$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/75b0db40-7ad7-3078-97bc-40efe1d8471e.roa File: 75b0db40-7ad7-3078-97bc-40efe1d8471e.roa (raw, json) Hash identifier: 8BFfpyD+JqSMaegOZvrdGymJiF/+ca1Fv4RhB58YUDk= Subject key identifier: 58:7C:25:6F:4B:55:72:EB:E5:0B:21:B2:CF:61:83:99:6A:62:56:C3 Certificate issuer: /CN=3cfc6d7b-a1e6-4d32-803d-0e5060c00725 Certificate serial: 010D0C9F4328584EF4572665EC842A07E3126C80 Authority key identifier: 04:25:0A:C7:4E:4D:D3:95:46:55:BB:39:96:37:F5:FE:A3:71:5B:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/75b0db40-7ad7-3078-97bc-40efe1d8471e.roa Signing time: Tue 25 Aug 2026 13:21:21 +0000 ROA not before: Tue 25 Aug 2026 13:21:21 +0000 ROA not after: Mon 23 Nov 2026 14:21:21 +0000 asID: 5650 IP address blocks: 66.235.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:57:26:65:ec:84:2a:07:e3:12:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cfc6d7b-a1e6-4d32-803d-0e5060c00725 Validity Not Before: Aug 25 13:21:21 2026 GMT Not After : Nov 23 14:21:21 2026 GMT Subject: CN=f1021457-4b7e-4678-b4ea-ecdefb140fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:65:2f:14:83:af:af:cc:e6:9f:4e:2d:b6: 72:64:4d:5e:8c:e3:61:c7:95:b9:3e:d0:ee:b2:8d: b8:7c:cf:f6:cb:ec:2f:d3:95:9a:3b:e5:6a:1e:19: 5f:3c:e0:d0:a6:a0:bc:b4:64:39:61:0e:de:df:ef: af:c0:f3:e5:65:16:2e:bd:e7:14:77:52:4b:5e:01: 00:9a:d6:96:6d:5f:33:7c:28:69:5e:3e:8f:f3:34: 45:9c:24:6e:61:74:17:14:28:a2:2a:21:7a:eb:11: 2b:20:39:a5:9e:89:b5:41:12:d2:1b:3a:00:b8:ed: d5:e3:52:dd:f9:7c:17:65:ea:ad:b2:de:b0:ba:ac: c8:1e:1a:97:27:4a:66:49:a3:9c:f1:fc:ab:77:a3: 50:9a:11:33:26:0c:c7:9f:0c:fd:f4:29:be:d5:23: 54:3a:5d:8e:0b:6e:6d:eb:53:90:58:99:95:05:b8: ed:67:23:c4:06:f6:75:ff:20:18:08:4d:98:ec:02: 8b:29:0e:44:00:8e:af:16:16:06:8b:df:11:4d:f4: a3:38:94:44:ad:fa:13:eb:bf:67:d5:7d:d4:f9:b3: 9f:01:35:77:8d:bf:85:18:33:f6:8f:5a:49:8a:d0: 6c:18:ee:d3:94:1a:67:14:f8:cd:c2:9c:dd:75:68: 18:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7C:25:6F:4B:55:72:EB:E5:0B:21:B2:CF:61:83:99:6A:62:56:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/75b0db40-7ad7-3078-97bc-40efe1d8471e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.crl X509v3 Authority Key Identifier: keyid:04:25:0A:C7:4E:4D:D3:95:46:55:BB:39:96:37:F5:FE:A3:71:5B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer sbgp-ipAddrBlock: critical IPv4: 66.235.