$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1ac6d3e9-5050-3e2c-a324-0899e3c52397.roa File: 1ac6d3e9-5050-3e2c-a324-0899e3c52397.roa (raw, json) Hash identifier: NqBjvlBYz5jzI50kV7zpgAaBScpgwLn7lRKD5BbnSiI= Subject key identifier: 7B:51:E9:E2:7B:8F:9A:8E:E4:B7:A0:96:5D:5B:EB:5C:F8:A2:F5:8C Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584F498C1B9E6EB4B7D7BC975B40 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1ac6d3e9-5050-3e2c-a324-0899e3c52397.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1403 IP address blocks: 66.254.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:1b:9e:6e:b4:b7:d7:bc:97:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8a80e5a6-633e-4386-8159-24985b1a5a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:e2:0b:9d:31:ed:32:59:bf:d1:1f:f8:f1: 18:11:fa:3c:34:cc:7e:16:6a:0b:1a:4d:67:a7:f5: 13:bf:6d:17:33:e7:cb:ca:c5:7a:11:df:a3:ab:c9: 44:86:80:9c:ee:04:8f:05:03:37:f7:ef:3f:07:50: 64:13:08:16:93:89:02:22:2c:78:55:b9:1d:86:5e: ac:66:93:16:bd:27:3b:e9:91:0f:99:5d:99:4c:dc: 62:37:38:77:c5:62:fa:75:b5:b5:5d:a0:0e:b2:d7: 96:61:ee:c8:9a:f1:f3:08:c3:2e:dd:88:c3:39:6f: ee:68:fa:0d:b0:92:53:32:a1:35:6c:3d:42:eb:e3: 44:85:af:1f:de:38:b4:6f:df:bd:17:13:bf:2a:74: 22:c6:96:36:cf:e4:68:83:63:0e:18:9b:1a:64:4e: 00:ef:fc:2e:18:af:92:57:44:c0:e8:56:c0:6f:de: 91:9c:ed:ad:52:f5:2c:4a:8b:9b:d8:cf:46:0b:77: 6e:26:d1:76:4c:83:4b:6f:3d:8a:06:38:34:60:5f: b7:19:b3:91:c4:49:91:04:45:c4:7b:e4:89:3d:10: a4:6c:c2:b6:33:b4:0b:37:8e:d5:9a:57:42:6d:cd: 69:e0:c5:59:c0:89:25:50:e0:d4:98:04:2e:b1:7c: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:51:E9:E2:7B:8F:9A:8E:E4:B7:A0:96:5D:5B:EB:5C:F8:A2:F5:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1ac6d3e9-5050-3e2c-a324-0899e3c52397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.254.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f6:69:9f:2d:56:5d:83:2f:3c:3b:39:c5:2d:22:ae:61:33: 56:5f:98:2c:6c:3e:d3:b4:f4:d5:97:0d:51:2f:04:c5:f0:1e: a9:94:88:74:3d:fa:17:40:00:36:0a:05:61:10:22:1c:f1:0f: 1b:71:b8:98:b3:39:3d:9e:b0:26:f3:38:08:ec:cd:e8:d0:c1: 50:7f:48:cf:f2:db:37:2c:59:d6:f9:10:bc:36:2b:c4:34:93: 19:80:82:74:46:53:70:5b:9a:7b:cc:4c:a4:a6:dd:3e:81:27: ae:28:5a:f7:cf:1d:f0:2a:01:e5:ff:99:3e:4b:e1:cd:67:5b: c4:70:a3:f3:22:e8:23:91:8d:c8:51:6e:e8:dc:aa:b2:71:7e: ee:32:fa:a8:27:f9:48:a8:9c:6d:ef:4a:f3:64:c5:a8:5e:fc: 86:31:82:f7:d5:ea:19:6f:40:81:25:14:6b:b0:4f:b6:ef:64: b1:f0:83:75:a8:7c:ba:83:3d:9a:6d:ac:f9:21:58:80:63:36: de:80:91:bb:90:26:a9:54:80:cd:31:53:eb:19:57:7e:31:6f: 84:91:2d:69:8b:45:61:b7:e3:c8:af:0a:f5:e2:13:8c:2d:1e: e9:3e:0b:36:c4:93:f1:ab:e8:e8:ec:12:26:09:85:a3:a1:7b: 65:e5:92:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjBuebrS317yXW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGE4MGU1YTYtNjMzZS00Mzg2LTgxNTktMjQ5ODViMWE1YTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwDiC50x7TJZv9Ef+PEYEfo8NMx+FmoLGk1n p/UTv20XM+fLysV6Ed+jq8lEhoCc7gSPBQM39+8/B1BkEwgWk4kCIix4Vbkdhl6s ZpMWvSc76ZEPmV2ZTNxiNzh3xWL6dbW1XaAOsteWYe7ImvHzCMMu3YjDOW/uaPoN sJJTMqE1bD1C6+NEha8f3ji0b9+9FxO/KnQixpY2z+Rog2MOGJsaZE4A7/wuGK+S V0TA6FbAb96RnO2tUvUsSoub2M9GC3duJtF2TINLbz2KBjg0YF+3GbORxEmRBEXE e+SJPRCkbMK2M7QLN47VmldCbc1p4MVZwIklUODUmAQusXzdVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtR6eJ7j5qO5Legll1b61z4ovWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvMWFjNmQzZTktNTA1MC0z ZTJjLWEzMjQtMDg5OWUzYzUyMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv2aZ8tVl2DLzw7OcUtIq5hM1ZfmCxsPtO09NWXDVEvBMXwHqmUiHQ9 +hdAADYKBWEQIhzxDxtxuJizOT2esCbzOAjszejQwVB/SM/y2zcsWdb5ELw2K8Q0 kxmAgnRGU3BbmnvMTKSm3T6BJ64oWvfPHfAqAeX/mT5L4c1nW8Rwo/Mi6CORjchR bujcqrJxfu4y+qgn+UionG3vSvNkxahe/IYxgvfV6hlvQIElFGuwT7bvZLHwg3Wo fLqDPZptrPkhWIBjNt6AkbuQJqlUgM0xU+sZV34xb4SRLWmLRWG348ivCvXiE4wt Huk+CzbEk/Gr6OjsEiYJhaOhe2Xlkqo= -----END CERTIFICATE-----Generated at Mon Sep 28 00:54:20 2026 by rpki-client