$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa File: 677c9e94-c45b-345c-8a40-a975fad8cd7d.roa (raw, json) Hash identifier: qFXXP3cMiiL3p+p6ideFzAZSxLva/dLiF6Qd/i00VeA= Subject key identifier: E9:6B:1C:7C:24:CB:46:09:C8:06:74:AE:77:F0:63:4F:06:88:F0:86 Certificate issuer: /CN=669f938e-8371-4220-9059-9081449ba23b Certificate serial: 010D0C9F4328584F612D61484DF1C070C42ADF40 Authority key identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 46694 IP address blocks: 66.209.240.0/20 maxlen: 24 192.68.190.0/24 maxlen: 24 2607:6280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:61:48:4d:f1:c0:70:c4:2a:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=669f938e-8371-4220-9059-9081449ba23b Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=e2b01e12-6b45-4f97-9644-a81b74913d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:cf:e8:9e:e3:78:57:6b:64:39:e9:8c:a1: bb:1d:de:9d:cb:d6:bf:27:a8:20:b8:ea:24:0c:e1: 9c:f0:ca:98:2f:d1:38:fa:f5:55:72:9c:fd:bf:52: 66:12:88:ca:eb:e5:a4:dd:39:49:2e:53:0c:c9:61: 54:2c:92:d9:af:90:be:57:e1:01:5d:7d:38:21:90: 2e:43:69:da:22:59:85:4b:30:59:5d:3f:6b:76:c8: 0b:96:10:9d:c1:ec:cd:3e:84:3f:39:96:ed:bf:f2: bd:2d:7a:6c:d2:38:7c:be:cd:25:3f:89:88:48:4d: af:a7:d6:7c:b5:51:6f:24:52:e3:60:ce:8d:41:7e: 4c:99:02:b3:d5:4e:80:ae:ee:13:a9:c1:95:54:aa: ee:28:a8:47:9f:ed:ac:e8:8f:55:ca:c9:f3:66:da: 09:c9:6a:fa:bf:6f:f9:fe:e1:f3:09:9f:5c:5a:ee: a6:25:32:19:69:63:bd:25:91:f3:22:03:9d:81:41: 06:24:41:66:90:29:cc:39:ba:42:08:b9:59:7a:5e: 8a:0f:0a:75:14:6b:f1:2e:5f:c9:1d:60:c9:78:8a: 51:e3:27:6f:2d:96:7e:71:65:38:cf:32:95:0d:77: 2c:ae:a7:ae:80:67:b1:1d:ed:03:b4:b1:bf:fe:f4: 40:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6B:1C:7C:24:CB:46:09:C8:06:74:AE:77:F0:63:4F:06:88:F0:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl X509v3 Authority Key Identifier: keyid:D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer sbgp-ipAddrBlock: critical IPv4: 66.209.240.0/20 192.68.190.0/24 IPv6: 2607:6280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:82:22:d0:ea:a2:7b:fd:98:86:c4:f3:4f:1e:c9:80:e4:d3: 5d:7b:a1:e8:d4:03:9e:62:39:ca:9e:8e:dc:3d:c5:d1:db:17: a5:39:94:ad:23:17:26:6a:c2:9c:f6:fe:93:e6:2b:e9:bb:f8: 5c:c0:ff:de:eb:fe:ba:0b:82:d7:c5:7d:c7:b4:f3:b4:57:c1: 10:f9:35:9a:62:3c:53:7b:4e:ce:d9:ef:46:94:03:e2:eb:c4: 82:30:33:f6:68:6a:1a:fe:35:55:d5:30:78:43:2a:df:e3:a4: 8c:4c:62:8e:c2:58:0c:c3:2d:4e:ff:62:48:3a:17:9c:78:27: 06:0a:a5:ff:57:28:ff:57:30:c1:58:da:eb:d3:8d:88:db:15: ac:f6:55:ce:fe:a3:b9:bf:82:44:8d:81:67:ea:e7:6e:7e:48: f3:a0:83:f4:38:17:8d:52:9d:fb:b8:83:80:d9:91:36:66:e2: 5c:20:96:06:c2:99:7a:4a:eb:e3:ef:7d:23:d6:4d:81:58:86: 79:ce:5f:74:c5:0c:71:40:3f:fd:80:c0:05:f8:57:df:86:b7: 17:ac:14:00:98:3e:f6:b4:9e:13:b2:3c:e2:a1:f8:91:40:93: 30:15:0e:cd:ee:c7:0c:b1:ba:6b:e5:59:c9:34:c2:62:00:63: c8:2d:e1:93 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9hLWFITfHAcMQq30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY5ZjkzOGUtODM3MS00MjIwLTkwNTktOTA4MTQ0OWJh MjNiMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZTJiMDFlMTItNmI0NS00Zjk3LTk2NDQtYTgxYjc0OTEzZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUzP6J7jeFdrZDnpjKG7Hd6dy9a/J6gguOok DOGc8MqYL9E4+vVVcpz9v1JmEojK6+Wk3TlJLlMMyWFULJLZr5C+V+EBXX04IZAu Q2naIlmFSzBZXT9rdsgLlhCdwezNPoQ/OZbtv/K9LXps0jh8vs0lP4mISE2vp9Z8 tVFvJFLjYM6NQX5MmQKz1U6Aru4TqcGVVKruKKhHn+2s6I9VysnzZtoJyWr6v2/5 /uHzCZ9cWu6mJTIZaWO9JZHzIgOdgUEGJEFmkCnMObpCCLlZel6KDwp1FGvxLl/J HWDJeIpR4ydvLZZ+cWU4zzKVDXcsrqeugGexHe0DtLG//vRA2wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFOlrHHwky0YJyAZ0rnfwY08GiPCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Njlm OTM4ZS04MzcxLTQyMjAtOTA1OS05MDgxNDQ5YmEyM2IvNjc3YzllOTQtYzQ1Yi0z NDVjLThhNDAtYTk3NWZhZDhjZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjY5ZjkzOGUtODM3MS00MjIwLTkw NTktOTA4MTQ0OWJhMjNiLzY2OWY5MzhlLTgzNzEtNDIyMC05MDU5LTkwODE0NDli YTIzYi5jcmwwHwYDVR0jBBgwFoAU0DQ2yYzKs+8Zker3PLDZ8S9TQcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NjlmOTM4ZS04MzcxLTQyMjAtOTA1OS05MDgx NDQ5YmEyM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQtHwAwQA wES+MA0EAgACMAcDBQAmB2KAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC+CItDqonv9mIbE808eyYDk0117 oejUA55iOcqejtw9xdHbF6U5lK0jFyZqwpz2/pPmK+m7+FzA/97r/roLgtfFfce0 87RXwRD5NZpiPFN7Ts7Z70aUA+LrxIIwM/Zoahr+NVXVMHhDKt/jpIxMYo7CWAzD LU7/Ykg6F5x4JwYKpf9XKP9XMMFY2uvTjYjbFaz2Vc7+o7m/gkSNgWfq525+SPOg g/Q4F41Snfu4g4DZkTZm4lwglgbCmXpK6+PvfSPWTYFYhnnOX3TFDHFAP/2AwAX4 V9+GtxesFACYPva0nhOyPOKh+JFAkzAVDs3uxwyxumvlWck0wmIAY8gt4ZM= -----END CERTIFICATE-----Generated at Mon Oct 12 12:44:43 2026 by rpki-client