$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/d59303ca-cb4c-32c8-b545-4b2a125906cc.roa File: d59303ca-cb4c-32c8-b545-4b2a125906cc.roa (raw, json) Hash identifier: IuE7pjO9ZSDZT66I2AQPggVWIubS98MKQ8+IssrbN4Q= Subject key identifier: DD:64:3E:FF:CB:BF:C7:8A:9A:9F:FC:C0:F0:01:86:8D:55:EC:D1:13 Certificate issuer: /CN=c2879c74-58f5-47f7-9eca-4846207f9540 Certificate serial: 010D0C9F4328584F331D0E3A4DBBD2B8F88A9F00 Authority key identifier: 0E:06:33:73:03:54:C4:0C:E5:B7:E1:BD:F8:6D:02:80:37:FF:E9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/d59303ca-cb4c-32c8-b545-4b2a125906cc.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 14475 IP address blocks: 66.85.95.0/24 maxlen: 24 2602:f38e:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/c2879c74-58f5-47f7-9eca-4846207f9540.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/c2879c74-58f5-47f7-9eca-4846207f9540.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:0e:3a:4d:bb:d2:b8:f8:8a:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2879c74-58f5-47f7-9eca-4846207f9540 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=d6c98991-df69-481e-90be-c4276da14497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c5:62:4d:0e:e8:f0:04:fa:6d:cf:25:c0:38: 07:11:45:a7:d1:cd:b7:07:6c:10:f7:a7:c9:a6:fe: 55:ed:fd:e6:1a:4c:4c:34:de:e8:0c:28:5a:58:8c: 6b:60:3b:1e:27:2b:dd:92:13:3d:b4:e0:93:d0:88: 3b:65:1e:5a:44:a3:8a:f8:9e:65:f6:e1:4b:5c:29: a0:ff:29:e7:cc:59:b0:dd:ec:04:a7:05:08:38:3a: f0:c1:1f:c4:37:a5:bd:1c:0d:a2:05:ee:12:39:de: df:6c:a2:f1:cb:50:9e:26:cb:80:ec:00:71:e2:4d: 8d:11:1c:c4:29:45:12:6b:36:50:d4:4f:52:35:c2: 4b:64:ad:3b:aa:fb:cf:42:43:6d:ef:12:cd:bc:a8: 49:31:d8:22:b9:7f:46:72:b4:d7:0b:92:e7:a1:51: b5:b4:ff:a1:31:e9:53:41:82:d4:98:1a:72:ef:c8: 79:ca:eb:53:59:05:28:6f:f7:2e:e3:76:38:5b:42: 27:91:cb:9c:9e:ed:99:29:e5:59:36:fd:51:9f:c2: fa:7b:ce:9b:73:d0:08:98:bb:78:15:f9:0f:98:a5: bb:a2:19:56:23:e8:9f:70:3a:23:3a:ce:bd:62:4b: a6:1a:93:9b:6a:d8:31:2a:f0:30:b9:ad:a4:f4:74: 27:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:64:3E:FF:CB:BF:C7:8A:9A:9F:FC:C0:F0:01:86:8D:55:EC:D1:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/d59303ca-cb4c-32c8-b545-4b2a125906cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540/c2879c74-58f5-47f7-9eca-4846207f9540.crl X509v3 Authority Key Identifier: keyid:0E:06:33:73:03:54:C4:0C:E5:B7:E1:BD:F8:6D:02:80:37:FF:E9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c2879c74-58f5-47f7-9eca-4846207f9540.cer sbgp-ipAddrBlock: critical IPv4: 66.85.95.0/24 IPv6: 