$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/f57d9158-f77c-3e77-906b-2e1d5a9450f9.roa File: f57d9158-f77c-3e77-906b-2e1d5a9450f9.roa (raw, json) Hash identifier: TWVmOumEisvXlrYHx3aG1kOi0uXWhcjTHZy0F2fA/w0= Subject key identifier: A1:FB:B7:F3:8C:8C:89:31:CE:02:59:4C:13:DB:DA:8E:01:BA:11:AC Certificate issuer: /CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e Certificate serial: 010D0C9F4328584EFAF6816CFC8E8E42C913FF80 Authority key identifier: FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/f57d9158-f77c-3e77-906b-2e1d5a9450f9.roa Signing time: Thu 27 Aug 2026 22:17:17 +0000 ROA not before: Thu 27 Aug 2026 22:17:17 +0000 ROA not after: Wed 25 Nov 2026 23:17:17 +0000 asID: 46572 IP address blocks: 66.223.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:f6:81:6c:fc:8e:8e:42:c9:13:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e Validity Not Before: Aug 27 22:17:17 2026 GMT Not After : Nov 25 23:17:17 2026 GMT Subject: CN=38f4b71e-9d5b-47df-901a-8d4813f81b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:12:35:c7:ef:a6:3f:44:76:e2:43:40:c3: fc:0c:0b:4d:0a:c7:ac:34:0d:4a:f7:dd:3e:e0:7c: 1f:07:c1:1c:6e:71:b5:3e:08:fb:27:7a:25:2b:85: b7:ee:1c:5e:69:8c:6c:8c:61:2d:93:9d:7f:d5:ee: b4:87:2b:a2:04:6d:49:33:db:86:48:10:4c:2c:39: d9:b5:4a:11:6a:80:12:ad:30:db:f9:8e:23:eb:b5: c3:b8:92:69:0e:59:0f:df:ae:fa:d7:10:3d:f5:11: c4:e2:37:bb:17:95:fc:f8:83:c3:1d:7d:52:2c:b6: db:de:de:30:51:f2:fe:75:7a:de:8f:a7:37:3b:bf: 4d:cb:f7:90:9a:f3:b0:4c:d0:22:33:6b:3a:17:e5: fa:c6:3d:12:dc:54:cc:60:f5:46:68:92:ac:fe:e4: d9:cf:8d:cd:de:82:93:de:fc:c8:6c:52:ef:ee:47: 33:8c:cd:5b:30:a2:74:be:e3:ac:18:97:13:e7:03: 53:9c:9e:dc:31:1b:3a:91:b9:28:75:7f:e2:14:63: bc:2c:e7:51:04:10:2f:2f:1f:c2:ed:de:5a:fd:10: ed:be:e3:e3:a6:9f:b0:f3:dc:95:d6:cc:39:3f:36: 61:e8:0e:e1:b3:71:0c:c1:39:a9:b2:ac:19:75:76: 19:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FB:B7:F3:8C:8C:89:31:CE:02:59:4C:13:DB:DA:8E:01:BA:11:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/f57d9158-f77c-3e77-906b-2e1d5a9450f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl X509v3 Authority Key Identifier: keyid:FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer sbgp-ipAddrBlock: critical IPv4: 66.223.