$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa File: 5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa (raw, json) Hash identifier: Xu8GR33++SXSHXU/Y6C7gPWW+f6rxhXRKD+0RtOjB1g= Subject key identifier: 5C:5D:E1:09:E7:8A:74:F8:7C:03:15:E7:CC:C3:C0:C3:5B:9A:7E:88 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584F89A85F2CFBCC5091D7362000 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 23522 IP address blocks: 66.252.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:5f:2c:fb:cc:50:91:d7:36:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=9d8039f2-78f1-4a78-aba4-dc861d8572f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:84:dc:56:11:df:21:66:17:cd:46:19:c6: 2f:64:b4:d8:2d:d8:c6:02:66:c4:bf:73:b7:e1:65: b1:ad:30:c1:ec:b7:42:18:1c:ef:7a:12:05:3f:43: 8e:ae:1a:94:e9:34:dd:79:89:70:f1:65:62:32:74: a5:78:74:84:44:95:a0:77:f5:a5:18:38:a9:9b:36: 69:af:70:8d:4c:86:62:96:1b:fc:5e:fb:11:f5:b2: db:4c:29:bc:65:c1:22:08:78:49:96:fa:be:af:0a: 1e:38:b0:3b:83:83:a5:e3:f2:47:4a:0e:55:f7:e6: b3:d7:cb:b0:f1:d2:1c:5b:9a:1e:19:f0:4b:18:86: 13:5a:2e:5f:e8:85:3a:f4:6c:99:e0:01:08:14:a3: 39:3c:56:67:c3:71:5b:58:63:1c:17:ec:87:32:b8: 40:1c:88:d6:17:74:2a:4b:8c:8b:3f:f3:22:d6:6e: c6:a3:07:62:a3:17:68:36:25:ed:c4:3c:50:24:ba: 6f:49:ae:f9:56:d3:69:38:59:c2:25:d7:73:1f:d3: 90:2a:33:9f:93:e6:de:31:f6:e4:aa:46:c9:88:cf: cf:08:ea:9f:63:77:94:f4:bf:6b:7c:ab:df:f2:ba: 1d:a8:2d:73:e6:42:e9:19:0a:25:cf:eb:21:96:8c: 82:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5D:E1:09:E7:8A:74:F8:7C:03:15:E7:CC:C3:C0:C3:5B:9A:7E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:88:54:1f:a0:a2:91:ac:ac:32:a0:68:6e:36:0d:f0:1d:21: fc:28:8c:1b:7f:23:4b:7d:52:1d:84:f0:4c:8e:4c:65:5a:fd: c5:d8:dc:06:e4:cb:f0:eb:96:4e:b9:36:d2:0a:5e:8b:81:28: 4a:85:63:62:36:73:bf:45:65:24:b9:5b:f2:f0:2e:59:85:ee: ba:b4:ff:7f:ec:6e:65:17:d1:98:d8:39:2a:d7:7f:0a:53:e3: 2e:a2:7f:94:bd:f7:69:22:88:89:d8:5f:1a:9a:9a:c7:b9:a2: be:e5:cc:75:59:bc:d9:14:e2:35:84:e8:30:62:36:a8:b7:35: 05:4e:45:6c:19:3c:6b:fd:34:82:5c:e0:08:1e:8b:12:b7:1b: 7e:5f:c5:f1:bb:99:1e:57:64:03:3a:b4:91:fe:aa:2f:55:1d: 01:ac:e8:e7:96:e3:9d:9d:7c:68:76:c7:d9:49:3e:9f:50:70: 78:c8:8a:2b:e0:32:26:e6:03:76:ec:47:d3:b5:2b:91:38:cb: 57:8b:a4:07:98:61:b2:cd:61:be:d3:20:57:bf:27:5e:ba:52: d4:ba:70:7a:52:ae:f0:d8:b0:10:83:de:ca:39:65:1b:9a:af: d5:47:1e:23:85:9c:66:0a:33:cf:f2:28:ea:72:96:38:59:e4: 03:1c:91:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqF8s+8xQkdc2IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk OWQ4MDM5ZjItNzhmMS00YTc4LWFiYTQtZGM4NjFkODU3MmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdGE3FYR3yFmF81GGcYvZLTYLdjGAmbEv3O3 4WWxrTDB7LdCGBzvehIFP0OOrhqU6TTdeYlw8WViMnSleHSERJWgd/WlGDipmzZp r3CNTIZilhv8XvsR9bLbTCm8ZcEiCHhJlvq+rwoeOLA7g4Ol4/JHSg5V9+az18uw 8dIcW5oeGfBLGIYTWi5f6IU69GyZ4AEIFKM5PFZnw3FbWGMcF+yHMrhAHIjWF3Qq S4yLP/Mi1m7GowdioxdoNiXtxDxQJLpvSa75VtNpOFnCJddzH9OQKjOfk+beMfbk qkbJiM/PCOqfY3eU9L9rfKvf8rodqC1z5kLpGQolz+shloyCzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxd4QnninT4fAMV58zDwMNbmn6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNWQ3MDhlYjItYjdiYy0z ZWExLWE3ZDUtMmUxOGYwZjY2ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuIVB+gopGsrDKgaG42DfAdIfwojBt/I0t9Uh2E8EyOTGVa/cXY3Abk y/Drlk65NtIKXouBKEqFY2I2c79FZSS5W/LwLlmF7rq0/3/sbmUX0ZjYOSrXfwpT 4y6if5S992kiiInYXxqamse5or7lzHVZvNkU4jWE6DBiNqi3NQVORWwZPGv9NIJc 4AgeixK3G35fxfG7mR5XZAM6tJH+qi9VHQGs6OeW452dfGh2x9lJPp9QcHjIiivg MibmA3bsR9O1K5E4y1eLpAeYYbLNYb7TIFe/J166UtS6cHpSrvDYsBCD3so5ZRua r9VHHiOFnGYKM8/yKOpyljhZ5AMckcQ= -----END CERTIFICATE-----Generated at Wed Oct 28 14:35:58 2026 by rpki-client