$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/b6a98720-aa0c-3341-a5aa-1062c78b0325.roa File: b6a98720-aa0c-3341-a5aa-1062c78b0325.roa (raw, json) Hash identifier: UE2tAaYjpHTbFzUpe5/PWUGuP0o+cRCmiVpxhfHp12w= Subject key identifier: 65:D1:8D:94:CB:96:70:E4:EC:1D:73:1F:69:92:1A:51:1E:1B:3C:D5 Certificate issuer: /CN=c2879c74-58f5-47f7-9eca-4846207f9540 Certificate serial: 010D0C9F4328584F00DCD4EDCA39DEE8B1009E80 Authority key identifier: 0E:06:33:73:03:54:C4:0C:E5:B7:E1:BD:F8:6D:02:80:37:FF:E9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/b6a98720-aa0c-3341-a5aa-1062c78b0325.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 14475 IP address blocks: 66.85.93.0/24 maxlen: 24 2602:f38e:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/c2879c74-58f5-47f7-9eca-4846207f9540.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/c2879c74-58f5-47f7-9eca-4846207f9540.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:d4:ed:ca:39:de:e8:b1:00:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2879c74-58f5-47f7-9eca-4846207f9540 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=bc5799aa-7420-4e9a-87a6-2c09c483aac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:35:4b:73:bd:06:6e:6a:49:ba:36:16:60: 2f:db:8b:ff:ae:50:a1:d8:a9:32:fa:7a:5d:c7:bc: d0:d6:74:4d:b8:43:da:64:8e:3d:07:17:80:88:85: c8:1d:95:47:5d:23:c0:99:8b:f0:b9:c8:7a:b6:9d: 48:ab:e9:53:e1:41:5d:ea:c3:ad:35:80:73:1a:55: d0:9a:82:69:69:3f:30:c2:e5:ef:bc:33:14:22:2b: 55:02:ef:99:36:05:31:73:57:f4:a2:54:ad:2e:23: 34:ed:d2:40:bb:a0:54:1e:7e:6e:b2:ca:e0:7b:0e: 4c:64:f9:4b:23:2e:cb:b0:7b:4e:d1:ab:62:9a:27: 1f:d7:8d:47:24:7e:df:95:9f:b4:25:1a:66:ef:bf: 0e:89:5b:03:a0:90:2d:9c:4a:f1:6c:11:a7:3a:21: 31:c8:14:28:57:c2:9b:47:a3:90:c5:6d:ef:fe:7b: ba:35:04:f0:fe:08:4d:5d:fc:dc:9f:0f:8f:ac:76: 93:cc:25:34:fd:3f:e2:97:43:78:88:43:bd:07:9c: 90:e1:d9:72:c3:84:47:fe:0e:e2:be:8d:b1:12:8f: c7:4d:22:3a:3c:15:84:6f:62:7b:9c:46:4d:9f:fd: 3a:a6:40:d6:f3:85:f0:a8:4b:f0:c4:ef:bc:c5:15: 04:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D1:8D:94:CB:96:70:E4:EC:1D:73:1F:69:92:1A:51:1E:1B:3C:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/b6a98720-aa0c-3341-a5aa-1062c78b0325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/c2879c74-58f5-47f7-9eca-4846207f9540.crl X509v3 Authority Key Identifier: keyid:0E:06:33:73:03:54:C4:0C:E5:B7:E1:BD:F8:6D:02:80:37:FF:E9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540.cer sbgp-ipAddrBlock: critical IPv4: 66.85.93.0/24 IPv6: 2602:f38e:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:fe:77:e8:3a:d8:a3:bc:09:b5:be:f3:8d:6e:f0:71:88:6b: