$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/f14b800f-21b2-3ca1-86bb-e0a2b3db372a.roa File: f14b800f-21b2-3ca1-86bb-e0a2b3db372a.roa (raw, json) Hash identifier: 4on2YVU+YeCdAUvXvwPiBqzXwtMA68TYFqkDIM4OA4Q= Subject key identifier: FB:46:AC:64:E3:59:9D:99:6D:06:E9:B5:3A:E4:22:BF:67:D5:63:85 Certificate issuer: /CN=761633ef-0fb8-4855-a42b-c999cd4782b5 Certificate serial: 010D0C9F4328584F8DD88ED59C1E8D1DD8672900 Authority key identifier: A0:6F:78:7C:3B:42:5D:C9:68:13:88:03:00:C3:1E:2F:C1:49:7A:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/f14b800f-21b2-3ca1-86bb-e0a2b3db372a.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 20055 IP address blocks: 66.196.32.0/20 maxlen: 20 67.226.217.0/24 maxlen: 24 161.199.104.0/24 maxlen: 24 162.142.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/761633ef-0fb8-4855-a42b-c999cd4782b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/761633ef-0fb8-4855-a42b-c999cd4782b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:8e:d5:9c:1e:8d:1d:d8:67:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761633ef-0fb8-4855-a42b-c999cd4782b5 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=b4a1d9db-c19b-4a7b-bbfa-bbb9c75f83b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:d3:10:0c:00:95:14:86:51:02:15:60:b8: 51:a3:5c:de:4b:3a:97:62:8e:a6:8f:7e:2e:c4:25: 46:21:18:d0:13:26:56:78:9c:ea:0f:b0:ed:65:50: b1:2b:69:76:d7:8b:d5:57:97:7d:a5:d7:3f:cf:8f: c9:1c:77:bf:e9:4f:43:7c:a3:aa:36:49:9e:d2:9a: 76:b1:0c:24:44:8c:06:dd:d8:54:4e:e0:2c:af:60: 93:1c:43:5b:01:29:f0:32:e1:59:1a:48:8c:8c:f3: e2:9d:ca:30:48:b3:30:7c:c9:fe:a8:da:59:30:db: 56:57:5e:d0:aa:a1:32:46:9e:5f:64:8f:d1:68:55: 28:ec:3a:0f:bf:6a:2a:25:cb:5e:9e:15:9a:98:31: f7:52:99:1d:ff:c6:d2:33:3e:fd:43:35:d5:15:66: 52:a3:6d:43:f2:ae:9f:7c:4f:0a:40:1c:b7:0c:cd: 53:97:3d:0d:92:47:0d:e7:b5:02:04:a3:72:5d:2b: e9:8f:41:91:6e:2b:bc:ad:80:21:0c:1a:31:b7:1b: 17:ed:73:f2:2b:a7:f6:ad:92:e7:b5:9f:1e:34:f3: 3d:37:39:18:14:ea:ba:f6:62:96:b2:aa:fe:2d:ee: be:ec:1d:42:02:d9:6a:93:04:0d:4a:1c:5f:37:03: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:46:AC:64:E3:59:9D:99:6D:06:E9:B5:3A:E4:22:BF:67:D5:63:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/f14b800f-21b2-3ca1-86bb-e0a2b3db372a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/761633ef-0fb8-4855-a42b-c999cd4782b5.crl X509v3 Authority Key Identifier: keyid:A0:6F:78:7C:3B:42:5D:C9:68:13:88:03:00:C3:1E:2F:C1:49:7A:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5.cer sbgp-ipAddrBlock: critical IPv4: 66.196.32.0/20 67.226.217.0/24 161.199.104.0/24 162.142.