$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa File: ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa (raw, json) Hash identifier: on6Waq3B113/a1o9emw3i+voJcaP2zxtWGz3eiQhZDU= Subject key identifier: 78:E0:D3:29:61:A2:B4:29:6B:39:BB:2C:DD:A2:C9:0F:53:5B:DF:4B Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F7E7DC7ABFFFCDBCCEA401E80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 6312 IP address blocks: 66.115.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c7:ab:ff:fc:db:cc:ea:40:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=564d6a2e-af47-439d-842c-e15ebe3e2dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:7f:8e:12:49:f4:94:46:71:45:e3:0d:6a: 23:22:30:0a:1a:40:0a:a2:32:72:73:01:ce:e4:21: 04:a0:a0:97:ec:9e:fb:0b:99:d8:ea:6a:a0:7d:36: f4:89:fc:74:c1:06:91:13:48:f2:19:86:9a:5d:60: 2e:7b:8d:be:15:0c:d0:01:0d:03:5c:ee:1c:dd:f8: 8d:73:55:e7:7d:26:44:8c:13:a5:09:3f:9a:f2:72: f4:39:11:ed:7c:fe:58:5b:91:4e:00:22:3f:73:df: 18:6d:2a:6b:9f:fc:09:a4:5c:79:ff:80:3e:de:a8: 68:b8:7c:22:98:83:98:ef:00:ce:41:f3:b7:81:45: 1a:3c:5e:3b:59:8a:05:4b:bb:9d:b0:9b:cb:b8:4f: af:6b:f5:2a:b4:2f:99:5d:71:45:47:b2:e7:c9:9f: 6c:50:a9:26:83:07:db:ed:aa:5e:1e:d2:36:16:51: 22:33:94:96:11:7d:45:44:f3:d6:dd:32:d7:3f:09: f8:24:14:90:df:f0:13:fc:5e:98:63:7a:90:bf:d7: 76:1c:f8:91:53:ee:27:f9:c7:0a:d5:63:e8:f2:f5: ea:33:b4:77:cf:26:50:6e:0b:ca:79:24:e0:58:df: 1c:67:c1:f4:4f:11:a1:bb:96:0f:27:5f:aa:2f:8f: 3e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E0:D3:29:61:A2:B4:29:6B:39:BB:2C:DD:A2:C9:0F:53:5B:DF:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:05:99:57:0a:af:a6:79:c5:98:7f:08:bb:f0:bc:a9:cd:24: 8f:cc:45:10:42:d2:77:c0:8f:19:b3:09:5e:9d:cc:cf:c4:c2: 79:ef:4a:a3:b7:59:65:72:f8:9e:6f:e5:9b:99:4c:fc:6d:ff: c9:94:5d:98:dc:57:62:66:fa:25:f2:28:48:22:2b:42:4e:49: 73:e0:09:3d:d8:e7:51:f5:7f:7c:b8:63:20:49:22:ec:17:fb: b8:a8:fb:5f:a7:dd:7b:b2:32:c1:a5:75:57:d6:74:49:86:67: 0f:e4:14:34:49:80:b5:32:44:d6:a9:e4:10:7a:aa:7c:f7:94: 5b:9a:bd:69:28:5f:34:3d:29:fb:8f:e7:1f:8e:cb:81:41:a2: d2:e8:78:bb:31:98:80:f1:25:7a:e0:fc:c2:aa:f3:9f:9d:fd: 75:e5:60:a4:f8:72:5b:93:1d:6d:2e:4f:68:cf:e7:d7:12:3d: f2:cb:55:96:81:c0:88:38:0a:2b:2a:ad:7a:f8:d4:0e:58:ed: 2b:19:fb:cc:c8:7f:b8:86:38:f0:0c:9f:78:e0:3e:8d:7f:0f: 6d:6d:98:f9:e7:47:67:5c:8a:ba:af:4f:27:42:f4:fd:d8:f2: 7e:e5:ec:f1:7c:4b:43:3f:ea:f1:95:9e:09:5d:8a:69:70:3f: 03:68:aa:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcer//zbzOpAHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NTY0ZDZhMmUtYWY0Ny00MzlkLTg0MmMtZTE1ZWJlM2UyZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdZ/jhJJ9JRGcUXjDWojIjAKGkAKojJycwHO 5CEEoKCX7J77C5nY6mqgfTb0ifx0wQaRE0jyGYaaXWAue42+FQzQAQ0DXO4c3fiN c1XnfSZEjBOlCT+a8nL0ORHtfP5YW5FOACI/c98YbSprn/wJpFx5/4A+3qhouHwi mIOY7wDOQfO3gUUaPF47WYoFS7udsJvLuE+va/UqtC+ZXXFFR7LnyZ9sUKkmgwfb 7apeHtI2FlEiM5SWEX1FRPPW3TLXPwn4JBSQ3/AT/F6YY3qQv9d2HPiRU+4n+ccK 1WPo8vXqM7R3zyZQbgvKeSTgWN8cZ8H0TxGhu5YPJ1+qL48+UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjg0ylhorQpazm7LN2iyQ9TW99LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2E1MjFlZjEtMjNkNi0z YzhlLTg1YzYtM2ZkZTJmNTA0MmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkFmVcKr6Z5xZh/CLvwvKnNJI/MRRBC0nfAjxmzCV6dzM/EwnnvSqO3 WWVy+J5v5ZuZTPxt/8mUXZjcV2Jm+iXyKEgiK0JOSXPgCT3Y51H1f3y4YyBJIuwX +7io+1+n3XuyMsGldVfWdEmGZw/kFDRJgLUyRNap5BB6qnz3lFuavWkoXzQ9KfuP 5x+Oy4FBotLoeLsxmIDxJXrg/MKq85+d/XXlYKT4cluTHW0uT2jP59cSPfLLVZaB wIg4CisqrXr41A5Y7SsZ+8zIf7iGOPAMn3jgPo1/D21tmPnnR2dcirqvTydC9P3Y 8n7l7PF8S0M/6vGVngldimlwPwNoqkk= -----END CERTIFICATE-----Generated at Sun Oct 25 14:36:11 2026 by rpki-client