$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/b1dc4fdf-c1d1-3d35-a216-360f9f633221.roa File: b1dc4fdf-c1d1-3d35-a216-360f9f633221.roa (raw, json) Hash identifier: Bh8wBdcAus7cYW9rcHhl5bWXt+d2wh75S3mBO/qwo1E= Subject key identifier: 08:E9:44:A3:F1:EC:2D:75:48:CB:14:C4:10:A3:3E:7F:50:CF:C4:B1 Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584F6C5853A5D0CD64E6E75B8940 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/b1dc4fdf-c1d1-3d35-a216-360f9f633221.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 399804 IP address blocks: 66.187.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:53:a5:d0:cd:64:e6:e7:5b:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=d8722c87-cdfa-45b5-9dae-2a7d3214c3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:5a:4a:f1:8c:24:2e:7a:5d:b0:c6:0c:8e: a4:1a:af:b2:bc:98:53:b4:27:3a:6e:51:fa:1a:5d: 7d:6d:97:00:09:7a:15:20:2e:f5:0b:b9:f9:ee:bd: 7a:82:84:e1:0e:16:29:57:ea:0c:f8:0a:39:e5:e7: 67:1b:d6:d8:df:08:7b:a6:85:48:6e:88:cf:77:4c: c9:5c:dd:7b:02:17:4b:99:34:00:fb:da:1b:08:8d: 44:21:1e:0e:93:4b:d6:57:41:ff:e8:64:76:86:a8: 09:82:89:53:e8:b8:c1:d1:51:2c:90:c0:15:91:7c: ab:0b:fe:fc:df:d1:b4:42:1f:b3:e7:46:d9:13:dc: 1b:f4:00:93:83:39:ff:75:8f:c9:15:3f:69:68:a5: 71:53:0b:8b:a6:a6:13:b8:39:12:81:db:d9:97:66: d7:64:7f:95:23:f9:d8:99:96:f2:e8:c6:05:92:d2: 69:3a:2b:1f:06:fe:3c:f3:30:a1:0c:59:65:27:37: 1c:eb:56:2a:11:26:ac:42:e5:25:23:23:b7:27:2d: 02:5f:5e:4c:f8:a6:d4:65:30:33:21:23:62:74:d4: c3:fb:94:95:60:a1:ca:99:49:46:3c:1e:85:e1:fa: 38:ab:55:71:32:41:b9:e0:1a:86:fe:72:1e:2a:bb: 88:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E9:44:A3:F1:EC:2D:75:48:CB:14:C4:10:A3:3E:7F:50:CF:C4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/b1dc4fdf-c1d1-3d35-a216-360f9f633221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv4: 66.187.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:77:49:63:5b:5a:0d:74:77:50:05:67:0a:95:a3:04:73:cd: 05:63:80:5f:b1:21:e0:19:3a:9f:09:6f:14:a9:a4:1a:89:0b: 54:93:33:db:f8:23:e8:8c:58:47:93:5c:9c:28:64:8d:14:56: fa:ca:78:11:21:65:0d:8d:f7:fd:0e:41:78:9f:03:37:76:6e: c5:05:1f:8f:4c:b8:26:cf:85:2c:81:5d:43:c0:c3:11:8e:89: 08:93:4e:0c:9e:d2:a5:73:51:dd:6a:0a:47:c6:ee:50:8d:05: db:e9:3a:e6:16:03:d7:03:90:20:f9:fc:5e:0e:6c:4a:cd:90: d0:81:31:95:2f:ff:82:16:6a:63:c9:1f:22:4c:0c:a5:99:0a: a1:dd:9a:a6:e1:c4:76:51:d2:2f:7e:e1:33:32:3e:72:a0:8a: d4:6a:68:4e:4e:3b:e8:36:e3:2c:e7:be:40:0a:e6:dd:08:3a: f4:e3:dc:0a:ac:b9:62:64:4c:fa:b7:42:ce:06:f8:12:b6:b0: 51:4b:ac:37:ca:7f:09:74:0a:92:89:51:42:b0:3f:cb:4c:f4: 5d:c9:ff:f5:88:a3:73:3a:c0:82:e9:86:c3:17:22:fa:06:72: 76:32:c3:a9:a7:d5:da:14:e3:e0:73:6a:c6:cd:1c:0d:6c:2a: 19:25:1f:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWFOl0M1k5udbiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZDg3MjJjODctY2RmYS00NWI1LTlkYWUtMmE3ZDMyMTRjM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLRaSvGMJC56XbDGDI6kGq+yvJhTtCc6blH6 Gl19bZcACXoVIC71C7n57r16goThDhYpV+oM+Ao55ednG9bY3wh7poVIbojPd0zJ XN17AhdLmTQA+9obCI1EIR4Ok0vWV0H/6GR2hqgJgolT6LjB0VEskMAVkXyrC/78 39G0Qh+z50bZE9wb9ACTgzn/dY/JFT9paKVxUwuLpqYTuDkSgdvZl2bXZH+VI/nY mZby6MYFktJpOisfBv488zChDFllJzcc61YqESasQuUlIyO3Jy0CX15M+KbUZTAz ISNidNTD+5SVYKHKmUlGPB6F4fo4q1VxMkG54BqG/nIeKruI8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjpRKPx7C11SMsUxBCjPn9Qz8SxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvYjFkYzRmZGYtYzFkMS0z ZDM1LWEyMTYtMzYwZjlmNjMzMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrsFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd3SWNbWg10d1AFZwqVowRzzQVjgF+xIeAZOp8JbxSppBqJC1STM9v4 I+iMWEeTXJwoZI0UVvrKeBEhZQ2N9/0OQXifAzd2bsUFH49MuCbPhSyBXUPAwxGO iQiTTgye0qVzUd1qCkfG7lCNBdvpOuYWA9cDkCD5/F4ObErNkNCBMZUv/4IWamPJ HyJMDKWZCqHdmqbhxHZR0i9+4TMyPnKgitRqaE5OO+g24yznvkAK5t0IOvTj3Aqs uWJkTPq3Qs4G+BK2sFFLrDfKfwl0CpKJUUKwP8tM9F3J//WIo3M6wILphsMXIvoG cnYyw6mn1doU4+BzasbNHA1sKhklH2k= -----END CERTIFICATE-----Generated at Tue Oct 13 17:42:53 2026 by rpki-client