$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa File: a608f793-5bc4-3f6e-a460-f0e592ab913e.roa (raw, json) Hash identifier: QDjn/hPCH7w87ApASQsYtWkULqvK+hOFiMEiSPVdML0= Subject key identifier: 50:30:5F:A3:35:F4:E3:2D:3E:55:E8:3F:DA:D6:EB:3B:5A:B2:1C:66 Certificate issuer: /CN=6396ecb5-3b91-4d1e-b787-089230813a23 Certificate serial: 010D0C9F4328584F3FAD30573FDE4B6475DA1C00 Authority key identifier: EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 400777 IP address blocks: 66.59.205.0/24 maxlen: 24 66.59.206.0/24 maxlen: 24 66.59.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:30:57:3f:de:4b:64:75:da:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6396ecb5-3b91-4d1e-b787-089230813a23 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=88365bed-a2ac-4523-93a0-7ed8c0c8e210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:97:ae:76:ab:3e:a7:1a:93:a8:e6:94:1a:ba: d6:31:9a:d3:e9:61:61:f7:d6:11:96:21:44:1e:36: f4:57:ce:e7:58:c2:6f:08:13:09:02:ce:7b:29:88: e1:84:3d:21:05:a6:4b:82:d0:87:c0:0b:84:53:de: 9f:f2:f8:b6:19:42:95:3a:a4:43:df:c1:44:05:00: d9:7a:c8:3d:5d:75:3c:74:ad:10:76:62:8e:07:15: 7b:82:dc:3d:f6:ac:4f:d9:35:96:42:ec:a4:70:91: 39:eb:f1:0e:d1:c1:dd:42:37:fd:e0:6a:5e:4b:6b: 99:e8:10:97:ba:04:59:00:12:b9:1f:27:57:fa:13: c6:eb:df:a7:6c:76:3d:3b:95:6a:4e:98:57:c0:60: a6:4b:4f:a3:9e:b0:1b:7f:60:ab:10:61:68:9e:55: 8d:2b:74:6e:6c:58:18:59:63:9f:d6:b0:fc:15:1b: 01:a5:a6:69:77:c3:43:26:77:ff:9e:b8:21:ca:8c: 07:7d:8e:f4:fa:83:48:0a:5c:64:a3:b2:a4:84:6e: 11:68:cd:b6:22:a7:62:2c:5f:3c:b9:70:d1:5a:d7: 4b:d8:35:4f:4c:75:e7:3b:88:8e:80:8c:e4:46:6f: ab:09:b5:a7:48:54:a8:c5:54:85:7e:d2:d2:9d:87: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:30:5F:A3:35:F4:E3:2D:3E:55:E8:3F:DA:D6:EB:3B:5A:B2:1C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl X509v3 Authority Key Identifier: keyid:EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer sbgp-ipAddrBlock: critical IPv4: 66.59.205.0-66.59.207.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:79:1f:90:a9:60:6a:b4:ec:39:cc:06:ad:49:29:81:22:ff: d7:76:72:29:52:af:d1:34:a8:90:40:18:d0:67:df:b1:e9:ad: 1c:85:c2:2d:b8:9f:bf:7e:69:f0:99:bc:e8:ad:a1:fe:f8:36: e5:c5:25:69:20:b8:6e:e3:10:6c:ee:73:e0:84:d6:de:bd:f3: c5:45:73:0c:6b:55:86:3e:0c:ad:d4:48:90:55:49:b5:5f:c9: 0f:85:93:80:49:ac:33:9d:bd:f1:fa:60:3b:20:23:01:72:6a: 11:28:5c:c3:07:e0:cd:dd:59:fb:7b:d6:32:a0:07:0b:e4:05: 84:f7:1c:db:15:9a:f3:da:98:b9:5f:5b:17:bf:e1:69:3f:2b: cc:1b:17:df:d4:e7:b0:ba:af:d1:7f:c2:9a:20:32:c7:7a:bb: e6:c9:05:c7:66:d0:fd:1d:aa:24:b7:72:40:1e:de:a0:25:ab: 98:3a:6c:06:90:00:6c:1c:4a:8d:36:69:f3:be:f2:20:d6:26: 98:17:58:dd:75:14:fa:54:60:94:2c:a5:3b:fa:a1:52:33:00: 71:67:32:7c:8d:60:a2:2f:51:9a:7b:74:55:92:87:f0:cf:5a: ba:d5:3f:ba:1d:76:7a:3b:3f:d9:3d:77:ef:71:d7:3f:25:e6: 06:13:31:e0 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8/rTBXP95LZHXaHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjM5NmVjYjUtM2I5MS00ZDFlLWI3ODctMDg5MjMwODEz YTIzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ODgzNjViZWQtYTJhYy00NTIzLTkzYTAtN2VkOGMwYzhlMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpeudqs+pxqTqOaUGrrWMZrT6WFh99YRliFE Hjb0V87nWMJvCBMJAs57KYjhhD0hBaZLgtCHwAuEU96f8vi2GUKVOqRD38FEBQDZ esg9XXU8dK0QdmKOBxV7gtw99qxP2TWWQuykcJE56/EO0cHdQjf94GpeS2uZ6BCX ugRZABK5HydX+hPG69+nbHY9O5VqTphXwGCmS0+jnrAbf2CrEGFonlWNK3RubFgY WWOf1rD8FRsBpaZpd8NDJnf/nrghyowHfY70+oNIClxko7KkhG4RaM22IqdiLF88 uXDRWtdL2DVPTHXnO4iOgIzkRm+rCbWnSFSoxVSFftLSnYf0wwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFAwX6M19OMtPlXoP9rW6ztashxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Mzk2 ZWNiNS0zYjkxLTRkMWUtYjc4Ny0wODkyMzA4MTNhMjMvYTYwOGY3OTMtNWJjNC0z ZjZlLWE0NjAtZjBlNTkyYWI5MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjM5NmVjYjUtM2I5MS00ZDFlLWI3 ODctMDg5MjMwODEzYTIzLzYzOTZlY2I1LTNiOTEtNGQxZS1iNzg3LTA4OTIzMDgx M2EyMy5jcmwwHwYDVR0jBBgwFoAU6llvlg/jYCQAKaKkS4JQIwBrFSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82Mzk2ZWNiNS0zYjkxLTRkMWUtYjc4Ny0wODky MzA4MTNhMjMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABCO80D BARCO8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEANXkfkKlgarTsOcwGrUkpgSL/13ZyKVKv0TSokEAY0Gff semtHIXCLbifv35p8Jm86K2h/vg25cUlaSC4buMQbO5z4ITW3r3zxUVzDGtVhj4M rdRIkFVJtV/JD4WTgEmsM5298fpgOyAjAXJqEShcwwfgzd1Z+3vWMqAHC+QFhPcc 2xWa89qYuV9bF7/haT8rzBsX39TnsLqv0X/CmiAyx3q75skFx2bQ/R2qJLdyQB7e oCWrmDpsBpAAbBxKjTZp877yINYmmBdY3XUU+lRglCylO/qhUjMAcWcyfI1goi9R mnt0VZKH8M9autU/uh12ejs/2T1373HXPyXmBhMx4A== -----END CERTIFICATE-----Generated at Tue Oct 13 06:29:06 2026 by rpki-client