$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/a3ddba2a-e859-3207-b00d-f00374375e58.roa File: a3ddba2a-e859-3207-b00d-f00374375e58.roa (raw, json) Hash identifier: scF922wOyI425l8rpVzJRhZDc+QASSX+/PlYJcQVFKo= Subject key identifier: B1:32:FC:B2:06:2D:50:19:F4:F5:85:CE:1A:1D:0E:22:84:53:80:04 Certificate issuer: /CN=be2362de-5bcf-4e4d-a582-af59d5ffb75f Certificate serial: 010D0C9F4328584FAB28805F989C254F28FC9580 Authority key identifier: 7B:DC:9D:79:C7:D5:10:B8:2C:FA:88:34:CA:F0:64:76:15:61:E7:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/a3ddba2a-e859-3207-b00d-f00374375e58.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 32160 IP address blocks: 66.11.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:80:5f:98:9c:25:4f:28:fc:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be2362de-5bcf-4e4d-a582-af59d5ffb75f Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=c0e903e2-d34c-453a-bd41-d0d2c40e7056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:78:9d:59:45:06:7b:11:8b:0e:76:ca:a0: 15:ed:c5:93:94:a1:e8:f7:d7:a6:01:fa:ae:3d:24: 27:64:85:62:4b:0b:9f:84:58:fe:92:ed:07:07:ab: 68:4c:37:52:11:b0:58:6e:1d:36:da:1e:80:65:d4: d7:6c:d0:c1:14:00:4e:29:48:7a:b2:eb:22:5d:86: 1e:81:f1:01:5c:13:45:02:d8:89:93:9e:ed:32:71: 0b:18:dd:d4:d6:7e:0d:24:68:d7:b2:a3:d3:e7:05: a3:40:11:d4:21:c9:b9:bf:17:96:73:22:8c:ab:7a: 35:3b:96:23:a1:7d:f3:f6:08:40:d9:6d:41:a5:10: 3a:0a:fb:e3:f1:dc:c7:32:8f:d4:61:c7:40:02:4f: 45:9b:11:9f:2e:fc:b0:e1:04:79:83:e8:b6:84:65: 52:f6:c3:44:7a:21:fd:74:33:81:21:2b:05:10:c0: 6e:33:df:c8:af:ad:e5:8a:c6:ef:08:40:6f:f0:18: f1:64:0b:d0:97:b4:02:eb:32:14:e3:db:5c:91:f0: 5f:78:23:8a:42:7c:53:00:9a:20:4b:10:6d:5e:ad: 32:50:bd:f3:2e:db:a8:e8:10:b9:db:5b:b2:bd:5a: 34:dc:be:3e:16:6b:4f:6e:ac:62:1a:31:f4:66:62: 25:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:32:FC:B2:06:2D:50:19:F4:F5:85:CE:1A:1D:0E:22:84:53:80:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/a3ddba2a-e859-3207-b00d-f00374375e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.crl X509v3 Authority Key Identifier: keyid:7B:DC:9D:79:C7:D5:10:B8:2C:FA:88:34:CA:F0:64:76:15:61:E7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer sbgp-ipAddrBlock: critical IPv4: 66.11.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:54:9b:eb:09:38:ae:7e:c8:f4:ac:fe:65:2e:8c:a8:26:ea: e0:6c:9b:7d:d8:f7:12:f6:ec:0f:69:ee:26:c6:64:07:d9:a5: 05:02:3a:e7:ff:bc:7b:31:b3:d3:07:ac:8f:ad:29:2d:58:a7: 11:86:4a:7b:bd:5a:9c:74:d7:b4:c4:a1:4c:63:1b:72:0e:df: a5:b0:1d:8a:7b:2e:e8:ec:f7:27:1d:41:38:2f:1f:41:c3:7f: 0e:bc:84:c8:5e:65:26:2a:aa:d4:ca:dc:b2:1e:c1:37:5e:f3: 70:a3:bb:59:2f:b4:1e:cb:97:a4:a9:ba:00:58:f3:68:e0:b7: 38:f8:79:48:52:9a:ce:cf:6d:02:cd:fb:54:0a:8c:70:8d:70: cb:f3:c2:cf:63:4f:cf:de:d2:4e:57:a6:00:ba:ec:18:08:10: 15:08:c0:9b:89:64:cb:07:6e:2b:a1:24:c0:2c:2b:1e:5a:8b: b7:c8:c2:dc:2b:fd:c6:1a:28:d7:b3:ef:92:68:8a:04:5d:1e: 77:b2:43:3d:63:50:5a:f9:15:8b:5d:2d:e1:e3:37:80:6d:ce: 48:56:30:f7:53:6a:d9:ed:fb:84:a8:e8:5e:c7:ce:eb:2b:57: 0d:b2:f2:45:a2:d5:4f:64:3c:0f:be:41:98:9b:b6:5c:77:63: 6a:f7:32:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKIBfmJwlTyj8lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUyMzYyZGUtNWJjZi00ZTRkLWE1ODItYWY1OWQ1ZmZi NzVmMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk YzBlOTAzZTItZDM0Yy00NTNhLWJkNDEtZDBkMmM0MGU3MDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD14nVlFBnsRiw52yqAV7cWTlKHo99emAfqu PSQnZIViSwufhFj+ku0HB6toTDdSEbBYbh022h6AZdTXbNDBFABOKUh6susiXYYe gfEBXBNFAtiJk57tMnELGN3U1n4NJGjXsqPT5wWjQBHUIcm5vxeWcyKMq3o1O5Yj oX3z9ghA2W1BpRA6Cvvj8dzHMo/UYcdAAk9FmxGfLvyw4QR5g+i2hGVS9sNEeiH9 dDOBISsFEMBuM9/Ir63lisbvCEBv8BjxZAvQl7QC6zIU49tckfBfeCOKQnxTAJog SxBtXq0yUL3zLtuo6BC521uyvVo03L4+FmtPbqxiGjH0ZmIlFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEy/LIGLVAZ9PWFzhodDiKEU4AEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iZTIz NjJkZS01YmNmLTRlNGQtYTU4Mi1hZjU5ZDVmZmI3NWYvYTNkZGJhMmEtZTg1OS0z MjA3LWIwMGQtZjAwMzc0Mzc1ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmUyMzYyZGUtNWJjZi00ZTRkLWE1 ODItYWY1OWQ1ZmZiNzVmL2JlMjM2MmRlLTViY2YtNGU0ZC1hNTgyLWFmNTlkNWZm Yjc1Zi5jcmwwHwYDVR0jBBgwFoAUe9ydecfVELgs+og0yvBkdhVh5+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iZTIzNjJkZS01YmNmLTRlNGQtYTU4Mi1hZjU5 ZDVmZmI3NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQgvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdUm+sJOK5+yPSs/mUujKgm6uBsm33Y9xL27A9p7ibGZAfZpQUCOuf/ vHsxs9MHrI+tKS1YpxGGSnu9Wpx017TEoUxjG3IO36WwHYp7Lujs9ycdQTgvH0HD fw68hMheZSYqqtTK3LIewTde83Cju1kvtB7Ll6SpugBY82jgtzj4eUhSms7PbQLN +1QKjHCNcMvzws9jT8/e0k5XpgC67BgIEBUIwJuJZMsHbiuhJMAsKx5ai7fIwtwr /cYaKNez75JoigRdHneyQz1jUFr5FYtdLeHjN4BtzkhWMPdTatnt+4So6F7Hzusr Vw2y8kWi1U9kPA++QZibtlx3Y2r3Mo4= -----END CERTIFICATE-----Generated at Sun Nov 1 21:05:08 2026 by rpki-client