$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/58a8d028-a294-333c-b7a6-9ef4d19446f3.roa File: 58a8d028-a294-333c-b7a6-9ef4d19446f3.roa (raw, json) Hash identifier: gEsIhszE0v5dnXhW4Dzc68UysmQGM9XA3RyRCCBDfM4= Subject key identifier: 07:B4:7B:11:8D:43:7E:1F:FD:F9:D0:B1:A7:62:34:1C:EC:73:5B:F2 Certificate issuer: /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab Certificate serial: 010D0C9F4328584ED431E23C32BD7E300B92EC80 Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/58a8d028-a294-333c-b7a6-9ef4d19446f3.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 48851 IP address blocks: 66.22.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e2:3c:32:bd:7e:30:0b:92:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=479bfa39-f8d6-4605-adaa-e2e1d54ffda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:c2:f7:66:40:20:7a:cf:96:9e:72:fc:5e: 2c:76:74:02:1c:00:38:1d:25:01:68:e0:ec:18:c8: c3:a7:f2:0e:df:48:25:50:ae:e0:be:d1:bf:29:4d: 9b:9e:9e:d2:08:4a:88:5b:2e:4b:17:6e:bf:88:ed: 7e:41:5d:8c:b9:93:31:99:84:d5:eb:de:d2:61:0c: d4:97:43:63:3e:bf:ae:b0:c9:86:1e:de:c1:de:17: 6e:2e:ec:d6:3b:5c:0e:5f:46:31:4f:46:33:23:55: 0e:15:cc:6d:97:f6:3e:c5:23:31:43:22:b3:48:6f: 9e:9b:45:cd:ca:02:4c:8a:9c:a1:c3:3b:f0:c7:12: 0b:b1:ae:5a:b5:7d:b5:b4:59:79:0e:f7:82:5d:54: 7c:8a:83:e2:d7:29:72:48:62:6b:59:ad:33:97:6b: 19:32:e1:e9:c8:73:8d:0e:6c:76:1b:6a:12:b0:f4: ac:1e:55:8a:84:f0:cd:68:8c:d6:de:a7:a4:43:a6: 2e:1c:26:ea:5e:41:22:13:3a:ab:94:2c:6f:6c:b9: b2:16:07:dd:eb:d3:3c:4d:b4:4d:77:24:ee:11:0c: 5c:b6:9d:9f:d9:98:ac:a7:7f:e6:e7:1e:bf:f6:e0: ff:03:9b:7e:eb:6b:3a:92:30:02:87:d5:80:67:88: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B4:7B:11:8D:43:7E:1F:FD:F9:D0:B1:A7:62:34:1C:EC:73:5B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/58a8d028-a294-333c-b7a6-9ef4d19446f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl X509v3 Authority Key Identifier: keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer sbgp-ipAddrBlock: critical IPv4: 66.22.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ac:d4:dc:ec:4d:16:db:81:d0:ad:da:11:96:e8:46:c5:f5: 23:d9:9f:db:12:4b:fb:ae:02:32:77:cd:63:6c:dc:36:b0:2d: 8e:6c:e0:22:a1:26:0f:72:4e:9e:11:ab:93:84:21:bc:1a:ab: 60:3f:74:69:9b:e0:cb:48:1b:a9:7d:b2:df:fe:f4:57:4a:40: 6e:71:6b:23:cf:b1:d3:66:b5:ac:29:30:30:56:1b:96:ad:1f: 1f:05:7c:3d:da:68:76:2a:bd:ff:5f:10:e6:75:df:46:63:48: c8:c1:5c:4e:19:a9:dc:b6:6c:7a:63:fa:73:db:70:44:bf:25: e6:2a:a0:33:3b:32:6c:4d:99:41:38:6a:5e:f2:58:ae:74:8b: 3e:25:89:e5:2e:c8:81:e2:d9:59:99:45:b8:cc:03:f4:9b:eb: 56:8d:56:e3:da:15:ec:66:25:57:00:72:0d:4c:2b:b6:2e:fe: 91:1c:ab:10:c2:c6:20:18:20:df:d2:1a:9f:dc:72:47:8c:05: e0:df:b5:9c:14:98:a0:e9:56:f1:03:c4:69:3d:46:3d:e2:0f: ca:7c:df:dd:c0:ef:ce:3f:41:59:dd:19:1f:d7:7f:30:40:10: 45:3b:32:15:3f:12:18:0e:11:f2:fe:bd:93:6c:13:c1:b0:11: d2:ac:d2:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMeI8Mr1+MAuS7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlYmYxZmQtYmU0OS00NzcxLTg3ZmItMmQwNDg4YmU0 Y2FiMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NDc5YmZhMzktZjhkNi00NjA1LWFkYWEtZTJlMWQ1NGZmZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQPC92ZAIHrPlp5y/F4sdnQCHAA4HSUBaODs GMjDp/IO30glUK7gvtG/KU2bnp7SCEqIWy5LF26/iO1+QV2MuZMxmYTV697SYQzU l0NjPr+usMmGHt7B3hduLuzWO1wOX0YxT0YzI1UOFcxtl/Y+xSMxQyKzSG+em0XN ygJMipyhwzvwxxILsa5atX21tFl5DveCXVR8ioPi1ylySGJrWa0zl2sZMuHpyHON Dmx2G2oSsPSsHlWKhPDNaIzW3qekQ6YuHCbqXkEiEzqrlCxvbLmyFgfd69M8TbRN dyTuEQxctp2f2Zisp3/m5x6/9uD/A5t+62s6kjACh9WAZ4jN0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe0exGNQ34f/fnQsadiNBzsc1vyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmVi ZjFmZC1iZTQ5LTQ3NzEtODdmYi0yZDA0ODhiZTRjYWIvNThhOGQwMjgtYTI5NC0z MzNjLWI3YTYtOWVmNGQxOTQ0NmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JlYmYxZmQtYmU0OS00NzcxLTg3 ZmItMmQwNDg4YmU0Y2FiLzdiZWJmMWZkLWJlNDktNDc3MS04N2ZiLTJkMDQ4OGJl NGNhYi5jcmwwHwYDVR0jBBgwFoAUpq0jJL8UkMK4U4ZCaPKBBwHrl0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmViZjFmZC1iZTQ5LTQ3NzEtODdmYi0yZDA0 ODhiZTRjYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQhYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEas1NzsTRbbgdCt2hGW6EbF9SPZn9sSS/uuAjJ3zWNs3DawLY5s4CKh Jg9yTp4Rq5OEIbwaq2A/dGmb4MtIG6l9st/+9FdKQG5xayPPsdNmtawpMDBWG5at Hx8FfD3aaHYqvf9fEOZ130ZjSMjBXE4Zqdy2bHpj+nPbcES/JeYqoDM7MmxNmUE4 al7yWK50iz4lieUuyIHi2VmZRbjMA/Sb61aNVuPaFexmJVcAcg1MK7Yu/pEcqxDC xiAYIN/SGp/cckeMBeDftZwUmKDpVvEDxGk9Rj3iD8p8393A784/QVndGR/XfzBA EEU7MhU/EhgOEfL+vZNsE8GwEdKs0og= -----END CERTIFICATE-----Generated at Thu Sep 10 22:47:41 2026 by rpki-client