$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8600563f-862f-3ab0-87d1-d526b539935d.roa File: 8600563f-862f-3ab0-87d1-d526b539935d.roa (raw, json) Hash identifier: /i9qKgXFZco5mqC6w82leQmg+3hlyFGwD/T41iogSEY= Subject key identifier: C7:76:69:8C:21:E9:E0:64:26:F9:C6:AE:96:7A:C7:A7:8A:E0:CE:03 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584EF2BAE93874E3872ECCD9ED58 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8600563f-862f-3ab0-87d1-d526b539935d.roa Signing time: Mon 24 Aug 2026 23:30:44 +0000 ROA not before: Mon 24 Aug 2026 23:30:44 +0000 ROA not after: Mon 23 Nov 2026 00:30:44 +0000 asID: 33368 IP address blocks: 107.166.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:ba:e9:38:74:e3:87:2e:cc:d9:ed:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Aug 24 23:30:44 2026 GMT Not After : Nov 23 00:30:44 2026 GMT Subject: CN=e79441b3-9d4c-49db-be8b-c8254dfcb9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:77:4d:5a:f3:d7:7d:15:c4:37:cc:6a:5f: d9:e8:26:85:40:ab:16:1a:dd:44:f4:6c:64:39:7d: d8:da:fc:33:a6:92:4c:1d:43:45:2a:1f:ac:fb:ec: a3:16:4a:5c:31:aa:53:b2:22:12:2d:a4:9c:a8:05: ae:99:d3:be:45:bd:f9:e5:20:01:a6:59:b7:90:05: fe:73:2e:f9:f7:e9:7d:9b:3b:eb:0e:ae:73:ff:c4: 47:18:4d:4c:a8:80:07:10:2a:d0:82:ca:78:9b:a0: ef:d5:24:b1:dd:9d:9c:41:31:85:fb:c9:be:70:16: d3:d5:e2:a8:c0:05:b8:4d:ec:ed:22:a8:ca:e4:f2: 06:81:c9:f6:f0:7e:35:81:02:1b:72:63:45:ef:13: 95:c4:ec:89:9c:7a:81:9e:6b:04:09:12:9c:6c:9d: 85:b0:8a:f6:01:52:97:ad:16:81:65:e6:3f:39:66: 02:c7:19:7d:b6:57:88:13:18:67:93:aa:f2:09:cf: 29:00:75:33:f3:18:9b:ab:64:2c:29:56:11:b9:bb: 32:5d:a5:7e:a3:fc:d2:2a:0e:02:1f:d5:07:e4:2e: 1f:39:b1:2a:a7:08:4b:f3:44:5e:e5:f8:ce:8a:74: ab:76:89:ee:c4:38:75:26:67:87:6b:11:16:96:42: 5e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:76:69:8C:21:E9:E0:64:26:F9:C6:AE:96:7A:C7:A7:8A:E0:CE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8600563f-862f-3ab0-87d1-d526b539935d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 107.166.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:03:bf:eb:2f:bc:2b:39:e1:3e:48:60:ae:0d:4d:6f:c1:5a: 77:a3:cd:dc:38:65:3c:1d:56:6a:72:d7:8c:4f:99:58:06:1e: e5:4c:20:cb:81:10:b6:5c:28:21:e1:7c:29:f7:a9:bb:ce:5b: 1b:21:89:0c:4d:ae:73:40:6f:bb:56:8f:ad:4b:fd:4b:f4:63: f6:96:d4:d8:d4:e9:0f:ec:ab:3a:eb:ed:b2:e5:56:df:69:7d: f4:83:a4:80:ab:7a:d5:59:54:d5:09:d1:26:b2:fa:32:e0:c1: e3:a0:e0:77:8a:99:b8:75:14:e2:f9:b4:78:9c:fc:16:1e:6a: 4d:d5:41:8c:94:33:3a:c2:f7:92:c8:79:f0:6d:f4:89:66:ca: f5:87:fc:9a:cb:9c:6e:2e:be:44:4a:ec:18:d9:5e:d2:41:ad: 44:f9:a7:44:37:77:a1:73:58:78:05:34:fc:33:13:53:d8:06: fc:6b:46:10:6f:8b:28:73:fe:ee:f8:19:af:c6:47:d8:ae:85: 06:f8:48:16:15:5f:0a:88:f2:24:64:b9:e1:49:d2:21:f5:17: a9:5c:12:97:f0:13:c7:1c:6f:4d:4e:20:7c:3f:34:31:f6:11: a9:39:dc:de:b5:46:e3:af:4e:cf:b6:df:60:e6:22:9f:fe:12: d9:af:5f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7yuuk4dOOHLszZ7VgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI2MDgyNDIzMzA0NFoXDTI2MTEyMzAwMzA0NFowLzEtMCsGA1UEAxMk ZTc5NDQxYjMtOWQ0Yy00OWRiLWJlOGItYzgyNTRkZmNiOWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvd3TVrz130VxDfMal/Z6CaFQKsWGt1E9Gxk OX3Y2vwzppJMHUNFKh+s++yjFkpcMapTsiISLaScqAWumdO+Rb355SABplm3kAX+ cy759+l9mzvrDq5z/8RHGE1MqIAHECrQgsp4m6Dv1SSx3Z2cQTGF+8m+cBbT1eKo wAW4TeztIqjK5PIGgcn28H41gQIbcmNF7xOVxOyJnHqBnmsECRKcbJ2FsIr2AVKX rRaBZeY/OWYCxxl9tleIExhnk6ryCc8pAHUz8xibq2QsKVYRubsyXaV+o/zSKg4C H9UH5C4fObEqpwhL80Re5fjOinSrdonuxDh1JmeHaxEWlkJeZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd2aYwh6eBkJvnGrpZ6x6eK4M4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvODYwMDU2M2YtODYyZi0z YWIwLTg3ZDEtZDUyNmI1Mzk5MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa6YMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEADv+svvCs54T5IYK4NTW/BWnejzdw4ZTwdVmpy14xPmVgGHuVMIMuB ELZcKCHhfCn3qbvOWxshiQxNrnNAb7tWj61L/Uv0Y/aW1NjU6Q/sqzrr7bLlVt9p ffSDpICretVZVNUJ0Say+jLgweOg4HeKmbh1FOL5tHic/BYeak3VQYyUMzrC95LI efBt9IlmyvWH/JrLnG4uvkRK7BjZXtJBrUT5p0Q3d6FzWHgFNPwzE1PYBvxrRhBv iyhz/u74Ga/GR9iuhQb4SBYVXwqI8iRkueFJ0iH1F6lcEpfwE8ccb01OIHw/NDH2 Eak53N61RuOvTs+232DmIp/+EtmvX1A= -----END CERTIFICATE-----Generated at Thu Sep 10 23:28:16 2026 by rpki-client