$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/c09c5198-1f5a-3969-84df-5ab660b7c938.roa File: c09c5198-1f5a-3969-84df-5ab660b7c938.roa (raw, json) Hash identifier: l4EX4ZG/G9hvl/+wvtsJs1TKfK+uu+lmDElE6vrdzVM= Subject key identifier: 49:DF:47:D5:B3:8C:46:89:00:69:EC:53:87:68:E3:C3:D2:5C:6F:4C Certificate issuer: /CN=656bb562-ba73-4cab-b885-ab843b4308c4 Certificate serial: 010D0C9F4328584F4973AC7449CCDB964C6CBE00 Authority key identifier: 33:80:9E:78:51:88:CD:E8:F5:1C:8F:C4:EB:93:46:C8:68:50:89:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/c09c5198-1f5a-3969-84df-5ab660b7c938.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 66.51.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ac:74:49:cc:db:96:4c:6c:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656bb562-ba73-4cab-b885-ab843b4308c4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=69ad8106-5d6e-49d2-971f-268730f656bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:ef:a4:8e:fb:71:03:7a:e0:7f:7c:4b:fc: 5a:83:fc:18:d2:f5:67:af:1c:6e:5f:f0:46:db:77: a3:dc:26:e6:9f:16:09:4b:71:16:4b:db:72:34:d3: 48:6d:02:c5:04:cf:79:04:f0:80:b1:76:6b:2a:5f: 5b:44:16:49:39:16:dd:56:d7:78:fb:c7:15:7e:56: 34:ad:a9:d3:49:2c:54:7e:5f:6e:4d:74:ae:ce:a6: 40:60:bf:29:00:5b:c8:bb:f4:ab:dc:a8:bb:82:83: 66:12:72:e2:fa:71:dc:90:d9:17:52:07:a2:54:a1: c8:d0:26:e8:cc:cf:d1:61:4d:16:d7:3f:c6:aa:79: 34:53:ef:92:36:6c:17:5b:b5:6e:82:c8:9e:4d:fe: d6:d9:4d:f8:47:36:51:ba:be:48:e9:e1:1f:0e:df: 89:93:5c:8b:b8:f9:44:4b:c0:cc:9d:d8:08:3e:82: 5e:33:71:e5:70:4f:07:79:83:c7:1f:ed:20:5c:81: 36:16:20:25:f3:bf:d4:a5:0a:a9:54:02:14:ce:a4: 62:df:00:c3:7f:b5:29:f1:c7:8c:0f:1c:9e:1c:9a: 73:65:81:ad:09:f3:91:a8:b4:0e:aa:ce:97:8d:7e: 19:7d:a4:73:db:6f:26:a6:2a:5d:5e:65:72:73:25: 0c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DF:47:D5:B3:8C:46:89:00:69:EC:53:87:68:E3:C3:D2:5C:6F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/c09c5198-1f5a-3969-84df-5ab660b7c938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.crl X509v3 Authority Key Identifier: keyid:33:80:9E:78:51:88:CD:E8:F5:1C:8F:C4:EB:93:46:C8:68:50:89:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer sbgp-ipAddrBlock: critical IPv4: 66.51.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:23:79:fc:6f:17:ff:30:d9:8c:ff:f7:aa:9e:da:b8:6a:a6: 42:f6:76:be:6f:c7:b8:96:9d:2c:31:eb:ec:a7:75:8b:3d:8f: ce:0f:28:41:bc:3e:90:67:cc:30:24:71:72:75:eb:b4:6a:11: 68:51:b9:f4:cc:33:96:92:3b:c4:a3:94:d5:c7:ec:1b:c3:4a: f9:4d:60:4f:c6:56:17:34:78:37:fa:b6:d9:7d:3b:53:52:44: 2a:74:b4:35:37:e8:7b:62:71:92:51:4e:a5:af:30:4e:21:40: 06:02:4a:c9:c9:4f:51:35:84:43:9c:65:62:57:cd:4c:95:7c: 3a:37:3c:72:19:b1:21:0f:01:c0:15:b2:af:04:07:b9:c7:a6: b6:01:3d:28:d7:e6:ed:9f:d1:6e:ad:78:35:6e:f6:d1:61:c6: 75:3a:fa:36:99:56:05:5b:7d:ae:41:32:25:d4:52:3f:7a:9c: df:9a:f3:01:83:21:4e:1c:3f:4f:8d:be:6e:f6:8d:cf:43:cd: 36:49:41:a5:34:b7:1d:85:e4:74:a3:65:7c:1b:e1:86:a7:ff: 58:d4:4a:0c:dd:ea:0a:10:54:d3:46:44:16:7e:4c:04:ff:5b: 25:b2:af:61:45:4c:a5:04:50:56:2e:ef:4b:f4:59:9a:11:ee: 2d:c0:a7:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6x0SczblkxsvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU2YmI1NjItYmE3My00Y2FiLWI4ODUtYWI4NDNiNDMw OGM0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjlhZDgxMDYtNWQ2ZS00OWQyLTk3MWYtMjY4NzMwZjY1NmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrfvpI77cQN64H98S/xag/wY0vVnrxxuX/BG 23ej3CbmnxYJS3EWS9tyNNNIbQLFBM95BPCAsXZrKl9bRBZJORbdVtd4+8cVflY0 ranTSSxUfl9uTXSuzqZAYL8pAFvIu/Sr3Ki7goNmEnLi+nHckNkXUgeiVKHI0Cbo zM/RYU0W1z/Gqnk0U++SNmwXW7VugsieTf7W2U34RzZRur5I6eEfDt+Jk1yLuPlE S8DMndgIPoJeM3HlcE8HeYPHH+0gXIE2FiAl87/UpQqpVAIUzqRi3wDDf7Up8ceM DxyeHJpzZYGtCfORqLQOqs6XjX4ZfaRz228mpipdXmVycyUMPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnfR9WzjEaJAGnsU4do48PSXG9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTZi YjU2Mi1iYTczLTRjYWItYjg4NS1hYjg0M2I0MzA4YzQvYzA5YzUxOTgtMWY1YS0z OTY5LTg0ZGYtNWFiNjYwYjdjOTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU2YmI1NjItYmE3My00Y2FiLWI4 ODUtYWI4NDNiNDMwOGM0LzY1NmJiNTYyLWJhNzMtNGNhYi1iODg1LWFiODQzYjQz MDhjNC5jcmwwHwYDVR0jBBgwFoAUM4CeeFGIzej1HI/E65NGyGhQiekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTZiYjU2Mi1iYTczLTRjYWItYjg4NS1hYjg0 M2I0MzA4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQjPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKojefxvF/8w2Yz/96qe2rhqpkL2dr5vx7iWnSwx6+yndYs9j84PKEG8 PpBnzDAkcXJ167RqEWhRufTMM5aSO8SjlNXH7BvDSvlNYE/GVhc0eDf6ttl9O1NS RCp0tDU36HticZJRTqWvME4hQAYCSsnJT1E1hEOcZWJXzUyVfDo3PHIZsSEPAcAV sq8EB7nHprYBPSjX5u2f0W6teDVu9tFhxnU6+jaZVgVbfa5BMiXUUj96nN+a8wGD IU4cP0+Nvm72jc9DzTZJQaU0tx2F5HSjZXwb4Yan/1jUSgzd6goQVNNGRBZ+TAT/ WyWyr2FFTKUEUFYu70v0WZoR7i3Ap1k= -----END CERTIFICATE-----Generated at Tue Oct 6 20:59:41 2026 by rpki-client