$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa File: 43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa (raw, json) Hash identifier: WbMivz1dmKTpgnFnEXiHCgJYXM17qrrKgWjkavlcSKc= Subject key identifier: E4:B3:79:17:79:EA:D0:02:5F:B5:B3:05:B3:E3:00:3B:E8:C7:E0:F0 Certificate issuer: /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Certificate serial: 010D0C9F4328584EE38CAF251BEE48BC2E821280 Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 14434 IP address blocks: 66.185.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:af:25:1b:ee:48:bc:2e:82:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=21205188-2d89-433b-8518-80ca26d3d24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:86:ad:b0:e2:4d:b5:c2:9b:9f:73:ad:35:08: 79:35:75:52:9a:7a:2b:2a:91:98:97:11:a7:8a:61: 17:fc:1a:f5:37:f1:e9:00:4f:89:6e:e9:bf:db:b5: ee:9c:d2:6e:14:75:c2:29:6f:0e:08:e6:cf:c4:77: 47:c3:fc:7d:77:06:a1:ad:a1:cd:1a:03:ca:90:33: 74:3f:19:bc:06:ad:ac:35:d4:91:7c:e1:ac:11:cd: aa:24:e2:ce:4f:3a:70:b0:d1:56:ea:8b:94:8a:20: 49:75:2c:f2:9b:08:cd:0c:35:06:6f:cb:9f:19:b1: 96:30:86:66:a0:78:a0:af:b5:5a:70:6c:3e:17:96: ea:1e:bc:50:7e:8c:5d:cd:21:d4:2c:f8:51:c2:b5: 20:60:75:69:1a:89:09:d5:0a:20:5b:38:6f:7a:93: 4f:ae:10:7d:e7:56:39:bf:39:96:cb:e7:fd:60:53: e4:cd:85:0c:2c:70:a8:2a:44:9a:f2:f5:02:f1:d8: 0c:45:81:be:c2:07:59:ce:b5:7b:79:53:8e:b2:81: 29:47:cc:f4:fc:09:6d:9a:a9:0e:db:56:b1:a9:df: f0:9d:a2:f7:93:ff:ef:4c:22:45:15:f2:42:b5:37: 64:a1:d9:c3:cd:d8:28:32:b6:30:6d:c3:15:38:b6: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B3:79:17:79:EA:D0:02:5F:B5:B3:05:B3:E3:00:3B:E8:C7:E0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl X509v3 Authority Key Identifier: keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer sbgp-ipAddrBlock: critical IPv4: 66.185.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:bc:eb:d8:b9:aa:7b:ec:9d:f8:58:b1:0e:58:10:2e:76:ed: c0:9d:30:b8:c6:40:33:c9:b4:4b:94:88:e1:a6:08:53:0f:53: eb:14:17:54:06:db:05:67:b5:d2:0b:6d:98:a6:ae:6f:29:f5: 75:3a:5e:50:b9:ff:d8:8e:c1:89:a5:ba:c5:4b:99:82:ea:04: 50:41:a8:fd:08:47:fd:e8:5b:d0:58:38:54:43:fc:fa:79:c5: 3f:32:99:a1:86:fe:21:40:c5:2d:b5:7d:40:db:25:af:10:66: c7:1c:a8:b9:fa:c4:66:b6:fc:2b:70:5e:d1:4f:41:3a:ff:09: 9b:37:7e:18:d7:eb:9a:e0:16:88:77:46:29:87:57:5a:45:3c: 18:4b:ce:dd:4c:27:c0:29:81:c0:ee:dc:2d:cf:72:5b:7c:e1: e1:f9:06:d4:80:05:dc:38:07:ca:d4:34:f5:58:12:ac:ce:6f: 1a:2a:4d:92:23:6f:d3:2f:d6:02:c3:84:70:bf:a4:2d:37:76: da:9e:22:75:19:81:cc:9b:b7:ba:40:2e:e9:c5:2b:9b:de:b5: f0:b2:c6:b4:31:e1:46:e1:99:83:7e:3b:c2:a7:ce:52:5f:f4: 2b:23:18:35:6e:aa:bc:66:6b:19:c6:c6:13:49:75:b3:32:5c: b7:4a:0a:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjK8lG+5IvC6CEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4ZGFjZjMtMjgzZi00ODg4LTgyMTctZWUzMGM2ZTU4 YzQ0MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk MjEyMDUxODgtMmQ4OS00MzNiLTg1MTgtODBjYTI2ZDNkMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIatsOJNtcKbn3OtNQh5NXVSmnorKpGYlxGn imEX/Br1N/HpAE+Jbum/27XunNJuFHXCKW8OCObPxHdHw/x9dwahraHNGgPKkDN0 Pxm8Bq2sNdSRfOGsEc2qJOLOTzpwsNFW6ouUiiBJdSzymwjNDDUGb8ufGbGWMIZm oHigr7VacGw+F5bqHrxQfoxdzSHULPhRwrUgYHVpGokJ1QogWzhvepNPrhB951Y5 vzmWy+f9YFPkzYUMLHCoKkSa8vUC8dgMRYG+wgdZzrV7eVOOsoEpR8z0/AltmqkO 21axqd/wnaL3k//vTCJFFfJCtTdkodnDzdgoMrYwbcMVOLZyuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSzeRd56tACX7WzBbPjADvox+DwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhk YWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZlNThjNDQvNDNjZjU2ZTItNWJkZS0z ZGJlLWE2YTMtNDA4MmMwNGM0MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGM4ZGFjZjMtMjgzZi00ODg4LTgy MTctZWUzMGM2ZTU4YzQ0L2RjOGRhY2YzLTI4M2YtNDg4OC04MjE3LWVlMzBjNmU1 OGM0NC5jcmwwHwYDVR0jBBgwFoAUvHiIigzEJtx03FOhX/A7+ErXURMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMw YzZlNThjNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq869i5qnvsnfhYsQ5YEC527cCdMLjGQDPJtEuUiOGmCFMPU+sUF1QG 2wVntdILbZimrm8p9XU6XlC5/9iOwYmlusVLmYLqBFBBqP0IR/3oW9BYOFRD/Pp5 xT8ymaGG/iFAxS21fUDbJa8QZsccqLn6xGa2/CtwXtFPQTr/CZs3fhjX65rgFoh3 RimHV1pFPBhLzt1MJ8ApgcDu3C3Pclt84eH5BtSABdw4B8rUNPVYEqzObxoqTZIj b9Mv1gLDhHC/pC03dtqeInUZgcybt7pALunFK5vetfCyxrQx4UbhmYN+O8KnzlJf 9CsjGDVuqrxmaxnGxhNJdbMyXLdKCuQ= -----END CERTIFICATE-----Generated at Sat Aug 22 19:29:35 2026 by rpki-client