$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df/66a1a8a6-905c-3660-b308-3a6db8d1e057.roa File: 66a1a8a6-905c-3660-b308-3a6db8d1e057.roa (raw, json) Hash identifier: t4d0QbslWOGcJQNj4yTK56zNoEIfk/RnHS7TDBawnTg= Subject key identifier: D3:0D:40:05:59:8C:3F:DB:5F:5E:41:3D:39:E7:4D:47:C0:CB:52:5B Certificate issuer: /CN=8e0f4fae-ff80-4fa6-bac5-646b485c54df Certificate serial: 010D0C9F4328584F6A6EBDE4C51D624893B75500 Authority key identifier: B5:DF:68:BB:5F:85:C0:EA:5E:AC:9E:87:15:60:09:EB:E8:36:A2:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df/66a1a8a6-905c-3660-b308-3a6db8d1e057.roa Signing time: Tue 06 Oct 2026 20:34:16 +0000 ROA not before: Tue 06 Oct 2026 20:34:16 +0000 ROA not after: Mon 04 Jan 2027 21:34:16 +0000 asID: 403034 IP address blocks: 204.68.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df/8e0f4fae-ff80-4fa6-bac5-646b485c54df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df/8e0f4fae-ff80-4fa6-bac5-646b485c54df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:6e:bd:e4:c5:1d:62:48:93:b7:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0f4fae-ff80-4fa6-bac5-646b485c54df Validity Not Before: Oct 6 20:34:16 2026 GMT Not After : Jan 4 21:34:16 2027 GMT Subject: CN=099aebf3-737c-4d00-a006-cad8c3c097cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:75:99:6c:a8:7a:74:f1:f7:d3:88:f8:de: c6:39:87:8d:5c:cf:a5:22:c0:ae:d1:68:13:1f:50: 99:e4:0d:11:82:f4:51:29:2f:03:d7:cb:5a:9f:22: 32:75:ec:5b:2e:21:c0:73:94:40:db:8a:dc:76:a4: 9c:b6:97:d5:13:15:22:8f:d1:e9:43:fb:8a:09:a4: f4:99:6c:fb:0b:eb:f1:b0:e0:98:15:74:81:ff:08: f1:b8:a7:d0:df:a3:d8:bc:5c:36:76:e1:47:c5:d7: 49:c8:74:ea:5f:33:b3:3a:5a:92:03:19:ff:cb:7e: 33:0d:ba:fc:81:9d:37:97:e4:f2:68:e2:3b:8f:83: 0d:b8:35:71:b6:a1:a3:f5:05:16:f9:e4:a1:d5:a3: 75:20:ed:39:80:27:0e:fd:47:39:2c:da:91:d0:5b: 16:8b:c7:ed:95:fc:50:e7:32:0c:f1:2f:1f:9f:71: 10:43:59:61:85:4c:46:45:91:08:fb:03:15:e1:3d: 58:cf:70:21:88:cc:c0:19:22:67:5a:af:58:7f:4d: 4f:c5:0e:ac:d9:5e:7d:2d:62:ad:c0:91:e7:02:9e: e1:8a:da:11:ab:ed:46:f8:c3:8e:fe:b3:2d:9b:ce: fe:ab:99:dd:35:ba:e0:f3:34:71:04:1f:b6:e8:12: 54:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0D:40:05:59:8C:3F:DB:5F:5E:41:3D:39:E7:4D:47:C0:CB:52:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df/66a1a8a6-905c-3660-b308-3a6db8d1e057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df/8e0f4fae-ff80-4fa6-bac5-646b485c54df.crl X509v3 Authority Key Identifier: keyid:B5:DF:68:BB:5F:85:C0:EA:5E:AC:9E:87:15:60:09:EB:E8:36:A2:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df.cer sbgp-ipAddrBlock: critical IPv4: 204.68.