$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d42a29ad-4c23-3d19-b44e-e57db4f02f4d.roa File: d42a29ad-4c23-3d19-b44e-e57db4f02f4d.roa (raw, json) Hash identifier: AVy8h7ZJl/OCZiY0LjB6IMoEj5De4a91/KQdKkTt7bg= Subject key identifier: C3:C2:2A:70:57:F0:FF:D0:BD:14:81:1E:91:D8:70:4F:99:47:E8:6D Certificate issuer: /CN=bc6884d6-b11e-4280-9c4c-8177287d9869 Certificate serial: 010D0C9F4328584F5A333AB2EDD59587BE0B6D80 Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d42a29ad-4c23-3d19-b44e-e57db4f02f4d.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 398324 IP address blocks: 66.132.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:3a:b2:ed:d5:95:87:be:0b:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9cf7ed5d-aaa2-4456-9530-b37ffbc8d6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fc:cb:fc:f9:a4:bb:f2:8e:ce:89:85:1f:7d: a3:12:9f:56:e1:b7:43:58:ba:73:a6:eb:e1:53:84: 52:f8:f9:d2:ff:e2:c4:d5:e4:c7:68:be:02:4f:ee: 17:68:92:01:b0:3c:19:a9:83:f4:0c:c0:df:a2:7b: 90:7e:7e:f0:cf:07:28:3f:bc:d5:11:83:7b:60:f6: fa:22:94:7a:98:66:82:7f:43:5b:65:29:f1:21:f5: 29:30:d8:0e:64:8c:be:23:14:e8:26:1b:0e:9a:f8: b2:b9:aa:f7:76:89:66:76:73:34:cc:cc:af:1e:50: 6a:9c:71:33:d9:f5:b0:2d:68:a8:73:69:30:e5:1c: a3:34:32:af:99:9b:a2:2a:c1:eb:89:3c:2e:a6:75: 7c:c3:99:7c:e3:94:12:4d:52:73:bb:30:69:eb:3d: 64:73:eb:87:c1:a0:ff:19:dc:39:5a:ea:45:30:fb: 9f:54:18:6f:41:29:2e:c7:7a:cb:9b:d4:ce:ed:82: 5b:04:72:21:83:7d:ab:a0:bf:e9:be:cc:b3:1a:3d: 66:2c:3d:c4:be:56:82:4f:f9:70:0e:ec:84:43:7a: 7f:6f:66:e9:18:52:f8:43:a3:ec:bc:83:99:88:a6: 73:6b:cf:7f:e5:b8:b5:28:2c:7e:13:35:30:1e:17: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C2:2A:70:57:F0:FF:D0:BD:14:81:1E:91:D8:70:4F:99:47:E8:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d42a29ad-4c23-3d19-b44e-e57db4f02f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl X509v3 Authority Key Identifier: keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer sbgp-ipAddrBlock: critical IPv4: 66.132.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8f:96:97:a8:95:81:f6:ca:44:3f:fb:d4:48:88:cc:43:3b: cc:a5:38:42:f4:47:8c:14:ae:ed:ff:1f:09:60:e0:c8:8c:43: c2:3e:e7:96:ec:9c:88:2d:be:49:6b:4f:f5:43:d3:2f:6b:02: 50:29:5f:5d:67:7d:ce:03:f3:4e:31:c2:39:81:81:0a:ea:48: c0:81:25:40:09:67:6f:43:1d:1b:40:29:2f:54:84:1d:e7:16: 93:24:68:25:aa:2d:59:f1:22:05:3d:55:24:2e:dc:a7:e5:90: 19:d1:d0:20:43:fc:71:24:f5:16:5d:fa:19:fe:48:c5:81:be: db:40:c8:a4:9b:76:99:73:f3:2b:92:9b:29:67:0e:bd:22:91: ec:e6:0c:91:f8:56:11:b3:ee:39:2f:4c:65:cb:df:3d:8b:af: ab:34:36:bb:90:8f:9e:af:91:b7:3b:6f:b1:12:1a:d6:96:58: e1:55:57:eb:a7:92:2e:ce:a2:3c:f3:68:b9:f9:ad:51:0c:0d: cc:00:88:b7:14:89:ea:76:69:89:f7:30:3e:11:24:46:20:c8: 84:69:39:1b:a4:3f:00:51:c9:6e:5f:3c:42:c4:1b:d8:ba:83: 04:08:63:b9:d9:fd:2f:92:ba:ce:4a:cf:86:90:a9:40:d0:cc: 5c:eb:e0:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMzqy7dWVh74LbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5 ODY5MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OWNmN2VkNWQtYWFhMi00NDU2LTk1MzAtYjM3ZmZiYzhkNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivzL/Pmku/KOzomFH32jEp9W4bdDWLpzpuvh U4RS+PnS/+LE1eTHaL4CT+4XaJIBsDwZqYP0DMDfonuQfn7wzwcoP7zVEYN7YPb6 IpR6mGaCf0NbZSnxIfUpMNgOZIy+IxToJhsOmviyuar3dolmdnM0zMyvHlBqnHEz 2fWwLWioc2kw5RyjNDKvmZuiKsHriTwupnV8w5l845QSTVJzuzBp6z1kc+uHwaD/ Gdw5WupFMPufVBhvQSkux3rLm9TO7YJbBHIhg32roL/pvsyzGj1mLD3EvlaCT/lw DuyEQ3p/b2bpGFL4Q6PsvIOZiKZza89/5bi1KCx+EzUwHheYEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPCKnBX8P/QvRSBHpHYcE+ZR+htMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4 ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvZDQyYTI5YWQtNGMyMy0z ZDE5LWI0NGUtZTU3ZGI0ZjAyZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3 Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoT/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCPlpeolYH2ykQ/+9RIiMxDO8ylOEL0R4wUru3/Hwlg4MiMQ8I+55bs nIgtvklrT/VD0y9rAlApX11nfc4D804xwjmBgQrqSMCBJUAJZ29DHRtAKS9UhB3n FpMkaCWqLVnxIgU9VSQu3KflkBnR0CBD/HEk9RZd+hn+SMWBvttAyKSbdplz8yuS mylnDr0ikezmDJH4VhGz7jkvTGXL3z2Lr6s0NruQj56vkbc7b7ESGtaWWOFVV+un ki7OojzzaLn5rVEMDcwAiLcUiep2aYn3MD4RJEYgyIRpORukPwBRyW5fPELEG9i6 gwQIY7nZ/S+Sus5Kz4aQqUDQzFzr4Gc= -----END CERTIFICATE-----Generated at Mon Nov 2 16:10:45 2026 by rpki-client