b9:d2:f1:13:e4:2a:da:35:b8:72:9d:ce:ea:4e:8c:66:f9:a9: 33:b5:8e:82:c4:04:0d:01:7d:2b:24:c2:f3:92:4b:03:65:d9: 2e:69:69:ac:fc:1e:ef:e9:83:a5:9f:98:e3:a6:7b:78:d4:2b: 95:ca:e2:9d:47:48:68:d3:ce:10:8c:ee:ff:49:5d:af:ca:0d: 4b:45:bb:4c:0a:b3:bb:d8:e7:4e:82:07:dd:81:c2:38:a3:67: b1:01:57:7f:da:99:98:41:2a:01:97:84:d8:6e:ce:6c:ff:09: b9:68:08:8e:ac:19:d3:a0:6e:36:f8:b1:a6:c0:15:fe:3b:6a: dc:f5:36:9c:4b:05:a1:95:48:83:bc:dd:11:61:a8:1b:ce:a7: 01:79:a7:6f:ab:c4:1c:6a:f6:6e:c2:ce:e3:f9:66:31:08:3f: ed:ad:75:0f:64:bc:da:45:5b:24:77:05:96:da:54:78:65:db: ca:c0:8c:33:ac:64:dc:da:f1:d1:94:95:d4:7b:fe:7d:cc:32: a9:94:6f:96:8c:59:17:8e:cd:0d:f0:21:0b:de:77:af:92:48: 0c:2e:fb:4e:2c:c6:1d:03:59:c4:86:57:f3:0a:e8:c1:dc:ba: 3f:86:11:c8 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE8A3NTtyjne6LEAnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI4NzljNzQtNThmNS00N2Y3LTllY2EtNDg0NjIwN2Y5 NTQwMB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk YmM1Nzk5YWEtNzQyMC00ZTlhLTg3YTYtMmMwOWM0ODNhYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7o1S3O9Bm5qSbo2FmAv24v/rlCh2Kky+npd x7zQ1nRNuEPaZI49BxeAiIXIHZVHXSPAmYvwuch6tp1Iq+lT4UFd6sOtNYBzGlXQ moJpaT8wwuXvvDMUIitVAu+ZNgUxc1f0olStLiM07dJAu6BUHn5ussrgew5MZPlL Iy7LsHtO0atimicf141HJH7flZ+0JRpm778OiVsDoJAtnErxbBGnOiExyBQoV8Kb R6OQxW3v/nu6NQTw/ghNXfzcnw+PrHaTzCU0/T/il0N4iEO9B5yQ4dlyw4RH/g7i vo2xEo/HTSI6PBWEb2J7nEZNn/06pkDW84XwqEvwxO+8xRUEHwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGXRjZTLlnDk7B1zH2mSGlEeGzzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMjg3 OWM3NC01OGY1LTQ3ZjctOWVjYS00ODQ2MjA3Zjk1NDAvYjZhOTg3MjAtYWEwYy0z MzQxLWE1YWEtMTA2MmM3OGIwMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzI4NzljNzQtNThmNS00N2Y3LTll Y2EtNDg0NjIwN2Y5NTQwL2MyODc5Yzc0LTU4ZjUtNDdmNy05ZWNhLTQ4NDYyMDdm OTU0MC5jcmwwHwYDVR0jBBgwFoAUDgYzcwNUxAzlt+G9+G0CgDf/6XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMjg3OWM3NC01OGY1LTQ3ZjctOWVjYS00ODQ2 MjA3Zjk1NDAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQlVdMA8E AgACMAkDBwAmAvOOAAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAT/536DrYo7wJtb7zjW7wcYhrudLxE+Qq 2jW4cp3O6k6MZvmpM7WOgsQEDQF9KyTC85JLA2XZLmlprPwe7+mDpZ+Y46Z7eNQr lcrinUdIaNPOEIzu/0ldr8oNS0W7TAqzu9jnToIH3YHCOKNnsQFXf9qZmEEqAZeE 2G7ObP8JuWgIjqwZ06BuNvixpsAV/jtq3PU2nEsFoZVIg7zdEWGoG86nAXmnb6vE HGr2bsLO4/lmMQg/7a11D2S82kVbJHcFltpUeGXbysCMM6xk3Nrx0ZSV1Hv+fcwy qZRvloxZF47NDfAhC953r5JIDC77TizGHQNZxIZX8wrowdy6P4YRyA== -----END CERTIFICATE-----Generated at Mon Oct 12 16:42:33 2026 by rpki-client