$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/2e73e149-085f-345e-acd0-10867059c3f9.roa File: 2e73e149-085f-345e-acd0-10867059c3f9.roa (raw, json) Hash identifier: uwLHcUrU8T59nyl1l+3peDvgkC290MUJNkJnSDrcH0M= Subject key identifier: F3:D7:A7:58:38:C0:C5:AE:46:3B:6A:CD:7E:E5:D1:7A:A5:C8:BF:44 Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584F90A2F8B772A4B94063426AE0 Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/2e73e149-085f-345e-acd0-10867059c3f9.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 23102 IP address blocks: 66.206.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a2:f8:b7:72:a4:b9:40:63:42:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=4876ac91-2f2f-4086-abfb-4021fbfe03af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:64:b0:4c:9f:2e:88:5d:74:21:db:54:a4: 37:03:60:42:0d:58:c0:ae:12:85:f6:b8:43:00:f8: 98:d7:eb:eb:51:ed:b4:fb:d6:96:20:73:63:c5:1b: 59:9a:a8:d8:fb:d5:79:ad:13:08:5b:4a:90:5a:8e: 9d:e8:0d:a3:5e:28:a8:40:12:35:3c:55:c7:51:e9: c5:41:4b:7d:c4:d8:6c:cf:7a:d7:07:25:73:99:6f: fd:49:ce:d2:8c:f0:d4:6a:50:5f:b0:99:60:fe:f5: d7:e5:d9:0a:91:0e:c8:7e:d6:a3:1b:a8:4d:18:5a: fb:f8:be:05:bd:fb:99:6e:3d:e1:5e:53:17:d2:af: 87:99:11:54:d4:ed:83:b0:3f:c6:85:59:38:77:03: 95:89:bb:c3:8a:a1:47:2d:1a:58:7b:0b:63:0c:06: b4:3a:56:df:eb:71:90:f8:64:be:a5:e2:98:91:9a: b8:80:87:91:74:58:e4:25:47:0d:ca:55:02:a4:db: 17:d7:d8:02:af:1b:7e:16:98:b2:a0:19:b9:53:b6: ac:57:ff:4e:6e:50:6f:f7:51:ee:fd:20:88:fa:25: 5a:30:40:e2:3b:94:a6:fc:86:52:71:c7:e9:01:87: d8:70:b1:8e:aa:c7:cd:b6:61:d9:c8:4c:04:26:07: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D7:A7:58:38:C0:C5:AE:46:3B:6A:CD:7E:E5:D1:7A:A5:C8:BF:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/2e73e149-085f-345e-acd0-10867059c3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv4: 66.206.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b0:bf:00:22:bf:85:c7:c5:43:e9:c6:bd:63:47:51:36:79: 06:db:1d:7e:31:ac:80:2f:07:47:bf:7d:74:90:19:d7:b3:66: 29:70:26:54:78:b9:e1:df:4a:5e:14:d7:dd:db:ff:b7:ee:f6: b7:05:ff:f9:12:3c:2d:11:2e:4a:2e:53:3f:54:0d:ee:34:35: 33:83:69:19:91:1d:03:7b:16:96:14:0e:80:4b:c0:a8:29:b4: ef:62:c7:23:51:9e:d0:b3:ee:e6:9b:19:5b:97:ce:f4:e9:86: e6:31:78:89:3a:f6:84:8e:fa:04:71:7b:1b:6a:d1:24:3b:f2: df:94:5f:ba:19:ec:58:68:d7:64:17:ab:36:42:4c:4c:b3:8a: 12:a9:9f:b5:a2:e8:79:6b:6d:3f:87:dd:87:cd:40:70:bc:1e: 3f:df:4a:08:fc:56:80:c3:5a:ea:4b:25:86:a5:35:0d:e8:09: c8:5e:b9:dd:20:d1:ed:a9:f3:9f:33:51:19:5a:15:8a:0a:35: 65:52:a1:a1:82:18:6a:82:7d:09:60:78:16:bb:e9:88:3b:a7: 7f:3d:24:99:d6:2b:43:31:2a:ed:f2:d5:36:39:25:16:25:31: f9:09:ea:35:52:76:e8:c0:7a:43:e4:62:77:88:45:97:35:ee: 3a:97:d7:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qovi3cqS5QGNCauAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk NDg3NmFjOTEtMmYyZi00MDg2LWFiZmItNDAyMWZiZmUwM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg9ksEyfLohddCHbVKQ3A2BCDVjArhKF9rhD APiY1+vrUe20+9aWIHNjxRtZmqjY+9V5rRMIW0qQWo6d6A2jXiioQBI1PFXHUenF QUt9xNhsz3rXByVzmW/9Sc7SjPDUalBfsJlg/vXX5dkKkQ7IftajG6hNGFr7+L4F vfuZbj3hXlMX0q+HmRFU1O2DsD/GhVk4dwOVibvDiqFHLRpYewtjDAa0Olbf63GQ +GS+peKYkZq4gIeRdFjkJUcNylUCpNsX19gCrxt+FpiyoBm5U7asV/9OblBv91Hu /SCI+iVaMEDiO5Sm/IZSccfpAYfYcLGOqsfNtmHZyEwEJgd/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPXp1g4wMWuRjtqzX7l0XqlyL9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvMmU3M2UxNDktMDg1Zi0z NDVlLWFjZDAtMTA4NjcwNTljM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQs6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGwvwAiv4XHxUPpxr1jR1E2eQbbHX4xrIAvB0e/fXSQGdezZilwJlR4 ueHfSl4U193b/7fu9rcF//kSPC0RLkouUz9UDe40NTODaRmRHQN7FpYUDoBLwKgp tO9ixyNRntCz7uabGVuXzvTphuYxeIk69oSO+gRxextq0SQ78t+UX7oZ7Fho12QX qzZCTEyzihKpn7Wi6HlrbT+H3YfNQHC8Hj/fSgj8VoDDWupLJYalNQ3oCcheud0g 0e2p858zURlaFYoKNWVSoaGCGGqCfQlgeBa76Yg7p389JJnWK0MxKu3y1TY5JRYl MfkJ6jVSdujAekPkYneIRZc17jqX13Y= -----END CERTIFICATE-----Generated at Tue Oct 27 16:38:35 2026 by rpki-client