$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/f7f64d8b-a001-3425-9f98-5958bcdcd9c7.roa File: f7f64d8b-a001-3425-9f98-5958bcdcd9c7.roa (raw, json) Hash identifier: fpP8zGhGDlx+EaYxjaIDDP2O3oM8wM5fSBNt0DKyjIE= Subject key identifier: 97:5C:9C:6A:86:B0:A1:C8:E9:FB:2F:55:7F:DE:47:86:23:82:EB:D8 Certificate issuer: /CN=bf9f591a-d6f6-4cc2-bc84-cfca996b52ee Certificate serial: 010D0C9F4328584F970E2E99257953E4B4D69580 Authority key identifier: 40:01:08:50:32:B9:74:59:61:67:2F:83:02:19:B8:A0:F0:D2:42:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/f7f64d8b-a001-3425-9f98-5958bcdcd9c7.roa Signing time: Thu 22 Oct 2026 20:11:05 +0000 ROA not before: Thu 22 Oct 2026 20:11:05 +0000 ROA not after: Wed 20 Jan 2027 21:11:05 +0000 asID: 13478 IP address blocks: 66.242.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:0e:2e:99:25:79:53:e4:b4:d6:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf9f591a-d6f6-4cc2-bc84-cfca996b52ee Validity Not Before: Oct 22 20:11:05 2026 GMT Not After : Jan 20 21:11:05 2027 GMT Subject: CN=07e7df79-f520-4bbf-b278-79148cf31bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:5e:42:c1:82:08:bc:21:e1:ae:8f:4b:42: d0:29:e4:c9:ee:57:ee:47:b5:5a:a0:96:fa:2d:53: 79:5c:68:b6:e6:75:f4:ab:99:f0:a8:d5:73:02:94: f1:fa:31:06:f4:2b:6a:d1:b9:3c:8b:7e:7e:4e:33: d6:c2:15:f1:0a:64:9e:17:03:28:14:fa:4a:f8:3c: e4:91:e9:f0:65:b6:77:b9:7c:5f:b6:63:c2:9b:12: 6c:db:59:f0:db:4b:a9:59:97:e1:fb:f7:e7:75:85: 3e:0c:d7:ac:84:a2:6f:5b:25:85:1a:91:01:76:86: 2d:c5:61:e2:25:a6:3f:16:3d:67:9c:f3:55:be:5d: a1:4a:1f:96:55:f7:01:34:10:99:40:57:72:f7:2b: e6:88:02:4e:08:79:f3:54:20:ba:55:99:39:0b:f9: 4b:dc:af:98:d9:4a:b9:e8:95:e1:ef:7e:f8:62:81: 06:35:d9:25:58:a5:14:4a:10:24:1c:2f:51:52:86: 60:22:73:fc:f4:bf:c1:32:15:ce:d8:07:f0:93:92: 6f:03:da:fc:17:19:4e:d2:ab:d8:62:48:e8:36:de: ce:16:73:63:31:1f:54:05:75:1b:a0:6d:f6:78:2f: b8:8f:da:48:9e:a8:65:07:4b:9f:19:9e:11:04:ec: c6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5C:9C:6A:86:B0:A1:C8:E9:FB:2F:55:7F:DE:47:86:23:82:EB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/f7f64d8b-a001-3425-9f98-5958bcdcd9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.crl X509v3 Authority Key Identifier: keyid:40:01:08:50:32:B9:74:59:61:67:2F:83:02:19:B8:A0:F0:D2:42:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.cer sbgp-ipAddrBlock: critical IPv4: 66.242.