$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa File: fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa (raw, json) Hash identifier: 2Lxe0GAj2JPn4b1UB1eExIVqqcH6lwKp35y4IQWkKZ8= Subject key identifier: 66:5E:CB:F8:52:0C:79:77:19:A5:EB:8C:81:FA:45:02:48:86:5B:21 Certificate issuer: /CN=0f27cf1f-c7c6-435c-a313-992cc63104f9 Certificate serial: 010D0C9F4328584EA788798A7C94BABA19FA2C80 Authority key identifier: A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30528 IP address blocks: 66.96.16.0/20 maxlen: 20 72.0.64.0/20 maxlen: 20 2001:1928::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:79:8a:7c:94:ba:ba:19:fa:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f27cf1f-c7c6-435c-a313-992cc63104f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c8eb7e53-3ece-4aa6-b183-2bbfc4d10a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:65:3b:09:e8:45:b3:96:6f:d4:00:c8:15:b8: 36:e5:4b:c0:30:0f:22:6a:bd:85:a9:e2:d4:31:6b: 17:ba:33:02:ee:f0:7a:dd:71:5b:a0:1c:12:bf:88: 3d:17:89:28:a5:4a:67:0b:fd:3a:cb:ad:06:0e:e0: 11:41:bc:55:47:e8:76:dc:cb:8e:ab:1b:75:d2:83: 2b:08:bb:97:3c:d1:93:75:64:5d:7d:32:76:e3:9f: 03:06:57:8e:98:c2:29:8a:7f:11:c8:f8:b6:9d:dc: 27:72:63:80:b4:fd:97:ca:bc:4c:e7:d4:f5:22:35: 63:01:a7:f7:83:79:25:e7:c7:fd:94:81:9c:35:1a: 4a:1f:a4:1d:84:9f:d9:bc:ce:a4:d9:7e:db:90:ba: fa:71:63:3f:04:54:96:db:04:da:89:da:16:4c:a9: 38:ad:69:e7:75:01:1e:ee:2c:20:98:06:22:5d:6b: e9:f3:c3:53:35:c2:33:3a:24:7b:32:9e:40:08:ca: a5:88:d8:fc:5a:ee:f7:49:35:0a:0f:09:3a:19:93: e5:32:a8:5d:58:41:fe:d8:db:ff:2f:cf:ad:85:2f: c1:29:c4:f1:1a:2f:5d:17:68:f0:e5:1e:81:83:5c: 42:32:7a:ef:57:45:73:bb:e0:3a:70:0e:1d:65:33: 7e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5E:CB:F8:52:0C:79:77:19:A5:EB:8C:81:FA:45:02:48:86:5B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl X509v3 Authority Key Identifier: keyid:A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer sbgp-ipAddrBlock: critical IPv4: 66.96.16.0/20 72.0.64.0/20 IPv6: 2001:1928::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:21:ca:ad:dd:3c:dd:4a:fd:64:54:ba:d8:67:9e:e1:28:20: 80:5f:b9:18:b2:9d:c0:59:82:89:28:b0:7b:00:63:4d:4e:f8: 8a:05:e9:28:f7:02:c4:f8:8b:74:b2:70:9c:27:37:2d:a1:c2: df:a1:e3:7e:30:54:ad:92:1f:b4:e2:43:04:99:c5:f1:c1:3e: 83:6b:43:0d:89:31:f3:62:4f:3f:5f:55:57:aa:f6:0c:58:73: bd:dc:97:2b:72:2a:42:60:99:54:1a:9b:1b:2f:07:3d:7c:d6: 12:b0:df:35:c5:d2:1a:dc:60:60:20:a3:2e:64:46:d0:5a:96: 26:3b:ee:a6:a2:84:e4:59:96:38:9b:76:b5:81:09:5f:7d:5c: 6e:68:65:ee:1c:d0:bf:68:61:32:f9:3c:3f:0e:c9:60:44:42: c7:14:68:9f:e0:29:12:0e:04:26:f5:9c:75:2c:60:0f:92:0d: 25:29:db:d2:c4:0f:a6:44:48:77:8b:3f:09:98:40:38:49:0b: ff:45:80:a7:a3:a0:f4:d8:a4:df:71:93:09:fa:eb:0d:45:3d: 03:45:c2:db:79:78:fd:56:a9:db:86:48:b2:05:4f:9d:d7:bc: f4:c2:0c:99:54:2c:9b:90:a2:2f:91:af:75:17:f5:91:a2:8c: b3:ed:6d:bc -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE6niHmKfJS6uhn6LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYyN2NmMWYtYzdjNi00MzVjLWEzMTMtOTkyY2M2MzEw NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzhlYjdlNTMtM2VjZS00YWE2LWIxODMtMmJiZmM0ZDEwYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGU7CehFs5Zv1ADIFbg25UvAMA8iar2FqeLU MWsXujMC7vB63XFboBwSv4g9F4kopUpnC/06y60GDuARQbxVR+h23MuOqxt10oMr CLuXPNGTdWRdfTJ2458DBleOmMIpin8RyPi2ndwncmOAtP2XyrxM59T1IjVjAaf3 g3kl58f9lIGcNRpKH6QdhJ/ZvM6k2X7bkLr6cWM/BFSW2wTaidoWTKk4rWnndQEe 7iwgmAYiXWvp88NTNcIzOiR7Mp5ACMqliNj8Wu73STUKDwk6GZPlMqhdWEH+2Nv/ L8+thS/BKcTxGi9dF2jw5R6Bg1xCMnrvV0Vzu+A6cA4dZTN+VQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFGZey/hSDHl3GaXrjIH6RQJIhlshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3 Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJjYzYzMTA0ZjkvZmI1NjlkNDktYTNkNS0z NmI3LTlkNWEtMzkwMGNhOWYwZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGYyN2NmMWYtYzdjNi00MzVjLWEz MTMtOTkyY2M2MzEwNGY5LzBmMjdjZjFmLWM3YzYtNDM1Yy1hMzEzLTk5MmNjNjMx MDRmOS5jcmwwHwYDVR0jBBgwFoAUo152Mp1514H4Ylc1CoZ/eeY9K4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJj YzYzMTA0ZjkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQmAQAwQE SABAMA0EAgACMAcDBQAgARkoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF8hyq3dPN1K/WRUuthnnuEoIIBf uRiyncBZgokosHsAY01O+IoF6Sj3AsT4i3SycJwnNy2hwt+h434wVK2SH7TiQwSZ xfHBPoNrQw2JMfNiTz9fVVeq9gxYc73clytyKkJgmVQamxsvBz181hKw3zXF0hrc YGAgoy5kRtBaliY77qaihORZljibdrWBCV99XG5oZe4c0L9oYTL5PD8OyWBEQscU aJ/gKRIOBCb1nHUsYA+SDSUp29LED6ZESHeLPwmYQDhJC/9FgKejoPTYpN9xkwn6 6w1FPQNFwtt5eP1WqduGSLIFT53XvPTCDJlULJuQoi+Rr3UX9ZGijLPtbbw= -----END CERTIFICATE-----Generated at Thu Aug 20 00:05:37 2026 by rpki-client