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7c:37:86:43:6d:b8:e8:2c:d6:5d:a4:d8:af:2a:aa:47:03: 17:bb:88:5c:fb:fc:36:a8:f8:39:54:74:c7:7f:07:a3:1f:d5: 9d:50:f7:92:f4:61:9f:a2:13:e1:38:ca:cc:bb:42:65:59:28: a7:4f:51:eb:b1:49:b8:e2:8c:f4:99:3c:0a:19:19:d9:59:4a: c2:bb:97:7f:2e:1f:41:48:8a:89:77:73:9c:57:6b:d0:84:84: 15:a4:c9:0f:de:a7:03:55:80:cc:5b:89:13:32:e8:be:21:31: bc:d0:ed:af:7c:ab:90:99:96:41:b0:fe:89:b8:e4:ab:80:39: b1:7c:a7:d5:c6:c4:ce:87:56:ed:75:7e:89:df:61:5b:7e:cd: c2:9b:65:a6:02:a5:af:0a:2b:8c:18:cf:08:5f:b9:99:01:63: 6b:d7:67:72:78:e1:23:11:b9:0e:c6:8c:6f:87:37:30:11:40: 15:37:c9:d7:87:f0:b3:fa:15:d3:8f:28:64:54:03:0f:88:6f: 9a:6f:9a:2a:ad:52:49:05:16:c3:1d:5a:55:91:88:d0:e2:71: 3e:02:3b:67:25:c5:34:d5:cd:26:78:62:bb:ba:f4:1e:15:40: 5c:f7:3a:a7:70:40:96:9a:7a:59:4e:5f:6a:c4:8e:50:94:bf: 5d:03:00:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9qbr3kxR1iSJO3VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwZjRmYWUtZmY4MC00ZmE2LWJhYzUtNjQ2YjQ4NWM1 NGRmMB4XDTI2MTAwNjIwMzQxNloXDTI3MDEwNDIxMzQxNlowLzEtMCsGA1UEAxMk MDk5YWViZjMtNzM3Yy00ZDAwLWEwMDYtY2FkOGMzYzA5N2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw91mWyoenTx99OI+N7GOYeNXM+lIsCu0WgT H1CZ5A0RgvRRKS8D18tanyIydexbLiHAc5RA24rcdqSctpfVExUij9HpQ/uKCaT0 mWz7C+vxsOCYFXSB/wjxuKfQ36PYvFw2duFHxddJyHTqXzOzOlqSAxn/y34zDbr8 gZ03l+TyaOI7j4MNuDVxtqGj9QUW+eSh1aN1IO05gCcO/Uc5LNqR0FsWi8ftlfxQ 5zIM8S8fn3EQQ1lhhUxGRZEI+wMV4T1Yz3AhiMzAGSJnWq9Yf01PxQ6s2V59LWKt wJHnAp7hitoRq+1G+MOO/rMtm87+q5ndNbrg8zRxBB+26BJUrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMNQAVZjD/bX15BPTnnTUfAy1JbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84ZTBm NGZhZS1mZjgwLTRmYTYtYmFjNS02NDZiNDg1YzU0ZGYvNjZhMWE4YTYtOTA1Yy0z NjYwLWIzMDgtM2E2ZGI4ZDFlMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGUwZjRmYWUtZmY4MC00ZmE2LWJh YzUtNjQ2YjQ4NWM1NGRmLzhlMGY0ZmFlLWZmODAtNGZhNi1iYWM1LTY0NmI0ODVj NTRkZi5jcmwwHwYDVR0jBBgwFoAUtd9ou1+FwOperJ6HFWAJ6+g2ojswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84ZTBmNGZhZS1mZjgwLTRmYTYtYmFjNS02NDZi NDg1YzU0ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzETuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd8N4ZDbbjoLNZdpNivKqpHAxe7iFz7/Dao+DlUdMd/B6Mf1Z1Q95L0 YZ+iE+E4ysy7QmVZKKdPUeuxSbjijPSZPAoZGdlZSsK7l38uH0FIiol3c5xXa9CE hBWkyQ/epwNVgMxbiRMy6L4hMbzQ7a98q5CZlkGw/om45KuAObF8p9XGxM6HVu11 fonfYVt+zcKbZaYCpa8KK4wYzwhfuZkBY2vXZ3J44SMRuQ7GjG+HNzARQBU3ydeH 8LP6FdOPKGRUAw+Ib5pvmiqtUkkFFsMdWlWRiNDicT4CO2clxTTVzSZ4Yru69B4V QFz3OqdwQJaaellOX2rEjlCUv10DABQ= -----END CERTIFICATE-----Generated at Sat Oct 31 11:15:54 2026 by rpki-client