$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/ff76f477-9fcf-3f97-a435-7620968e5ec0.roa File: ff76f477-9fcf-3f97-a435-7620968e5ec0.roa (raw, json) Hash identifier: O7CQbiHH5udwaN4PddAVutT2hie/Qo7SYB8pxVu7TXM= Subject key identifier: D6:23:01:65:57:ED:EF:43:33:7A:27:38:FB:A4:D5:B6:FB:97:7E:B7 Certificate issuer: /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Certificate serial: 010D0C9F4328584F225D22B41EE1791F6A684940 Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/ff76f477-9fcf-3f97-a435-7620968e5ec0.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 996 IP address blocks: 66.207.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:22:b4:1e:e1:79:1f:6a:68:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=9ad9b5fb-7de9-4ec0-b1ca-6569dedafe80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:11:42:18:7f:eb:66:61:77:b9:f4:3b:fd:f9: 40:ae:cc:df:63:65:8f:04:15:9e:5e:a2:55:25:55: ae:59:20:1b:c6:01:cd:2e:5d:79:1c:07:81:e5:2b: d6:3e:76:11:e7:8b:ee:eb:27:e2:89:b8:e4:3e:5f: b2:e9:41:78:87:d4:a1:dd:59:69:3e:30:d0:65:49: ea:e5:2f:b0:18:6b:eb:4e:ee:e8:12:4e:f5:0d:1b: f6:26:1f:ae:8f:10:7b:b5:44:d7:56:df:d7:c4:19: f4:28:b7:e7:c0:98:29:b3:ef:b9:0e:3f:99:45:85: f3:b7:e8:04:fe:f3:a3:40:23:9d:88:e4:d2:db:58: 0d:91:90:b1:61:e5:47:ba:ff:7c:a2:f4:82:0d:3f: 4f:1c:12:28:bc:21:eb:07:4a:a6:09:2e:6a:d5:b6: 1e:cb:f3:aa:55:a0:83:97:99:ca:30:ab:b4:ae:80: 6a:12:26:71:65:d0:cd:de:33:eb:67:e5:1b:51:fc: 21:b8:ff:ec:5c:91:e7:e9:4b:14:ba:c3:47:6e:32: 27:07:0e:49:26:af:6a:31:33:79:ab:ea:7f:32:06: 03:ad:73:5b:35:ec:60:93:7f:a1:9b:25:f8:5b:34: 24:b8:4d:a8:16:be:5e:1a:8f:b3:fc:44:76:bc:51: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:23:01:65:57:ED:EF:43:33:7A:27:38:FB:A4:D5:B6:FB:97:7E:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/ff76f477-9fcf-3f97-a435-7620968e5ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl X509v3 Authority Key Identifier: keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer sbgp-ipAddrBlock: critical IPv4: 66.207.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:84:d1:05:53:db:05:f2:06:00:d4:47:29:f7:c8:e0:f5:36: 81:6c:42:f4:87:34:17:ec:fa:62:e0:00:7d:4b:c7:94:80:e1: 35:84:06:78:d2:d7:00:7e:9d:c3:20:43:5a:16:aa:f6:4d:8a: 4d:87:1f:a8:91:99:a4:7b:6f:c4:67:7b:0f:d1:e5:67:7c:ba: 02:7f:f0:95:8b:cd:a1:c1:f0:08:9e:85:6a:3c:16:b2:39:40: 1c:ce:ec:f8:29:37:7e:fb:91:f0:83:e8:cd:47:f8:14:47:43: f5:ed:39:c2:cc:a1:0e:55:21:8a:a5:93:ee:51:70:73:a0:19: 2a:d7:98:23:fb:6a:c4:4f:61:26:cb:29:fb:04:8c:c2:71:30: 5e:fa:00:6d:ad:85:72:67:d6:e3:b1:02:83:92:0e:bb:91:15: d1:2c:28:1a:b3:af:db:10:5c:1b:1b:45:f9:60:29:d4:10:db: 10:03:70:ff:c6:c8:8b:58:74:76:36:51:1e:1b:1f:a8:2d:b7: e2:ab:e8:35:3f:88:4e:15:f4:65:df:0d:73:6c:4f:fa:72:e9: 68:59:36:de:9b:be:ab:cb:31:08:74:ab:d3:1f:47:b7:f0:5a: 19:ac:e6:8b:70:42:53:12:30:d5:83:dd:9a:4c:19:02:ba:18: 40:8c:14:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXSK0HuF5H2poSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YTUzYzItYWQzZC00ODI2LThjNDktODQ4NTdkZDRk YjYwMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk OWFkOWI1ZmItN2RlOS00ZWMwLWIxY2EtNjU2OWRlZGFmZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BFCGH/rZmF3ufQ7/flArszfY2WPBBWeXqJV JVWuWSAbxgHNLl15HAeB5SvWPnYR54vu6yfiibjkPl+y6UF4h9Sh3VlpPjDQZUnq 5S+wGGvrTu7oEk71DRv2Jh+ujxB7tUTXVt/XxBn0KLfnwJgps++5Dj+ZRYXzt+gE /vOjQCOdiOTS21gNkZCxYeVHuv98ovSCDT9PHBIovCHrB0qmCS5q1bYey/OqVaCD l5nKMKu0roBqEiZxZdDN3jPrZ+UbUfwhuP/sXJHn6UsUusNHbjInBw5JJq9qMTN5 q+p/MgYDrXNbNexgk3+hmyX4WzQkuE2oFr5eGo+z/ER2vFE0jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYjAWVX7e9DM3onOPuk1bb7l363MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh NTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1N2RkNGRiNjAvZmY3NmY0NzctOWZjZi0z Zjk3LWE0MzUtNzYyMDk2OGU1ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YTUzYzItYWQzZC00ODI2LThj NDktODQ4NTdkZDRkYjYwLzVjNWE1M2MyLWFkM2QtNDgyNi04YzQ5LTg0ODU3ZGQ0 ZGI2MC5jcmwwHwYDVR0jBBgwFoAUOpNtDGAmuMECDnX45ZtKtMXiNyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhNTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1 N2RkNGRiNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQs+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWE0QVT2wXyBgDURyn3yOD1NoFsQvSHNBfs+mLgAH1Lx5SA4TWEBnjS 1wB+ncMgQ1oWqvZNik2HH6iRmaR7b8Rnew/R5Wd8ugJ/8JWLzaHB8AiehWo8FrI5 QBzO7PgpN377kfCD6M1H+BRHQ/XtOcLMoQ5VIYqlk+5RcHOgGSrXmCP7asRPYSbL KfsEjMJxMF76AG2thXJn1uOxAoOSDruRFdEsKBqzr9sQXBsbRflgKdQQ2xADcP/G yItYdHY2UR4bH6gtt+Kr6DU/iE4V9GXfDXNsT/py6WhZNt6bvqvLMQh0q9MfR7fw Whms5otwQlMSMNWD3ZpMGQK6GECMFHQ= -----END CERTIFICATE-----Generated at Thu Sep 17 23:02:31 2026 by rpki-client