$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/a549df24-0424-3989-b7a9-ea4ca078c33f.roa File: a549df24-0424-3989-b7a9-ea4ca078c33f.roa (raw, json) Hash identifier: 2skT7qgaSyuvOzN4dtXE/WJY7t6EmAOCHvBiaH0cYyY= Subject key identifier: 78:72:64:37:FE:55:29:56:0D:81:EA:3B:8A:BC:F1:9A:29:F0:F2:A0 Certificate issuer: /CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e Certificate serial: 010D0C9F4328584F74B8275004828B0E5E2D6600 Authority key identifier: B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/a549df24-0424-3989-b7a9-ea4ca078c33f.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 398152 IP address blocks: 204.154.244.0/24 maxlen: 24 204.154.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:27:50:04:82:8b:0e:5e:2d:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=39576e2d-723c-4316-8011-c38f7b695b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c2:df:73:b1:1b:1b:ce:39:78:24:64:74:26: 3d:52:c5:9b:5e:d0:09:d5:4c:99:2c:bc:08:b9:d4: 8d:62:19:7c:07:5a:a4:77:87:5c:4a:4c:32:b2:c2: 4b:77:dc:73:2d:ba:72:f4:b5:ef:53:9a:ea:48:c7: 95:c5:07:db:24:0f:d1:74:d9:8b:76:01:a9:25:92: fe:40:50:a0:1e:2e:92:c2:c0:70:61:81:0e:01:e8: 1d:cf:92:3c:d9:ca:8e:2c:80:88:80:a0:dc:02:83: 64:c9:b6:28:68:1f:c8:86:5a:44:f1:2b:6a:2f:06: 03:05:73:7e:ee:ba:7f:67:a6:18:4e:a1:a2:95:cf: 68:cc:46:42:01:29:b7:2b:03:a6:63:7c:be:a5:20: f9:9b:f1:e0:9c:d8:14:d8:84:f5:3e:8e:f3:17:22: 76:35:4e:f9:45:db:bd:77:80:d0:a9:e3:fe:3b:3d: 19:b4:3f:71:02:04:42:57:59:f0:fe:e4:5c:3c:28: ef:36:d8:44:d8:8b:71:1b:f2:f8:6d:1b:8f:87:84: 1e:5c:2d:9f:b7:3c:3e:18:ad:af:52:7d:3f:f2:6e: 91:aa:97:90:94:fa:49:7e:cd:fe:b4:b0:f3:07:4d: d2:8b:0d:03:36:87:a0:12:da:7a:3e:1a:a3:7c:77: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:72:64:37:FE:55:29:56:0D:81:EA:3B:8A:BC:F1:9A:29:F0:F2:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/a549df24-0424-3989-b7a9-ea4ca078c33f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl X509v3 Authority Key Identifier: keyid:B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer sbgp-ipAddrBlock: critical IPv4: 204.154.244.0/24 204.154.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:29:3f:43:a7:7a:8f:3a:68:9b:bd:1f:53:b8:f4:b0:b8:be: ae:ef:4c:ae:00:87:30:a5:f8:df:ab:07:3c:60:9f:ae:24:ac: 55:9a:b4:ca:54:ff:0c:a7:fb:43:63:d1:10:77:3c:60:bb:e3: da:a2:6a:d6:06:43:4d:45:c6:5a:a9:45:c3:4d:93:a7:3b:c5: c7:ad:3d:fb:d6:bb:79:b7:af:b8:93:2a:05:f8:87:f6:8f:53: f5:e5:df:71:ad:76:75:74:a7:ae:5b:ee:4d:6a:cf:66:98:c0: 56:f2:eb:2a:d3:99:d7:0e:21:55:39:43:b1:61:4e:81:cd:13: 2b:66:77:c1:86:42:cf:3a:fb:1d:45:63:30:c9:4a:ad:2b:14: a9:7e:95:70:7e:4e:1c:d4:00:5b:d8:ea:21:ba:49:ef:6b:31: 20:84:b2:0e:d1:aa:a1:01:6e:40:c0:9a:bf:3d:0e:5a:b7:a0: 32:97:7b:7c:6b:1f:d7:0a:db:a5:1f:38:32:13:02:e1:3d:ae: 26:05:e3:9d:f4:32:f1:b8:26:25:7d:db:26:c7:67:3f:c6:7b: 4f:b7:11:a8:20:bc:76:88:36:9a:58:c4:62:69:4e:0c:36:03: e8:7f:00:c5:06:a6:f4:b6:a7:c4:4a:3b:dc:3c:4e:68:21:e5: fc:7d:2f:a6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE90uCdQBIKLDl4tZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY2YzZiNmYtMTI4Ny00ZGMwLTkwNzQtNmNlZjNjMjEx YzBlMB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk Mzk1NzZlMmQtNzIzYy00MzE2LTgwMTEtYzM4ZjdiNjk1Yjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcLfc7EbG845eCRkdCY9UsWbXtAJ1UyZLLwI udSNYhl8B1qkd4dcSkwyssJLd9xzLbpy9LXvU5rqSMeVxQfbJA/RdNmLdgGpJZL+ QFCgHi6SwsBwYYEOAegdz5I82cqOLICIgKDcAoNkybYoaB/IhlpE8StqLwYDBXN+ 7rp/Z6YYTqGilc9ozEZCASm3KwOmY3y+pSD5m/HgnNgU2IT1Po7zFyJ2NU75Rdu9 d4DQqeP+Oz0ZtD9xAgRCV1nw/uRcPCjvNthE2ItxG/L4bRuPh4QeXC2ftzw+GK2v Un0/8m6RqpeQlPpJfs3+tLDzB03Siw0DNoegEtp6PhqjfHez4QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHhyZDf+VSlWDYHqO4q88Zop8PKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNjZj NmI2Zi0xMjg3LTRkYzAtOTA3NC02Y2VmM2MyMTFjMGUvYTU0OWRmMjQtMDQyNC0z OTg5LWI3YTktZWE0Y2EwNzhjMzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDY2YzZiNmYtMTI4Ny00ZGMwLTkw NzQtNmNlZjNjMjExYzBlLzA2NmM2YjZmLTEyODctNGRjMC05MDc0LTZjZWYzYzIx MWMwZS5jcmwwHwYDVR0jBBgwFoAUuJDhNK6omS7bXp+BBkdv2555WnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNjZjNmI2Zi0xMjg3LTRkYzAtOTA3NC02Y2Vm M2MyMTFjMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzJr0AwQA zJr3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMApP0Oneo86aJu9H1O49LC4vq7vTK4AhzCl+N+rBzxgn64k rFWatMpU/wyn+0Nj0RB3PGC749qiatYGQ01FxlqpRcNNk6c7xcetPfvWu3m3r7iT KgX4h/aPU/Xl33GtdnV0p65b7k1qz2aYwFby6yrTmdcOIVU5Q7FhToHNEytmd8GG Qs86+x1FYzDJSq0rFKl+lXB+ThzUAFvY6iG6Se9rMSCEsg7RqqEBbkDAmr89Dlq3 oDKXe3xrH9cK26UfODITAuE9riYF4530MvG4JiV92ybHZz/Ge0+3EaggvHaINppY xGJpTgw2A+h/AMUGpvS2p8RKO9w8Tmgh5fx9L6Y= -----END CERTIFICATE-----Generated at Mon Nov 2 12:43:14 2026 by rpki-client