$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa File: 71b533e2-7f33-3621-b9d4-739786613f23.roa (raw, json) Hash identifier: 4gjWXSH6TKQWeJ+0EHsRo8l15F5jgL88BUkJCPP7Obs= Subject key identifier: 3C:4E:D4:E9:29:15:0A:34:32:1F:0E:FD:4D:9C:46:56:44:AA:A6:09 Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f Certificate serial: 010D0C9F4328584ED431E44E5E56DD724E880E80 Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 62537 IP address blocks: 66.85.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e4:4e:5e:56:dd:72:4e:88:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=47198a0c-a43c-4e42-aa4a-268e86fa3b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:90:30:d9:3b:41:0f:5e:fc:97:ae:a3:53:e6: 9b:7d:ae:5d:fe:45:87:93:26:b2:70:b7:95:a5:51: 0e:9a:61:44:2b:97:b2:d9:cb:18:ba:26:98:ee:9f: 30:34:35:d7:2c:ab:42:21:26:dc:db:fd:51:99:ec: f1:9c:eb:fa:94:ea:2e:c3:0e:e5:3a:66:50:68:03: d6:09:dd:e5:63:68:e8:ae:f7:83:52:f5:9e:44:a2: db:b7:e0:0a:8b:57:be:32:5a:6f:bc:91:88:70:60: 63:6a:95:f4:44:28:a8:06:5e:8f:d4:d4:4f:45:29: 27:95:24:22:86:55:9a:40:e3:ba:42:61:ed:4c:08: 43:68:b2:f4:c4:68:16:09:90:e5:bd:43:42:b7:8a: 4f:51:6c:bf:2c:6e:1f:51:eb:5d:4c:00:c0:2c:8b: f4:9d:9c:ce:bc:63:08:a2:ad:62:5c:55:13:5d:0c: aa:ac:51:e9:bc:38:16:68:8e:14:6b:07:a6:91:27: 57:8f:7a:32:3e:91:3d:82:82:92:3f:3c:4d:ac:1e: 76:5b:29:35:5d:76:c7:07:cb:3a:f6:f7:33:15:a0: 32:dd:61:4e:b0:71:32:b6:57:9b:dd:d6:06:02:56: 41:46:5e:c1:be:b2:2b:ed:c0:ef:a2:53:5b:67:8f: d2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4E:D4:E9:29:15:0A:34:32:1F:0E:FD:4D:9C:46:56:44:AA:A6:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/71b533e2-7f33-3621-b9d4-739786613f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl X509v3 Authority Key Identifier: keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer sbgp-ipAddrBlock: critical IPv4: 66.85.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:45:96:00:0a:1b:6a:41:7a:06:8e:e1:e5:d3:88:75:09:b3: 11:2b:46:27:65:5e:fc:8c:be:55:f9:11:3f:8d:76:c6:9a:12: 08:38:e3:06:1d:bc:a3:bb:b0:37:1e:96:2a:22:0d:b3:e3:1d: 38:3b:43:88:51:4e:3b:c3:52:2d:23:47:a8:25:75:4c:b0:49: 78:4a:53:a6:52:67:54:76:d0:36:ec:3b:d2:c7:d4:12:2a:e3: c6:22:b7:e7:8f:d1:c1:c7:2a:f2:51:48:66:26:ca:43:d1:31: 85:11:97:ba:1c:18:61:aa:49:f4:6b:52:f1:44:03:e9:68:04: 60:5e:bc:0d:b5:f1:46:d1:da:5d:f7:72:2f:ae:44:4b:48:d2: 26:5a:19:65:b1:5f:ad:09:6e:ac:e3:9c:d1:1c:b7:c7:5a:4b: c3:d8:c4:4d:ee:14:53:ce:86:ef:8c:b5:d8:a2:51:d8:c4:a7: 3f:40:fa:d6:69:66:c9:39:02:5c:b3:70:a9:01:d0:c2:8b:88: 57:27:29:65:74:c6:8b:cf:33:99:ab:cf:e7:72:42:15:01:49: c2:fa:e4:04:5f:ff:fe:99:26:6f:f6:22:f7:1e:c6:ca:8d:23: 57:68:88:ec:ac:94:ef:53:51:8a:eb:b0:26:59:c1:25:c3:d1: af:1c:0d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMeROXlbdck6IDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3Y2E3OWEtZjhmNS00MDhhLTg2ZmItNDcyZDYzZWQx NTZmMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NDcxOThhMGMtYTQzYy00ZTQyLWFhNGEtMjY4ZTg2ZmEzYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpAw2TtBD178l66jU+abfa5d/kWHkyaycLeV pVEOmmFEK5ey2csYuiaY7p8wNDXXLKtCISbc2/1RmezxnOv6lOouww7lOmZQaAPW Cd3lY2jorveDUvWeRKLbt+AKi1e+MlpvvJGIcGBjapX0RCioBl6P1NRPRSknlSQi hlWaQOO6QmHtTAhDaLL0xGgWCZDlvUNCt4pPUWy/LG4fUetdTADALIv0nZzOvGMI oq1iXFUTXQyqrFHpvDgWaI4UawemkSdXj3oyPpE9goKSPzxNrB52Wyk1XXbHB8s6 9vczFaAy3WFOsHEytleb3dYGAlZBRl7BvrIr7cDvolNbZ4/SDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxO1OkpFQo0Mh8O/U2cRlZEqqYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdj YTc5YS1mOGY1LTQwOGEtODZmYi00NzJkNjNlZDE1NmYvNzFiNTMzZTItN2YzMy0z NjIxLWI5ZDQtNzM5Nzg2NjEzZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGY3Y2E3OWEtZjhmNS00MDhhLTg2 ZmItNDcyZDYzZWQxNTZmL2RmN2NhNzlhLWY4ZjUtNDA4YS04NmZiLTQ3MmQ2M2Vk MTU2Zi5jcmwwHwYDVR0jBBgwFoAUzSXSHbTlO8LOT0VcD3Q2TcqiRZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdjYTc5YS1mOGY1LTQwOGEtODZmYi00NzJk NjNlZDE1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQlUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFFlgAKG2pBegaO4eXTiHUJsxErRidlXvyMvlX5ET+NdsaaEgg44wYd vKO7sDcelioiDbPjHTg7Q4hRTjvDUi0jR6gldUywSXhKU6ZSZ1R20DbsO9LH1BIq 48Yit+eP0cHHKvJRSGYmykPRMYURl7ocGGGqSfRrUvFEA+loBGBevA218UbR2l33 ci+uREtI0iZaGWWxX60JbqzjnNEct8daS8PYxE3uFFPOhu+MtdiiUdjEpz9A+tZp Zsk5AlyzcKkB0MKLiFcnKWV0xovPM5mrz+dyQhUBScL65ARf//6ZJm/2IvcexsqN I1doiOyslO9TUYrrsCZZwSXD0a8cDeM= -----END CERTIFICATE-----Generated at Sat Aug 22 06:18:49 2026 by rpki-client