$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28315b63-298b-35ee-b1bf-1494728947e3.roa File: 28315b63-298b-35ee-b1bf-1494728947e3.roa (raw, json) Hash identifier: HsAulOrASVwLY+mLhG3z/cpmB6iKy5+aFl/ulZL6MT4= Subject key identifier: 70:CF:D8:D5:F5:AE:95:39:ED:ED:C7:C6:91:E9:3E:63:96:3C:1F:8B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC921C87DA082AEAA4F81E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28315b63-298b-35ee-b1bf-1494728947e3.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 54288 IP address blocks: 66.220.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:1c:87:da:08:2a:ea:a4:f8:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=eedbd78a-36a8-4d04-b346-209b4c7db568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:ab:98:71:2c:92:62:43:97:1e:1e:3a:d2: c3:d5:d8:91:ab:68:7d:67:17:f8:3b:ee:e9:b8:cd: 13:0b:15:27:86:e3:dc:c4:ec:96:0c:2a:73:13:6c: 61:cd:da:6f:50:32:24:88:f0:5a:dc:8d:6c:0b:d1: 1d:0b:9a:f0:15:6f:47:65:f0:96:eb:ad:fe:23:38: 03:62:0f:a6:0f:bc:27:f6:5a:26:c2:60:6f:56:ac: e6:8f:7d:64:fc:e2:14:68:93:21:d2:4d:12:45:7e: b4:5b:45:33:7a:28:39:a9:7c:ab:d1:87:75:7c:43: 80:3d:44:89:36:77:81:94:09:0d:5c:39:90:70:0f: 8c:18:13:48:55:ec:e9:9e:39:78:c3:59:e1:43:98: e1:f2:ae:45:89:63:3d:0b:d3:33:4e:67:bc:bd:b1: 73:f6:21:e9:85:12:5c:ad:9a:eb:dd:be:5c:26:a2: 74:55:b1:40:fc:60:07:ad:4d:11:1d:ce:f9:b3:82: 8a:46:a4:60:7f:71:95:6e:ba:83:27:93:2a:5c:fc: be:f8:2a:04:73:ef:53:05:14:cb:ba:7c:d6:1d:4d: 1d:61:ce:03:41:48:9d:68:fd:1f:0c:a7:b8:66:a6: a1:b0:ee:ae:dd:4a:08:19:f3:e7:3b:60:dc:e3:fa: 91:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:D8:D5:F5:AE:95:39:ED:ED:C7:C6:91:E9:3E:63:96:3C:1F:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28315b63-298b-35ee-b1bf-1494728947e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 66.220.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a6:35:22:3b:16:54:b5:25:b7:88:9a:68:21:1f:51:db:5a: 05:af:c3:bb:1e:2d:d6:9c:2f:8e:62:33:c1:f3:25:b0:09:6c: d3:0b:33:df:94:cb:a2:26:64:86:81:61:90:7c:71:3c:d2:c6: cd:d9:9f:33:70:ee:11:ba:25:b6:55:5c:9f:9d:59:d1:22:05: 78:dc:33:71:10:c9:74:30:3e:59:80:c3:5d:fe:6a:7f:8c:ef: 90:8e:15:97:ef:16:0c:64:ee:34:cd:d5:7b:8c:72:36:0a:53: a3:7d:64:20:0c:af:da:bc:4e:2e:01:f7:f4:67:13:87:b9:67: c5:d6:99:b5:52:cb:0d:e7:71:c7:f8:bd:f2:29:9c:5b:32:f3: 0f:98:2e:c1:19:15:ea:84:8a:d8:51:f2:7b:43:ac:a1:58:56: 47:18:16:02:41:30:07:5f:f0:5f:8e:4e:b6:1c:c2:37:09:2e: 64:d0:e8:d2:41:45:7b:57:bc:2b:71:c0:7a:bb:b6:ff:ce:99: 68:bc:58:aa:d4:56:4e:f6:9f:d1:7f:1e:8d:79:f3:a4:b3:6f: e9:db:6d:93:0d:de:2f:1d:74:d3:aa:46:43:52:ac:e1:76:36: c6:e3:63:8b:f5:aa:0a:87:38:2a:cd:ab:d8:37:92:93:4e:8f: 0c:3b:b0:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckhyH2ggq6qT4HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk ZWVkYmQ3OGEtMzZhOC00ZDA0LWIzNDYtMjA5YjRjN2RiNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+mrmHEskmJDlx4eOtLD1diRq2h9Zxf4O+7p uM0TCxUnhuPcxOyWDCpzE2xhzdpvUDIkiPBa3I1sC9EdC5rwFW9HZfCW663+IzgD Yg+mD7wn9lomwmBvVqzmj31k/OIUaJMh0k0SRX60W0Uzeig5qXyr0Yd1fEOAPUSJ NneBlAkNXDmQcA+MGBNIVezpnjl4w1nhQ5jh8q5FiWM9C9MzTme8vbFz9iHphRJc rZrr3b5cJqJ0VbFA/GAHrU0RHc75s4KKRqRgf3GVbrqDJ5MqXPy++CoEc+9TBRTL unzWHU0dYc4DQUidaP0fDKe4ZqahsO6u3UoIGfPnO2Dc4/qRJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDP2NX1rpU57e3HxpHpPmOWPB+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjgzMTViNjMtMjk4Yi0z NWVlLWIxYmYtMTQ5NDcyODk0N2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKmNSI7FlS1JbeImmghH1HbWgWvw7seLdacL45iM8HzJbAJbNMLM9+U y6ImZIaBYZB8cTzSxs3ZnzNw7hG6JbZVXJ+dWdEiBXjcM3EQyXQwPlmAw13+an+M 75COFZfvFgxk7jTN1XuMcjYKU6N9ZCAMr9q8Ti4B9/RnE4e5Z8XWmbVSyw3nccf4 vfIpnFsy8w+YLsEZFeqEithR8ntDrKFYVkcYFgJBMAdf8F+OTrYcwjcJLmTQ6NJB RXtXvCtxwHq7tv/OmWi8WKrUVk72n9F/Ho1586Szb+nbbZMN3i8ddNOqRkNSrOF2 NsbjY4v1qgqHOCrNq9g3kpNOjww7sNY= -----END CERTIFICATE-----Generated at Sat Sep 12 03:26:58 2026 by rpki-client