$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa File: c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa (raw, json) Hash identifier: XBdH3PEXGw5DpzQ3lCz+rY7xCHSNkHsXJKiIpdmxGKI= Subject key identifier: 53:AE:1D:AD:AC:7E:27:28:E3:2C:87:BE:09:8A:85:13:5F:71:EC:5F Certificate issuer: /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c Certificate serial: 010D0C9F4328584F63F8246AAC069E243C1EF900 Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 21723 IP address blocks: 66.163.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:24:6a:ac:06:9e:24:3c:1e:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=8345da7c-fe8c-4d8a-ace0-d10fdc7c70f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:9a:8b:7d:fd:25:27:4e:f9:b7:20:d8:9e: 8e:25:6b:5d:b0:14:30:fa:81:68:55:58:83:d8:87: 40:6e:2e:67:fe:64:e2:9b:2d:8d:18:e1:29:84:bc: d8:e6:7d:6d:f5:14:eb:56:3c:fc:92:52:f7:7b:ee: ac:7b:16:e7:58:09:cb:cb:c0:dc:c6:56:4b:8a:8f: 62:38:63:c8:af:c3:8f:05:56:e2:7a:ca:13:69:a1: dc:79:11:35:31:bf:2f:86:0a:b3:c8:53:38:aa:77: 47:b6:4d:89:3e:50:e5:74:d2:d3:13:d3:4f:2b:ad: a7:69:56:bf:f4:f1:17:76:0b:cc:09:09:36:8f:46: b3:37:69:24:ad:e5:51:7c:57:aa:65:ed:d5:88:f5: 7e:15:ab:6b:d5:78:ff:f9:44:e9:d8:bf:41:11:52: e0:bf:20:f7:35:b3:aa:24:3f:9d:95:47:a9:2a:47: c5:1b:8b:12:30:99:fb:1c:ca:13:53:76:72:d8:23: 6c:6c:4c:31:e4:06:04:51:ce:79:d8:72:f8:4e:98: 4e:79:63:de:81:19:d0:03:4a:f0:62:b1:56:ff:6c: ab:13:79:d2:aa:93:00:b1:11:59:b9:3b:3a:b7:02: 5c:84:77:41:90:b2:74:05:b1:6f:50:86:08:b7:5a: 56:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AE:1D:AD:AC:7E:27:28:E3:2C:87:BE:09:8A:85:13:5F:71:EC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl X509v3 Authority Key Identifier: keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer sbgp-ipAddrBlock: critical IPv4: 66.163.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b7:7f:90:21:23:ed:d7:6f:99:d6:84:f7:3e:d4:89:5f:eb: 8b:90:c7:b6:62:d4:da:03:85:a0:8f:21:af:01:3b:b9:0c:85: 00:1f:03:de:3f:89:8b:04:c8:eb:ac:2a:d7:f2:18:68:b6:dd: 88:1a:d1:3c:03:a3:f1:f0:db:37:1b:37:d2:b6:e6:5b:a2:fb: ec:46:9c:37:a8:87:cd:fc:c5:a5:67:97:67:7c:52:d8:cd:2d: cd:8e:f6:13:c7:c7:07:66:40:4c:88:d4:ba:e0:c3:89:14:47: fe:28:63:4d:b9:28:55:42:92:96:ae:01:2f:cb:20:29:b0:fa: 59:fe:3b:e6:e7:4b:57:30:89:31:91:a7:0c:7f:4c:40:44:66: 5a:d3:d7:b7:92:2f:e4:fc:06:13:f5:85:14:7d:4b:4d:b9:3f: 9e:e2:7d:f3:97:64:26:45:6a:3e:e5:02:b3:08:1a:60:27:8f: 87:77:78:ef:1c:4f:63:9c:13:40:3b:cb:99:c2:b0:2c:49:5c: 1a:29:2e:73:c6:b1:33:e1:58:66:59:c8:27:6c:42:1d:30:1f: 3f:4f:21:01:9c:59:eb:5b:f8:c1:69:56:8e:b4:d4:c5:05:f9: 4f:82:6e:84:3f:83:12:38:17:80:97:8d:69:76:95:f9:a9:33: 9d:12:b2:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+CRqrAaeJDwe+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzOGUyZWQtOTBlNC00ODk2LThhNWItMmRiNDMzNzZh MzJjMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ODM0NWRhN2MtZmU4Yy00ZDhhLWFjZTAtZDEwZmRjN2M3MGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxWai339JSdO+bcg2J6OJWtdsBQw+oFoVViD 2IdAbi5n/mTimy2NGOEphLzY5n1t9RTrVjz8klL3e+6sexbnWAnLy8DcxlZLio9i OGPIr8OPBVbiesoTaaHceRE1Mb8vhgqzyFM4qndHtk2JPlDldNLTE9NPK62naVa/ 9PEXdgvMCQk2j0azN2kkreVRfFeqZe3ViPV+Fatr1Xj/+UTp2L9BEVLgvyD3NbOq JD+dlUepKkfFG4sSMJn7HMoTU3Zy2CNsbEwx5AYEUc552HL4TphOeWPegRnQA0rw YrFW/2yrE3nSqpMAsRFZuTs6twJchHdBkLJ0BbFvUIYIt1pWEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOuHa2sfico4yyHvgmKhRNfcexfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4 ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0MzM3NmEzMmMvYzI5NTM1YzAtMzVmOS0z Y2JkLTgzOTAtMGY0ZjNlNzEyZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAzOGUyZWQtOTBlNC00ODk2LThh NWItMmRiNDMzNzZhMzJjLzYwMzhlMmVkLTkwZTQtNDg5Ni04YTViLTJkYjQzMzc2 YTMyYy5jcmwwHwYDVR0jBBgwFoAUKQXSFcuRrCTkVNF0V9vyB3VzTUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0 MzM3NmEzMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE63f5AhI+3Xb5nWhPc+1Ilf64uQx7Zi1NoDhaCPIa8BO7kMhQAfA94/ iYsEyOusKtfyGGi23Yga0TwDo/Hw2zcbN9K25lui++xGnDeoh838xaVnl2d8UtjN Lc2O9hPHxwdmQEyI1Lrgw4kUR/4oY025KFVCkpauAS/LICmw+ln+O+bnS1cwiTGR pwx/TEBEZlrT17eSL+T8BhP1hRR9S025P57iffOXZCZFaj7lArMIGmAnj4d3eO8c T2OcE0A7y5nCsCxJXBopLnPGsTPhWGZZyCdsQh0wHz9PIQGcWetb+MFpVo601MUF +U+CboQ/gxI4F4CXjWl2lfmpM50SsiQ= -----END CERTIFICATE-----Generated at Tue Oct 20 05:06:59 2026 by rpki-client