$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa File: 624ff661-6f73-31bb-813f-b64dbeff8dea.roa (raw, json) Hash identifier: r0ctsXu4aCGFZnkUGpOZnwX9Koom1gnWFG1f3Lwz9nM= Subject key identifier: 12:68:06:C5:B0:24:F6:B1:32:23:83:75:1D:10:03:3F:01:E0:64:10 Certificate issuer: /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294 Certificate serial: 010D0C9F4328584F7782ED8A5CADC69324F24600 Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 611 IP address blocks: 67.210.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:ed:8a:5c:ad:c6:93:24:f2:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=7473a0dd-469b-4836-b5c5-6139988a8097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:d2:46:39:ec:57:ee:8a:33:d8:56:9d:f1: c4:a2:be:9f:cc:60:b2:dc:92:80:b1:26:03:f7:d2: 42:70:25:f2:f8:50:eb:51:82:6a:d3:38:2a:02:22: 7d:d9:fd:58:68:6a:33:17:d2:cf:35:b0:a3:d2:ab: 6f:15:e7:af:78:29:35:17:4f:32:76:bb:40:4a:4b: 22:5d:48:27:11:39:fd:9e:48:d4:95:99:c1:d8:ae: d4:a7:29:8e:12:a8:58:e9:89:1a:93:49:51:cd:42: 69:9a:1e:52:cf:07:44:a5:6e:18:1b:55:27:00:05: 13:31:f4:8c:9d:b5:15:e5:53:be:c7:8f:5b:1e:e7: 43:7c:40:fb:ac:20:7f:b3:82:47:23:23:24:55:fa: 78:e2:0c:e6:2c:e8:a0:7e:22:61:b6:ca:e4:06:d1: ff:90:1c:53:e0:35:f7:95:23:2f:6b:7e:29:53:6e: b3:88:89:6a:cc:75:2a:f4:0e:9a:d4:0d:2d:f9:92: ae:45:19:56:26:52:43:46:ab:e0:d5:ba:27:7a:b0: 04:ae:6d:58:2c:24:9f:4f:42:b5:de:e5:e4:90:25: 66:9a:1f:56:e5:5e:d3:5a:d7:fa:fe:ce:02:e5:74: e5:85:1c:b3:5b:52:64:d4:d3:bc:98:f9:22:17:07: e0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:68:06:C5:B0:24:F6:B1:32:23:83:75:1D:10:03:3F:01:E0:64:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl X509v3 Authority Key Identifier: keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer sbgp-ipAddrBlock: critical IPv4: 67.210.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:1e:aa:28:11:46:72:18:fd:b4:1d:cf:05:4e:b1:6c:14:c0: 2e:44:32:e6:d9:c5:99:5e:f8:54:65:e7:57:f0:ff:74:0c:c0: 34:b1:99:dc:52:36:a6:ce:99:35:85:c0:70:24:38:fc:99:7a: 7d:6e:48:2f:5b:ce:48:84:ac:29:54:35:4c:cd:51:2e:68:be: d4:6d:b1:be:0a:b2:ee:3f:ee:aa:97:8a:f1:68:ef:58:ec:97: 8a:93:f1:df:4c:32:5d:ef:4b:3c:6a:46:aa:3f:78:b6:e2:71: d3:4a:be:cf:98:a2:35:fb:ea:c9:3e:a4:70:3e:1e:dc:24:03: af:e4:84:3d:63:1f:4f:bd:bf:b9:a8:7f:6e:67:3c:0d:94:67: 10:9d:38:45:97:68:14:dc:b2:40:5d:5e:b0:2b:27:2c:68:f2: a5:c9:9d:6e:0d:8e:fd:34:5f:2d:7f:c0:b3:ff:c8:6e:20:21: f2:68:ee:de:16:24:89:5e:b4:87:f9:25:2e:2d:4a:5a:42:91: 0f:ce:5d:ad:d2:74:ba:b7:2f:ef:08:24:c3:67:cb:0c:0f:08: b2:88:04:4c:46:94:ee:53:2e:2b:12:f9:2f:fe:5c:1e:64:0a: 0e:3f:a0:bf:bf:86:1b:ee:15:10:74:32:62:ff:74:8d:42:fc: 33:a9:49:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gu2KXK3GkyTyRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY2YjJkZjQtMGYwYS00Yjg0LTllYjctYzE4NTI1OGY1 Mjk0MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NzQ3M2EwZGQtNDY5Yi00ODM2LWI1YzUtNjEzOTk4OGE4MDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQvSRjnsV+6KM9hWnfHEor6fzGCy3JKAsSYD 99JCcCXy+FDrUYJq0zgqAiJ92f1YaGozF9LPNbCj0qtvFeeveCk1F08ydrtASksi XUgnETn9nkjUlZnB2K7UpymOEqhY6Ykak0lRzUJpmh5SzwdEpW4YG1UnAAUTMfSM nbUV5VO+x49bHudDfED7rCB/s4JHIyMkVfp44gzmLOigfiJhtsrkBtH/kBxT4DX3 lSMva34pU26ziIlqzHUq9A6a1A0t+ZKuRRlWJlJDRqvg1bonerAErm1YLCSfT0K1 3uXkkCVmmh9W5V7TWtf6/s4C5XTlhRyzW1Jk1NO8mPkiFwfg9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJoBsWwJPaxMiODdR0QAz8B4GQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NjZi MmRmNC0wZjBhLTRiODQtOWViNy1jMTg1MjU4ZjUyOTQvNjI0ZmY2NjEtNmY3My0z MWJiLTgxM2YtYjY0ZGJlZmY4ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODY2YjJkZjQtMGYwYS00Yjg0LTll YjctYzE4NTI1OGY1Mjk0Lzg2NmIyZGY0LTBmMGEtNGI4NC05ZWI3LWMxODUyNThm NTI5NC5jcmwwHwYDVR0jBBgwFoAUlXZb8dwS0UD6rVvU62UXQha+WnswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84NjZiMmRmNC0wZjBhLTRiODQtOWViNy1jMTg1 MjU4ZjUyOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEeqigRRnIY/bQdzwVOsWwUwC5EMubZxZle+FRl51fw/3QMwDSxmdxS NqbOmTWFwHAkOPyZen1uSC9bzkiErClUNUzNUS5ovtRtsb4Ksu4/7qqXivFo71js l4qT8d9MMl3vSzxqRqo/eLbicdNKvs+YojX76sk+pHA+HtwkA6/khD1jH0+9v7mo f25nPA2UZxCdOEWXaBTcskBdXrArJyxo8qXJnW4Njv00Xy1/wLP/yG4gIfJo7t4W JIletIf5JS4tSlpCkQ/OXa3SdLq3L+8IJMNnywwPCLKIBExGlO5TLisS+S/+XB5k Cg4/oL+/hhvuFRB0MmL/dI1C/DOpSUI= -----END CERTIFICATE-----Generated at Thu Oct 22 16:40:39 2026 by rpki-client