$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d3766780-da13-374d-97af-ab9e3203de65.roa File: d3766780-da13-374d-97af-ab9e3203de65.roa (raw, json) Hash identifier: dvUqGEo4I/nrQvzdR5Wbljx8nm2IjMroT6+C2xGv+Ds= Subject key identifier: E1:29:87:B5:55:0D:8F:50:9D:6B:96:AF:92:90:68:99:0D:45:84:C8 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584F146796EA11288EE019CDDE00 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d3766780-da13-374d-97af-ab9e3203de65.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 36352 IP address blocks: 66.248.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:96:ea:11:28:8e:e0:19:cd:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=afd31c12-9cca-4863-8528-ca6c0ce6f7ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:ce:ec:af:a6:a6:b3:50:50:d5:2e:24:0f: 4d:60:33:56:db:c9:f6:7a:e1:89:d6:5b:fb:c9:e2: d5:10:cb:b5:82:3b:bd:b6:91:fe:cf:69:a3:dc:ae: 0e:09:8c:fe:23:79:31:b5:de:69:b8:03:26:88:6e: e2:ac:90:21:65:01:f4:50:67:d0:1c:fb:72:b4:83: ad:4d:e5:82:aa:9f:2c:c8:c5:a1:36:ae:62:9d:d6: 60:d5:cc:7d:87:fb:09:83:a0:e7:b0:46:86:4f:8b: 6a:54:7a:df:a0:52:fc:c4:03:6f:bc:36:a1:4b:3e: fe:e6:81:6d:19:76:31:72:b8:77:d6:9a:7a:d5:5d: 54:c5:71:d4:db:c8:01:1d:48:57:32:3d:c3:e1:d4: 76:98:db:8c:b9:d6:5e:fb:91:72:b8:d5:8f:cc:40: 33:06:d4:20:c7:20:77:2f:eb:21:8f:82:05:8b:7f: 13:24:ee:40:ac:78:3e:7d:2f:76:b2:58:25:94:bb: ca:a8:73:b6:64:4d:56:43:03:ca:dd:91:c2:c2:c9: da:94:aa:02:a0:77:b3:00:d2:9d:18:bb:43:3e:2e: 8b:06:55:85:11:bb:3b:c2:a0:34:f5:88:78:07:79: ac:75:37:6d:a1:ca:9a:9c:9e:98:f7:59:91:59:23: 83:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:29:87:B5:55:0D:8F:50:9D:6B:96:AF:92:90:68:99:0D:45:84:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d3766780-da13-374d-97af-ab9e3203de65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 66.248.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ba:b3:16:72:16:db:22:ea:4d:7d:ce:88:d6:1c:85:f3:02: 11:6f:6c:ce:ba:5d:75:9e:6a:c2:06:7e:51:8c:af:35:c5:72: e5:34:eb:a9:03:cf:36:6a:7c:ab:a9:15:2f:f5:de:80:70:e3: 84:f5:f3:ce:43:1f:71:5b:70:52:b1:10:45:6d:87:d9:e7:8b: fa:cc:83:0e:cb:fc:35:e5:3e:1d:fc:bf:8b:29:44:7e:f0:89: 3e:a0:b8:61:97:e7:34:42:13:83:73:a1:64:b7:89:c0:43:e7: 80:c9:8e:d9:07:a1:89:59:33:a7:ba:b1:00:04:54:b3:b6:b2: 67:fa:9b:55:9e:38:95:3e:22:8b:a6:b2:d3:cf:cb:03:e6:91: 3c:56:15:a3:b4:9e:54:7a:24:d0:ec:37:47:66:47:1f:41:0d: a3:69:9b:b3:01:13:93:ad:de:ec:6c:7a:17:59:68:fb:bf:96: 13:e6:26:f9:89:4d:5a:cc:7d:cf:fc:82:f1:2b:11:47:8d:bd: 23:76:0c:e0:ac:b8:dc:f3:b5:f1:6a:58:f4:c7:fb:8d:02:5e: 63:c5:b9:00:c7:e0:32:94:d0:46:81:53:29:21:6a:66:c8:16: dc:c6:c5:1f:74:4d:19:56:1c:7e:a7:3e:fc:35:42:77:d9:17: 1c:6c:1b:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5bqESiO4BnN3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YWZkMzFjMTItOWNjYS00ODYzLTg1MjgtY2E2YzBjZTZmN2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2PO7K+mprNQUNUuJA9NYDNW28n2euGJ1lv7 yeLVEMu1gju9tpH+z2mj3K4OCYz+I3kxtd5puAMmiG7irJAhZQH0UGfQHPtytIOt TeWCqp8syMWhNq5indZg1cx9h/sJg6DnsEaGT4tqVHrfoFL8xANvvDahSz7+5oFt GXYxcrh31pp61V1UxXHU28gBHUhXMj3D4dR2mNuMudZe+5FyuNWPzEAzBtQgxyB3 L+shj4IFi38TJO5ArHg+fS92slgllLvKqHO2ZE1WQwPK3ZHCwsnalKoCoHezANKd GLtDPi6LBlWFEbs7wqA09Yh4B3msdTdtocqanJ6Y91mRWSOD2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEph7VVDY9QnWuWr5KQaJkNRYTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZDM3NjY3ODAtZGExMy0z NzRkLTk3YWYtYWI5ZTMyMDNkZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG6sxZyFtsi6k19zojWHIXzAhFvbM66XXWeasIGflGMrzXFcuU066kD zzZqfKupFS/13oBw44T1885DH3FbcFKxEEVth9nni/rMgw7L/DXlPh38v4spRH7w iT6guGGX5zRCE4NzoWS3icBD54DJjtkHoYlZM6e6sQAEVLO2smf6m1WeOJU+Ioum stPPywPmkTxWFaO0nlR6JNDsN0dmRx9BDaNpm7MBE5Ot3uxsehdZaPu/lhPmJvmJ TVrMfc/8gvErEUeNvSN2DOCsuNzztfFqWPTH+40CXmPFuQDH4DKU0EaBUykhambI FtzGxR90TRlWHH6nPvw1QnfZFxxsG0w= -----END CERTIFICATE-----Generated at Wed Sep 16 09:19:39 2026 by rpki-client