$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ff42de0e-df88-38ef-85e5-9dcf1f7120e6.roa File: ff42de0e-df88-38ef-85e5-9dcf1f7120e6.roa (raw, json) Hash identifier: ZLZ4JObPfDycvap+9T9f5C97USQPzakiN27plBzGEcQ= Subject key identifier: 2D:14:03:2E:67:D4:67:10:74:3F:40:D9:59:2C:6C:20:9D:47:B7:E7 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F9A687267924EC1A9C0CF7500 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ff42de0e-df88-38ef-85e5-9dcf1f7120e6.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 399439 IP address blocks: 66.231.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:72:67:92:4e:c1:a9:c0:cf:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=045423ff-c585-4b55-a221-efb52f638c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:df:9b:e2:21:e8:9c:fa:05:ba:fe:ea:a3:64: d9:98:71:dd:9b:89:d1:8b:e9:c6:fb:aa:0e:17:54: 29:86:1e:71:c4:60:9f:d9:e7:1d:03:37:0b:bf:e3: 3f:ed:65:b1:a4:7f:1e:1c:c4:ef:53:c6:5e:73:57: 22:8f:35:6b:08:bf:86:9d:a6:92:29:6c:ed:d1:64: b5:51:61:7b:0c:95:69:7c:2d:e4:12:9e:3c:90:43: 2b:9f:98:38:35:d1:bd:0e:c5:b9:17:fc:ba:5e:dd: a6:88:ef:b3:8c:ea:68:07:33:ba:6a:b0:12:e8:38: f2:42:93:82:49:87:13:d4:9d:2f:4d:bd:92:52:fb: 92:5c:70:2c:04:db:09:0e:b0:07:02:ff:bc:60:12: 93:ff:a9:f0:f1:45:e8:a6:3f:e0:31:40:db:22:18: 11:40:23:89:01:96:62:74:a2:8c:7c:7b:e2:9b:e6: 57:7c:bc:db:98:3e:55:15:6c:05:32:67:fc:da:94: 84:82:f9:8a:77:82:ea:ca:a3:c2:09:00:9b:81:27: 20:16:8b:1f:f9:19:28:72:9f:5e:fc:2a:b2:87:23: 52:e2:eb:76:64:61:72:1f:60:a7:0a:95:58:15:9f: b7:05:72:43:6a:c8:e3:97:ec:10:4b:ed:dc:2d:68: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:14:03:2E:67:D4:67:10:74:3F:40:D9:59:2C:6C:20:9D:47:B7:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ff42de0e-df88-38ef-85e5-9dcf1f7120e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:eb:b3:af:c9:03:82:77:72:9b:2b:64:65:c6:ca:0d:36:86: 9f:4e:0f:9c:95:2a:4a:37:6c:c6:63:36:6a:a7:46:ff:0a:6c: 4e:ac:d4:1b:5b:f4:c3:7d:a5:7d:68:1c:9e:6a:f7:6d:d3:3b: 4f:58:4d:45:bb:6a:6c:e7:d3:d0:1b:1b:9f:4b:58:9d:1b:a3: e9:c4:41:f4:e3:93:d7:8c:1c:87:c5:4f:b3:c3:3b:59:86:c4: 26:f6:98:c4:9c:66:e3:0b:6c:c0:7b:51:1e:50:c5:78:ed:6d: 40:05:d0:7e:e5:a7:10:5c:bc:0d:cd:94:67:0d:ea:16:b1:9b: 24:1a:06:dc:47:66:b2:83:f5:bf:d7:4e:52:10:1b:37:c9:75: 97:cb:5f:e9:6c:45:e1:75:0d:70:f0:81:d4:0f:53:c2:81:e6: 23:63:3a:16:64:50:e8:1b:33:cc:81:dd:41:07:f4:8b:da:f5: 50:f6:3f:09:7e:61:38:dc:3d:74:c6:ff:ea:f6:19:72:27:52: 5b:53:08:75:fd:7b:67:70:a0:c8:e2:6b:42:64:d4:ef:4c:41: 8b:d7:14:43:c7:90:77:8b:55:49:7f:39:ae:88:c9:29:79:2b: d1:88:9d:8d:60:de:4d:87:ac:f2:8d:4f:5a:b3:be:69:d0:f4: 67:cf:a3:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaHJnkk7BqcDPdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MDQ1NDIzZmYtYzU4NS00YjU1LWEyMjEtZWZiNTJmNjM4YzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9+b4iHonPoFuv7qo2TZmHHdm4nRi+nG+6oO F1Qphh5xxGCf2ecdAzcLv+M/7WWxpH8eHMTvU8Zec1cijzVrCL+GnaaSKWzt0WS1 UWF7DJVpfC3kEp48kEMrn5g4NdG9DsW5F/y6Xt2miO+zjOpoBzO6arAS6DjyQpOC SYcT1J0vTb2SUvuSXHAsBNsJDrAHAv+8YBKT/6nw8UXopj/gMUDbIhgRQCOJAZZi dKKMfHvim+ZXfLzbmD5VFWwFMmf82pSEgvmKd4LqyqPCCQCbgScgFosf+Rkocp9e /CqyhyNS4ut2ZGFyH2CnCpVYFZ+3BXJDasjjl+wQS+3cLWhvSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0UAy5n1GcQdD9A2VksbCCdR7fnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZmY0MmRlMGUtZGY4OC0z OGVmLTg1ZTUtOWRjZjFmNzEyMGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDrs6/JA4J3cpsrZGXGyg02hp9OD5yVKko3bMZjNmqnRv8KbE6s1Btb 9MN9pX1oHJ5q923TO09YTUW7amzn09AbG59LWJ0bo+nEQfTjk9eMHIfFT7PDO1mG xCb2mMScZuMLbMB7UR5QxXjtbUAF0H7lpxBcvA3NlGcN6haxmyQaBtxHZrKD9b/X TlIQGzfJdZfLX+lsReF1DXDwgdQPU8KB5iNjOhZkUOgbM8yB3UEH9Iva9VD2Pwl+ YTjcPXTG/+r2GXInUltTCHX9e2dwoMjia0Jk1O9MQYvXFEPHkHeLVUl/Oa6IySl5 K9GInY1g3k2HrPKNT1qzvmnQ9GfPowc= -----END CERTIFICATE-----Generated at Sun Oct 25 14:37:27 2026 by rpki-client