$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/bafd2ca7-450d-3c0d-82a6-5912a35aabc0.roa File: bafd2ca7-450d-3c0d-82a6-5912a35aabc0.roa (raw, json) Hash identifier: iu/QShJqimWp7/Zee/T3sSWaoP28vi3f9uQoqa3w7bk= Subject key identifier: 5C:AB:FC:D2:70:1D:10:D2:30:46:C5:8A:20:B4:F0:25:53:22:1B:E2 Certificate issuer: /CN=557a586a-7e35-45b6-bb87-b7631d4dda84 Certificate serial: 010D0C9F4328584EBB11A92057AAD4B1453AB7D0 Authority key identifier: A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/bafd2ca7-450d-3c0d-82a6-5912a35aabc0.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 66.84.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:a9:20:57:aa:d4:b1:45:3a:b7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557a586a-7e35-45b6-bb87-b7631d4dda84 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=cf781aa9-da88-48bd-9f11-0d0c42306d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:f9:26:24:14:85:65:ab:61:f0:e7:0c:19: 9b:74:4d:ce:e3:1e:8f:2f:f8:93:55:78:da:b4:08: b1:04:0a:08:8a:c8:44:bf:58:b3:40:ee:a4:72:53: b6:d1:71:d6:2d:fb:b8:97:e1:f5:77:bc:2f:dd:ae: 21:d5:94:83:9d:dc:e5:50:73:91:3a:0f:19:ff:43: fe:66:5b:4f:cb:63:a4:df:01:a2:5e:24:fc:10:76: 98:49:4b:e7:1c:39:ef:0b:f2:3e:6e:94:d5:44:c1: 01:8e:b4:65:be:3a:73:82:de:dd:ee:2e:ed:4f:18: 4f:ba:ad:db:af:98:90:b3:f8:94:48:2e:ff:e5:3a: 49:a0:c6:7a:d0:c1:ec:27:f1:bc:f0:07:89:3f:b9: d3:9f:bb:a9:d6:0b:68:5d:b1:46:01:9b:fe:6b:74: d0:55:65:50:2c:d9:26:26:22:9a:a9:be:d1:04:03: f5:9e:15:85:59:58:e8:b8:57:d1:53:23:30:9a:25: a0:67:b6:8c:93:b6:21:5c:11:51:97:75:8a:91:d7: a3:0d:09:d0:19:1b:e9:bc:03:80:d8:42:32:be:8f: 2d:97:04:ef:42:ba:3e:6b:e2:35:93:72:74:43:4e: b5:69:c0:b1:ff:6a:d8:ad:0f:2a:8c:70:e7:82:04: f2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AB:FC:D2:70:1D:10:D2:30:46:C5:8A:20:B4:F0:25:53:22:1B:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/bafd2ca7-450d-3c0d-82a6-5912a35aabc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl X509v3 Authority Key Identifier: keyid:A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer sbgp-ipAddrBlock: critical IPv4: 66.84.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c4:91:cc:50:26:fb:f2:6b:14:68:1a:2a:0d:52:40:76:c8: 76:08:1f:f2:eb:6d:ca:87:25:14:3f:06:84:c2:7f:1e:21:cd: 61:3e:89:3f:68:40:fe:15:92:07:33:08:35:4a:6f:d3:30:4f: 09:06:ca:ee:55:49:ba:b5:7f:3a:3c:09:79:60:30:b9:04:9e: 87:bf:0a:5a:d2:43:b6:2f:51:eb:cc:d1:db:8d:2f:7b:61:10: d7:f1:26:66:54:29:a1:34:58:33:ac:7b:22:a0:ec:eb:c3:d4: 18:0a:f3:37:fe:53:09:6d:12:42:18:bf:87:db:a4:ef:1f:7c: 05:ee:b3:60:48:1e:8f:51:7a:f4:b9:53:73:e3:63:50:b5:00: d1:14:3f:fd:b8:3e:51:1e:f9:aa:55:52:f2:3c:c3:72:65:c5: 2b:9b:52:25:d7:db:87:91:41:97:12:6f:eb:02:13:27:19:b3: 4d:12:94:e8:d0:06:a9:5a:c1:00:ee:7e:5a:7c:98:a6:92:22: 67:fa:c6:d6:b9:c9:52:80:f7:5c:b5:a0:9f:fc:73:1e:6b:f6: 29:63:41:33:d1:1e:33:fe:a1:b4:72:11:ad:61:3d:7b:82:ed: 55:d1:52:76:e1:f4:cb:86:18:73:66:9e:04:17:71:ac:82:a6: 6d:a8:04:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EakgV6rUsUU6t9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU3YTU4NmEtN2UzNS00NWI2LWJiODctYjc2MzFkNGRk YTg0MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y3ODFhYTktZGE4OC00OGJkLTlmMTEtMGQwYzQyMzA2ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AH5JiQUhWWrYfDnDBmbdE3O4x6PL/iTVXja tAixBAoIishEv1izQO6kclO20XHWLfu4l+H1d7wv3a4h1ZSDndzlUHOROg8Z/0P+ ZltPy2Ok3wGiXiT8EHaYSUvnHDnvC/I+bpTVRMEBjrRlvjpzgt7d7i7tTxhPuq3b r5iQs/iUSC7/5TpJoMZ60MHsJ/G88AeJP7nTn7up1gtoXbFGAZv+a3TQVWVQLNkm JiKaqb7RBAP1nhWFWVjouFfRUyMwmiWgZ7aMk7YhXBFRl3WKkdejDQnQGRvpvAOA 2EIyvo8tlwTvQro+a+I1k3J0Q061acCx/2rYrQ8qjHDnggTynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyr/NJwHRDSMEbFiiC08CVTIhviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81NTdh NTg2YS03ZTM1LTQ1YjYtYmI4Ny1iNzYzMWQ0ZGRhODQvYmFmZDJjYTctNDUwZC0z YzBkLTgyYTYtNTkxMmEzNWFhYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTU3YTU4NmEtN2UzNS00NWI2LWJi ODctYjc2MzFkNGRkYTg0LzU1N2E1ODZhLTdlMzUtNDViNi1iYjg3LWI3NjMxZDRk ZGE4NC5jcmwwHwYDVR0jBBgwFoAUp138/nyBEt/M9IcKfEtG1UhERSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81NTdhNTg2YS03ZTM1LTQ1YjYtYmI4Ny1iNzYz MWQ0ZGRhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlRRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrEkcxQJvvyaxRoGioNUkB2yHYIH/LrbcqHJRQ/BoTCfx4hzWE+iT9o QP4VkgczCDVKb9MwTwkGyu5VSbq1fzo8CXlgMLkEnoe/ClrSQ7YvUevM0duNL3th ENfxJmZUKaE0WDOseyKg7OvD1BgK8zf+UwltEkIYv4fbpO8ffAXus2BIHo9RevS5 U3PjY1C1ANEUP/24PlEe+apVUvI8w3JlxSubUiXX24eRQZcSb+sCEycZs00SlOjQ BqlawQDuflp8mKaSImf6xta5yVKA91y1oJ/8cx5r9iljQTPRHjP+obRyEa1hPXuC 7VXRUnbh9MuGGHNmngQXcayCpm2oBMs= -----END CERTIFICATE-----Generated at Fri Aug 21 01:10:28 2026 by rpki-client