$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa File: bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa (raw, json) Hash identifier: c3NzI2Tjl6yEMzKYjJMVvMOa7nbHCn1oe7YtaqZ34CM= Subject key identifier: FB:F2:65:C0:FC:F2:11:3F:4D:47:FF:B3:5C:9D:91:2C:F0:71:16:67 Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F4328584F15CCF251F8E05FFF1DACEE80 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 396417 IP address blocks: 66.203.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:f2:51:f8:e0:5f:ff:1d:ac:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=f03e0f43-6b8a-45a7-9581-1b63cfd262a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:8d:94:2b:aa:91:c1:70:d1:c6:21:bc:25: 6b:e2:1d:cb:9d:87:6e:43:52:d8:c5:b5:28:d9:be: 3d:da:dd:a2:2e:df:f0:0d:c0:5f:00:5c:4e:2d:34: f7:d3:43:4f:1b:a6:6e:b6:63:e8:52:8c:05:b8:55: f5:49:af:8e:e9:2c:ae:5f:08:a3:4b:52:51:24:0a: 28:5d:dc:c1:8f:20:af:06:af:70:cd:0a:69:ba:8d: e1:b1:38:c9:61:e5:7e:40:f9:ff:80:8d:c5:62:e9: 04:7f:ee:41:c1:a9:df:ec:99:40:00:32:d6:8e:c6: 27:de:d3:6b:24:15:82:55:c0:0c:1d:ed:a0:03:7c: 82:76:b0:3a:8a:49:2d:4e:a9:f1:99:ed:ef:6c:a9: ac:60:45:01:83:84:b8:1b:89:9f:f9:02:86:9f:d2: b8:19:23:d4:6c:34:81:5f:df:f5:6c:c6:e4:1d:0e: c8:73:a9:2c:7a:40:6d:66:35:4d:65:5a:5d:33:97: 43:26:52:28:01:4c:92:09:84:48:78:a2:6a:e3:2b: 5b:1e:67:e6:07:59:d3:19:02:29:db:14:6e:f0:f9: 70:f9:c5:30:55:f9:5b:dc:cf:5a:56:d0:0e:7e:29: 80:01:bc:30:73:1d:98:58:7f:65:31:20:42:b5:3b: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F2:65:C0:FC:F2:11:3F:4D:47:FF:B3:5C:9D:91:2C:F0:71:16:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/bbf39f86-d152-30ea-b2ae-861c6e7a4fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv4: 66.203.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f1:7b:6c:cd:09:cd:d8:96:ed:d1:c1:a4:6a:1c:68:1b:ff: 40:f4:0a:ce:d4:50:6b:76:ba:a9:50:c9:ae:48:68:bc:a3:de: 03:9d:b6:6a:f1:a6:31:68:74:81:36:64:d4:a4:48:7c:00:4d: 70:36:04:eb:d9:6a:2a:8e:18:95:62:aa:b7:c2:01:20:99:34: 62:d0:ee:20:da:ba:a3:73:2f:aa:b6:b7:1d:ac:9c:9d:a1:a6: bd:00:39:61:83:9e:95:31:d2:d7:23:0b:54:b3:3c:cd:27:50: 53:df:c6:56:b3:c5:92:d5:20:05:e2:82:4e:5d:11:4f:04:38: 93:2c:6c:a0:39:98:ab:5f:ff:d8:23:bf:d8:40:5a:a5:09:e9: 0e:c8:a0:fc:54:f5:97:8e:e9:7f:43:a3:ea:f7:b0:38:d5:66: a4:71:7a:a4:fa:5d:4c:46:3f:1d:71:70:21:d4:42:e4:ba:0a: 2e:d5:50:bd:8f:bb:f7:cb:2b:95:61:c9:11:49:ce:3f:d1:d5: 55:a6:ff:cf:af:97:40:77:bb:7e:99:5c:8c:b8:66:a8:d1:f4: c0:9c:a1:f9:1b:80:1a:87:9a:bb:f6:cd:36:39:c1:94:f1:c0: 1e:3b:cd:b2:ff:17:d8:4d:9f:ed:dc:b1:e3:72:78:3b:69:11: 40:21:ba:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzPJR+OBf/x2s7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZjAzZTBmNDMtNmI4YS00NWE3LTk1ODEtMWI2M2NmZDI2MmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojKNlCuqkcFw0cYhvCVr4h3LnYduQ1LYxbUo 2b492t2iLt/wDcBfAFxOLTT300NPG6ZutmPoUowFuFX1Sa+O6SyuXwijS1JRJAoo XdzBjyCvBq9wzQppuo3hsTjJYeV+QPn/gI3FYukEf+5Bwanf7JlAADLWjsYn3tNr JBWCVcAMHe2gA3yCdrA6ikktTqnxme3vbKmsYEUBg4S4G4mf+QKGn9K4GSPUbDSB X9/1bMbkHQ7Ic6ksekBtZjVNZVpdM5dDJlIoAUySCYRIeKJq4ytbHmfmB1nTGQIp 2xRu8Plw+cUwVflb3M9aVtAOfimAAbwwcx2YWH9lMSBCtTt8awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvyZcD88hE/TUf/s1ydkSzwcRZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvYmJmMzlmODYtZDE1Mi0z MGVhLWIyYWUtODYxYzZlN2E0ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQstzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTxe2zNCc3Ylu3RwaRqHGgb/0D0Cs7UUGt2uqlQya5IaLyj3gOdtmrx pjFodIE2ZNSkSHwATXA2BOvZaiqOGJViqrfCASCZNGLQ7iDauqNzL6q2tx2snJ2h pr0AOWGDnpUx0tcjC1SzPM0nUFPfxlazxZLVIAXigk5dEU8EOJMsbKA5mKtf/9gj v9hAWqUJ6Q7IoPxU9ZeO6X9Do+r3sDjVZqRxeqT6XUxGPx1xcCHUQuS6Ci7VUL2P u/fLK5VhyRFJzj/R1VWm/8+vl0B3u36ZXIy4ZqjR9MCcofkbgBqHmrv2zTY5wZTx wB47zbL/F9hNn+3cseNyeDtpEUAhugg= -----END CERTIFICATE-----Generated at Sun Sep 13 15:01:09 2026 by rpki-client