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b8:36:6d:42:72:23:23:e9:15:2e:1b:8f:bc:18:b5:99:5f: c2:ab:c5:cc:51:fe:50:06:72:69:44:11:56:24:58:10:ed:2c: fe:66:49:2a:5c:44:b9:77:29:ea:29:77:d8:42:bb:4d:0e:02: 7a:c9:ee:7b:4f:ee:e6:2e:65:6d:1d:e1:6f:a6:49:6e:d0:9f: 32:14:42:ac:0d:f6:87:1c:31:8d:2f:fe:53:56:9a:9d:13:9a: 1d:19:b7:92:ed:aa:fb:e4:97:98:5a:a9:1d:c9:28:19:0f:93: 6b:4e:d4:39:83:e1:56:bd:a7:a3:00:0b:a1:2e:47:a7:e4:28: 72:e3:2b:cc:bd:78:6f:17:f4:c5:61:d0:d8:f5:8a:c6:4c:6b: 7c:8c:99:60:39:83:d6:87:a4:d0:fc:cc:8c:8f:8d:2c:40:ec: 67:9f:a0:7d:ad:d5:59:e2:4e:84:54:74:6d:9b:8e:2f:29:5e: d4:ef:a5:68:1a:10:6f:48:79:b9:59:a5:61:16:8d:29:01:cf: 14:51:48:01:ca:b9:f5:c5:95:f1:58:0e:17:e5:ab:52:4b:eb: c3:83:c3:cc:54:db:b3:45:d5:5e:92:75:df:ed:30:7d:ef:94: 25:f9:f6:23:07:45:21:64:ea:0c:1e:6d:fe:09:ee:7c:d1:20: 3a:90:7e:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+XDi6ZJXlT5LTWlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY5ZjU5MWEtZDZmNi00Y2MyLWJjODQtY2ZjYTk5NmI1 MmVlMB4XDTI2MTAyMjIwMTEwNVoXDTI3MDEyMDIxMTEwNVowLzEtMCsGA1UEAxMk MDdlN2RmNzktZjUyMC00YmJmLWIyNzgtNzkxNDhjZjMxYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYdeQsGCCLwh4a6PS0LQKeTJ7lfuR7VaoJb6 LVN5XGi25nX0q5nwqNVzApTx+jEG9Ctq0bk8i35+TjPWwhXxCmSeFwMoFPpK+Dzk kenwZbZ3uXxftmPCmxJs21nw20upWZfh+/fndYU+DNeshKJvWyWFGpEBdoYtxWHi JaY/Fj1nnPNVvl2hSh+WVfcBNBCZQFdy9yvmiAJOCHnzVCC6VZk5C/lL3K+Y2Uq5 6JXh7374YoEGNdklWKUUShAkHC9RUoZgInP89L/BMhXO2Afwk5JvA9r8FxlO0qvY YkjoNt7OFnNjMR9UBXUboG32eC+4j9pInqhlB0ufGZ4RBOzGGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdcnGqGsKHI6fsvVX/eR4YjguvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iZjlm NTkxYS1kNmY2LTRjYzItYmM4NC1jZmNhOTk2YjUyZWUvZjdmNjRkOGItYTAwMS0z NDI1LTlmOTgtNTk1OGJjZGNkOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmY5ZjU5MWEtZDZmNi00Y2MyLWJj ODQtY2ZjYTk5NmI1MmVlL2JmOWY1OTFhLWQ2ZjYtNGNjMi1iYzg0LWNmY2E5OTZi NTJlZS5jcmwwHwYDVR0jBBgwFoAUQAEIUDK5dFlhZy+DAhm4oPDSQukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iZjlmNTkxYS1kNmY2LTRjYzItYmM4NC1jZmNh OTk2YjUyZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm4Nm1CciMj6RUuG4+8GLWZX8KrxcxR/lAGcmlEEVYkWBDtLP5mSSpc RLl3Keopd9hCu00OAnrJ7ntP7uYuZW0d4W+mSW7QnzIUQqwN9occMY0v/lNWmp0T mh0Zt5Ltqvvkl5haqR3JKBkPk2tO1DmD4Va9p6MAC6EuR6fkKHLjK8y9eG8X9MVh 0Nj1isZMa3yMmWA5g9aHpND8zIyPjSxA7GefoH2t1VniToRUdG2bji8pXtTvpWga EG9IeblZpWEWjSkBzxRRSAHKufXFlfFYDhflq1JL68ODw8xU27NF1V6Sdd/tMH3v lCX59iMHRSFk6gwebf4J7nzRIDqQfn0= -----END CERTIFICATE-----Generated at Wed Nov 4 11:12:31 2026 by rpki-client