$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/898c3da4-2165-330a-9d43-8a5ed867f646.roa File: 898c3da4-2165-330a-9d43-8a5ed867f646.roa (raw, json) Hash identifier: fA6BSol3EGQ7Zdr0TO+ici2u72JOEXcm+XUG5WYu8qg= Subject key identifier: 05:90:99:79:C6:64:8F:A9:71:DD:E3:FA:EB:05:64:42:95:3E:EB:A0 Certificate issuer: /CN=280cbf0c-0cae-414d-8451-5942a3d8b179 Certificate serial: 010D0C9F4328584EFE1213B0995E5C67C0D18524 Authority key identifier: 7F:DD:A3:5B:47:55:D3:98:D5:D3:4B:C0:E1:49:9B:CF:CB:55:B5:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/898c3da4-2165-330a-9d43-8a5ed867f646.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 46232 IP address blocks: 66.85.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/280cbf0c-0cae-414d-8451-5942a3d8b179.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/280cbf0c-0cae-414d-8451-5942a3d8b179.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:13:b0:99:5e:5c:67:c0:d1:85:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=280cbf0c-0cae-414d-8451-5942a3d8b179 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=14c8d03b-b96d-4356-96a4-0f871aa6b465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:e0:8c:15:5a:9b:1c:31:1f:64:e1:57:c1: 5d:43:19:ba:cc:8d:bc:85:62:83:0a:04:1f:f5:20: 85:6d:c1:32:51:e0:29:84:66:11:47:62:42:95:10: 98:92:04:c3:3a:20:de:eb:95:a0:82:ce:4f:36:0e: c0:12:66:10:8e:da:b9:36:86:47:d3:08:fe:45:8b: f9:f5:50:58:14:9c:cf:86:69:59:60:7a:bc:59:6b: 18:dc:63:16:5a:e7:0e:6c:8b:f7:6f:ef:71:6d:71: 89:d6:fa:73:56:a7:9c:1d:05:be:95:94:e6:b7:66: 60:ef:0e:ae:22:11:5a:42:41:cc:ee:80:2f:df:47: b0:35:70:0e:8e:f7:cb:34:5e:79:87:91:74:f3:88: df:0c:bb:63:c9:ea:5e:a4:2e:87:72:4a:58:34:e6: 59:69:af:a3:6f:2a:73:2c:aa:c3:16:82:42:a6:08: b6:42:09:9c:f4:bd:62:93:48:80:79:bf:97:a3:f5: 9e:4e:40:58:ea:06:d9:5c:69:ff:5b:e8:3c:2c:c7: c6:4a:d7:54:4b:e6:0c:32:c2:a7:b5:0b:f6:8a:f0: 39:f7:15:ac:29:0a:eb:32:70:90:ee:94:f0:83:94: 04:b3:14:93:37:72:0b:49:79:c6:3b:f7:40:fd:bf: 80:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:90:99:79:C6:64:8F:A9:71:DD:E3:FA:EB:05:64:42:95:3E:EB:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/898c3da4-2165-330a-9d43-8a5ed867f646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/280cbf0c-0cae-414d-8451-5942a3d8b179.crl X509v3 Authority Key Identifier: keyid:7F:DD:A3:5B:47:55:D3:98:D5:D3:4B:C0:E1:49:9B:CF:CB:55:B5:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179.cer sbgp-ipAddrBlock: critical IPv4: 66.85.