$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/5ad876c0-5b37-366b-b680-2b04f3680a29.roa File: 5ad876c0-5b37-366b-b680-2b04f3680a29.roa (raw, json) Hash identifier: Ozcrv+pidRzJ0Z+Qy8zsvjEK71D1oYFboot7U7GseQ4= Subject key identifier: 8E:12:5B:D9:B0:D3:D6:75:85:38:A8:E3:43:51:BB:09:A2:84:56:CA Certificate issuer: /CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843 Certificate serial: 010D0C9F4328584F984FCCAEB305D31B9E3E43E0 Authority key identifier: 4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/5ad876c0-5b37-366b-b680-2b04f3680a29.roa Signing time: Fri 23 Oct 2026 06:59:06 +0000 ROA not before: Fri 23 Oct 2026 06:59:06 +0000 ROA not after: Thu 21 Jan 2027 07:59:06 +0000 asID: 834 IP address blocks: 66.117.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:98:4f:cc:ae:b3:05:d3:1b:9e:3e:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843 Validity Not Before: Oct 23 06:59:06 2026 GMT Not After : Jan 21 07:59:06 2027 GMT Subject: CN=2acafa8c-ce03-4976-9a2e-6e77e86f7fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:9e:ac:bc:00:57:0c:02:63:08:68:5b:56: b0:77:fc:96:08:81:b8:a1:46:1a:0a:69:6f:46:58: 7d:93:af:be:1b:4a:a7:8c:14:62:d8:3b:fd:0e:e1: 19:58:1b:fe:c8:2d:ee:4f:1e:57:73:7f:f4:f0:87: 46:46:74:87:10:ac:30:a2:80:ae:e0:c6:d8:e3:8a: 41:d2:f8:0c:75:c9:7e:24:09:fa:ee:10:6c:b1:48: b5:4e:46:f9:47:4f:1b:d1:a4:09:c1:b5:2c:ee:03: 17:30:ce:8c:74:80:19:ae:e0:79:3d:fd:68:8f:77: 26:56:66:e8:62:52:77:60:b2:6d:ff:e0:71:1a:3a: 8e:5e:93:b5:7d:ae:74:4a:03:91:2a:25:b9:26:03: dd:7d:77:be:f1:e7:5a:41:27:ff:65:bf:78:74:e3: df:0d:1f:a5:30:13:9e:40:86:de:be:f2:75:aa:b8: 3c:c2:ef:ae:cc:95:6b:b7:36:f5:18:98:19:1e:1c: e7:5e:a4:8b:7b:29:ee:9a:9e:af:1a:bf:64:5a:ec: fc:0a:7f:b1:97:0d:48:b3:c6:ea:af:f1:80:5a:2b: 51:cc:90:b1:e9:92:54:54:38:20:3e:c4:e0:61:67: 14:39:d4:b4:d6:33:33:8d:6e:e3:3d:3e:30:aa:8a: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:12:5B:D9:B0:D3:D6:75:85:38:A8:E3:43:51:BB:09:A2:84:56:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/5ad876c0-5b37-366b-b680-2b04f3680a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl X509v3 Authority Key Identifier: keyid:4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer sbgp-ipAddrBlock: critical IPv4: 66.117.