2602:f38e:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:88:18:a9:32:b1:97:18:e8:8e:f7:4b:78:1b:d5:6a:e7:bd: e2:54:4d:53:c3:ec:1a:1d:50:05:1f:44:93:ee:13:10:b8:ab: b0:7b:b7:e1:bd:f2:0d:e4:c3:63:ca:e5:37:24:1d:25:65:22: 07:30:71:d0:bb:c1:b8:7d:7e:9e:72:38:1c:fe:ba:d3:cf:c7: 9c:84:ff:4e:08:12:e3:10:8c:36:57:cd:28:06:f6:42:38:c9: 5b:74:b9:d2:9d:38:78:86:50:0a:70:23:46:25:ff:b9:a0:2f: 95:d0:5a:d6:62:25:3e:d1:9e:f7:b3:84:fa:03:cf:e4:78:ca: be:11:fb:ec:95:0f:64:75:ff:0a:d9:54:05:96:88:88:42:ce: af:dd:ff:a8:e3:09:32:c0:33:8c:56:3a:2e:f7:2d:b9:33:20: 23:dd:2c:6c:96:e3:85:46:9d:7d:9f:6e:d3:9a:a7:50:87:0b: 42:73:a2:36:cd:1c:c7:69:13:a9:a4:c3:28:3f:63:cd:e9:a5: fe:65:d8:d9:45:69:ff:8f:2b:93:da:26:a7:a7:f0:c4:cd:b7: 40:59:df:55:f2:5d:1e:40:6f:34:5f:5d:8f:27:1d:6e:6a:28: 2b:03:10:b1:18:2d:6b:ca:d8:62:a2:b3:19:9e:b7:5f:0f:e6: e8:fe:53:8e -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE8zHQ46TbvSuPiKnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI4NzljNzQtNThmNS00N2Y3LTllY2EtNDg0NjIwN2Y5 NTQwMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZDZjOTg5OTEtZGY2OS00ODFlLTkwYmUtYzQyNzZkYTE0NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sViTQ7o8AT6bc8lwDgHEUWn0c23B2wQ96fJ pv5V7f3mGkxMNN7oDChaWIxrYDseJyvdkhM9tOCT0Ig7ZR5aRKOK+J5l9uFLXCmg /ynnzFmw3ewEpwUIODrwwR/EN6W9HA2iBe4SOd7fbKLxy1CeJsuA7ABx4k2NERzE KUUSazZQ1E9SNcJLZK07qvvPQkNt7xLNvKhJMdgiuX9GcrTXC5LnoVG1tP+hMelT QYLUmBpy78h5yutTWQUob/cu43Y4W0Inkcucnu2ZKeVZNv1Rn8L6e86bc9AImLt4 FfkPmKW7ohlWI+ifcDojOs69YkumGpObatgxKvAwua2k9HQncwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFN1kPv/Lv8eKmp/8wPABho1V7NETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMjg3 OWM3NC01OGY1LTQ3ZjctOWVjYS00ODQ2MjA3Zjk1NDAvZDU5MzAzY2EtY2I0Yy0z MmM4LWI1NDUtNGIyYTEyNTkwNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzI4NzljNzQtNThmNS00N2Y3LTll Y2EtNDg0NjIwN2Y5NTQwL2MyODc5Yzc0LTU4ZjUtNDdmNy05ZWNhLTQ4NDYyMDdm OTU0MC5jcmwwHwYDVR0jBBgwFoAUDgYzcwNUxAzlt+G9+G0CgDf/6XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMjg3OWM3NC01OGY1LTQ3ZjctOWVjYS00ODQ2 MjA3Zjk1NDAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQlVfMA8E AgACMAkDBwAmAvOOAAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANIgYqTKxlxjojvdLeBvVaue94lRNU8Ps Gh1QBR9Ek+4TELirsHu34b3yDeTDY8rlNyQdJWUiBzBx0LvBuH1+nnI4HP6608/H nIT/TggS4xCMNlfNKAb2QjjJW3S50p04eIZQCnAjRiX/uaAvldBa1mIlPtGe97OE +gPP5HjKvhH77JUPZHX/CtlUBZaIiELOr93/qOMJMsAzjFY6LvctuTMgI90sbJbj hUadfZ9u05qnUIcLQnOiNs0cx2kTqaTDKD9jzeml/mXY2UVp/48rk9omp6fwxM23 QFnfVfJdHkBvNF9djycdbmooKwMQsRgta8rYYqKzGZ63Xw/m6P5Tjg== -----END CERTIFICATE-----Generated at Mon Oct 12 10:41:44 2026 by rpki-client