$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5/9db6e4b9-2c16-32c6-9e3d-e2811ca2b350.roa File: 9db6e4b9-2c16-32c6-9e3d-e2811ca2b350.roa (raw, json) Hash identifier: xfpsVKIUKyEexU/Nv4l8qXb2RrSAZUas0qHXI84fPvE= Subject key identifier: 0F:C6:44:88:CC:56:C0:C6:C7:BC:58:E7:13:C1:00:EC:46:30:71:12 Certificate issuer: /CN=87f40e96-f8df-46d8-9e7d-a1e5c6de9df5 Certificate serial: 010D0C9F4328584EFE12148DCC68EBAF19AD8100 Authority key identifier: 3E:F3:8C:02:C5:FD:4A:27:C8:78:18:BC:06:B7:71:17:86:A9:20:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5/9db6e4b9-2c16-32c6-9e3d-e2811ca2b350.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 40799 IP address blocks: 66.111.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:14:8d:cc:68:eb:af:19:ad:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f40e96-f8df-46d8-9e7d-a1e5c6de9df5 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=9db85e01-05d4-4410-bd00-b91e45ab1248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:02:6c:3f:68:bd:ac:9f:ef:ad:60:38:fe: 8d:bb:48:84:39:15:8b:0e:e8:99:b4:13:84:64:b5: c1:22:7a:31:d7:2e:9a:37:12:fb:8e:b4:e0:f1:59: ba:77:1b:b4:eb:42:8c:a6:d3:d3:d0:c9:d6:68:63: 0d:6e:56:72:7b:bf:e8:fa:44:bf:5b:31:72:a6:37: bb:7f:d7:72:e8:2d:44:eb:fa:18:57:bb:b7:55:87: fc:92:6c:52:6d:55:3e:4d:c2:51:d8:2f:1c:96:09: ab:fa:6c:da:a4:35:44:89:3d:cf:e2:47:c1:3d:d3: 29:92:e1:77:71:0f:2b:c2:12:72:84:30:f6:3d:ae: d8:dd:74:ba:37:d2:36:04:07:4a:6a:cc:84:11:9d: b3:ee:e8:d5:8e:b1:05:3b:55:ca:2c:dd:3d:49:8f: 8d:30:46:06:d5:a5:ae:cf:fb:1c:03:d6:d1:77:89: fc:c3:6f:22:a3:34:f0:e1:82:36:97:1d:61:2f:99: 3c:11:1d:5c:32:66:4a:32:15:43:19:3f:1e:6c:a2: 8e:a8:48:fc:9b:e5:1e:6d:b8:5c:15:49:2b:63:d0: 54:c1:03:ab:cb:32:19:e8:f2:d5:ed:74:4e:55:b1: eb:4c:5b:ab:16:6d:58:e2:aa:ea:1d:29:d5:a1:e2: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C6:44:88:CC:56:C0:C6:C7:BC:58:E7:13:C1:00:EC:46:30:71:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5/9db6e4b9-2c16-32c6-9e3d-e2811ca2b350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5.crl X509v3 Authority Key Identifier: keyid:3E:F3:8C:02:C5:FD:4A:27:C8:78:18:BC:06:B7:71:17:86:A9:20:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5.cer sbgp-ipAddrBlock: critical IPv4: 66.111.