$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/52534c34-a0f1-3c63-bda9-3a0985e10c39.roa File: 52534c34-a0f1-3c63-bda9-3a0985e10c39.roa (raw, json) Hash identifier: 6PSc2rG7t0MrjaHhHjZnvolX8rjFL7mibVFJ053tdEs= Subject key identifier: E5:94:D9:65:DB:5E:6E:97:00:C6:6B:5C:24:4B:70:3E:8D:37:9B:AA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F119CEA6D7B6981961AC49400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/52534c34-a0f1-3c63-bda9-3a0985e10c39.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 66.92.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ea:6d:7b:69:81:96:1a:c4:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=ace955ef-ecb2-4428-8c5c-a6ef2b8639bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:52:4a:c9:14:e2:7e:65:74:92:b9:d0:ec:a3: 39:3a:b3:b6:04:a4:ff:4f:a8:89:54:f7:87:a0:f3: 67:c8:94:4c:64:3f:73:3b:a9:05:60:a5:38:ec:ec: 25:06:b2:ea:26:d5:bc:cb:6b:8f:7b:93:6b:aa:a5: 7f:7e:96:e1:33:fe:5b:1f:5a:56:57:43:a3:25:87: bc:3b:83:66:1d:5e:4a:d6:61:a5:4e:fe:31:48:45: a7:b6:b5:79:d9:87:f0:ec:5a:c1:22:f2:82:ad:58: 6a:67:96:62:6a:14:59:d2:93:f5:9e:9d:1b:c8:97: f3:1e:62:c1:a6:14:d0:fc:44:8b:14:86:61:96:9f: 43:fb:71:24:93:c7:d9:83:e2:ae:84:fa:ca:d3:e5: 30:a8:d0:0c:f3:d4:d3:2c:d9:b6:68:83:5a:55:e4: 38:59:0e:54:c9:d2:c2:c1:1c:2d:26:57:cb:90:d8: b4:e2:6d:d8:48:9a:f8:aa:79:f3:ea:af:e1:e2:b8: 66:f7:d9:ad:47:da:35:d3:6a:f7:fc:1d:88:cb:e1: 56:d6:4e:4f:42:ca:28:ac:d9:ad:f7:88:cc:76:cf: ba:89:df:b1:8f:cb:ba:6b:f2:a4:62:25:96:a3:25: a3:88:f6:12:e8:39:bf:23:d5:8b:26:7d:0c:17:77: dc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:94:D9:65:DB:5E:6E:97:00:C6:6B:5C:24:4B:70:3E:8D:37:9B:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/52534c34-a0f1-3c63-bda9-3a0985e10c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b1:51:de:09:b0:9a:cb:d2:34:14:61:cb:fe:36:b9:8f:22: df:54:36:c5:28:bd:c4:3b:04:15:8d:82:f1:81:50:1b:06:7e: f0:ac:be:c0:bc:4a:7a:55:c1:7f:b0:8c:f2:1c:ac:8a:16:e4: 94:d5:33:63:7c:c8:8e:4a:35:4c:27:34:30:fd:e1:d4:1e:f2: aa:f2:88:35:fd:b7:59:87:ac:7d:2f:5e:a3:05:d6:30:36:e5: 51:1d:df:15:1a:f2:cf:3a:f6:fc:94:46:1f:7f:39:eb:2a:5b: f2:87:98:65:81:b9:94:44:fd:27:35:e3:e6:7f:ed:a8:64:9d: b7:37:7e:4c:e8:3f:fa:c6:69:6d:2f:52:9d:07:e2:69:b3:ed: ed:01:96:8d:5f:50:58:83:87:53:d1:2c:9e:f9:3c:68:4b:c9: 9e:4d:84:64:13:40:c5:eb:3c:40:56:35:20:0b:a7:5a:e7:68: e7:d9:60:fa:33:6d:17:ce:dc:b6:b0:7d:b0:72:66:27:25:b7: 72:12:a7:d9:19:8f:35:3e:7c:a9:3c:d0:ea:fe:df:e6:f2:6b: 9f:76:8f:d6:f6:14:45:e3:f1:ae:d5:88:fe:25:6a:74:d6:26: b5:61:60:1b:07:0c:7c:d4:5b:93:59:18:39:91:43:c6:4b:a9: 70:32:d6:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOpte2mBlhrElAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YWNlOTU1ZWYtZWNiMi00NDI4LThjNWMtYTZlZjJiODYzOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1JKyRTifmV0krnQ7KM5OrO2BKT/T6iJVPeH oPNnyJRMZD9zO6kFYKU47OwlBrLqJtW8y2uPe5NrqqV/fpbhM/5bH1pWV0OjJYe8 O4NmHV5K1mGlTv4xSEWntrV52Yfw7FrBIvKCrVhqZ5ZiahRZ0pP1np0byJfzHmLB phTQ/ESLFIZhlp9D+3Ekk8fZg+KuhPrK0+UwqNAM89TTLNm2aINaVeQ4WQ5UydLC wRwtJlfLkNi04m3YSJr4qnnz6q/h4rhm99mtR9o102r3/B2Iy+FW1k5PQsoorNmt 94jMds+6id+xj8u6a/KkYiWWoyWjiPYS6Dm/I9WLJn0MF3fcSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWU2WXbXm6XAMZrXCRLcD6NN5uqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTI1MzRjMzQtYTBmMS0z YzYzLWJkYTktM2EwOTg1ZTEwYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyxUd4JsJrL0jQUYcv+NrmPIt9UNsUovcQ7BBWNgvGBUBsGfvCsvsC8 SnpVwX+wjPIcrIoW5JTVM2N8yI5KNUwnNDD94dQe8qryiDX9t1mHrH0vXqMF1jA2 5VEd3xUa8s869vyURh9/OesqW/KHmGWBuZRE/Sc14+Z/7ahknbc3fkzoP/rGaW0v Up0H4mmz7e0Blo1fUFiDh1PRLJ75PGhLyZ5NhGQTQMXrPEBWNSALp1rnaOfZYPoz bRfO3LawfbByZiclt3ISp9kZjzU+fKk80Or+3+bya592j9b2FEXj8a7ViP4lanTW JrVhYBsHDHzUW5NZGDmRQ8ZLqXAy1h0= -----END CERTIFICATE-----Generated at Sun Oct 11 09:41:25 2026 by rpki-client