$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf47b5bc-74bf-32f2-a40f-7076818a6d08.roa File: cf47b5bc-74bf-32f2-a40f-7076818a6d08.roa (raw, json) Hash identifier: KArBblzxpCrhRO4dAQknkTZcNE5AQamEfAV1Dh9Zr7Y= Subject key identifier: 15:C9:EC:91:0A:D5:A9:B1:F1:AE:20:5E:23:6C:52:C9:5B:1A:9D:F5 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584FB241067A662576B83DCA0C80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf47b5bc-74bf-32f2-a40f-7076818a6d08.roa Signing time: Sun 01 Nov 2026 14:00:13 +0000 ROA not before: Sun 01 Nov 2026 14:00:13 +0000 ROA not after: Sat 30 Jan 2027 14:00:13 +0000 asID: 16276 IP address blocks: 166.0.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:41:06:7a:66:25:76:b8:3d:ca:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 1 14:00:13 2026 GMT Not After : Jan 30 14:00:13 2027 GMT Subject: CN=a2f506ea-4381-4c67-921b-6c0be94bdd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:82:d4:20:52:79:8d:fb:c4:25:76:ad:ca:4a: 8f:11:c9:45:36:3a:74:4a:10:ce:b1:e0:47:07:bd: 01:98:8b:f5:12:4b:5d:7f:7b:be:21:57:de:cc:e9: d5:7c:c7:aa:62:6c:f3:79:d2:20:3e:cf:4b:78:69: 40:e4:45:45:76:e7:e6:86:f2:7b:60:3c:84:74:4d: 0e:1a:87:e2:96:fb:b6:75:e9:4a:85:3b:48:bb:34: 58:0f:4f:a0:9b:8e:04:0a:62:7f:cb:2b:06:7f:65: 26:20:fb:2d:03:f3:fc:64:74:23:bd:1c:51:4f:38: f0:4d:d9:3a:92:f9:22:03:19:75:b9:02:61:09:39: f4:d0:31:a9:93:4f:b9:c1:43:79:39:93:dc:97:7d: 05:7f:f1:ec:b7:e7:3a:ec:2f:da:80:ac:55:9e:8b: a4:b5:3e:b4:a1:17:af:27:ac:e9:91:85:96:32:ec: 1e:19:b8:be:98:8d:f2:24:8b:f0:85:71:a5:0b:e8: fe:57:7a:5e:a4:5a:70:74:44:49:d1:66:6b:76:f6: 3a:73:bb:3f:17:7c:6e:00:93:ed:a5:8b:58:2a:85: 0d:85:98:d5:bb:6e:30:1c:a9:70:b6:f7:51:eb:2b: 23:39:86:89:0d:df:f7:d4:b2:96:8a:2f:8d:59:0a: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C9:EC:91:0A:D5:A9:B1:F1:AE:20:5E:23:6C:52:C9:5B:1A:9D:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf47b5bc-74bf-32f2-a40f-7076818a6d08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:67:a3:b7:80:d8:95:90:81:1a:9b:6e:c3:f3:ac:06:4b:e2: cb:88:b2:ad:a2:2f:5a:a2:02:c5:7f:3c:26:80:a4:3c:74:7c: 88:cb:20:b8:60:7b:4f:f5:01:b1:f0:cf:a4:e5:c5:5c:0a:6b: 4d:e2:69:09:91:ad:98:be:8b:69:b8:c0:54:57:a6:8a:c7:90: 9b:41:1a:cb:88:08:f9:af:31:1a:9d:b2:16:82:01:e3:1d:f6: 0f:f7:90:85:af:a5:31:01:0f:89:00:07:04:4b:cd:10:15:5f: e2:8c:75:f0:1e:0e:6d:59:cc:ea:80:6e:9b:57:60:0f:0f:22: d0:c2:4d:1f:b2:bc:1f:b8:b7:c1:2c:8a:50:12:9a:4c:72:38: 2c:ca:82:1d:75:63:b4:f8:8d:37:be:45:ee:bd:f5:78:2c:e9: fd:ab:e4:4d:f8:54:57:d8:d4:2b:31:b7:a8:cc:d6:01:49:81: 2b:32:76:75:e7:8c:33:10:42:ab:46:e1:e9:ec:2d:07:b6:ad: 65:62:45:8d:13:27:44:b5:9f:5d:f1:dd:60:2b:30:e5:98:0c: 11:7c:be:2f:a3:37:79:1d:96:2d:bc:f6:1d:8f:f8:1f:3f:b9: aa:26:10:c8:0e:20:64:c9:40:6b:0c:29:eb:0a:65:6e:61:12: ee:c2:3a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+yQQZ6ZiV2uD3KDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MTEwMTE0MDAxM1oXDTI3MDEzMDE0MDAxM1owLzEtMCsGA1UEAxMk YTJmNTA2ZWEtNDM4MS00YzY3LTkyMWItNmMwYmU5NGJkZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYLUIFJ5jfvEJXatykqPEclFNjp0ShDOseBH B70BmIv1Ektdf3u+IVfezOnVfMeqYmzzedIgPs9LeGlA5EVFdufmhvJ7YDyEdE0O Gofilvu2delKhTtIuzRYD0+gm44ECmJ/yysGf2UmIPstA/P8ZHQjvRxRTzjwTdk6 kvkiAxl1uQJhCTn00DGpk0+5wUN5OZPcl30Ff/Hst+c67C/agKxVnouktT60oRev J6zpkYWWMuweGbi+mI3yJIvwhXGlC+j+V3pepFpwdERJ0WZrdvY6c7s/F3xuAJPt pYtYKoUNhZjVu24wHKlwtvdR6ysjOYaJDd/31LKWii+NWQoOvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXJ7JEK1amx8a4gXiNsUslbGp31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2Y0N2I1YmMtNzRiZi0z MmYyLWE0MGYtNzA3NjgxOGE2ZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5no7eA2JWQgRqbbsPzrAZL4suIsq2iL1qiAsV/PCaApDx0fIjLILhg e0/1AbHwz6TlxVwKa03iaQmRrZi+i2m4wFRXporHkJtBGsuICPmvMRqdshaCAeMd 9g/3kIWvpTEBD4kABwRLzRAVX+KMdfAeDm1ZzOqAbptXYA8PItDCTR+yvB+4t8Es ilASmkxyOCzKgh11Y7T4jTe+Re699Xgs6f2r5E34VFfY1Csxt6jM1gFJgSsydnXn jDMQQqtG4ensLQe2rWViRY0TJ0S1n13x3WArMOWYDBF8vi+jN3kdli289h2P+B8/ uaomEMgOIGTJQGsMKesKZW5hEu7COiA= -----END CERTIFICATE-----Generated at Mon Nov 2 18:11:05 2026 by rpki-client