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e0:e9:9d:1e:ac:4a:d7:7e:a5:f2:44:be:4c:ec:c1:db:cd: a6:49:2f:6c:2d:73:67:96:ff:de:60:02:23:1d:85:b6:65:22: 0c:b5:ec:01:df:f3:0f:a6:8e:99:22:d0:4a:55:17:58:1d:1c: 56:3b:fd:9e:5c:75:10:34:e5:c4:3a:02:f6:7c:3e:79:02:a3: 66:f7:6f:a2:a6:ab:2d:59:b3:1a:bb:dc:68:00:28:8e:0f:c5: 86:97:fa:33:30:c3:db:1b:41:ea:ce:cc:71:a8:2b:30:f6:ce: ba:02:3a:a7:0c:01:29:22:58:14:71:77:bb:7c:24:b6:cc:cc: c7:a3:5a:19:b3:d0:1a:80:96:93:62:c6:36:03:46:01:6d:c5: cd:ab:97:fa:19:94:8d:bc:c3:f9:78:ab:15:95:72:fa:e2:25: e2:87:8c:e4:56:73:64:38:48:62:fc:e5:c4:cb:46:01:0c:b8: 94:ca:7c:48:71:7b:36:00:5a:7a:af:8d:26:63:b4:fb:9f:22: ab:49:2f:ae:26:41:c1:07:75:c7:73:96:b2:5b:53:fb:a8:b3: db:c1:7c:6b:44:ed:a3:af:18:3d:a4:9d:cc:d0:42:17:65:b8: 3a:1a:33:e8:b7:65:b0:ac:41:32:c3:50:9a:40:66:e3:5f:c2: 59:34:cc:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EhSNzGjrrxmtgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdmNDBlOTYtZjhkZi00NmQ4LTllN2QtYTFlNWM2ZGU5 ZGY1MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk OWRiODVlMDEtMDVkNC00NDEwLWJkMDAtYjkxZTQ1YWIxMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyMCbD9ovayf761gOP6Nu0iEORWLDuiZtBOE ZLXBInox1y6aNxL7jrTg8Vm6dxu060KMptPT0MnWaGMNblZye7/o+kS/WzFypje7 f9dy6C1E6/oYV7u3VYf8kmxSbVU+TcJR2C8clgmr+mzapDVEiT3P4kfBPdMpkuF3 cQ8rwhJyhDD2Pa7Y3XS6N9I2BAdKasyEEZ2z7ujVjrEFO1XKLN09SY+NMEYG1aWu z/scA9bRd4n8w28iozTw4YI2lx1hL5k8ER1cMmZKMhVDGT8ebKKOqEj8m+Uebbhc FUkrY9BUwQOryzIZ6PLV7XROVbHrTFurFm1Y4qrqHSnVoeI+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/GRIjMVsDGx7xY5xPBAOxGMHESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84N2Y0 MGU5Ni1mOGRmLTQ2ZDgtOWU3ZC1hMWU1YzZkZTlkZjUvOWRiNmU0YjktMmMxNi0z MmM2LTllM2QtZTI4MTFjYTJiMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODdmNDBlOTYtZjhkZi00NmQ4LTll N2QtYTFlNWM2ZGU5ZGY1Lzg3ZjQwZTk2LWY4ZGYtNDZkOC05ZTdkLWExZTVjNmRl OWRmNS5jcmwwHwYDVR0jBBgwFoAUPvOMAsX9SifIeBi8BrdxF4apICIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84N2Y0MGU5Ni1mOGRmLTQ2ZDgtOWU3ZC1hMWU1 YzZkZTlkZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQm8+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXg6Z0erErXfqXyRL5M7MHbzaZJL2wtc2eW/95gAiMdhbZlIgy17AHf 8w+mjpki0EpVF1gdHFY7/Z5cdRA05cQ6AvZ8PnkCo2b3b6Kmqy1Zsxq73GgAKI4P xYaX+jMww9sbQerOzHGoKzD2zroCOqcMASkiWBRxd7t8JLbMzMejWhmz0BqAlpNi xjYDRgFtxc2rl/oZlI28w/l4qxWVcvriJeKHjORWc2Q4SGL85cTLRgEMuJTKfEhx ezYAWnqvjSZjtPufIqtJL64mQcEHdcdzlrJbU/uos9vBfGtE7aOvGD2knczQQhdl uDoaM+i3ZbCsQTLDUJpAZuNfwlk0zFc= -----END CERTIFICATE-----Generated at Fri Sep 4 23:47:56 2026 by rpki-client