$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa File: cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa (raw, json) Hash identifier: pztmiIXMWdLQ3BJg15lIseHeP9enfvz2zC1xEGKcHZ8= Subject key identifier: CC:E2:93:2B:BD:36:7A:73:E4:A8:5F:A0:87:7D:21:E9:72:62:9F:E7 Certificate issuer: /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb Certificate serial: 010D0C9F4328584F4C3D4A0951842EF105DF6780 Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 13335 IP address blocks: 169.196.66.0/24 maxlen: 24 169.196.67.0/24 maxlen: 24 169.196.68.0/24 maxlen: 24 169.196.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4a:09:51:84:2e:f1:05:df:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=3b1d60ce-4093-4913-af73-fbbeaf5d183f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:c9:64:15:40:a3:89:90:cf:50:80:a9:d2: af:31:23:45:ab:ca:99:d2:8e:fe:c4:1c:49:2d:91: 82:7b:ff:8a:7c:51:22:f2:0a:1e:61:d0:df:cb:92: 08:cf:4a:cb:ec:08:3f:58:86:1f:e1:84:67:8a:79: cd:6e:c0:ec:76:2e:07:2c:81:91:02:70:bc:ba:f2: 6b:4d:dc:c3:b9:be:d8:82:64:7b:55:96:39:82:07: 86:37:2d:6a:54:7c:3e:28:ad:56:d4:8f:83:9d:f3: 95:2c:a2:16:b0:d9:80:1a:bc:73:46:21:b1:30:c6: 71:20:12:73:7c:7d:74:82:c8:87:52:68:e4:5a:1b: 50:eb:90:92:99:21:6b:db:39:a2:6c:63:9a:99:16: 1f:87:73:e0:7e:80:44:f2:25:96:42:49:c3:52:d7: bb:73:2a:12:2d:0f:b8:7b:db:5c:df:15:c1:18:2d: c4:09:25:3c:25:be:ec:17:c6:68:17:98:90:b7:c0: 8d:23:87:03:e2:4d:4d:16:2d:16:40:da:e2:f2:5d: 3f:3d:9e:93:22:ef:77:f5:28:ae:3d:49:bd:53:47: 85:85:fd:bd:b7:69:e6:ba:2e:0d:b1:87:7f:32:3d: a2:fd:5c:c7:db:eb:ce:5b:24:12:14:11:fd:24:35: b2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E2:93:2B:BD:36:7A:73:E4:A8:5F:A0:87:7D:21:E9:72:62:9F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl X509v3 Authority Key Identifier: keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer sbgp-ipAddrBlock: critical IPv4: 169.196.66.0-169.196.69.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:9e:3a:b7:48:e7:33:ed:41:1b:66:d8:cc:d4:97:25:f6:19: ca:88:7b:d3:57:a4:43:20:2b:03:14:aa:3d:e4:5d:48:fd:05: 35:ac:54:6b:ce:01:c4:52:67:16:ee:28:58:f7:6b:f6:39:07: d7:c0:2f:ad:a6:2d:e6:82:12:b6:d3:20:b5:73:fa:32:46:22: 2e:71:1c:62:59:4e:c6:cd:d5:b7:4e:ec:a4:f5:33:0b:b0:83: 32:be:c9:5f:20:d3:64:b9:17:4f:b7:e5:69:80:2e:c0:e3:32: d0:4e:d8:97:c6:81:b8:3e:29:af:5b:c4:fe:aa:79:00:f2:ed: 93:65:cb:ef:49:35:02:86:10:36:e6:51:ed:b5:c9:fd:fc:cf: 4f:e5:09:de:d1:00:d2:a9:a8:88:c3:a4:17:e2:be:ff:1a:19: c3:6e:8a:27:1a:12:46:2a:2f:89:be:fb:af:37:7d:32:88:9b: c6:b6:49:90:1b:f1:de:8e:7f:e7:ef:98:7e:b6:bc:f6:e6:fe: 68:b1:02:2e:3b:b9:da:da:6a:25:a2:39:f0:c5:0b:f0:24:07: 8a:84:85:75:60:fe:2d:db:b7:53:1b:75:2b:7c:1a:e7:e6:07: f6:fd:6b:6c:b0:31:41:6e:bb:3b:eb:49:b0:35:da:de:eb:4a: 15:73:79:59 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9MPUoJUYQu8QXfZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTczZWUxYmItYmI2Yi00Y2M2LWJjYTEtNGMxNjIyZGM0 ZWRiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk M2IxZDYwY2UtNDA5My00OTEzLWFmNzMtZmJiZWFmNWQxODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaTJZBVAo4mQz1CAqdKvMSNFq8qZ0o7+xBxJ LZGCe/+KfFEi8goeYdDfy5IIz0rL7Ag/WIYf4YRninnNbsDsdi4HLIGRAnC8uvJr TdzDub7YgmR7VZY5ggeGNy1qVHw+KK1W1I+DnfOVLKIWsNmAGrxzRiGxMMZxIBJz fH10gsiHUmjkWhtQ65CSmSFr2zmibGOamRYfh3PgfoBE8iWWQknDUte7cyoSLQ+4 e9tc3xXBGC3ECSU8Jb7sF8ZoF5iQt8CNI4cD4k1NFi0WQNri8l0/PZ6TIu939Siu PUm9U0eFhf29t2nmui4NsYd/Mj2i/VzH2+vOWyQSFBH9JDWyfQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMzikyu9Nnpz5KhfoId9IelyYp/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NzNl ZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2MjJkYzRlZGIvY2Y2NTdjNWEtNmM3NS0z ZWRhLWI1ZDItNzE0ZjVlYmVlNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTczZWUxYmItYmI2Yi00Y2M2LWJj YTEtNGMxNjIyZGM0ZWRiLzU3M2VlMWJiLWJiNmItNGNjNi1iY2ExLTRjMTYyMmRj NGVkYi5jcmwwHwYDVR0jBBgwFoAU5bcwnII1o67jk7VvPhVOUUksQ+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzNlZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2 MjJkYzRlZGIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGpxEID BAGpxEQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFZ46t0jnM+1BG2bYzNSXJfYZyoh701ekQyArAxSqPeRd SP0FNaxUa84BxFJnFu4oWPdr9jkH18AvraYt5oISttMgtXP6MkYiLnEcYllOxs3V t07spPUzC7CDMr7JXyDTZLkXT7flaYAuwOMy0E7Yl8aBuD4pr1vE/qp5APLtk2XL 70k1AoYQNuZR7bXJ/fzPT+UJ3tEA0qmoiMOkF+K+/xoZw26KJxoSRiovib77rzd9 MoibxrZJkBvx3o5/5++Yfra89ub+aLECLju52tpqJaI58MUL8CQHioSFdWD+Ldu3 Uxt1K3wa5+YH9v1rbLAxQW67O+tJsDXa3utKFXN5WQ== -----END CERTIFICATE-----Generated at Sat Oct 17 21:31:14 2026 by rpki-client