Subject key identifier: 0C:46:78:22:A0:91:C2:60:01:3E:5E:81:02:21:E6:29:DB:DB:06:38 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F2ABD03573C0EB2BC4F513880 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/85cbb6c4-4e7c-3203-b6d2-8f575353be1c.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 16740 IP address blocks: 66.39.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:03:57:3c:0e:b2:bc:4f:51:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=4112ed2b-585a-4f45-a7af-65d5427577c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:25:1f:b3:6c:04:37:2a:bb:fe:69:d5:83: 54:21:67:63:6a:be:a8:d0:71:94:ce:6c:32:b0:79: 71:7a:01:f9:c0:a3:99:71:71:d2:22:a7:a4:36:86: 22:93:d7:cb:bc:8d:b7:d1:7c:71:c8:8e:ca:01:f5: d5:b6:d0:6b:54:71:e3:d8:b7:85:e6:03:34:b8:bf: d2:e1:b5:39:c8:36:3c:c4:8b:cd:1b:b2:cd:1f:55: 7b:e8:5e:8f:66:a6:10:34:06:2f:f4:0c:48:c4:6e: 7a:69:75:37:7f:f5:58:aa:29:03:94:d8:7d:3a:b4: 07:d6:65:70:83:89:36:e8:b2:d9:c7:8f:39:39:ca: 2d:54:ad:aa:1c:da:c0:b8:37:7f:6e:e2:a2:05:f3: 9e:15:d5:7b:82:6d:65:ab:ac:18:96:83:73:2d:15: f2:f1:f8:94:12:82:da:cd:64:5e:f3:d9:b0:c0:3d: dc:81:e7:f7:e8:71:3f:07:32:ed:9c:e5:40:4c:6a: 5b:6e:f9:6f:0a:18:1b:f1:b0:e5:43:2e:ff:8c:18: 10:87:41:28:c7:05:89:f3:f9:01:15:c0:07:14:66: ba:69:5b:06:e3:3e:03:85:40:9c:b1:19:93:e7:6a: e0:00:f1:92:90:e1:45:19:3c:bb:e8:d8:32:35:f3: 00:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:46:78:22:A0:91:C2:60:01:3E:5E:81:02:21:E6:29:DB:DB:06:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/85cbb6c4-4e7c-3203-b6d2-8f575353be1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 66.39.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:5e:e1:ec:3d:2b:88:a1:91:3b:e7:b5:ea:43:64:f3:85:b6: db:04:be:a4:4a:fa:80:ca:b9:e9:01:96:bd:18:ac:33:2e:64: f6:c6:21:47:40:d5:21:08:80:80:07:6b:e9:f4:30:79:51:d5: d4:7f:4d:30:39:85:86:b3:fa:c1:0f:48:d5:d2:d0:c1:35:bc: 5a:78:fd:83:ca:f6:ea:4e:17:cd:3c:8c:78:9c:9e:5b:ea:ee: fd:c8:ff:a5:bd:3f:4a:27:09:e9:61:85:a7:a2:6a:e5:e2:8e: 37:85:f5:12:1d:28:e3:29:7c:fe:fe:36:88:2a:d3:c4:21:15: c5:2f:4a:8e:a1:ce:72:7b:57:6b:fa:8b:1b:16:ec:b6:66:63: 93:fa:cf:de:28:5f:f9:84:dd:ab:70:2b:1e:9a:18:07:99:d4: 4f:ac:0e:26:3d:34:4c:ab:3f:6c:bd:f8:af:0c:64:74:4f:6f: 45:50:40:7a:12:e9:f5:10:0c:aa:c2:75:2c:71:ef:96:9d:e4: f3:f2:2e:6c:50:4d:5f:2a:4a:44:d7:e2:b2:db:a5:b3:85:9c: 9d:69:b1:20:c4:5d:61:34:1e:f1:cd:42:b3:79:5e:41:45:c1: c0:53:20:00:15:b4:64:b7:08:29:a5:b5:7a:85:a2:bc:9d:08: cf:71:a6:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQNXPA6yvE9ROIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NDExMmVkMmItNTg1YS00ZjQ1LWE3YWYtNjVkNTQyNzU3N2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7MlH7NsBDcqu/5p1YNUIWdjar6o0HGUzmwy sHlxegH5wKOZcXHSIqekNoYik9fLvI230XxxyI7KAfXVttBrVHHj2LeF5gM0uL/S 4bU5yDY8xIvNG7LNH1V76F6PZqYQNAYv9AxIxG56aXU3f/VYqikDlNh9OrQH1mVw g4k26LLZx485OcotVK2qHNrAuDd/buKiBfOeFdV7gm1lq6wYloNzLRXy8fiUEoLa zWRe89mwwD3cgef36HE/BzLtnOVATGpbbvlvChgb8bDlQy7/jBgQh0EoxwWJ8/kB FcAHFGa6aVsG4z4DhUCcsRmT52rgAPGSkOFFGTy76NgyNfMAvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxGeCKgkcJgAT5egQIh5inb2wY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvODVjYmI2YzQtNGU3Yy0z MjAzLWI2ZDItOGY1NzUzNTNiZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQifWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZe4ew9K4ihkTvntepDZPOFttsEvqRK+oDKuekBlr0YrDMuZPbGIUdA 1SEIgIAHa+n0MHlR1dR/TTA5hYaz+sEPSNXS0ME1vFp4/YPK9upOF808jHicnlvq 7v3I/6W9P0onCelhhaeiauXijjeF9RIdKOMpfP7+Nogq08QhFcUvSo6hznJ7V2v6 ixsW7LZmY5P6z94oX/mE3atwKx6aGAeZ1E+sDiY9NEyrP2y9+K8MZHRPb0VQQHoS 6fUQDKrCdSxx75ad5PPyLmxQTV8qSkTX4rLbpbOFnJ1psSDEXWE0HvHNQrN5XkFF wcBTIAAVtGS3CCmltXqForydCM9xpjk= -----END CERTIFICATE-----Generated at Tue Sep 22 10:20:49 2026 by rpki-client