$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/00faed4a-e010-3681-a985-9fec4d69a99c.roa File: 00faed4a-e010-3681-a985-9fec4d69a99c.roa (raw, json) Hash identifier: omI7WTgsoEdp94uTMTrAOPTU83qoCKFvuhYgyKz6j7g= Subject key identifier: 6D:07:63:4E:7E:B3:18:29:ED:8E:70:8B:C2:66:AA:23:FA:57:FE:C6 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584F8F3DB51A8F52C3B43B915459 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/00faed4a-e010-3681-a985-9fec4d69a99c.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 22843 IP address blocks: 66.159.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b5:1a:8f:52:c3:b4:3b:91:54:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=ab974198-92ff-4762-93dd-1636e1ecb260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:18:05:93:91:e6:11:91:6c:e4:e4:cb:81:fb: f5:5b:d2:f8:87:b7:8a:bc:1e:79:d9:b5:bf:28:96: 6b:e5:81:37:8b:d0:bc:f2:bb:a7:9c:e7:cd:8f:b2: 37:fa:2a:25:71:87:eb:aa:54:83:1b:25:2c:51:33: 55:ba:e4:5d:63:2c:a1:44:35:46:14:e7:94:b2:78: f2:ee:62:eb:9e:9f:bc:38:1e:8f:9a:02:ef:ff:c5: cb:55:5f:59:dd:2c:a1:1e:9a:c1:bf:0b:d4:dd:7e: 6e:52:11:ee:12:01:7d:fd:c3:37:d2:82:0b:68:72: 23:44:82:13:bf:53:d3:97:6f:80:12:ff:7f:1b:da: 35:f2:13:b5:90:bd:29:2d:0b:15:37:9e:86:ac:f9: 01:c7:9a:89:d4:18:a7:a0:50:40:27:6c:51:1b:0a: b6:5b:4c:ff:4f:0e:a3:ad:77:eb:cb:3a:34:ad:34: fa:a2:80:ec:b9:d5:03:8c:18:20:04:4b:b4:78:38: db:cf:fe:67:7c:2f:dc:4b:20:f9:34:e5:17:12:ec: 6b:de:12:ba:88:02:f3:79:12:f2:d3:07:6e:ac:0f: 24:da:ae:8d:83:28:e7:a2:20:97:53:cb:bb:a6:32: b5:62:f8:3f:18:db:41:48:9e:37:5d:59:11:86:5a: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:07:63:4E:7E:B3:18:29:ED:8E:70:8B:C2:66:AA:23:FA:57:FE:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/00faed4a-e010-3681-a985-9fec4d69a99c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 66.159.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:1b:8d:98:22:53:59:76:cb:38:c5:0f:80:78:5a:c3:af:a2: 95:b4:b8:9b:6a:e1:e9:80:0c:f2:b2:2b:51:dd:46:4e:e7:02: 59:d8:2e:a0:5f:1a:75:e6:fe:e3:ea:e6:1a:66:6b:30:33:78: 99:57:17:08:6f:ac:bd:d3:15:f3:b8:b0:64:fa:fe:f0:0b:40: f3:99:4f:fe:12:72:8c:30:83:dc:e5:0c:a5:5e:c5:0f:7c:04: 0f:a9:fe:c7:ed:a1:31:0f:33:17:de:ab:c8:97:28:9d:0e:44: c7:cf:f3:04:ac:37:56:40:85:9c:9f:d1:c9:f0:83:61:9c:68: a6:1e:60:18:23:f5:58:93:af:e7:5b:49:59:93:2a:f6:b3:80: 45:f7:22:ec:49:0e:ca:90:7d:ac:0d:7d:25:88:1e:ec:7e:c3: ed:10:e0:bd:bb:6b:24:1f:bc:43:23:cf:80:0c:40:7b:f0:24: 88:be:2b:8d:0d:84:9a:ea:19:8c:70:71:3f:c7:fd:57:27:68: 38:e9:b7:f4:2a:12:96:3b:97:0b:c3:29:40:cb:cc:1c:6c:06: d3:9c:0d:82:43:39:b4:4a:3e:da:0d:06:82:4e:83:c2:6a:df: eb:51:63:cb:67:38:d5:25:a7:9d:df:af:6f:f6:fb:74:fd:30: f4:82:72:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbUaj1LDtDuRVFkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YWI5NzQxOTgtOTJmZi00NzYyLTkzZGQtMTYzNmUxZWNiMjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RgFk5HmEZFs5OTLgfv1W9L4h7eKvB552bW/ KJZr5YE3i9C88runnOfNj7I3+iolcYfrqlSDGyUsUTNVuuRdYyyhRDVGFOeUsnjy 7mLrnp+8OB6PmgLv/8XLVV9Z3SyhHprBvwvU3X5uUhHuEgF9/cM30oILaHIjRIIT v1PTl2+AEv9/G9o18hO1kL0pLQsVN56GrPkBx5qJ1BinoFBAJ2xRGwq2W0z/Tw6j rXfryzo0rTT6ooDsudUDjBggBEu0eDjbz/5nfC/cSyD5NOUXEuxr3hK6iALzeRLy 0wdurA8k2q6NgyjnoiCXU8u7pjK1Yvg/GNtBSJ43XVkRhloOzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0HY05+sxgp7Y5wi8JmqiP6V/7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvMDBmYWVkNGEtZTAxMC0z NjgxLWE5ODUtOWZlYzRkNjlhOTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQp/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4bjZgiU1l2yzjFD4B4WsOvopW0uJtq4emADPKyK1HdRk7nAlnYLqBf GnXm/uPq5hpmazAzeJlXFwhvrL3TFfO4sGT6/vALQPOZT/4Scowwg9zlDKVexQ98 BA+p/sftoTEPMxfeq8iXKJ0ORMfP8wSsN1ZAhZyf0cnwg2GcaKYeYBgj9ViTr+db SVmTKvazgEX3IuxJDsqQfawNfSWIHux+w+0Q4L27ayQfvEMjz4AMQHvwJIi+K40N hJrqGYxwcT/H/VcnaDjpt/QqEpY7lwvDKUDLzBxsBtOcDYJDObRKPtoNBoJOg8Jq 3+tRY8tnONUlp53fr2/2+3T9MPSCctE= -----END CERTIFICATE-----Generated at Wed Oct 28 08:46:24 2026 by rpki-client