$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0b6b2417-de41-3a69-95ce-f319cfe357d8.roa File: 0b6b2417-de41-3a69-95ce-f319cfe357d8.roa (raw, json) Hash identifier: wx9ayt2RCwPdwqaRJQsO3HXMU3vOY9Y5+EMaVWyl7AM= Subject key identifier: 63:44:97:FD:52:4F:CB:F1:5A:74:1E:A3:57:FB:52:77:88:DB:27:E0 Certificate issuer: /CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Certificate serial: 010D0C9F4328584F6C584FFB78AB4E3B895AD880 Authority key identifier: B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0b6b2417-de41-3a69-95ce-f319cfe357d8.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 30277 IP address blocks: 67.222.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:4f:fb:78:ab:4e:3b:89:5a:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=cbc26f0e-95a2-4560-b65d-597f0aebf2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:af:ec:e9:b0:0e:fd:c9:59:b7:ee:82:9d: c1:8f:f3:fd:bc:7b:38:7e:60:ef:58:92:6e:f5:fa: 46:18:98:7f:c3:0d:e4:16:7e:84:86:23:da:c4:3c: 5b:2a:ce:69:9a:55:23:98:87:00:9d:cb:a9:cc:47: 81:5b:f3:ac:25:a0:25:72:f1:54:99:22:73:61:52: 1d:82:be:11:da:34:a0:76:5c:9e:3f:91:60:2f:12: c6:ba:15:aa:02:e1:36:81:b6:3a:d4:4b:24:55:3c: b5:8b:f3:cd:bf:3a:a7:13:4e:e7:d4:ac:fd:cb:c3: 56:05:96:d1:0d:58:ab:8d:aa:df:ea:24:17:08:9e: 84:d8:ac:83:65:c0:27:ac:8b:9f:62:c9:2a:60:31: da:e6:78:b7:5b:b5:04:e7:a1:4b:f7:b9:25:53:f1: 84:1e:40:a4:e1:2a:9f:15:76:ac:17:c7:9f:68:59: 7b:88:0f:03:6e:3b:f3:d9:d2:51:90:dd:92:15:f0: 38:56:e2:a5:97:3c:75:33:b8:df:78:e5:e0:a6:71: 6e:36:d9:e7:40:b6:f8:19:e7:70:ef:2a:bf:53:5b: 80:8b:7e:66:92:4f:bc:b1:1e:24:50:11:2b:78:c6: a5:19:40:15:0f:e2:a8:fb:19:25:2d:59:cc:d1:18: 01:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:44:97:FD:52:4F:CB:F1:5A:74:1E:A3:57:FB:52:77:88:DB:27:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0b6b2417-de41-3a69-95ce-f319cfe357d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl X509v3 Authority Key Identifier: keyid:B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer sbgp-ipAddrBlock: critical IPv4: 67.222.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3c:4d:99:41:c2:9c:5e:c5:f3:2a:ca:1e:62:38:9e:70:ba: da:c3:96:8b:58:09:69:49:24:08:91:e0:19:89:42:d6:2b:53: 67:9d:86:ad:8d:12:df:70:7d:bd:54:4a:ce:e9:aa:51:d7:83: cb:4c:01:8e:89:0d:f1:32:7c:5e:33:50:76:63:2c:b0:5c:61: 0c:b1:41:68:74:74:1d:58:d4:01:83:a0:dc:e6:bc:01:4b:d1: 8f:29:41:37:ae:75:1c:a4:dc:be:11:0b:e2:1e:5b:97:21:83: 58:96:fe:b9:c5:90:8a:ab:91:6f:c7:bc:1a:f0:bf:00:85:88: 93:0f:69:3a:11:2e:ea:51:17:96:13:23:95:b5:1e:84:0e:17: 66:5d:e0:b3:b5:34:62:b4:c9:f5:cf:d9:bc:b9:7e:c8:dc:27: 24:bf:74:51:a7:96:6e:4d:47:6f:5d:9e:9b:c2:cb:9e:10:94: fb:17:89:9e:0c:2f:d3:87:bc:d6:53:bf:72:bc:dc:86:b2:99: fe:50:ab:d0:8d:a2:ae:ab:21:34:ce:2c:34:2e:0d:79:ca:53: eb:16:ee:28:df:d0:35:e9:a5:4b:51:fd:8d:d1:1c:46:06:22: 85:74:ae:cd:eb:24:00:89:28:80:e5:d6:db:1a:4b:ad:33:e6: 06:0b:a7:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWE/7eKtOO4la2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYTg0ZjMtYjQ5MS00MDI0LTk0YzYtZWQ2ZmY1YTI2 MGYzMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk Y2JjMjZmMGUtOTVhMi00NTYwLWI2NWQtNTk3ZjBhZWJmMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2mv7OmwDv3JWbfugp3Bj/P9vHs4fmDvWJJu 9fpGGJh/ww3kFn6EhiPaxDxbKs5pmlUjmIcAncupzEeBW/OsJaAlcvFUmSJzYVId gr4R2jSgdlyeP5FgLxLGuhWqAuE2gbY61EskVTy1i/PNvzqnE07n1Kz9y8NWBZbR DVirjarf6iQXCJ6E2KyDZcAnrIufYskqYDHa5ni3W7UE56FL97klU/GEHkCk4Sqf FXasF8efaFl7iA8Dbjvz2dJRkN2SFfA4VuKllzx1M7jfeOXgpnFuNtnnQLb4Gedw 7yq/U1uAi35mkk+8sR4kUBEreMalGUAVD+Ko+xklLVnM0RgBewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNEl/1ST8vxWnQeo1f7UneI2yfgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2Zh ODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZmZjVhMjYwZjMvMGI2YjI0MTctZGU0MS0z YTY5LTk1Y2UtZjMxOWNmZTM1N2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNmYTg0ZjMtYjQ5MS00MDI0LTk0 YzYtZWQ2ZmY1YTI2MGYzLzFjZmE4NGYzLWI0OTEtNDAyNC05NGM2LWVkNmZmNWEy NjBmMy5jcmwwHwYDVR0jBBgwFoAUt46MEx/1vpxcU3ucfFObc4jfx+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2ZhODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZm ZjVhMjYwZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ96AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA8TZlBwpxexfMqyh5iOJ5wutrDlotYCWlJJAiR4BmJQtYrU2edhq2N Et9wfb1USs7pqlHXg8tMAY6JDfEyfF4zUHZjLLBcYQyxQWh0dB1Y1AGDoNzmvAFL 0Y8pQTeudRyk3L4RC+IeW5chg1iW/rnFkIqrkW/HvBrwvwCFiJMPaToRLupRF5YT I5W1HoQOF2Zd4LO1NGK0yfXP2by5fsjcJyS/dFGnlm5NR29dnpvCy54QlPsXiZ4M L9OHvNZTv3K83Iaymf5Qq9CNoq6rITTOLDQuDXnKU+sW7ijf0DXppUtR/Y3RHEYG IoV0rs3rJACJKIDl1tsaS60z5gYLp+A= -----END CERTIFICATE-----Generated at Mon Oct 12 23:03:35 2026 by rpki-client