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:79:21:1b:53:05:de:ed:05:81:eb:28:e3:dc:e0:1a:53:a0: f1:44:35:8f:33:41:aa:07:ea:73:d9:66:1c:ad:17:96:a1:de: f4:94:9f:ef:78:06:cd:ac:63:c6:87:b0:51:19:61:b7:55:72: 9e:ea:33:56:c0:1a:95:a1:f5:28:68:0b:ee:79:2d:bb:bb:76: 78:d8:a5:59:0f:b1:42:01:7f:c0:8f:b8:63:89:15:4d:97:40: e1:94:e4:3e:53:96:e6:fb:d3:48:d6:b6:6f:f3:05:b4:13:64: 16:78:f7:28:11:e4:f2:8e:0c:01:1b:6a:4c:ea:84:2b:81:3a: 71:a1:c7:a3:f5:e1:f4:c8:05:78:c9:0f:07:80:88:a2:76:3a: 0b:48:c4:fe:1d:c4:db:80:ec:a5:78:4d:96:fa:42:21:14:e8: 8e:ad:93:cf:fb:ce:ae:f7:8b:cb:6c:1f:6a:99:a0:0f:e3:29: b7:d9:22:ee:11:a3:44:9a:ba:d0:18:b9:29:75:27:37:67:77: 05:f4:ef:61:78:9c:42:a0:2b:75:71:ae:4c:d6:73:53:7b:13: 8b:97:4d:ca:60:06:ee:eb:1d:42:09:93:39:62:60:14:33:a6: 9b:ba:37:49:c0:3e:06:6c:7a:30:92:0e:1e:6d:3f:5c:4a:b9: f6:8b:91:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE769oFs/I6OQskT/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdiM2NmNGMtYmJhMC00ODFjLThlODItNzRmMDUwYzVm YTJlMB4XDTI2MDgyNzIyMTcxN1oXDTI2MTEyNTIzMTcxN1owLzEtMCsGA1UEAxMk MzhmNGI3MWUtOWQ1Yi00N2RmLTkwMWEtOGQ0ODEzZjgxYjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlsSNcfvpj9EduJDQMP8DAtNCsesNA1K990+ 4HwfB8EcbnG1Pgj7J3olK4W37hxeaYxsjGEtk51/1e60hyuiBG1JM9uGSBBMLDnZ tUoRaoASrTDb+Y4j67XDuJJpDlkP36761xA99RHE4je7F5X8+IPDHX1SLLbb3t4w UfL+dXrej6c3O79Ny/eQmvOwTNAiM2s6F+X6xj0S3FTMYPVGaJKs/uTZz43N3oKT 3vzIbFLv7kczjM1bMKJ0vuOsGJcT5wNTnJ7cMRs6kbkodX/iFGO8LOdRBBAvLx/C 7d5a/RDtvuPjpp+w89yV1sw5PzZh6A7hs3EMwTmpsqwZdXYZdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKH7t/OMjIkxzgJZTBPb2o4BuhGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jN2Iz Y2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYwNTBjNWZhMmUvZjU3ZDkxNTgtZjc3Yy0z ZTc3LTkwNmItMmUxZDVhOTQ1MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzdiM2NmNGMtYmJhMC00ODFjLThl ODItNzRmMDUwYzVmYTJlL2M3YjNjZjRjLWJiYTAtNDgxYy04ZTgyLTc0ZjA1MGM1 ZmEyZS5jcmwwHwYDVR0jBBgwFoAU/7ynqLDJPgswXH1AXm0eDyu6kwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jN2IzY2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYw NTBjNWZhMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQt88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV5IRtTBd7tBYHrKOPc4BpToPFENY8zQaoH6nPZZhytF5ah3vSUn+94 Bs2sY8aHsFEZYbdVcp7qM1bAGpWh9ShoC+55Lbu7dnjYpVkPsUIBf8CPuGOJFU2X QOGU5D5Tlub700jWtm/zBbQTZBZ49ygR5PKODAEbakzqhCuBOnGhx6P14fTIBXjJ DweAiKJ2OgtIxP4dxNuA7KV4TZb6QiEU6I6tk8/7zq73i8tsH2qZoA/jKbfZIu4R o0SautAYuSl1JzdndwX072F4nEKgK3VxrkzWc1N7E4uXTcpgBu7rHUIJkzliYBQz ppu6N0nAPgZsejCSDh5tP1xKufaLkdQ= -----END CERTIFICATE-----Generated at Sun Sep 13 12:33:05 2026 by rpki-client