$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa File: faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa (raw, json) Hash identifier: 8F7FH696O0LNIgPEBs2HJphTTJO6gOm49omDFoU4oM8= Subject key identifier: 82:15:4D:E3:0A:8A:75:F6:C7:36:82:65:F2:42:55:C0:1E:5F:94:06 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584F63F81AC673FE4D8ED86950C0 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 5511 IP address blocks: 66.112.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:1a:c6:73:fe:4d:8e:d8:69:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=9af7d06f-7823-4704-81df-5dde748952e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:94:12:3c:40:77:84:f8:36:e1:4b:c3:ae: 47:3b:94:90:c8:f2:3a:d8:4d:a2:72:27:b1:19:71: 5d:b8:f7:dc:87:7d:d9:d7:e8:aa:21:5a:7f:20:d6: 73:ea:4a:06:fb:11:93:75:ca:9e:5b:ec:dc:e3:1a: 1d:e7:32:b4:28:e1:01:e7:76:8e:b2:de:0e:21:b7: 64:ec:df:a9:21:60:52:af:3b:f6:c5:41:a2:79:ad: f9:a8:36:29:01:80:57:45:bd:a1:0f:22:4b:f4:18: 9f:35:2a:cd:ec:f4:cc:83:60:ed:e5:e2:df:da:84: 05:8a:bf:af:43:ad:85:40:69:f6:22:9d:80:b1:2e: 3e:0a:cc:04:a0:5b:b2:25:1a:05:18:43:1f:9c:11: 9e:b3:73:5f:1b:23:48:76:8a:08:22:23:75:ed:55: 67:90:9c:30:16:9f:8f:61:4c:e2:23:c5:98:fd:4c: 6e:9f:12:34:36:a1:36:37:1a:10:3b:4b:0b:dc:83: a9:2a:8c:ca:07:56:5b:7f:0c:1c:5c:29:83:35:42: 07:57:66:73:f7:01:eb:a0:e9:df:ea:22:8d:f2:cc: 7d:82:c7:fe:40:b1:b4:e6:df:27:61:f6:09:96:43: d1:d4:59:15:1f:72:a7:64:c6:da:2a:9a:91:ef:3d: 71:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:15:4D:E3:0A:8A:75:F6:C7:36:82:65:F2:42:55:C0:1E:5F:94:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:fb:8e:4e:db:7b:07:d8:90:f1:9f:f0:61:c5:a1:02:f4:18: dd:df:ac:eb:b5:54:7c:33:5e:a7:b3:ba:99:3a:9e:e3:61:e9: 31:30:67:a7:7b:4d:b8:ab:b4:d3:26:e9:71:25:38:ca:cb:43: 85:b6:1b:48:f4:ba:d5:38:2c:12:31:fe:72:0f:4b:96:0d:0a: dd:29:4f:c3:92:83:29:f8:c7:f2:ce:f4:e4:b0:42:72:5b:d0: 92:ee:ca:f5:6d:9d:6a:bc:f5:85:33:72:69:e1:e2:3b:af:0c: 77:68:80:d0:ad:d0:58:9d:68:0e:8b:99:ef:6c:39:35:c2:b7: 40:7a:24:81:2d:e5:da:b7:53:c9:69:61:1a:7b:f7:79:d0:33: 2c:b0:46:fd:a8:1b:a0:b0:07:31:6c:99:07:49:2f:be:42:ec: cb:47:ca:95:86:85:68:a0:df:fe:10:24:c1:01:2b:fe:65:a7: 26:65:08:54:e1:7b:5c:40:b7:c5:5b:d4:10:76:bc:d3:72:7e: 18:f4:ed:4b:4c:b9:65:bc:6b:77:c3:30:1c:7d:cd:6b:b1:b2: ce:f3:5a:66:08:db:83:5d:29:26:f3:50:5d:92:d3:ce:3f:b5: 3c:68:22:a2:e0:c9:ca:60:d0:f8:80:ee:b7:39:03:63:53:a6: 00:6e:b2:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+BrGc/5NjthpUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk OWFmN2QwNmYtNzgyMy00NzA0LTgxZGYtNWRkZTc0ODk1MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnuUEjxAd4T4NuFLw65HO5SQyPI62E2iciex GXFduPfch33Z1+iqIVp/INZz6koG+xGTdcqeW+zc4xod5zK0KOEB53aOst4OIbdk 7N+pIWBSrzv2xUGiea35qDYpAYBXRb2hDyJL9BifNSrN7PTMg2Dt5eLf2oQFir+v Q62FQGn2Ip2AsS4+CswEoFuyJRoFGEMfnBGes3NfGyNIdooIIiN17VVnkJwwFp+P YUziI8WY/UxunxI0NqE2NxoQO0sL3IOpKozKB1ZbfwwcXCmDNUIHV2Zz9wHroOnf 6iKN8sx9gsf+QLG05t8nYfYJlkPR1FkVH3KnZMbaKpqR7z1xYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIVTeMKinX2xzaCZfJCVcAeX5QGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZmFhZjk0ODgtNzVhNy0z NjEyLWI1YjYtYTY1YTllNGY2YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMD7jk7bewfYkPGf8GHFoQL0GN3frOu1VHwzXqezupk6nuNh6TEwZ6d7 TbirtNMm6XElOMrLQ4W2G0j0utU4LBIx/nIPS5YNCt0pT8OSgyn4x/LO9OSwQnJb 0JLuyvVtnWq89YUzcmnh4juvDHdogNCt0FidaA6Lme9sOTXCt0B6JIEt5dq3U8lp YRp793nQMyywRv2oG6CwBzFsmQdJL75C7MtHypWGhWig3/4QJMEBK/5lpyZlCFTh e1xAt8Vb1BB2vNNyfhj07UtMuWW8a3fDMBx9zWuxss7zWmYI24NdKSbzUF2S084/ tTxoIqLgycpg0PiA7rc5A2NTpgBusko= -----END CERTIFICATE-----Generated at Tue Oct 27 09:00:51 2026 by rpki-client