$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8c0f719e-fdb6-31e0-877e-2ecdce9eec03.roa File: 8c0f719e-fdb6-31e0-877e-2ecdce9eec03.roa (raw, json) Hash identifier: AcDB+CGTeG+FjnMnjxxhZeFD6hobjvS+RQbQMbxzUgU= Subject key identifier: 40:8A:E4:65:39:94:C8:CA:55:09:6C:E6:E4:97:74:ED:D2:D7:8F:C9 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584EF7176CFBEE0CFA46D27EDF80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8c0f719e-fdb6-31e0-877e-2ecdce9eec03.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 13576 IP address blocks: 66.128.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:6c:fb:ee:0c:fa:46:d2:7e:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=c8054bd7-d260-4d63-a203-4ba04b9259ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a4:67:93:b9:21:ea:91:32:77:7e:dc:73:a4: 13:ca:97:8e:65:34:fd:8d:2c:be:2c:ef:b0:86:27: c7:fb:c8:18:ea:a4:2e:53:cc:42:f2:fe:3d:6d:9d: 8c:9a:ad:a6:17:84:9a:58:7d:8c:37:48:b5:59:f8: 4f:0c:53:dd:0e:a9:48:f0:80:83:b4:61:ee:4e:7b: 94:33:01:08:da:47:00:50:23:68:86:6e:49:05:65: 22:63:09:24:00:0d:36:a3:09:43:f1:14:e8:10:fa: 2f:8f:6d:d7:a3:a8:99:a6:88:35:f0:87:70:de:b6: 67:6f:95:ae:cf:fb:3d:4c:53:47:7b:0d:6e:ed:7d: 1f:e5:27:1f:08:58:5d:ad:ab:ea:fe:58:50:c3:0d: f6:15:03:27:4f:ee:66:a0:2f:c5:26:5c:47:3e:b5: 4c:73:8f:41:fa:32:35:b8:75:a4:df:61:97:91:0c: 0f:93:80:6b:78:7a:b1:e7:13:f3:59:a5:a1:6b:23: f1:ee:3c:bb:d4:df:0e:5a:ac:39:36:cb:c6:65:f2: 1d:7b:56:f0:63:38:b8:94:f7:f1:1f:2d:6f:f8:bc: c1:c2:56:33:cb:c5:da:f5:f7:26:01:de:55:f7:c6: 84:70:0b:ab:39:bf:c7:2c:46:d3:82:2b:cf:8d:3f: 1c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:E4:65:39:94:C8:CA:55:09:6C:E6:E4:97:74:ED:D2:D7:8F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8c0f719e-fdb6-31e0-877e-2ecdce9eec03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:30:25:2a:83:df:c2:24:97:cb:bf:8e:ba:3c:e8:e4:75:6d: d6:23:da:6c:29:e4:52:b8:25:9f:1a:16:b4:ee:44:57:b5:6e: 0a:1e:01:e7:79:83:d3:32:90:a8:d7:86:ef:ba:4a:d4:f5:b3: b0:7f:92:fb:5e:f7:b8:84:8b:e5:df:24:59:6a:63:82:36:d4: ec:7d:ab:d8:09:e2:b2:12:b5:89:61:35:0e:83:fc:1f:95:61: 52:40:e3:7f:af:d1:b5:88:56:8e:65:08:1e:10:01:2e:ff:a6: 5c:e0:6d:21:92:42:1a:49:7c:e1:4d:9f:eb:09:53:6b:e0:2b: d1:ca:f4:07:ee:ee:41:54:76:78:ba:0b:04:da:37:1d:95:41: 73:ab:55:09:f3:04:d5:fb:a1:71:d5:fa:56:31:a0:7a:c8:a3: da:23:ec:6b:83:ba:de:12:99:cc:60:33:48:ad:1d:6a:14:7e: ce:80:b6:c8:e9:88:46:10:68:b9:66:31:76:c1:e9:dd:c1:45: 3a:a0:ca:81:e9:37:aa:47:cd:3b:b8:08:18:ff:54:59:62:90: dd:8c:0a:e4:eb:a9:4a:6b:08:61:12:72:e6:cf:41:2d:ca:e8: f1:a4:62:c9:23:62:32:56:ca:52:d9:64:29:df:e0:d8:67:8e: 62:49:cb:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2z77gz6RtJ+34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YzgwNTRiZDctZDI2MC00ZDYzLWEyMDMtNGJhMDRiOTI1OWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KRnk7kh6pEyd37cc6QTypeOZTT9jSy+LO+w hifH+8gY6qQuU8xC8v49bZ2Mmq2mF4SaWH2MN0i1WfhPDFPdDqlI8ICDtGHuTnuU MwEI2kcAUCNohm5JBWUiYwkkAA02owlD8RToEPovj23Xo6iZpog18Idw3rZnb5Wu z/s9TFNHew1u7X0f5ScfCFhdravq/lhQww32FQMnT+5moC/FJlxHPrVMc49B+jI1 uHWk32GXkQwPk4BreHqx5xPzWaWhayPx7jy71N8OWqw5NsvGZfIde1bwYzi4lPfx Hy1v+LzBwlYzy8Xa9fcmAd5V98aEcAurOb/HLEbTgivPjT8cZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECK5GU5lMjKVQls5uSXdO3S14/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvOGMwZjcxOWUtZmRiNi0z MWUwLTg3N2UtMmVjZGNlOWVlYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoCmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYwJSqD38Ikl8u/jro86OR1bdYj2mwp5FK4JZ8aFrTuRFe1bgoeAed5 g9MykKjXhu+6StT1s7B/kvte97iEi+XfJFlqY4I21Ox9q9gJ4rIStYlhNQ6D/B+V YVJA43+v0bWIVo5lCB4QAS7/plzgbSGSQhpJfOFNn+sJU2vgK9HK9Afu7kFUdni6 CwTaNx2VQXOrVQnzBNX7oXHV+lYxoHrIo9oj7GuDut4SmcxgM0itHWoUfs6Atsjp iEYQaLlmMXbB6d3BRTqgyoHpN6pHzTu4CBj/VFlikN2MCuTrqUprCGEScubPQS3K 6PGkYskjYjJWylLZZCnf4NhnjmJJy3k= -----END CERTIFICATE-----Generated at Sat Sep 5 05:32:51 2026 by rpki-client