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:51:28:ab:48:ea:6a:ce:13:28:08:4e:e6:56:9b:19:1d:13: d0:3e:21:a1:b7:38:9b:82:e1:41:ef:08:85:24:b6:1f:fc:c7: 79:00:a1:71:4a:db:90:70:c8:6c:42:dd:73:89:81:b7:93:a4: 0f:0d:2b:bf:d9:cd:20:2a:77:ef:fe:05:92:34:7e:51:cb:13: c9:d9:8c:21:f5:e0:ce:1a:83:2d:2a:01:ad:c5:8f:db:23:92: 0d:c7:b7:49:4b:5f:5f:5f:14:b0:1a:ae:68:0c:a1:7a:d0:50: 1f:4a:4b:96:15:17:a4:07:d2:63:96:6c:36:99:93:2d:11:f9: 5f:17:26:4b:f3:57:fd:58:4e:96:db:2f:fa:fb:e9:af:cd:8f: 27:9b:84:80:f5:f2:9f:53:10:6e:4f:eb:74:b7:b5:f4:0c:de: 44:95:14:aa:a1:43:ef:a2:be:2f:57:d0:b3:f6:f9:7d:6c:98: 87:c4:bb:91:9d:0b:47:5a:cc:14:67:16:4d:a4:d2:1f:3b:6b: 73:9e:01:65:49:50:6a:51:5c:ec:6b:ac:8e:91:4a:ef:0c:68: cc:ea:8c:ab:8f:91:5e:cb:0d:24:1e:c6:ad:b3:b2:d9:10:0c: e8:79:88:94:f7:7b:96:3a:71:29:13:4b:78:74:93:9b:9b:ee: 1c:c1:5f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70VyZl7IQqB+MSbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NmYzZkN2ItYTFlNi00ZDMyLTgwM2QtMGU1MDYwYzAw NzI1MB4XDTI2MDgyNTEzMjEyMVoXDTI2MTEyMzE0MjEyMVowLzEtMCsGA1UEAxMk ZjEwMjE0NTctNGI3ZS00Njc4LWI0ZWEtZWNkZWZiMTQwZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuplLxSDr6/M5p9OLbZyZE1ejONhx5W5PtDu so24fM/2y+wv05WaO+VqHhlfPODQpqC8tGQ5YQ7e3++vwPPlZRYuvecUd1JLXgEA mtaWbV8zfChpXj6P8zRFnCRuYXQXFCiiKiF66xErIDmlnom1QRLSGzoAuO3V41Ld +XwXZeqtst6wuqzIHhqXJ0pmSaOc8fyrd6NQmhEzJgzHnwz99Cm+1SNUOl2OC25t 61OQWJmVBbjtZyPEBvZ1/yAYCE2Y7AKLKQ5EAI6vFhYGi98RTfSjOJRErfoT679n 1X3U+bOfATV3jb+FGDP2j1pJitBsGO7TlBpnFPjNwpzddWgYJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFh8JW9LVXLr5Qshss9hg5lqYlbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zY2Zj NmQ3Yi1hMWU2LTRkMzItODAzZC0wZTUwNjBjMDA3MjUvNzViMGRiNDAtN2FkNy0z MDc4LTk3YmMtNDBlZmUxZDg0NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvM2NmYzZkN2ItYTFlNi00ZDMyLTgw M2QtMGU1MDYwYzAwNzI1LzNjZmM2ZDdiLWExZTYtNGQzMi04MDNkLTBlNTA2MGMw MDcyNS5jcmwwHwYDVR0jBBgwFoAUBCUKx05N05VGVbs5ljf1/qNxW2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zY2ZjNmQ3Yi1hMWU2LTRkMzItODAzZC0wZTUw NjBjMDA3MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQutgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlRKKtI6mrOEygITuZWmxkdE9A+IaG3OJuC4UHvCIUkth/8x3kAoXFK 25BwyGxC3XOJgbeTpA8NK7/ZzSAqd+/+BZI0flHLE8nZjCH14M4agy0qAa3Fj9sj kg3Ht0lLX19fFLAarmgMoXrQUB9KS5YVF6QH0mOWbDaZky0R+V8XJkvzV/1YTpbb L/r76a/NjyebhID18p9TEG5P63S3tfQM3kSVFKqhQ++ivi9X0LP2+X1smIfEu5Gd C0dazBRnFk2k0h87a3OeAWVJUGpRXOxrrI6RSu8MaMzqjKuPkV7LDSQexq2zstkQ DOh5iJT3e5Y6cSkTS3h0k5ub7hzBXzQ= -----END CERTIFICATE-----Generated at Thu Sep 3 00:56:19 2026 by rpki-client