$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa File: 3a16288a-c441-313a-a400-24f9d544cdfa.roa (raw, json) Hash identifier: 4J1dfP1k+94vAlNumX2Ni4tXj2mjYlHJJIR1+KSFCeY= Subject key identifier: 0A:98:78:B6:E7:5B:9B:7A:64:F8:6A:03:29:67:AA:7B:60:34:7E:E5 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584F63F81F5ED0A9B4D04F2DB0C0 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 33139 IP address blocks: 66.49.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:1f:5e:d0:a9:b4:d0:4f:2d:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=f37ae453-303d-400c-b759-64cc7f9deeaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:2a:4d:b0:90:91:f9:94:9e:52:2f:e5:d1: bb:68:ec:11:4d:10:fb:61:a9:54:60:61:26:c3:f5: 22:9a:6a:71:d5:c4:38:56:34:dd:bd:96:13:5a:6e: 92:dc:8d:4b:e1:50:3b:22:32:2d:4e:2c:0e:e7:8d: c1:50:12:04:c2:32:dc:a3:f5:14:dc:b2:af:3b:6a: 73:ce:db:7a:5b:bc:78:15:64:9e:9a:0c:25:60:1b: 20:37:32:88:e0:c0:0a:6b:b6:94:de:90:39:aa:53: e8:81:37:da:1c:fe:72:8a:1a:3b:11:fb:57:c2:c7: 63:d2:8a:bb:f6:f8:1e:54:74:6c:9e:c1:35:45:0b: 86:7a:6c:45:03:be:96:f4:9e:58:a9:e0:37:8a:57: 29:f8:8c:33:88:2c:e1:ad:75:ce:85:b7:fe:3f:b3: af:56:5d:e0:49:5e:4c:04:17:24:24:ec:eb:2a:63: 81:aa:9a:7d:e8:2d:63:42:7f:bb:b1:5a:76:43:de: 1c:25:c5:49:79:ed:84:0a:e5:05:7f:c3:67:65:18: 73:6d:35:de:34:e4:89:19:7a:b8:b6:03:e0:34:b0: 14:28:16:07:27:8d:17:d1:ef:60:3e:d3:fd:7c:4c: d1:90:e8:99:ff:54:66:97:64:68:f1:70:70:ad:c8: 7b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:98:78:B6:E7:5B:9B:7A:64:F8:6A:03:29:67:AA:7B:60:34:7E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ab:d0:a8:7b:ab:5d:aa:f5:30:ba:60:e5:28:c7:f7:e2:a6: b7:70:77:79:e9:dd:ea:28:c3:5a:56:04:50:16:7b:3f:62:7e: 28:33:15:dd:ca:f2:9a:a1:bb:3a:ed:72:29:8a:9b:b4:f9:c1: 1b:f4:c3:50:b6:04:ca:a0:80:49:66:ab:1d:f6:a9:b4:8b:25: c4:05:da:8b:b7:7b:da:f5:59:39:14:62:14:21:b5:47:5f:5a: 7d:56:32:90:a3:28:ec:63:16:10:24:f4:6b:3f:db:e4:19:c3: b7:d8:4e:c6:ba:5b:17:a7:84:7e:86:6a:df:e9:65:04:ec:ab: c5:18:62:69:d2:d3:6a:64:2f:11:a9:8a:ef:b4:c7:37:cf:05: f9:46:24:4f:8e:2d:bb:89:e2:8b:d4:f2:dd:10:da:e5:62:9f: 96:8a:c3:a7:29:09:e6:5a:47:e7:47:dc:2d:e6:36:0c:ef:39: f9:7c:ee:1c:cf:aa:7f:cc:ea:cc:d4:9e:5f:12:41:08:59:a8: b4:97:a0:f5:34:4f:44:be:23:3c:58:76:50:43:d4:34:1f:29: 29:cc:12:63:75:db:ed:60:90:3f:7d:5c:a9:af:dd:49:8d:6e: 61:12:3d:dd:e2:1a:c3:93:9e:c1:2f:42:a0:bc:8b:27:7e:86: a8:0c:3f:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+B9e0Km00E8tsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZjM3YWU0NTMtMzAzZC00MDBjLWI3NTktNjRjYzdmOWRlZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzigqTbCQkfmUnlIv5dG7aOwRTRD7YalUYGEm w/Uimmpx1cQ4VjTdvZYTWm6S3I1L4VA7IjItTiwO543BUBIEwjLco/UU3LKvO2pz ztt6W7x4FWSemgwlYBsgNzKI4MAKa7aU3pA5qlPogTfaHP5yiho7EftXwsdj0oq7 9vgeVHRsnsE1RQuGemxFA76W9J5YqeA3ilcp+IwziCzhrXXOhbf+P7OvVl3gSV5M BBckJOzrKmOBqpp96C1jQn+7sVp2Q94cJcVJee2ECuUFf8NnZRhzbTXeNOSJGXq4 tgPgNLAUKBYHJ40X0e9gPtP9fEzRkOiZ/1Rml2Ro8XBwrch7zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqYeLbnW5t6ZPhqAylnqntgNH7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvM2ExNjI4OGEtYzQ0MS0z MTNhLWE0MDAtMjRmOWQ1NDRjZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQjH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGr0Kh7q12q9TC6YOUox/fiprdwd3np3eoow1pWBFAWez9ifigzFd3K 8pqhuzrtcimKm7T5wRv0w1C2BMqggElmqx32qbSLJcQF2ou3e9r1WTkUYhQhtUdf Wn1WMpCjKOxjFhAk9Gs/2+QZw7fYTsa6WxenhH6Gat/pZQTsq8UYYmnS02pkLxGp iu+0xzfPBflGJE+OLbuJ4ovU8t0Q2uVin5aKw6cpCeZaR+dH3C3mNgzvOfl87hzP qn/M6szUnl8SQQhZqLSXoPU0T0S+IzxYdlBD1DQfKSnMEmN12+1gkD99XKmv3UmN bmESPd3iGsOTnsEvQqC8iyd+hqgMP4o= -----END CERTIFICATE-----Generated at Fri Oct 9 17:47:54 2026 by rpki-client