$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc90fb1f-131a-319f-8021-f5cd2b494e41.roa File: fc90fb1f-131a-319f-8021-f5cd2b494e41.roa (raw, json) Hash identifier: urCl6olEmH/ogwrrDxFceSXo0J4mA/cJPaSyYJJKdlA= Subject key identifier: D8:29:38:A4:99:CC:A7:C8:C7:57:E1:2F:2B:89:B9:BF:F9:01:C5:66 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F85786FFA8644438E3DF76B00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc90fb1f-131a-319f-8021-f5cd2b494e41.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 398112 IP address blocks: 66.128.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:6f:fa:86:44:43:8e:3d:f7:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=23b0b720-4f88-437d-9e95-2518d3660548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8c:25:91:a7:67:45:c2:b6:01:30:06:0a:e3: 7a:29:c3:13:ec:6f:51:78:db:6c:eb:bf:a4:d9:76: bc:81:cd:e8:81:15:37:5b:de:8f:5a:c7:00:2e:83: 54:16:77:95:1a:bd:55:d7:70:31:dc:a6:fb:ec:88: b9:13:dd:0b:7d:ad:04:09:10:b1:a3:83:18:e9:72: 3b:07:e7:de:e3:38:c8:63:11:87:1d:27:d2:96:6d: 23:3e:51:7b:cb:af:90:f0:8c:13:ae:e1:78:4c:f5: 22:48:73:54:07:a4:e0:a4:7b:26:c1:00:5e:32:2d: 44:17:ab:ba:1e:5c:63:8c:1e:96:22:ca:fe:b2:a6: 47:2b:c5:2a:3c:ed:f9:62:8a:e8:e3:e0:fd:49:57: 93:b0:c3:e6:de:84:0b:f0:de:46:69:36:f6:ee:af: fc:53:e6:17:a1:0b:40:ae:da:7c:c2:f0:12:87:f1: 03:54:26:95:1e:c9:fc:30:56:23:4f:5c:fb:8a:a4: ee:14:1a:99:e8:13:d9:a5:4a:fa:30:29:58:05:b1: 7c:b4:56:cd:2d:44:e9:fb:56:72:a8:8e:e1:2f:f0: d0:19:fb:32:e0:29:0b:82:9e:80:51:a5:8b:0d:7e: ee:95:d2:ed:0a:e2:17:46:89:eb:99:7d:19:2b:32: 13:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:29:38:A4:99:CC:A7:C8:C7:57:E1:2F:2B:89:B9:BF:F9:01:C5:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc90fb1f-131a-319f-8021-f5cd2b494e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ff:b6:a8:fd:47:3a:a5:1d:d5:6e:c4:9b:f1:6e:db:fe:33: 09:86:33:65:fc:d3:c4:a1:d5:a6:23:bd:36:bf:c6:ee:df:e2: 09:4e:a0:25:40:3b:6b:d4:c1:33:c9:06:a8:99:57:22:58:4e: 83:16:f1:86:0b:17:22:d9:29:7a:bb:13:3e:72:8d:1b:c9:5d: 1e:59:4c:8d:73:28:7a:bd:26:0c:ba:a8:9f:72:17:aa:73:3c: 16:3d:e5:91:b7:84:dd:e0:24:89:ce:4b:9a:cb:9f:e0:b9:17: 3c:a4:a8:a1:8f:52:f3:a5:e8:ea:0e:39:8c:fa:b8:d0:39:3d: 89:bc:4a:93:25:00:a2:1f:7c:f2:bf:2e:74:c9:ed:5a:d4:6e: 49:30:d0:c3:2f:d6:e2:2e:bf:15:2c:97:f8:34:af:c8:88:95: 2c:2b:3c:e7:31:2f:37:b3:03:4e:c5:1d:d5:91:6e:52:92:d6: c7:91:c8:34:6c:40:7d:45:9c:cf:03:94:c6:5a:27:2e:1d:0e: c1:19:3c:20:de:a7:78:34:a8:4f:62:51:83:c2:6d:0e:c2:74: e2:7d:e8:55:00:ad:8a:0c:95:9e:b7:15:09:bc:3b:cf:8c:c1: e1:c4:4f:0c:97:81:30:e3:84:26:3e:cc:18:9c:bc:d8:bb:62: f7:d4:eb:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeG/6hkRDjj33awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk MjNiMGI3MjAtNGY4OC00MzdkLTllOTUtMjUxOGQzNjYwNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIwlkadnRcK2ATAGCuN6KcMT7G9ReNts67+k 2Xa8gc3ogRU3W96PWscALoNUFneVGr1V13Ax3Kb77Ii5E90Lfa0ECRCxo4MY6XI7 B+fe4zjIYxGHHSfSlm0jPlF7y6+Q8IwTruF4TPUiSHNUB6TgpHsmwQBeMi1EF6u6 HlxjjB6WIsr+sqZHK8UqPO35Yoro4+D9SVeTsMPm3oQL8N5GaTb27q/8U+YXoQtA rtp8wvASh/EDVCaVHsn8MFYjT1z7iqTuFBqZ6BPZpUr6MClYBbF8tFbNLUTp+1Zy qI7hL/DQGfsy4CkLgp6AUaWLDX7uldLtCuIXRonrmX0ZKzITMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgpOKSZzKfIx1fhLyuJub/5AcVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZmM5MGZiMWYtMTMxYS0z MTlmLTgwMjEtZjVjZDJiNDk0ZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ//tqj9RzqlHdVuxJvxbtv+MwmGM2X808Sh1aYjvTa/xu7f4glOoCVA O2vUwTPJBqiZVyJYToMW8YYLFyLZKXq7Ez5yjRvJXR5ZTI1zKHq9Jgy6qJ9yF6pz PBY95ZG3hN3gJInOS5rLn+C5FzykqKGPUvOl6OoOOYz6uNA5PYm8SpMlAKIffPK/ LnTJ7VrUbkkw0MMv1uIuvxUsl/g0r8iIlSwrPOcxLzezA07FHdWRblKS1seRyDRs QH1FnM8DlMZaJy4dDsEZPCDep3g0qE9iUYPCbQ7CdOJ96FUArYoMlZ63FQm8O8+M weHETwyXgTDjhCY+zBicvNi7YvfU6zk= -----END CERTIFICATE-----Generated at Tue Oct 27 13:05:56 2026 by rpki-client