$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/4864f802-b6a7-3355-8df0-9b3d973e3885.roa File: 4864f802-b6a7-3355-8df0-9b3d973e3885.roa (raw, json) Hash identifier: kfNI5G9xRy8ign07pDL68nCoymsPuk9ChcTmozmTWyM= Subject key identifier: E4:4E:F1:0E:64:A9:02:11:20:23:C6:89:08:33:FF:F5:DB:8C:2E:91 Certificate issuer: /CN=ae74ee3b-204b-4c4e-958f-cd716b99ed12 Certificate serial: 010D0C9F4328584EAFE6EB010D2E54150E929B00 Authority key identifier: D4:C5:5C:07:DA:77:69:29:BF:B3:81:C4:9A:94:5C:C7:97:69:6B:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/4864f802-b6a7-3355-8df0-9b3d973e3885.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 12684 IP address blocks: 66.178.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/ae74ee3b-204b-4c4e-958f-cd716b99ed12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/ae74ee3b-204b-4c4e-958f-cd716b99ed12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:eb:01:0d:2e:54:15:0e:92:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae74ee3b-204b-4c4e-958f-cd716b99ed12 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=bac6353e-9728-4121-9376-7b5dcd6b868a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:13:95:4b:9c:e4:7c:50:fa:26:7f:34:6e: 8d:bd:26:5c:c1:1f:95:8d:82:2e:b1:de:8e:85:d8: c5:9f:02:78:85:1e:f4:34:52:aa:1d:5c:ec:52:87: 8d:e7:34:12:9f:3c:52:5a:aa:94:16:96:7a:5a:10: 14:33:08:88:19:27:10:5f:c5:09:49:e1:49:2c:d6: 0c:88:f5:fe:cf:41:e1:42:0a:36:29:22:35:38:b7: 2c:c6:74:95:65:4d:f2:65:14:e9:1c:2b:bf:07:62: b5:07:29:b1:c2:74:a9:0c:ea:43:9d:97:ea:dd:a1: f4:6c:8b:55:2a:aa:ff:99:a7:73:1e:7e:4e:29:33: 29:e0:51:38:3e:01:6b:7e:9e:40:11:41:d3:ae:e0: 13:b0:cf:07:1a:6a:27:15:3d:0e:e3:82:6c:7d:26: a4:2a:6b:17:0a:dd:79:3c:8a:42:df:ec:7d:eb:da: 45:99:13:7e:e8:33:15:db:dd:1c:82:fa:d9:da:ce: 1b:5d:63:0d:a8:e4:4a:95:5e:88:71:ee:82:c0:81: 4f:6a:69:6f:6f:90:16:2f:6e:d4:fc:9b:cf:2d:71: 1c:1f:04:c6:7a:f4:5c:fc:c1:2f:60:c5:ff:f4:85: e8:c9:6d:4c:14:8d:fc:d5:73:3d:14:10:b3:3b:da: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4E:F1:0E:64:A9:02:11:20:23:C6:89:08:33:FF:F5:DB:8C:2E:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/4864f802-b6a7-3355-8df0-9b3d973e3885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12/ae74ee3b-204b-4c4e-958f-cd716b99ed12.crl X509v3 Authority Key Identifier: keyid:D4:C5:5C:07:DA:77:69:29:BF:B3:81:C4:9A:94:5C:C7:97:69:6B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ae74ee3b-204b-4c4e-958f-cd716b99ed12.cer sbgp-ipAddrBlock: critical IPv4: 66.178.