$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/39f45e26-f3cc-3e8c-876c-aafdc0c1c2ac.roa File: 39f45e26-f3cc-3e8c-876c-aafdc0c1c2ac.roa (raw, json) Hash identifier: CkeZ3A54xyPeHIJhmMuCyN/A22bx4NFwFtFJniayPdA= Subject key identifier: A2:75:85:29:9F:97:3C:24:D1:2C:B0:3F:DE:B9:51:1E:9B:BE:7B:6F Certificate issuer: /CN=09e8ec9f-45c9-4103-ba8f-29090f373418 Certificate serial: 010D0C9F4328584F7352D71323ADF82006868680 Authority key identifier: E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/39f45e26-f3cc-3e8c-876c-aafdc0c1c2ac.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 17125 IP address blocks: 66.211.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:d7:13:23:ad:f8:20:06:86:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e8ec9f-45c9-4103-ba8f-29090f373418 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=ef97b3d8-a9e0-4a1e-ba09-61621c478eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:ee:6a:bf:c6:97:b6:c2:9d:83:cd:59:5b: ae:76:66:1b:24:8a:38:3a:57:3e:89:02:b1:7d:51: df:81:ce:09:15:4f:07:f8:89:4b:a0:44:d0:ef:97: 0c:a0:9c:6e:3e:58:ca:88:7c:2b:64:3f:b1:8f:06: 8d:83:a7:3a:b3:50:6d:e1:9e:b2:3f:40:67:a6:61: 4e:bf:01:8b:88:fc:3e:2c:6c:40:c4:86:2f:37:e1: 28:1f:6b:94:9f:80:54:e2:29:3c:e8:e4:09:ff:14: 77:20:82:84:a5:5b:98:c9:3d:a6:53:35:78:c5:18: c9:ce:95:99:58:70:36:3b:c7:89:fc:b6:f4:ed:8e: 4b:1d:6f:db:3c:de:ac:ce:c9:59:db:d4:2d:8f:3c: c2:9e:b7:46:b2:54:da:56:2b:6b:83:bb:bd:2c:ff: f8:5b:c1:4f:fa:13:92:c6:4a:d9:2b:2b:88:2f:c4: 45:67:ab:cd:78:a7:bb:1a:74:f9:7c:34:31:be:98: 71:25:74:e2:ed:e8:f9:16:77:74:de:ee:30:a2:c8: 5c:f4:12:e3:fc:ee:53:a5:c2:c0:ce:25:d7:b3:6c: ea:8c:9d:a1:dd:c4:04:b4:77:f5:b9:9e:da:69:28: 37:d7:dd:8f:38:c8:01:c4:b2:af:ac:00:68:18:8a: ca:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:75:85:29:9F:97:3C:24:D1:2C:B0:3F:DE:B9:51:1E:9B:BE:7B:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/39f45e26-f3cc-3e8c-876c-aafdc0c1c2ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl X509v3 Authority Key Identifier: keyid:E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer sbgp-ipAddrBlock: critical IPv4: 66.211.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:61:7b:95:f0:b4:b8:21:b6:fe:fc:b6:8b:1f:b8:92:4c:8b: 6b:01:5d:7c:85:50:e6:7d:b6:bf:7d:11:cf:62:b5:14:9b:7c: be:81:9d:e9:d8:b3:42:80:b5:32:e7:a5:96:af:6a:f0:c5:f2: a1:4e:60:0c:f8:10:11:ed:02:9a:ce:74:81:86:1f:bd:7a:62: 74:16:2f:0d:fe:7a:4e:3e:5b:d2:6a:0d:c0:a2:51:7e:73:76: 8b:bb:1d:32:20:44:0f:ca:e2:85:49:19:32:10:ac:6e:23:d5: 70:1b:a4:53:87:22:62:b7:31:2b:9e:20:06:3c:ec:06:92:c6: 83:0d:c7:bd:b2:4a:78:7e:1b:54:a8:dc:b6:1c:f7:b4:1c:f7: db:1e:23:b5:bd:50:13:bf:d5:ea:56:5c:e9:3a:3f:22:0d:a8: e5:2e:48:c6:f5:e2:c9:4f:dd:f1:d7:c5:d9:02:a0:51:55:21: f4:72:54:40:30:d2:f6:1d:cb:50:09:03:6c:2b:16:0d:4d:9d: d6:92:13:48:e8:83:77:d4:49:54:cf:be:b6:87:29:d0:a8:7a: 4d:d9:7c:71:af:87:a2:2e:30:e4:6a:5e:d2:81:68:ba:61:89: 12:19:46:52:e8:97:b3:b4:49:eb:93:db:51:bc:98:65:c0:0e: 14:bf:ef:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtcTI634IAaGhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDllOGVjOWYtNDVjOS00MTAzLWJhOGYtMjkwOTBmMzcz NDE4MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk ZWY5N2IzZDgtYTllMC00YTFlLWJhMDktNjE2MjFjNDc4ZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+Duar/Gl7bCnYPNWVuudmYbJIo4Olc+iQKx fVHfgc4JFU8H+IlLoETQ75cMoJxuPljKiHwrZD+xjwaNg6c6s1Bt4Z6yP0BnpmFO vwGLiPw+LGxAxIYvN+EoH2uUn4BU4ik86OQJ/xR3IIKEpVuYyT2mUzV4xRjJzpWZ WHA2O8eJ/Lb07Y5LHW/bPN6szslZ29QtjzzCnrdGslTaVitrg7u9LP/4W8FP+hOS xkrZKyuIL8RFZ6vNeKe7GnT5fDQxvphxJXTi7ej5Fnd03u4woshc9BLj/O5TpcLA ziXXs2zqjJ2h3cQEtHf1uZ7aaSg3192POMgBxLKvrABoGIrKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ1hSmflzwk0SywP965UR6bvntvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWU4 ZWM5Zi00NWM5LTQxMDMtYmE4Zi0yOTA5MGYzNzM0MTgvMzlmNDVlMjYtZjNjYy0z ZThjLTg3NmMtYWFmZGMwYzFjMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDllOGVjOWYtNDVjOS00MTAzLWJh OGYtMjkwOTBmMzczNDE4LzA5ZThlYzlmLTQ1YzktNDEwMy1iYThmLTI5MDkwZjM3 MzQxOC5jcmwwHwYDVR0jBBgwFoAU4id/DITolm3zLUFkXzTEqH25uhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWU4ZWM5Zi00NWM5LTQxMDMtYmE4Zi0yOTA5 MGYzNzM0MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVhe5XwtLghtv78tosfuJJMi2sBXXyFUOZ9tr99Ec9itRSbfL6BnenY s0KAtTLnpZavavDF8qFOYAz4EBHtAprOdIGGH716YnQWLw3+ek4+W9JqDcCiUX5z dou7HTIgRA/K4oVJGTIQrG4j1XAbpFOHImK3MSueIAY87AaSxoMNx72ySnh+G1So 3LYc97Qc99seI7W9UBO/1epWXOk6PyINqOUuSMb14slP3fHXxdkCoFFVIfRyVEAw 0vYdy1AJA2wrFg1NndaSE0jog3fUSVTPvraHKdCoek3ZfHGvh6IuMORqXtKBaLph iRIZRlLol7O0SeuT21G8mGXADhS/7wc= -----END CERTIFICATE-----Generated at Mon Oct 12 13:13:12 2026 by rpki-client