$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/00433374-b92e-3673-bb28-a87a949bdf92.roa File: 00433374-b92e-3673-bb28-a87a949bdf92.roa (raw, json) Hash identifier: MS2bTnx0UWpCvBOUwAdM7MnygByxZW4xtDZvZ9sDrx0= Subject key identifier: 9C:80:7F:8E:46:4E:1D:DF:07:A0:21:DC:FA:16:10:BB:0E:C3:38:74 Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584F4C3DE94408E9960F676B7420 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/00433374-b92e-3673-bb28-a87a949bdf92.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 1403 IP address blocks: 66.254.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e9:44:08:e9:96:0f:67:6b:74:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b4919e76-50f5-4c16-9d31-b47eeabc7738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b1:e3:30:02:42:30:03:ac:21:a4:1c:3a:ed: 8f:81:aa:ed:3c:35:50:26:12:ac:b0:27:c9:b1:d3: 76:af:f4:65:44:24:12:fb:fe:e8:b3:68:cc:49:0e: ed:ea:0b:2b:6b:f3:e1:01:de:c7:37:02:86:37:10: d4:23:17:b1:86:4d:15:a3:c4:f2:ca:81:42:88:e6: 76:41:7c:b1:e0:4c:96:1a:1f:09:c0:4e:68:c0:53: 8e:86:d9:7b:13:51:1e:92:df:45:79:6d:ba:55:3a: 7f:af:ee:d7:d3:11:e9:aa:df:bf:4d:cf:ba:d3:7b: 5d:55:25:e1:6d:f2:f4:3b:a5:ea:a8:95:e2:cf:03: 45:11:00:71:65:17:29:b0:9c:2e:c0:5e:b8:cb:97: 0c:cc:61:f3:48:39:75:0c:78:6f:df:b6:c1:fe:c8: a7:74:f3:31:bd:9a:6c:f1:82:ad:92:e5:2d:ec:9a: 06:0e:e9:63:3e:35:44:a3:f7:34:26:3a:8e:ee:91: e1:04:b4:46:d8:62:e6:11:f0:11:70:9c:a5:7e:ba: 55:a3:85:f1:5a:ba:44:58:18:07:fc:4d:79:06:0d: bb:ab:3b:89:cb:77:92:cc:b6:ee:b2:7f:ec:a0:8c: 43:c5:dc:3b:30:8e:74:44:c4:86:a9:72:65:63:d4: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:80:7F:8E:46:4E:1D:DF:07:A0:21:DC:FA:16:10:BB:0E:C3:38:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/00433374-b92e-3673-bb28-a87a949bdf92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.254.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:fa:1f:85:00:60:8e:7f:a6:fe:73:d7:6e:1d:c2:9c:0b:87: dc:4f:44:ba:a3:78:0a:88:23:e5:03:c7:ff:3d:fa:31:28:c0: 22:f9:43:9b:92:81:15:5b:d7:b7:c6:bd:6b:22:d6:fb:a6:eb: f0:10:10:fb:71:80:e7:d8:df:89:c3:73:a8:97:45:6c:45:86: a3:29:86:77:44:6c:99:bb:d4:1d:5e:e5:a1:9b:2b:c8:50:0e: 76:68:30:ab:c0:cb:a5:22:be:e3:07:c1:dd:71:20:d7:5c:ea: b8:3f:c8:80:0d:34:40:0c:6a:c7:76:fe:74:0a:ee:93:4d:93: e9:54:f2:95:7a:24:63:a6:77:c4:e5:07:50:b5:47:1a:fd:1e: 95:f9:11:e2:0f:3e:d0:57:10:95:59:f8:e0:79:6e:9b:24:e4: 82:bd:0c:cf:ab:e2:b6:ff:11:e5:0a:f6:dc:20:18:35:a7:21: cd:dc:f2:89:76:d7:1e:d6:ed:5b:ac:36:7b:0c:3e:9b:38:a6: 44:f5:43:04:9a:b6:0e:c4:7d:f8:fc:24:77:b1:e2:a4:d2:6f: 2c:ae:dc:2a:2b:7b:c8:ed:71:cd:6d:74:d8:2e:7b:81:d5:b9: f2:34:5c:95:31:04:56:db:84:e0:89:7b:af:a9:0c:95:07:1f: 49:7a:5a:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPelECOmWD2drdCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjQ5MTllNzYtNTBmNS00YzE2LTlkMzEtYjQ3ZWVhYmM3NzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbHjMAJCMAOsIaQcOu2PgartPDVQJhKssCfJ sdN2r/RlRCQS+/7os2jMSQ7t6gsra/PhAd7HNwKGNxDUIxexhk0Vo8TyyoFCiOZ2 QXyx4EyWGh8JwE5owFOOhtl7E1Eekt9FeW26VTp/r+7X0xHpqt+/Tc+603tdVSXh bfL0O6XqqJXizwNFEQBxZRcpsJwuwF64y5cMzGHzSDl1DHhv37bB/sindPMxvZps 8YKtkuUt7JoGDuljPjVEo/c0JjqO7pHhBLRG2GLmEfARcJylfrpVo4XxWrpEWBgH /E15Bg27qzuJy3eSzLbusn/soIxDxdw7MI50RMSGqXJlY9RjLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyAf45GTh3fB6Ah3PoWELsOwzh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvMDA0MzMzNzQtYjkyZS0z NjczLWJiMjgtYTg3YTk0OWJkZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKf6H4UAYI5/pv5z124dwpwLh9xPRLqjeAqII+UDx/89+jEowCL5Q5uS gRVb17fGvWsi1vum6/AQEPtxgOfY34nDc6iXRWxFhqMphndEbJm71B1e5aGbK8hQ DnZoMKvAy6UivuMHwd1xINdc6rg/yIANNEAMasd2/nQK7pNNk+lU8pV6JGOmd8Tl B1C1Rxr9HpX5EeIPPtBXEJVZ+OB5bpsk5IK9DM+r4rb/EeUK9twgGDWnIc3c8ol2 1x7W7VusNnsMPps4pkT1QwSatg7Effj8JHex4qTSbyyu3Core8jtcc1tdNgue4HV ufI0XJUxBFbbhOCJe6+pDJUHH0l6Wuk= -----END CERTIFICATE-----Generated at Mon Sep 28 15:52:24 2026 by rpki-client