$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa File: d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa (raw, json) Hash identifier: 7k3M75So1XS75TsodGuq+JmYz+PAA1qY9NoSUogdP8k= Subject key identifier: B1:09:1B:9D:CC:E4:21:06:AC:3D:CF:FE:36:48:7C:13:C4:A2:99:84 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584F63F815188A2C69999D959600 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 51964 IP address blocks: 66.112.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:15:18:8a:2c:69:99:9d:95:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=75eb56f8-edef-4e7a-8959-6e04d93e0fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:31:51:7b:55:5e:2e:a1:6f:b9:91:36:71: 8a:ab:9e:55:76:a3:e9:25:4b:9e:8f:41:c7:fa:3a: d9:f2:73:a7:64:ad:e5:9c:a1:42:75:8b:c7:34:7a: c6:1d:42:01:33:38:a8:c7:a6:ce:55:fe:58:d9:f1: 01:b3:e5:b8:8b:a1:07:0d:0a:85:39:4c:af:5f:4d: a5:0d:bd:22:38:68:c7:10:24:3b:76:51:fc:f5:93: 99:aa:4f:76:d8:ba:09:cb:14:ed:6a:51:1a:b6:02: a0:1f:2a:05:12:f1:30:c4:ca:2e:4a:c5:26:da:47: b6:c9:5d:c9:b1:b9:1a:e2:f1:4f:42:a9:fb:ab:96: 3d:0e:fb:ec:81:5c:0c:7b:1a:83:32:48:c7:77:be: 47:91:66:c4:5d:27:e6:28:fd:49:8e:00:c5:55:38: 4c:58:4c:50:d2:ab:32:c2:be:01:25:bb:e8:3e:e4: 95:d3:19:ac:0f:3d:95:39:a9:bc:c9:b1:95:f8:e4: c0:1d:1f:fd:1b:98:70:7e:5c:f8:fe:eb:78:57:32: ac:10:e4:50:14:3d:c3:70:fe:24:95:bd:b1:40:78: 35:3d:55:a0:24:32:64:36:e8:87:84:82:a0:7d:41: 4c:51:db:92:13:d3:d0:5f:20:b2:1f:21:06:3a:2c: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:09:1B:9D:CC:E4:21:06:AC:3D:CF:FE:36:48:7C:13:C4:A2:99:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:4e:d8:9b:38:71:96:26:5c:41:52:8f:77:8c:dc:bc:c5:da: ec:2a:7e:bf:6b:a3:61:fe:8e:98:5a:5c:e9:3a:4a:e7:82:8f: e2:1a:1f:a3:e7:85:95:9e:f2:d1:09:68:2b:2b:84:6c:44:de: 50:2d:df:7c:46:a6:27:a8:26:3b:a8:af:82:dc:e1:48:59:60: 39:8c:73:f8:b3:50:19:f0:c4:33:9a:3b:da:49:f3:58:58:7a: 0b:d6:4c:fa:80:a1:bd:a2:89:fd:f0:ab:9e:53:a3:14:bd:5e: a3:19:1a:a2:cf:e9:62:4b:b1:6c:6a:e0:ee:83:6b:17:21:89: 5f:c6:d7:8c:5c:97:f0:65:bb:86:50:81:39:a6:fe:bf:c5:2d: 45:7f:61:40:8e:ab:84:60:ac:92:12:e9:45:74:d0:2a:ce:c8: 47:fa:19:e8:ae:92:56:0e:47:14:79:f7:9a:84:49:04:f0:85: f0:b4:55:1e:bf:2d:e3:f4:6f:db:b3:53:65:d0:e6:c8:08:41: 46:e5:fd:56:b7:9d:85:10:c5:e1:78:f6:3a:a3:ec:16:77:b9: a7:5e:3f:32:b8:37:61:f4:5a:a1:fe:77:c5:a7:dd:bb:2a:c5: 0d:56:eb:a5:14:a2:7d:ee:a2:02:0b:57:22:43:cc:db:16:c6: cb:5c:68:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+BUYiixpmZ2VlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk NzVlYjU2ZjgtZWRlZi00ZTdhLTg5NTktNmUwNGQ5M2UwZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKQxUXtVXi6hb7mRNnGKq55VdqPpJUuej0HH +jrZ8nOnZK3lnKFCdYvHNHrGHUIBMziox6bOVf5Y2fEBs+W4i6EHDQqFOUyvX02l Db0iOGjHECQ7dlH89ZOZqk922LoJyxTtalEatgKgHyoFEvEwxMouSsUm2ke2yV3J sbka4vFPQqn7q5Y9DvvsgVwMexqDMkjHd75HkWbEXSfmKP1JjgDFVThMWExQ0qsy wr4BJbvoPuSV0xmsDz2VOam8ybGV+OTAHR/9G5hwflz4/ut4VzKsEORQFD3DcP4k lb2xQHg1PVWgJDJkNuiHhIKgfUFMUduSE9PQXyCyHyEGOizpQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEJG53M5CEGrD3P/jZIfBPEopmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZDVhNjBmMmYtZWU2Ny0z NGEyLWE4ZmMtY2JmZjI1MDU2ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhO2Js4cZYmXEFSj3eM3LzF2uwqfr9ro2H+jphaXOk6SueCj+IaH6Pn hZWe8tEJaCsrhGxE3lAt33xGpieoJjuor4Lc4UhZYDmMc/izUBnwxDOaO9pJ81hY egvWTPqAob2iif3wq55ToxS9XqMZGqLP6WJLsWxq4O6DaxchiV/G14xcl/Blu4ZQ gTmm/r/FLUV/YUCOq4RgrJIS6UV00CrOyEf6GeiuklYORxR595qESQTwhfC0VR6/ LeP0b9uzU2XQ5sgIQUbl/Va3nYUQxeF49jqj7BZ3uadePzK4N2H0WqH+d8Wn3bsq xQ1W66UUon3uogILVyJDzNsWxstcaMo= -----END CERTIFICATE-----Generated at Tue Oct 27 08:58:23 2026 by rpki-client