$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0c70e29-37dd-35ff-886f-a3685d5abc58.roa File: a0c70e29-37dd-35ff-886f-a3685d5abc58.roa (raw, json) Hash identifier: LCBZDTA0XdCxd1ynvow9LP7fNjNkG23h/7vMk9fFAE8= Subject key identifier: 1E:4D:CD:D3:EE:04:E5:19:EA:A6:45:15:AC:0E:47:1D:76:1C:C7:F0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA787F3D8F281416315E9C000 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0c70e29-37dd-35ff-886f-a3685d5abc58.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 174 IP address blocks: 66.28.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:f3:d8:f2:81:41:63:15:e9:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=77bc33b4-9807-465f-9201-cf1ba20c721b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e7:d8:12:14:57:fb:b1:f1:42:10:e8:30:19: 9e:e2:2c:b6:bc:2f:30:1d:c0:27:9c:b2:18:33:65: 12:40:84:ea:0f:1d:5e:76:e6:72:c7:37:13:87:aa: 89:32:16:bf:dd:34:d4:91:2a:7c:bf:45:73:c4:4c: f6:a7:1c:1c:be:cc:18:af:6b:4c:53:42:57:ac:11: 13:84:49:59:e6:5c:97:f2:59:dd:65:a4:7c:c8:c6: e2:d4:38:3b:6c:44:15:87:40:af:7a:d6:ec:70:c4: 0d:58:17:a0:41:b6:e0:2a:45:50:2b:5f:60:ee:eb: 47:50:2d:77:b0:e4:b4:80:b7:32:ac:fa:73:df:68: c2:19:39:5c:10:aa:2d:bf:d0:d2:17:68:54:60:1c: 56:7e:75:71:79:44:77:71:79:7d:81:ce:25:06:e8: 86:e8:f7:f3:88:52:1e:c9:7a:47:4e:b6:05:e8:e4: a0:80:e0:27:f6:6c:e2:7a:ec:fd:44:68:27:9e:57: 99:2f:1e:8a:31:ff:66:51:f5:bf:a2:4c:b3:70:84: 76:56:58:3c:bb:0e:e9:04:80:ab:a0:d8:3e:26:ce: e7:15:33:f9:0b:08:47:cc:0b:4e:aa:90:71:62:f0: c3:b4:d3:3d:5b:7b:58:00:8b:46:5f:ef:dd:a3:41: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4D:CD:D3:EE:04:E5:19:EA:A6:45:15:AC:0E:47:1D:76:1C:C7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0c70e29-37dd-35ff-886f-a3685d5abc58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 66.28.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:24:2a:54:00:51:a6:92:50:38:3f:b6:54:6f:44:13:49:e0: 51:73:36:73:ed:a5:e3:40:ef:3d:8b:04:ed:72:6f:f8:25:7b: 3b:e5:02:2c:b0:e4:04:2f:5b:22:37:a5:4d:eb:ad:29:6f:12: 89:74:81:0d:21:18:01:b0:50:fb:39:aa:75:bf:d9:44:98:09: d2:14:0b:18:96:49:e0:9a:c2:74:19:e3:da:0b:00:ca:cc:99: 8d:27:75:68:f5:d8:bb:dd:55:6f:ac:b2:30:ed:f5:4b:04:60: 12:a9:24:c5:e6:ca:bb:f2:99:8b:46:72:48:dd:07:56:d3:a6: 67:e6:42:52:af:3c:63:ce:7b:15:08:e3:13:81:a9:29:0a:c3: 62:44:24:ce:ac:fc:e5:6b:2a:d0:11:c0:e2:a3:b5:a6:80:c4: 51:b5:82:bd:bf:81:d1:b3:90:35:b2:e8:03:41:97:1f:e6:7e: 94:d7:b1:8f:a4:3b:11:39:4a:4f:86:9f:8b:e4:0a:5e:9e:f2: ee:de:b2:6c:f6:05:31:34:fd:2b:f4:7f:4f:04:71:03:b0:25: cd:8f:29:cc:5a:60:f3:d0:19:bf:3d:67:51:4a:68:5c:34:c1: 5d:0f:e9:82:ff:4b:80:35:b7:01:2e:00:92:bb:99:52:9e:30: 15:be:ab:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/PY8oFBYxXpwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzdiYzMzYjQtOTgwNy00NjVmLTkyMDEtY2YxYmEyMGM3MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOfYEhRX+7HxQhDoMBme4iy2vC8wHcAnnLIY M2USQITqDx1eduZyxzcTh6qJMha/3TTUkSp8v0VzxEz2pxwcvswYr2tMU0JXrBET hElZ5lyX8lndZaR8yMbi1Dg7bEQVh0CvetbscMQNWBegQbbgKkVQK19g7utHUC13 sOS0gLcyrPpz32jCGTlcEKotv9DSF2hUYBxWfnVxeUR3cXl9gc4lBuiG6PfziFIe yXpHTrYF6OSggOAn9mzieuz9RGgnnleZLx6KMf9mUfW/okyzcIR2Vlg8uw7pBICr oNg+Js7nFTP5CwhHzAtOqpBxYvDDtNM9W3tYAItGX+/do0HW2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5NzdPuBOUZ6qZFFawORx12HMfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTBjNzBlMjktMzdkZC0z NWZmLTg4NmYtYTM2ODVkNWFiYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhwJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMkKlQAUaaSUDg/tlRvRBNJ4FFzNnPtpeNA7z2LBO1yb/glezvlAiyw 5AQvWyI3pU3rrSlvEol0gQ0hGAGwUPs5qnW/2USYCdIUCxiWSeCawnQZ49oLAMrM mY0ndWj12LvdVW+ssjDt9UsEYBKpJMXmyrvymYtGckjdB1bTpmfmQlKvPGPOexUI 4xOBqSkKw2JEJM6s/OVrKtARwOKjtaaAxFG1gr2/gdGzkDWy6ANBlx/mfpTXsY+k OxE5Sk+Gn4vkCl6e8u7esmz2BTE0/Sv0f08EcQOwJc2PKcxaYPPQGb89Z1FKaFw0 wV0P6YL/S4A1twEuAJK7mVKeMBW+q/c= -----END CERTIFICATE-----Generated at Fri Sep 11 13:12:44 2026 by rpki-client