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:40:dd:3c:ac:ae:fe:09:90:bb:e8:80:4f:4f:b1:0c:55:cd: b3:69:1e:f7:2c:79:1f:3f:08:9e:ad:67:51:35:de:32:0d:46: fc:30:3a:05:d3:14:15:f4:7e:0f:0b:cc:6b:c6:90:16:fb:3f: 21:ee:f2:6b:a3:ec:cc:b5:e8:2f:26:ec:83:ad:cc:b1:5d:3d: 71:76:07:d6:ce:e6:54:f1:15:18:af:ce:27:e1:80:55:d1:7f: 48:8e:2d:e7:47:09:9e:b5:f7:7c:22:cc:34:3c:40:7c:d5:e4: 3b:8c:1e:1d:99:1a:80:68:bd:69:91:7a:14:54:bf:72:39:e1: 8b:20:ce:fa:aa:27:84:4b:b1:df:1f:20:c1:a1:47:db:62:3a: f1:cb:3b:6e:5c:75:7b:58:42:77:fb:59:5b:0b:99:a3:77:ca: 7e:26:40:a6:7a:9c:44:cb:f3:b2:aa:c6:1f:2e:4b:3d:2f:96: eb:ec:70:02:24:19:99:63:f3:71:72:c1:7a:0c:52:4c:c7:d2: 9d:ce:bb:89:a6:7a:7e:7d:83:00:06:63:ad:dc:79:22:5b:e1: bc:56:43:95:29:d8:e2:02:02:b3:3a:8c:09:6e:ae:b4:6c:7b: 49:f9:b2:fc:e2:a5:9c:5a:23:cb:2b:55:93:b5:1b:57:ea:9a: 82:ef:4a:54 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE+N2I7VnB6NHdhnKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzYxNjMzZWYtMGZiOC00ODU1LWE0MmItYzk5OWNkNDc4 MmI1MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk YjRhMWQ5ZGItYzE5Yi00YTdiLWJiZmEtYmJiOWM3NWY4M2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/vTEAwAlRSGUQIVYLhRo1zeSzqXYo6mj34u xCVGIRjQEyZWeJzqD7DtZVCxK2l214vVV5d9pdc/z4/JHHe/6U9DfKOqNkme0pp2 sQwkRIwG3dhUTuAsr2CTHENbASnwMuFZGkiMjPPincowSLMwfMn+qNpZMNtWV17Q qqEyRp5fZI/RaFUo7DoPv2oqJctenhWamDH3Upkd/8bSMz79QzXVFWZSo21D8q6f fE8KQBy3DM1Tlz0NkkcN57UCBKNyXSvpj0GRbiu8rYAhDBoxtxsX7XPyK6f2rZLn tZ8eNPM9NzkYFOq69mKWsqr+Le6+7B1CAtlqkwQNShxfNwME7wIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFPtGrGTjWZ2ZbQbptTrkIr9n1WOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NjE2 MzNlZi0wZmI4LTQ4NTUtYTQyYi1jOTk5Y2Q0NzgyYjUvZjE0YjgwMGYtMjFiMi0z Y2ExLTg2YmItZTBhMmIzZGIzNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzYxNjMzZWYtMGZiOC00ODU1LWE0 MmItYzk5OWNkNDc4MmI1Lzc2MTYzM2VmLTBmYjgtNDg1NS1hNDJiLWM5OTljZDQ3 ODJiNS5jcmwwHwYDVR0jBBgwFoAUoG94fDtCXcloE4gDAMMeL8FJevUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NjE2MzNlZi0wZmI4LTQ4NTUtYTQyYi1jOTk5 Y2Q0NzgyYjUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEQsQgAwQA Q+LZAwQAocdoAwQDoo4YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJBA3Tysrv4JkLvogE9PsQxVzbNpHvcs eR8/CJ6tZ1E13jINRvwwOgXTFBX0fg8LzGvGkBb7PyHu8muj7My16C8m7IOtzLFd PXF2B9bO5lTxFRivzifhgFXRf0iOLedHCZ6193wizDQ8QHzV5DuMHh2ZGoBovWmR ehRUv3I54YsgzvqqJ4RLsd8fIMGhR9tiOvHLO25cdXtYQnf7WVsLmaN3yn4mQKZ6 nETL87Kqxh8uSz0vluvscAIkGZlj83FywXoMUkzH0p3Ou4mmen59gwAGY63ceSJb 4bxWQ5Up2OICArM6jAlurrRse0n5svzipZxaI8srVZO1G1fqmoLvSlQ= -----END CERTIFICATE-----Generated at Sun Nov 1 03:21:52 2026 by rpki-client