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:29:c4:8d:98:e8:fd:6d:f4:28:1b:41:db:64:cc:d1:06:ab: 41:e9:0b:10:21:5c:31:02:2e:70:95:2d:81:19:4e:c0:ed:fc: 4d:f4:d3:5b:00:63:a1:cf:5b:5a:dc:db:36:d5:4d:f4:9b:a8: aa:a3:ed:9a:0f:28:28:55:71:25:12:d0:75:b8:36:58:c7:18: aa:fd:ca:f1:a3:b0:a1:5b:40:64:62:46:1c:9e:4b:00:55:01: e5:c4:fb:d6:0b:c8:88:fc:99:ef:c2:6a:0a:d0:a0:1c:e0:89: c1:95:12:8f:b6:71:30:47:9d:ff:fa:c3:38:b5:e1:f2:0b:02: 83:d1:74:b8:a7:a6:b8:3c:75:05:26:5d:bf:aa:03:1a:eb:6c: a5:6b:70:af:b9:36:52:6f:ee:56:da:0e:5d:85:6e:f3:bc:a9: 25:62:99:46:2b:c9:d6:84:94:1c:d7:d0:44:2e:b9:ee:04:49: 12:74:ad:e2:5a:d0:a3:3d:97:83:13:34:0c:6a:47:f8:d6:13: 69:d0:30:66:62:e8:a9:9f:b5:b7:89:70:5d:7f:cc:11:48:58: 42:10:4e:76:11:c6:1d:d4:5a:f5:94:33:f3:b3:b5:1b:23:1f: a1:21:17:0d:10:03:a6:bd:cb:77:6b:5a:22:a7:a8:a0:d6:a8: 5b:eb:aa:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EhOwmV5cZ8DRhSQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwY2JmMGMtMGNhZS00MTRkLTg0NTEtNTk0MmEzZDhi MTc5MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MTRjOGQwM2ItYjk2ZC00MzU2LTk2YTQtMGY4NzFhYTZiNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaPgjBVamxwxH2ThV8FdQxm6zI28hWKDCgQf 9SCFbcEyUeAphGYRR2JClRCYkgTDOiDe65Wggs5PNg7AEmYQjtq5NoZH0wj+RYv5 9VBYFJzPhmlZYHq8WWsY3GMWWucObIv3b+9xbXGJ1vpzVqecHQW+lZTmt2Zg7w6u IhFaQkHM7oAv30ewNXAOjvfLNF55h5F084jfDLtjyepepC6HckpYNOZZaa+jbypz LKrDFoJCpgi2Qgmc9L1ik0iAeb+Xo/WeTkBY6gbZXGn/W+g8LMfGStdUS+YMMsKn tQv2ivA59xWsKQrrMnCQ7pTwg5QEsxSTN3ILSXnGO/dA/b+ATQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWQmXnGZI+pcd3j+usFZEKVPuugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yODBj YmYwYy0wY2FlLTQxNGQtODQ1MS01OTQyYTNkOGIxNzkvODk4YzNkYTQtMjE2NS0z MzBhLTlkNDMtOGE1ZWQ4NjdmNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjgwY2JmMGMtMGNhZS00MTRkLTg0 NTEtNTk0MmEzZDhiMTc5LzI4MGNiZjBjLTBjYWUtNDE0ZC04NDUxLTU5NDJhM2Q4 YjE3OS5jcmwwHwYDVR0jBBgwFoAUf92jW0dV05jV00vA4Umbz8tVtUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yODBjYmYwYy0wY2FlLTQxNGQtODQ1MS01OTQy YTNkOGIxNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4pxI2Y6P1t9CgbQdtkzNEGq0HpCxAhXDECLnCVLYEZTsDt/E3001sA Y6HPW1rc2zbVTfSbqKqj7ZoPKChVcSUS0HW4NljHGKr9yvGjsKFbQGRiRhyeSwBV AeXE+9YLyIj8me/CagrQoBzgicGVEo+2cTBHnf/6wzi14fILAoPRdLinprg8dQUm Xb+qAxrrbKVrcK+5NlJv7lbaDl2FbvO8qSVimUYrydaElBzX0EQuue4ESRJ0reJa 0KM9l4MTNAxqR/jWE2nQMGZi6KmftbeJcF1/zBFIWEIQTnYRxh3UWvWUM/OztRsj H6EhFw0QA6a9y3drWiKnqKDWqFvrqr8= -----END CERTIFICATE-----Generated at Sat Sep 5 02:45:21 2026 by rpki-client