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:51:40:9d:70:b3:63:ee:30:e6:be:6e:b2:3a:5f:38:1a:80: 8d:28:02:4a:86:09:a1:64:ac:3e:a3:55:a5:3a:e8:a2:83:0b: ba:28:7b:80:3f:49:40:82:d3:c1:a1:19:49:8c:ce:86:25:a1: 76:02:c6:e3:ab:b8:8f:29:4e:e2:12:dc:12:4a:62:84:62:4d: 19:aa:bb:5a:0c:cb:5c:ae:a0:19:52:38:47:b6:93:38:ce:cb: 8c:6a:55:f6:1e:26:0f:95:8c:38:ef:44:f2:82:74:f6:67:6a: ed:01:77:06:65:8b:45:33:3a:73:91:f2:8a:15:76:00:86:b5: 89:14:8c:e6:71:48:47:c6:3c:01:20:47:82:1b:91:d7:06:2f: 30:1d:b1:e9:aa:db:26:33:68:08:e1:31:d0:ac:fc:8e:e6:14: b1:51:17:b3:b5:a5:95:74:0b:1f:5d:cc:e7:42:25:90:0f:95: e0:1f:3a:99:05:22:c8:87:26:fd:5f:c1:1e:79:17:00:61:5b: da:da:4b:5b:f5:78:90:a1:94:d7:fa:21:7c:9b:4f:38:16:53: f9:18:cf:3a:c2:dc:85:60:d6:fa:ce:8e:ff:2b:43:10:23:48: a2:18:ce:f8:ef:99:93:c6:06:32:a8:a4:79:cb:74:0f:6e:ef: da:6b:29:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+YT8yuswXTG54+Q+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1ZjE2YTItNTlmMi00M2Q2LTk3ODMtYjU5YzNiOWFk ODQzMB4XDTI2MTAyMzA2NTkwNloXDTI3MDEyMTA3NTkwNlowLzEtMCsGA1UEAxMk MmFjYWZhOGMtY2UwMy00OTc2LTlhMmUtNmU3N2U4NmY3ZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7+erLwAVwwCYwhoW1awd/yWCIG4oUYaCmlv Rlh9k6++G0qnjBRi2Dv9DuEZWBv+yC3uTx5Xc3/08IdGRnSHEKwwooCu4MbY44pB 0vgMdcl+JAn67hBssUi1Tkb5R08b0aQJwbUs7gMXMM6MdIAZruB5Pf1oj3cmVmbo YlJ3YLJt/+BxGjqOXpO1fa50SgORKiW5JgPdfXe+8edaQSf/Zb94dOPfDR+lMBOe QIbevvJ1qrg8wu+uzJVrtzb1GJgZHhznXqSLeynump6vGr9kWuz8Cn+xlw1Is8bq r/GAWitRzJCx6ZJUVDggPsTgYWcUOdS01jMzjW7jPT4wqooOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4SW9mw09Z1hTio40NRuwmihFbKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVm MTZhMi01OWYyLTQzZDYtOTc4My1iNTljM2I5YWQ4NDMvNWFkODc2YzAtNWIzNy0z NjZiLWI2ODAtMmIwNGYzNjgwYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmE1ZjE2YTItNTlmMi00M2Q2LTk3 ODMtYjU5YzNiOWFkODQzLzJhNWYxNmEyLTU5ZjItNDNkNi05NzgzLWI1OWMzYjlh ZDg0My5jcmwwHwYDVR0jBBgwFoAUShal8/wXMG6gD99HdWeZ+wqqZU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVmMTZhMi01OWYyLTQzZDYtOTc4My1iNTlj M2I5YWQ4NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnWeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9RQJ1ws2PuMOa+brI6XzgagI0oAkqGCaFkrD6jVaU66KKDC7ooe4A/ SUCC08GhGUmMzoYloXYCxuOruI8pTuIS3BJKYoRiTRmqu1oMy1yuoBlSOEe2kzjO y4xqVfYeJg+VjDjvRPKCdPZnau0BdwZli0UzOnOR8ooVdgCGtYkUjOZxSEfGPAEg R4IbkdcGLzAdsemq2yYzaAjhMdCs/I7mFLFRF7O1pZV0Cx9dzOdCJZAPleAfOpkF IsiHJv1fwR55FwBhW9raS1v1eJChlNf6IXybTzgWU/kYzzrC3IVg1vrOjv8rQxAj SKIYzvjvmZPGBjKopHnLdA9u79prKVw= -----END CERTIFICATE-----Generated at Sun Nov 15 04:26:34 2026 by rpki-client