$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d27025d9-66fe-3bfc-ad41-005a0dabb4ec.roa File: d27025d9-66fe-3bfc-ad41-005a0dabb4ec.roa (raw, json) Hash identifier: 90f3gAmYi4HCDMjFFkGkUjvJBjr3XIdP2yjUZ9idlyk= Subject key identifier: E7:49:DD:1E:FA:C5:B3:03:DD:8D:91:79:05:8A:2F:E7:76:50:08:CF Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584F7782DC6C888AF418CA916A40 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d27025d9-66fe-3bfc-ad41-005a0dabb4ec.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 11259 IP address blocks: 66.110.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:dc:6c:88:8a:f4:18:ca:91:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=ad9e1a00-9926-41bf-aba9-b922256442c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:8c:79:5f:70:24:da:98:fb:f2:e4:30:b6: 54:b1:08:d1:f9:04:1f:3a:ce:d6:de:78:eb:b8:21: f2:02:3b:40:b0:c4:20:08:27:25:a1:79:10:64:70: 3f:45:0c:bb:f0:b8:e1:4f:b8:ab:35:7c:6c:59:48: 3c:1b:cc:96:fe:b8:bb:05:c1:e3:5e:6a:42:13:06: c7:66:bc:d4:3e:91:47:ef:45:4a:54:31:3d:5a:79: a0:a4:db:6a:08:54:2e:02:e5:be:f2:36:30:c7:4a: d3:ca:3c:29:4d:35:c0:02:f1:19:3e:cc:2f:a6:f8: ea:99:d3:6b:a9:2e:f6:ee:ce:5c:da:7d:52:22:70: aa:8e:f5:e4:83:61:e8:1a:34:55:54:88:26:40:1b: ad:3a:fd:27:f2:21:4e:42:32:ca:90:27:f4:58:97: 3c:3d:ce:db:64:cd:bd:07:dc:f8:e0:f5:7a:a9:89: 17:9d:dd:d6:49:ce:64:a9:40:b5:35:22:66:a5:c4: 49:78:44:47:8b:2c:9b:38:33:88:4b:ff:5a:db:8a: be:47:df:3e:72:c3:07:45:32:cb:8b:35:f3:cd:71: 4e:1a:7c:60:7e:3e:61:84:6f:9f:4e:50:88:de:6e: 53:15:08:ac:30:d6:44:64:6f:00:aa:7a:1c:88:da: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:49:DD:1E:FA:C5:B3:03:DD:8D:91:79:05:8A:2F:E7:76:50:08:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d27025d9-66fe-3bfc-ad41-005a0dabb4ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 66.110.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:14:f8:41:be:70:4e:78:12:25:33:8b:72:2e:b7:db:69:1c: a5:38:c8:e4:60:08:2a:4d:66:87:c8:10:4f:3c:0c:db:0c:bf: 58:19:b9:bc:45:da:14:6f:c7:b7:75:89:a7:6c:97:07:98:e3: 5c:8d:24:37:ee:20:2c:a6:4e:0d:7c:84:c4:46:aa:34:c8:4e: 6d:ad:1a:18:e7:4f:36:64:2f:70:52:0d:00:25:01:f4:a2:75: 8f:6b:36:e0:21:b5:cc:81:27:b5:9e:ba:8e:44:b7:5f:9c:43: cc:03:85:db:9c:06:c9:67:b4:05:63:3e:06:38:e9:79:13:b4: b2:71:08:c3:90:f1:96:96:7d:22:7e:b1:98:82:d2:a4:bf:87: 87:05:a0:e2:53:23:f9:d7:bb:10:61:a1:60:62:fc:b7:22:5f: 2a:49:f6:38:6b:32:70:91:6c:c1:4a:1c:5b:d7:c5:e3:cc:3f: dd:66:f6:e2:cb:20:da:1d:ff:9e:ed:1f:06:a3:fe:13:4b:09: 47:b4:94:79:4b:d4:a4:92:f5:56:5f:86:83:43:92:ef:eb:7d: 3a:0b:e6:b1:86:b1:69:f3:af:17:5b:63:33:17:b1:a1:3c:ec: 9f:c9:1c:76:7e:2d:d9:11:43:90:a6:f5:57:11:2c:b7:82:40: 7e:75:75:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gtxsiIr0GMqRakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YWQ5ZTFhMDAtOTkyNi00MWJmLWFiYTktYjkyMjI1NjQ0MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT2MeV9wJNqY+/LkMLZUsQjR+QQfOs7W3njr uCHyAjtAsMQgCCcloXkQZHA/RQy78LjhT7irNXxsWUg8G8yW/ri7BcHjXmpCEwbH ZrzUPpFH70VKVDE9WnmgpNtqCFQuAuW+8jYwx0rTyjwpTTXAAvEZPswvpvjqmdNr qS727s5c2n1SInCqjvXkg2HoGjRVVIgmQButOv0n8iFOQjLKkCf0WJc8Pc7bZM29 B9z44PV6qYkXnd3WSc5kqUC1NSJmpcRJeERHiyybODOIS/9a24q+R98+csMHRTLL izXzzXFOGnxgfj5hhG+fTlCI3m5TFQisMNZEZG8AqnociNqwmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdJ3R76xbMD3Y2ReQWKL+d2UAjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZDI3MDI1ZDktNjZmZS0z YmZjLWFkNDEtMDA1YTBkYWJiNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQm5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEU+EG+cE54EiUzi3Iut9tpHKU4yORgCCpNZofIEE88DNsMv1gZubxF 2hRvx7d1iadslweY41yNJDfuICymTg18hMRGqjTITm2tGhjnTzZkL3BSDQAlAfSi dY9rNuAhtcyBJ7Weuo5Et1+cQ8wDhducBslntAVjPgY46XkTtLJxCMOQ8ZaWfSJ+ sZiC0qS/h4cFoOJTI/nXuxBhoWBi/LciXypJ9jhrMnCRbMFKHFvXxePMP91m9uLL INod/57tHwaj/hNLCUe0lHlL1KSS9VZfhoNDku/rfToL5rGGsWnzrxdbYzMXsaE8 7J/JHHZ+LdkRQ5Cm9VcRLLeCQH51de4= -----END CERTIFICATE-----Generated at Wed Oct 14 15:35:13 2026 by rpki-client