$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/66da7833-396a-30af-8aa9-76f11dfadbef.roa File: 66da7833-396a-30af-8aa9-76f11dfadbef.roa (raw, json) Hash identifier: NGjMSZBNfr/xiXnPhP+XDG0Ki2teZIljMgHplsrRWes= Subject key identifier: 02:70:FC:00:5D:7E:68:4A:7E:D5:CC:8D:E2:5C:EA:C9:5E:89:77:6E Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F4986D1CB1C34290480514C40 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/66da7833-396a-30af-8aa9-76f11dfadbef.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63023 IP address blocks: 66.163.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:d1:cb:1c:34:29:04:80:51:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cda9b722-773d-49fb-9852-d7b6747137c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e5:ac:e3:94:93:a3:14:d0:17:ec:49:5a:ea: 98:67:d8:ae:57:b2:5c:ab:f2:8c:d8:0c:a1:01:12: 9c:06:27:7b:0f:5d:31:8d:dd:84:0c:18:53:4d:89: ec:06:c7:5e:b8:8d:8e:13:41:aa:ed:b0:8d:ba:ab: ba:bc:b8:13:aa:38:6e:be:a9:24:92:e9:4b:f2:dd: 7a:3b:ea:ae:fd:dd:79:24:42:97:ec:20:bd:f9:87: a9:0c:52:04:48:fc:98:6d:3f:20:8c:55:47:6e:17: ae:3a:d8:12:a0:56:79:73:cf:25:68:73:94:ea:e0: 6b:59:b0:c4:ce:fc:01:d2:fe:37:d3:0a:eb:de:73: b5:38:41:5f:09:9e:a5:1e:b2:f6:cc:32:30:e4:24: d8:6b:79:72:c8:ff:29:1c:fc:5d:76:8b:af:fe:31: 8f:c2:8e:98:6b:91:67:de:ba:e5:c6:70:0c:11:8b: 78:09:91:55:06:01:1e:e8:a8:6c:49:a1:ca:60:39: a3:b4:2d:83:ef:21:d6:ee:33:84:5f:12:8e:ed:ac: ea:a5:28:94:e3:26:27:f3:87:f0:12:fc:70:19:15: d0:bc:14:b7:fe:46:cb:84:1f:62:ac:e4:1f:2c:23: 8d:b5:5d:6a:75:05:4e:8c:74:1a:ba:14:c2:d1:d5: 76:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:70:FC:00:5D:7E:68:4A:7E:D5:CC:8D:E2:5C:EA:C9:5E:89:77:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/66da7833-396a-30af-8aa9-76f11dfadbef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 66.163.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:98:6a:98:51:b1:e9:da:bd:2c:70:31:b5:f7:e1:53:40:5f: 68:7e:e3:18:19:7c:22:d9:be:1b:b7:23:dc:d5:90:f0:43:9e: ae:37:48:bb:0d:cb:c8:d9:4f:78:92:4b:45:7c:48:de:1e:17: a3:ae:2d:a4:05:20:21:f6:cc:05:d3:0b:68:f6:2e:2f:7d:f2: 07:2c:26:d9:49:72:59:2a:f2:cc:6e:a8:14:f2:20:3c:76:c8: ec:4f:79:11:a7:0a:9b:63:82:87:b9:a7:46:3a:b1:4d:5f:f7: c7:99:27:88:6f:5f:f3:3b:88:e0:44:87:8c:32:cb:ea:4a:10: 06:b3:bc:7e:f6:c1:2f:72:2d:d5:b9:d8:88:df:1b:5a:51:cc: 04:8a:6c:12:65:b4:3b:b4:e5:9e:a9:96:06:83:dd:db:c1:58: 00:5a:6d:54:8c:ac:3e:b0:9f:3d:7a:50:ce:83:30:bb:a4:da: e4:57:f7:55:40:a0:54:06:4b:5d:90:bd:11:5c:34:3a:6a:99: 99:d6:77:a2:f7:1f:1a:ad:a4:62:f2:6b:80:bb:a8:cd:9b:21: aa:f7:16:88:ab:69:45:aa:a0:dd:43:70:7e:01:ba:06:5d:c2: 78:f1:a0:57:5d:8f:f0:ad:1e:14:34:dc:e1:56:1b:46:16:a9: b6:3f:10:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhtHLHDQpBIBRTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2RhOWI3MjItNzczZC00OWZiLTk4NTItZDdiNjc0NzEzN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuWs45SToxTQF+xJWuqYZ9iuV7Jcq/KM2Ayh ARKcBid7D10xjd2EDBhTTYnsBsdeuI2OE0Gq7bCNuqu6vLgTqjhuvqkkkulL8t16 O+qu/d15JEKX7CC9+YepDFIESPyYbT8gjFVHbheuOtgSoFZ5c88laHOU6uBrWbDE zvwB0v430wrr3nO1OEFfCZ6lHrL2zDIw5CTYa3lyyP8pHPxddouv/jGPwo6Ya5Fn 3rrlxnAMEYt4CZFVBgEe6KhsSaHKYDmjtC2D7yHW7jOEXxKO7azqpSiU4yYn84fw EvxwGRXQvBS3/kbLhB9irOQfLCONtV1qdQVOjHQauhTC0dV2YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJw/ABdfmhKftXMjeJc6sleiXduMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNjZkYTc4MzMtMzk2YS0z MGFmLThhYTktNzZmMTFkZmFkYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+YaphRsenavSxwMbX34VNAX2h+4xgZfCLZvhu3I9zVkPBDnq43SLsN y8jZT3iSS0V8SN4eF6OuLaQFICH2zAXTC2j2Li998gcsJtlJclkq8sxuqBTyIDx2 yOxPeRGnCptjgoe5p0Y6sU1f98eZJ4hvX/M7iOBEh4wyy+pKEAazvH72wS9yLdW5 2IjfG1pRzASKbBJltDu05Z6plgaD3dvBWABabVSMrD6wnz16UM6DMLuk2uRX91VA oFQGS12QvRFcNDpqmZnWd6L3HxqtpGLya4C7qM2bIar3FoiraUWqoN1DcH4BugZd wnjxoFddj/CtHhQ03OFWG0YWqbY/ENI= -----END CERTIFICATE-----Generated at Tue Oct 27 15:52:49 2026 by rpki-client