$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/af90bffe-7547-31d9-9cfe-98c0501cfdba.roa File: af90bffe-7547-31d9-9cfe-98c0501cfdba.roa (raw, json) Hash identifier: JJQk0TOHSY8R++XDNiPqqEiZz/viB289YSk4Pj3Qjkc= Subject key identifier: 0A:8A:86:E7:D8:98:F1:90:DA:10:C3:A2:F7:F3:59:98:E5:C3:B7:9D Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F4328584EBDDC5E2F5BB85B81BC910B80 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/af90bffe-7547-31d9-9cfe-98c0501cfdba.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 400610 IP address blocks: 66.219.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:5e:2f:5b:b8:5b:81:bc:91:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=2283e61b-11ab-49af-8864-a4d3547c8a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:d4:96:40:5b:bb:25:a9:8f:e9:01:82:b3: b6:38:6a:7a:2b:0c:63:85:64:be:67:f7:20:cc:c8: 1d:68:00:1a:d8:01:ba:25:2c:3c:d6:77:3d:3c:78: e1:a2:e7:51:bd:25:ef:f3:43:76:01:0e:b0:c9:3f: e9:16:91:83:d8:0e:7a:89:c2:69:f0:b6:d4:f7:5d: aa:3e:a3:f0:12:3c:c8:5e:69:d7:d4:aa:e7:ff:e0: 7d:41:9f:eb:09:1f:20:53:19:c6:27:74:b1:9d:28: 56:23:cf:65:c6:59:bf:5d:3a:51:0c:c2:1e:c4:fc: 5d:ed:78:e3:4e:8c:f5:78:57:76:22:62:48:79:bf: d0:60:cd:59:b6:6b:f7:3f:85:8e:e6:8e:5d:07:6d: 2e:83:88:4d:90:87:2c:ac:68:d1:27:61:f9:a6:6e: 0f:15:03:5b:d4:5c:b2:e0:a4:0e:c9:3d:71:e5:68: 32:eb:2b:f9:ed:75:86:06:45:2e:73:a0:46:6e:63: cc:cd:d0:1c:4b:3a:ba:cf:2f:fd:0a:f6:02:cb:69: 35:29:39:5f:c5:6b:46:4a:28:33:fc:08:72:9a:d4: 4e:cc:ea:a5:07:8b:ca:83:2a:d6:ad:0d:56:22:2c: bc:a1:f8:f4:fb:16:bd:1c:58:e7:a9:72:ab:c4:07: c5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8A:86:E7:D8:98:F1:90:DA:10:C3:A2:F7:F3:59:98:E5:C3:B7:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/af90bffe-7547-31d9-9cfe-98c0501cfdba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e6:88:47:ee:04:2a:f0:a0:30:ef:cb:8b:c0:ef:09:bb:ec: 43:ff:f2:4d:a4:0b:8e:a8:21:83:38:2b:5e:09:b6:2a:9c:b2: 47:b5:3f:2e:67:64:64:a6:ef:ad:53:69:51:15:b8:22:b8:2b: 1b:f1:60:d5:40:05:c5:33:4f:2d:1b:28:ad:0c:1d:cd:b4:e8: 5f:9c:3e:1c:12:ec:65:ab:e0:79:5c:a9:4b:a9:6e:45:19:94: da:05:a6:5c:5c:85:28:d8:46:11:5e:dd:ff:55:7f:bd:1a:1b: 91:3c:c4:1d:ef:15:26:08:d0:5a:9e:e2:13:cd:49:15:80:fa: 0c:a0:32:cc:77:ca:13:b6:fc:93:ae:a5:b0:9c:a5:3a:44:6d: 07:b6:b2:f1:ea:1e:24:ca:9f:2b:ce:79:ec:21:9d:dd:e6:e5: 63:72:d1:e9:95:43:ae:f7:d5:d8:c7:ba:8e:2d:ce:07:1e:a2: 5d:f8:e9:d9:8f:0c:11:31:9c:53:9b:04:43:de:b4:a1:a2:fb: 53:02:da:f2:10:9e:dd:73:cf:9f:92:0b:43:ed:de:87:af:85: 6a:91:cd:25:26:ce:de:ff:6f:c3:89:1e:30:7b:31:66:ee:b8: f7:e7:07:45:10:1b:e0:a4:01:c6:b9:3e:2f:ff:67:1b:3e:28: 45:83:88:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE693F4vW7hbgbyRC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk MjI4M2U2MWItMTFhYi00OWFmLTg4NjQtYTRkMzU0N2M4YTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdbUlkBbuyWpj+kBgrO2OGp6KwxjhWS+Z/cg zMgdaAAa2AG6JSw81nc9PHjhoudRvSXv80N2AQ6wyT/pFpGD2A56icJp8LbU912q PqPwEjzIXmnX1Krn/+B9QZ/rCR8gUxnGJ3SxnShWI89lxlm/XTpRDMIexPxd7Xjj Toz1eFd2ImJIeb/QYM1Ztmv3P4WO5o5dB20ug4hNkIcsrGjRJ2H5pm4PFQNb1Fyy 4KQOyT1x5Wgy6yv57XWGBkUuc6BGbmPMzdAcSzq6zy/9CvYCy2k1KTlfxWtGSigz /AhymtROzOqlB4vKgyrWrQ1WIiy8ofj0+xa9HFjnqXKrxAfFQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqKhufYmPGQ2hDDovfzWZjlw7edMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvYWY5MGJmZmUtNzU0Ny0z MWQ5LTljZmUtOThjMDUwMWNmZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTmiEfuBCrwoDDvy4vA7wm77EP/8k2kC46oIYM4K14Jtiqcske1Py5n ZGSm761TaVEVuCK4KxvxYNVABcUzTy0bKK0MHc206F+cPhwS7GWr4HlcqUupbkUZ lNoFplxchSjYRhFe3f9Vf70aG5E8xB3vFSYI0Fqe4hPNSRWA+gygMsx3yhO2/JOu pbCcpTpEbQe2svHqHiTKnyvOeewhnd3m5WNy0emVQ6731djHuo4tzgceol346dmP DBExnFObBEPetKGi+1MC2vIQnt1zz5+SC0Pt3oevhWqRzSUmzt7/b8OJHjB7MWbu uPfnB0UQG+CkAca5Pi//Zxs+KEWDiHI= -----END CERTIFICATE-----Generated at Sat Sep 19 02:59:30 2026 by rpki-client