$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/4352fe98-6e7b-3d25-979a-a24f98bda45b.roa File: 4352fe98-6e7b-3d25-979a-a24f98bda45b.roa (raw, json) Hash identifier: rBQsF2FhvUcE+5pkQadOgL/mMxq5Jn8KQdbQzn6ViHI= Subject key identifier: AB:74:63:75:C1:0A:DA:21:0C:13:20:39:82:23:DB:19:4C:B2:32:57 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584ED431EA7A9D0EC67FC9AA8580 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/4352fe98-6e7b-3d25-979a-a24f98bda45b.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 66.110.39.0/24 maxlen: 24 66.198.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:ea:7a:9d:0e:c6:7f:c9:aa:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=3ddcbaa1-da7f-4e0a-ac68-c3c4e5a23c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:d4:79:b5:eb:e5:69:fe:76:b9:34:60:08: 3d:24:29:92:2e:91:01:1e:50:77:c3:65:9f:1e:be: 03:19:09:ff:77:35:3f:fd:22:e5:dc:9b:5f:9c:9a: 40:b3:d8:76:62:07:a6:58:db:fd:e6:a2:53:ec:a2: fd:7b:84:03:dd:5f:dc:7b:76:f9:01:e8:45:fc:ab: 34:14:04:d9:32:a4:b8:2c:66:0c:8e:e5:9d:96:24: 33:33:fe:bc:f5:5e:3f:38:15:3e:bf:ad:8f:51:b4: f9:e9:c3:db:28:e1:c7:d0:9d:54:7b:ec:1f:2a:17: 09:45:fe:e4:f6:2e:81:83:b6:ec:f2:aa:21:f5:1f: a0:27:a9:db:42:06:ef:63:b4:ea:de:d0:de:c1:33: 48:09:ca:74:2c:c5:b0:d9:b7:88:75:75:48:39:96: 43:5d:43:e5:57:03:11:8c:e1:d6:62:7a:9b:84:dd: 98:a1:3b:e0:2d:fb:ab:30:e2:34:49:57:0a:c7:44: 3e:ba:52:8e:a2:68:61:8c:d7:a0:90:03:df:43:e6: ac:ec:98:42:44:27:70:15:65:d0:34:aa:79:ee:f5: d6:8a:de:a4:ac:cf:02:14:23:35:16:79:e1:d4:ab: 31:4b:3c:ae:10:b5:c6:f4:aa:12:73:37:bc:db:15: 1c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:74:63:75:C1:0A:DA:21:0C:13:20:39:82:23:DB:19:4C:B2:32:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/4352fe98-6e7b-3d25-979a-a24f98bda45b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 66.110.39.0/24 66.198.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c4:8e:c0:20:b3:aa:f7:05:ed:87:fe:44:82:47:35:2f:12: 2a:ee:1d:23:2e:e7:59:2e:2d:e3:84:0b:a1:f9:28:9a:f9:6b: 94:55:01:9a:30:fd:8d:0b:28:26:1d:96:c7:e0:e6:f5:a2:b8: df:7f:5c:4d:20:40:91:66:e1:5d:4e:ed:a5:5a:ac:38:10:8a: 18:89:14:91:ad:50:f8:17:84:23:44:ff:49:49:79:4a:13:11: 1d:3b:06:23:7d:b0:da:2c:d2:bc:62:0b:47:02:48:ed:31:3b: c3:dc:14:a4:4e:e5:46:ec:34:b8:30:cc:39:47:49:a9:5f:79: ff:f2:b9:61:7b:ae:34:d7:0d:61:da:71:86:97:34:d7:cd:2c: 40:5a:49:11:90:e3:38:21:bf:f0:41:1a:9e:f2:da:2d:ec:27: f1:7a:a8:9b:23:3c:61:71:63:25:70:8d:5e:16:07:d4:af:7f: d5:e1:73:43:a6:e6:ba:29:88:90:15:1f:96:2d:55:68:48:ee: 18:6d:97:44:a7:5a:00:67:7d:d3:48:40:b1:1e:89:f0:b6:7c: 20:72:7c:c8:9e:1a:86:cc:46:00:86:c3:e8:a9:f1:fd:ac:57: 32:72:7f:7e:6a:26:08:9a:fe:71:b4:4e:7f:cb:44:31:25:72: fa:af:f5:f5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7UMep6nQ7Gf8mqhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk M2RkY2JhYTEtZGE3Zi00ZTBhLWFjNjgtYzNjNGU1YTIzYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEnUebXr5Wn+drk0YAg9JCmSLpEBHlB3w2Wf Hr4DGQn/dzU//SLl3JtfnJpAs9h2YgemWNv95qJT7KL9e4QD3V/ce3b5AehF/Ks0 FATZMqS4LGYMjuWdliQzM/689V4/OBU+v62PUbT56cPbKOHH0J1Ue+wfKhcJRf7k 9i6Bg7bs8qoh9R+gJ6nbQgbvY7Tq3tDewTNICcp0LMWw2beIdXVIOZZDXUPlVwMR jOHWYnqbhN2YoTvgLfurMOI0SVcKx0Q+ulKOomhhjNegkAPfQ+as7JhCRCdwFWXQ NKp57vXWit6krM8CFCM1Fnnh1KsxSzyuELXG9KoScze82xUcWQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKt0Y3XBCtohDBMgOYIj2xlMsjJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvNDM1MmZlOTgtNmU3Yi0z ZDI1LTk3OWEtYTI0Zjk4YmRhNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQm4nAwQA QsZuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE7EjsAgs6r3Be2H/kSCRzUvEiruHSMu51kuLeOEC6H5KJr5 a5RVAZow/Y0LKCYdlsfg5vWiuN9/XE0gQJFm4V1O7aVarDgQihiJFJGtUPgXhCNE /0lJeUoTER07BiN9sNos0rxiC0cCSO0xO8PcFKRO5UbsNLgwzDlHSalfef/yuWF7 rjTXDWHacYaXNNfNLEBaSRGQ4zghv/BBGp7y2i3sJ/F6qJsjPGFxYyVwjV4WB9Sv f9Xhc0Om5ropiJAVH5YtVWhI7hhtl0SnWgBnfdNIQLEeifC2fCByfMieGobMRgCG w+ip8f2sVzJyf35qJgia/nG0Tn/LRDElcvqv9fU= -----END CERTIFICATE-----Generated at Tue Sep 1 02:54:32 2026 by rpki-client