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1b:94:5b:a6:a8:12:35:64:dd:d9:65:fb:46:3c:8f:4a:3a: 60:d7:ea:40:15:51:3d:ca:a8:66:7e:9e:fd:36:a4:62:f3:f4: c7:9c:92:90:13:bf:b3:68:eb:ba:13:71:1f:3f:a7:fb:33:81: 1e:74:45:ba:b5:a9:50:15:a1:61:7f:cc:0a:53:1f:98:63:33: d5:d8:68:02:26:4d:8b:44:6d:a2:04:58:c3:7f:b0:da:20:ca: 96:37:da:1d:ae:b2:19:6e:4b:40:48:a7:36:45:c4:1a:b6:73: 3c:e8:b0:b1:1d:de:fe:55:9f:9e:40:41:76:85:a8:56:d9:59: 35:3f:74:60:07:95:7b:1f:c4:96:c0:e6:29:ce:0f:3f:d4:69: 79:34:38:a9:c8:0c:e8:eb:6e:bf:21:11:d4:6d:65:62:61:d0: 58:3f:e2:29:da:3c:2a:bf:7b:64:27:15:64:c6:1b:9d:7d:4b: 0c:75:96:56:ed:59:21:33:28:ea:f7:3a:b4:e4:b9:e4:63:9d: 21:6f:b9:86:fd:da:2f:03:b1:7b:96:8a:fc:6a:3f:4e:ab:d2: 14:02:58:67:5b:02:3b:67:da:0c:71:4b:4c:8d:1a:ae:85:df: eb:34:da:13:05:3e:3b:84:ff:35:74:cc:4e:48:e1:d3:d8:d8: 72:96:49:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5usBDS5UFQ6SmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3NGVlM2ItMjA0Yi00YzRlLTk1OGYtY2Q3MTZiOTll ZDEyMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk YmFjNjM1M2UtOTcyOC00MTIxLTkzNzYtN2I1ZGNkNmI4NjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ0TlUuc5HxQ+iZ/NG6NvSZcwR+VjYIusd6O hdjFnwJ4hR70NFKqHVzsUoeN5zQSnzxSWqqUFpZ6WhAUMwiIGScQX8UJSeFJLNYM iPX+z0HhQgo2KSI1OLcsxnSVZU3yZRTpHCu/B2K1BymxwnSpDOpDnZfq3aH0bItV Kqr/madzHn5OKTMp4FE4PgFrfp5AEUHTruATsM8HGmonFT0O44JsfSakKmsXCt15 PIpC3+x969pFmRN+6DMV290cgvrZ2s4bXWMNqORKlV6Ice6CwIFPamlvb5AWL27U /JvPLXEcHwTGevRc/MEvYMX/9IXoyW1MFI381XM9FBCzO9pRYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORO8Q5kqQIRICPGiQgz//XbjC6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZTc0 ZWUzYi0yMDRiLTRjNGUtOTU4Zi1jZDcxNmI5OWVkMTIvNDg2NGY4MDItYjZhNy0z MzU1LThkZjAtOWIzZDk3M2UzODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWU3NGVlM2ItMjA0Yi00YzRlLTk1 OGYtY2Q3MTZiOTllZDEyL2FlNzRlZTNiLTIwNGItNGM0ZS05NThmLWNkNzE2Yjk5 ZWQxMi5jcmwwHwYDVR0jBBgwFoAU1MVcB9p3aSm/s4HEmpRcx5dpa18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hZTc0ZWUzYi0yMDRiLTRjNGUtOTU4Zi1jZDcx NmI5OWVkMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4blFumqBI1ZN3ZZftGPI9KOmDX6kAVUT3KqGZ+nv02pGLz9MeckpAT v7No67oTcR8/p/szgR50Rbq1qVAVoWF/zApTH5hjM9XYaAImTYtEbaIEWMN/sNog ypY32h2ushluS0BIpzZFxBq2czzosLEd3v5Vn55AQXaFqFbZWTU/dGAHlXsfxJbA 5inODz/UaXk0OKnIDOjrbr8hEdRtZWJh0Fg/4inaPCq/e2QnFWTGG519Swx1llbt WSEzKOr3OrTkueRjnSFvuYb92i8DsXuWivxqP06r0hQCWGdbAjtn2gxxS0yNGq6F 3+s02hMFPjuE/zV0zE5I4dPY2HKWSZA= -----END CERTIFICATE-----Generated at Sat Sep 5 01:24:19 2026 by rpki-client