$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa File: 09ef4b44-ba95-30f1-91ff-60c41204628c.roa (raw, json) Hash identifier: QyKLZjMBcnLxgRjuhjhNkfP1smSjGHzyChcPhxk916c= Subject key identifier: 14:CD:52:39:7E:ED:0F:9C:F6:39:7A:1F:6A:9A:48:6C:02:A9:1B:A7 Certificate issuer: /CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Certificate serial: 010D0C9F4328584F6F22DC349260220290423D00 Authority key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 13917 IP address blocks: 66.206.160.0/20 maxlen: 20 66.206.175.0/24 maxlen: 24 2606:f000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:dc:34:92:60:22:02:90:42:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=dae978a6-3083-4463-b302-61aac7ae9c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:5f:ca:24:55:e6:ff:d5:86:5d:43:d2:bc: 70:bb:a7:bc:f7:51:c6:f5:cd:32:ed:87:e6:a0:b7: 59:4c:5c:fc:34:93:22:56:8f:b6:3a:66:49:f0:d5: b3:cc:c2:6d:12:5f:55:08:78:5e:4e:02:f9:f6:8a: 68:13:4c:da:da:ca:c1:e8:3e:39:e0:60:a3:5c:c5: fa:7f:d0:d9:25:9d:52:ed:84:5a:a3:06:59:b2:2f: 95:45:0b:e6:28:ce:4c:6c:21:13:71:f7:3c:4a:08: 67:c1:bf:f8:2c:9c:a4:f6:f3:d0:ad:f0:dc:24:43: 41:c0:e8:3b:d4:a2:1a:89:4c:6e:51:9e:f0:35:a2: f4:1e:1d:94:cc:19:63:dc:69:3c:60:37:cf:ef:cb: f8:6d:2f:0a:47:bc:dd:91:d4:75:cb:64:56:ca:9f: 07:9c:f3:46:63:e8:1a:84:68:71:12:46:3c:ba:d8: bf:c3:9f:0c:2b:45:9b:18:58:eb:1f:43:e2:82:5e: fa:b8:46:21:7f:49:36:68:a4:b6:e3:78:4d:fe:c2: a1:47:25:eb:ca:70:8f:93:bc:5e:bd:91:05:7d:32: eb:65:a3:ef:43:1c:c0:0d:97:40:8e:7f:c3:bd:89: e8:82:c9:4d:9c:b5:e3:af:64:bc:f3:4b:61:6c:dd: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CD:52:39:7E:ED:0F:9C:F6:39:7A:1F:6A:9A:48:6C:02:A9:1B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl X509v3 Authority Key Identifier: keyid:9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer sbgp-ipAddrBlock: critical IPv4: 66.206.160.0/20 IPv6: 2606:f000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f3:d3:bd:6b:b4:4a:b5:c8:ab:de:b9:5d:6e:96:f2:37:48: 49:32:0b:2a:10:3f:26:f7:83:bc:da:a2:55:89:50:82:33:09: 8b:03:90:42:32:ee:82:b0:05:8e:1c:96:39:76:51:8b:86:bf: b7:84:e4:49:44:42:02:9f:d6:53:1e:d2:99:45:2b:42:88:3e: f0:a3:a2:26:b0:9a:32:23:52:34:87:99:d2:c1:9c:fc:d0:22: 24:d7:1d:b3:48:f5:b5:f6:1b:14:e2:18:31:49:e0:d6:0b:16: fa:8c:eb:56:3d:c3:57:79:70:4d:e8:31:74:ff:cb:bc:65:2e: cf:50:7b:26:47:f0:a7:15:cc:95:a0:78:f6:aa:15:48:76:f1: 7c:0a:a9:16:4a:0d:a0:ed:21:ba:97:f8:64:3a:9d:57:55:b1: a4:b4:37:9e:95:51:e3:61:1a:be:a2:4e:a7:1e:12:83:ce:8b: da:8b:2c:5d:7b:34:15:9d:63:4a:e5:f4:38:89:f6:ff:19:e9: b2:c4:96:d2:95:31:03:2f:fa:ac:a2:6c:78:8d:2f:8e:c7:00: ff:cc:9c:9e:3b:4b:0f:a9:01:5c:45:0b:94:36:10:53:ba:72: 19:fe:10:00:02:5c:5e:90:d2:40:ae:25:99:a7:71:45:d6:67: 18:f1:f2:b7 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9vItw0kmAiApBCPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1 YjhiMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGFlOTc4YTYtMzA4My00NDYzLWIzMDItNjFhYWM3YWU5YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivlfyiRV5v/Vhl1D0rxwu6e891HG9c0y7Yfm oLdZTFz8NJMiVo+2OmZJ8NWzzMJtEl9VCHheTgL59opoE0za2srB6D454GCjXMX6 f9DZJZ1S7YRaowZZsi+VRQvmKM5MbCETcfc8Sghnwb/4LJyk9vPQrfDcJENBwOg7 1KIaiUxuUZ7wNaL0Hh2UzBlj3Gk8YDfP78v4bS8KR7zdkdR1y2RWyp8HnPNGY+ga hGhxEkY8uti/w58MK0WbGFjrH0Pigl76uEYhf0k2aKS243hN/sKhRyXrynCPk7xe vZEFfTLrZaPvQxzADZdAjn/DvYnogslNnLXjr2S880thbN1h+wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBTNUjl+7Q+c9jl6H2qaSGwCqRunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMx ZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvMDllZjRiNDQtYmE5NS0z MGYxLTkxZmYtNjBjNDEyMDQ2MjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDEzMWZmYWEtODVmMi00YmQ1LTg5 NjEtOWRjOGFkZjE1YjhiL2QxMzFmZmFhLTg1ZjItNGJkNS04OTYxLTlkYzhhZGYx NWI4Yi5jcmwwHwYDVR0jBBgwFoAUnxc+xPRbxWcgps2BFQ3CS2MpTvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4 YWRmMTViOGIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEQs6gMA0E AgACMAcDBQAmBvAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACnz071rtEq1yKveuV1ulvI3SEkyCyoQPyb3 g7zaolWJUIIzCYsDkEIy7oKwBY4cljl2UYuGv7eE5ElEQgKf1lMe0plFK0KIPvCj oiawmjIjUjSHmdLBnPzQIiTXHbNI9bX2GxTiGDFJ4NYLFvqM61Y9w1d5cE3oMXT/ y7xlLs9QeyZH8KcVzJWgePaqFUh28XwKqRZKDaDtIbqX+GQ6nVdVsaS0N56VUeNh Gr6iTqceEoPOi9qLLF17NBWdY0rl9DiJ9v8Z6bLEltKVMQMv+qyibHiNL47HAP/M nJ47Sw+pAVxFC5Q2EFO6chn+EAACXF6Q0kCuJZmncUXWZxjx8rc= -----END CERTIFICATE-----Generated at Sat Oct 10 11:01:42 2026 by rpki-client