$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86867f22-2b6b-3831-b249-a42a5f8164c3.roa File: 86867f22-2b6b-3831-b249-a42a5f8164c3.roa (raw, json) Hash identifier: IuattKBAKHQ+kpX8uyg0s7JFKIDdvL/wk/CA4G+kcg0= Subject key identifier: 33:FB:07:A7:D0:84:24:A0:FE:04:D9:CC:99:A5:40:63:50:2C:01:48 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F549DAA16A33D4F90A42F3080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86867f22-2b6b-3831-b249-a42a5f8164c3.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7922 IP address blocks: 66.253.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:aa:16:a3:3d:4f:90:a4:2f:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=7bacb7cb-c6ef-49ee-ad96-6de0ee55ef67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:21:c6:d7:99:76:df:2f:2a:78:40:f3:87: e4:d4:ba:b0:cd:5d:60:60:66:15:89:b4:ee:52:00: 96:ff:87:42:ae:77:b8:f6:5a:80:15:35:46:1d:5a: 29:67:87:f9:fa:df:e2:af:03:a2:6d:6e:3b:c9:23: 89:0f:0b:73:b1:2e:37:83:92:9c:ff:7c:93:70:c6: c0:eb:c4:01:0a:26:01:2e:ed:c8:ca:b9:0a:e5:30: ab:97:94:fc:ad:64:a9:d2:69:0b:98:46:61:53:0d: e1:c2:9d:d0:b8:21:43:35:49:5a:cd:2b:e8:92:34: ab:ff:99:a5:bb:2b:d2:de:96:96:8d:fa:e4:37:5e: 26:e2:cf:19:fe:d2:b4:6a:ea:f7:f8:4f:a2:89:da: c4:b3:39:89:7c:fd:61:45:7f:e2:a9:ef:ae:80:c2: aa:79:57:cb:d4:f2:40:9f:08:9e:3f:b1:21:08:6f: ea:43:a2:6f:4f:84:ff:8b:b7:c4:a2:a9:02:70:55: e8:ae:1c:50:de:26:ad:e1:76:1a:1e:dc:3b:70:dc: 7a:bc:c7:dd:fc:3b:c3:4a:f2:36:90:68:bd:35:90: 7d:21:a7:bd:dc:c2:72:7d:c7:22:06:78:2e:f0:95: 67:83:0a:f4:43:35:47:c0:cb:8a:ba:d2:89:bb:59: 2c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:07:A7:D0:84:24:A0:FE:04:D9:CC:99:A5:40:63:50:2C:01:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86867f22-2b6b-3831-b249-a42a5f8164c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b2:1f:8f:c9:ba:28:87:3b:ed:67:cf:e1:c9:0e:20:46:a4: 4a:6f:6d:fb:62:52:45:34:0c:85:72:18:b3:71:2b:23:14:e7: 0f:32:8a:f6:ed:a3:bf:29:b4:7a:9c:46:1a:a6:2d:fa:db:45: e4:b0:d0:bf:8f:92:30:21:13:52:d4:97:31:04:51:c9:3d:ad: 10:b3:c2:5a:2b:60:18:d9:86:e4:03:a5:bf:eb:6d:3d:7f:af: f9:55:8b:b9:8d:7c:25:d0:25:db:69:55:78:48:1e:8d:a3:f6: 78:72:0d:dc:e7:d3:5b:a4:0b:92:a6:25:19:fd:3a:8d:ac:54: 5e:09:f0:72:8a:ef:71:22:91:c0:0e:55:57:5d:6c:67:2a:a2: f9:89:d3:07:56:3a:6a:e2:78:ec:34:d9:8e:32:30:5e:73:11: e0:e1:73:a1:95:57:cb:fd:4c:55:da:c7:fd:8d:a3:80:f7:47: 84:09:76:93:78:91:97:65:6a:43:8d:22:c9:bb:72:a0:8e:03: a5:02:40:88:73:06:1c:ef:65:f6:fa:be:ec:41:ab:c6:ff:f8: f4:48:a3:3a:db:37:0e:02:10:fa:06:36:6b:68:24:e7:3f:ee: a0:e0:8a:88:ec:b5:f3:57:24:7a:68:e6:48:ae:c9:2c:33:99: 79:eb:be:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaoWoz1PkKQvMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk N2JhY2I3Y2ItYzZlZi00OWVlLWFkOTYtNmRlMGVlNTVlZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueghxteZdt8vKnhA84fk1LqwzV1gYGYVibTu UgCW/4dCrne49lqAFTVGHVopZ4f5+t/irwOibW47ySOJDwtzsS43g5Kc/3yTcMbA 68QBCiYBLu3IyrkK5TCrl5T8rWSp0mkLmEZhUw3hwp3QuCFDNUlazSvokjSr/5ml uyvS3paWjfrkN14m4s8Z/tK0aur3+E+iidrEszmJfP1hRX/iqe+ugMKqeVfL1PJA nwieP7EhCG/qQ6JvT4T/i7fEoqkCcFXorhxQ3iat4XYaHtw7cNx6vMfd/DvDSvI2 kGi9NZB9Iae93MJyfcciBngu8JVngwr0QzVHwMuKutKJu1ksIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP7B6fQhCSg/gTZzJmlQGNQLAFIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODY4NjdmMjItMmI2Yi0z ODMxLWIyNDktYTQyYTVmODE2NGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWyH4/JuiiHO+1nz+HJDiBGpEpvbftiUkU0DIVyGLNxKyMU5w8yivbt o78ptHqcRhqmLfrbReSw0L+PkjAhE1LUlzEEUck9rRCzwlorYBjZhuQDpb/rbT1/ r/lVi7mNfCXQJdtpVXhIHo2j9nhyDdzn01ukC5KmJRn9Oo2sVF4J8HKK73EikcAO VVddbGcqovmJ0wdWOmrieOw02Y4yMF5zEeDhc6GVV8v9TFXax/2No4D3R4QJdpN4 kZdlakONIsm7cqCOA6UCQIhzBhzvZfb6vuxBq8b/+PRIozrbNw4CEPoGNmtoJOc/ 7qDgiojstfNXJHpo5kiuySwzmXnrvjM= -----END CERTIFICATE-----Generated at Sat Oct 10 10:43:46 2026 by rpki-client