$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa File: ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa (raw, json) Hash identifier: ISSqxOM34PCs3hKlXF8r9XiJY9vqEBhyGfqEElTHOzs= Subject key identifier: A8:2D:4B:62:48:13:2B:D3:0A:D2:E6:08:AD:2F:07:A7:F1:79:35:7F Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F4328584F4975249929EAF8188C40D280 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399916 IP address blocks: 66.118.0.0/22 maxlen: 22 66.118.0.0/24 maxlen: 24 66.118.1.0/24 maxlen: 24 66.118.2.0/24 maxlen: 24 66.118.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:24:99:29:ea:f8:18:8c:40:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=01e69e32-a353-48f1-bb69-b312d399dadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:79:e1:31:02:e4:4d:42:4c:58:d1:80:40: 6a:1c:c9:23:e6:77:b0:9d:2f:6d:10:fe:d9:a6:84: 4e:d6:8f:e0:7f:73:82:e6:ea:57:3d:66:12:26:cd: f4:9d:45:ea:5a:fa:65:72:bc:0f:5e:ee:89:da:47: 17:7e:5c:64:8c:79:3c:3c:32:25:e3:44:4f:e5:3a: 52:2f:49:6d:70:fc:dd:01:bc:e9:ff:96:ab:58:35: 47:47:b9:e4:d4:4c:15:04:43:f8:06:b2:a5:e7:a1: 91:21:f6:a6:38:0b:87:fb:7e:4e:dc:04:82:6f:e4: 2f:ee:ac:e3:2f:c5:7c:4f:07:52:0f:40:2c:6f:2e: ec:80:e4:d3:0f:b2:ec:af:19:72:dc:79:98:ec:40: ef:62:df:a0:20:e1:68:18:2b:21:ae:94:32:49:fa: f4:cd:be:1c:5b:57:09:3a:17:1c:81:b4:10:11:c1: 73:75:e2:ea:a2:3d:a9:83:08:a7:52:44:e8:4a:24: bd:6e:4d:9e:5f:47:c7:eb:26:6c:1f:e0:c8:70:99: df:1b:cd:ec:d1:91:3d:53:57:b7:91:cd:f5:b0:0b: 7f:a7:67:1a:f3:d2:c3:ac:3e:1e:6d:c9:00:bb:e7: 6e:67:09:96:b7:62:ad:17:ad:85:49:48:47:af:08: 4f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2D:4B:62:48:13:2B:D3:0A:D2:E6:08:AD:2F:07:A7:F1:79:35:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:28:e4:1c:e5:eb:61:b1:e0:80:08:eb:6f:ed:2c:db:71:6b: 9a:12:08:2c:52:01:35:9a:80:2f:7e:1c:97:2a:af:96:4e:ce: f4:28:e2:32:2f:c7:42:3b:69:9f:9f:c1:f8:6d:55:29:f8:9b: 63:c8:df:3e:e4:8a:d5:90:7d:c1:ae:86:91:95:82:29:96:c9: c4:07:6e:7e:c4:78:da:fe:88:96:d2:f1:9f:13:30:a0:36:d8: 02:0c:b2:0b:1e:63:55:9e:ff:12:17:95:bf:21:7c:e1:63:d8: 6f:97:8e:1b:48:9b:2c:c0:ad:27:4a:6e:00:1d:34:33:23:e0: 1c:15:88:35:58:4b:bc:ee:f5:d6:c6:60:57:20:b1:83:d5:89: 87:49:d2:d7:94:82:97:f0:21:7d:1b:6f:a0:84:14:58:13:7c: c8:75:48:4b:d3:47:6e:92:71:47:26:9a:7e:9e:46:8c:e6:a8: f4:a0:34:6a:d9:1c:b4:de:9a:4b:75:c6:dd:1f:d9:78:a3:54: f9:e5:7f:a7:dd:d7:74:2b:49:f8:63:79:69:d1:17:be:4d:bd: cb:15:ae:93:8c:a3:bf:37:58:d4:41:86:e2:4f:ed:2b:43:6d: e7:f1:71:27:76:6c:b2:b4:a7:ce:76:61:38:aa:52:67:3d:a0: 02:9c:b2:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdSSZKer4GIxA0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDFlNjllMzItYTM1My00OGYxLWJiNjktYjMxMmQzOTlkYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMJ54TEC5E1CTFjRgEBqHMkj5newnS9tEP7Z poRO1o/gf3OC5upXPWYSJs30nUXqWvplcrwPXu6J2kcXflxkjHk8PDIl40RP5TpS L0ltcPzdAbzp/5arWDVHR7nk1EwVBEP4BrKl56GRIfamOAuH+35O3ASCb+Qv7qzj L8V8TwdSD0Asby7sgOTTD7Lsrxly3HmY7EDvYt+gIOFoGCshrpQySfr0zb4cW1cJ OhccgbQQEcFzdeLqoj2pgwinUkToSiS9bk2eX0fH6yZsH+DIcJnfG83s0ZE9U1e3 kc31sAt/p2ca89LDrD4ebckAu+duZwmWt2KtF62FSUhHrwhPaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgtS2JIEyvTCtLmCK0vB6fxeTV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvYmE5YWY3YzktNDE4OC0z YWVjLTgzY2EtMGU2MDI5OGE5OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQo5Bzl62Gx4IAI62/tLNtxa5oSCCxSATWagC9+HJcqr5ZOzvQo4jIv x0I7aZ+fwfhtVSn4m2PI3z7kitWQfcGuhpGVgimWycQHbn7EeNr+iJbS8Z8TMKA2 2AIMsgseY1We/xIXlb8hfOFj2G+XjhtImyzArSdKbgAdNDMj4BwViDVYS7zu9dbG YFcgsYPViYdJ0teUgpfwIX0bb6CEFFgTfMh1SEvTR26ScUcmmn6eRozmqPSgNGrZ HLTemkt1xt0f2XijVPnlf6fd13QrSfhjeWnRF75NvcsVrpOMo783WNRBhuJP7StD befxcSd2bLK0p852YTiqUmc9oAKcsvk= -----END CERTIFICATE-----Generated at Sat Sep 26 05:13:29 2026 by rpki-client