$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e3d19010-3c57-31d1-9452-1c284aeb635a.roa File: e3d19010-3c57-31d1-9452-1c284aeb635a.roa (raw, json) Hash identifier: 4dYmrKgNI4d3kAHMDya2dyI8OsYDCT0kpUf5mcSwQ5E= Subject key identifier: ED:18:C9:CB:E6:DC:81:C0:6D:7E:D3:78:D2:15:19:7D:4A:D5:3C:B9 Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584F8F3DAC3058903C59C5422980 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e3d19010-3c57-31d1-9452-1c284aeb635a.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 16557 IP address blocks: 66.103.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:ac:30:58:90:3c:59:c5:42:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=36abbabe-3178-4619-9283-6d432bb3a04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:7a:1d:ce:2d:4c:5e:68:32:db:2f:f6:08: 77:a9:1e:af:03:cf:6a:07:01:85:19:f8:c3:14:8c: dc:b2:26:bd:1f:99:d7:65:cb:ae:e4:97:a9:de:9a: 76:9b:bb:55:41:f4:62:6c:41:4f:ec:3f:57:f0:f4: 67:46:97:21:5a:3e:d1:61:9d:60:1d:08:0c:f6:dd: a4:85:56:f9:45:89:a7:f5:42:a2:67:a4:70:e8:de: f8:15:ca:72:e9:c5:d0:7a:d3:ed:eb:bd:c8:dd:d0: 06:3c:25:e4:97:92:44:55:51:98:20:e0:8a:ee:8b: 00:48:f6:bf:27:92:52:26:7e:7c:6f:ca:79:e1:a0: 17:24:09:3b:42:61:9a:dd:f7:70:0b:a8:40:5c:15: 10:06:fe:0e:22:f7:83:0c:96:bb:b7:a2:07:6f:41: 9c:9c:f2:f1:a0:67:f8:35:5e:5c:7c:d5:a7:6e:ed: d3:8a:b0:40:8d:17:7a:29:7b:2d:2c:a1:fe:2a:60: ff:f8:e1:64:66:f1:38:34:a6:97:bb:22:52:22:2d: 22:56:99:ad:4e:55:1a:fe:5a:16:ce:7b:fa:54:e5: 43:0e:ca:23:ac:a9:60:26:75:2e:5c:59:ff:47:72: 01:e5:30:8f:87:4e:33:d6:69:9f:3f:da:67:74:4d: 34:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:18:C9:CB:E6:DC:81:C0:6D:7E:D3:78:D2:15:19:7D:4A:D5:3C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e3d19010-3c57-31d1-9452-1c284aeb635a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 66.103.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:78:0b:26:c7:43:96:47:40:7f:44:cf:da:00:6a:19:f6:68: dd:28:3f:c4:40:d0:c1:05:2c:5c:d2:57:75:18:ee:15:4f:5f: 0f:0c:23:bf:c6:a0:4a:a6:6a:61:c6:cd:59:3a:84:27:1c:2f: 67:3a:68:13:d2:cb:e3:1d:2b:ad:88:80:54:9b:77:92:e7:89: 24:fa:6b:e8:a5:a2:2d:96:27:11:26:88:5a:70:62:4f:e1:e7: d8:5a:72:01:82:4f:a0:86:74:bf:73:1a:4a:b7:6b:90:17:79: 96:55:6f:34:f1:19:d8:7a:28:6a:3b:f7:ba:2c:f7:65:21:fa: 25:06:47:b2:6c:5f:6e:e6:84:0d:8f:2d:f5:6d:ad:16:09:d1: 6b:d7:16:6a:d5:9b:0d:24:a1:90:e8:54:a3:c1:69:17:39:fc: b9:bb:8b:34:19:ff:ac:43:96:fc:5b:78:67:7a:5c:2d:f1:06: f2:50:35:85:47:c5:08:c0:3b:57:16:4f:2c:73:19:e0:7f:f2: c4:e2:70:f4:2a:af:bd:94:4b:aa:57:fd:07:a4:fa:03:ce:8c: 7a:28:1f:f6:92:96:99:6e:bb:af:2f:b9:3d:c7:ef:54:38:0b: 61:57:da:fb:c7:0f:fc:9c:a7:65:f0:1a:ae:4e:f3:ca:1d:c0: 06:a2:c1:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPawwWJA8WcVCKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MzZhYmJhYmUtMzE3OC00NjE5LTkyODMtNmQ0MzJiYjNhMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw456Hc4tTF5oMtsv9gh3qR6vA89qBwGFGfjD FIzcsia9H5nXZcuu5Jep3pp2m7tVQfRibEFP7D9X8PRnRpchWj7RYZ1gHQgM9t2k hVb5RYmn9UKiZ6Rw6N74Fcpy6cXQetPt673I3dAGPCXkl5JEVVGYIOCK7osASPa/ J5JSJn58b8p54aAXJAk7QmGa3fdwC6hAXBUQBv4OIveDDJa7t6IHb0GcnPLxoGf4 NV5cfNWnbu3TirBAjRd6KXstLKH+KmD/+OFkZvE4NKaXuyJSIi0iVpmtTlUa/loW znv6VOVDDsojrKlgJnUuXFn/R3IB5TCPh04z1mmfP9pndE00uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0Yycvm3IHAbX7TeNIVGX1K1Ty5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvZTNkMTkwMTAtM2M1Ny0z MWQxLTk0NTItMWMyODRhZWI2MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQmeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB54CybHQ5ZHQH9Ez9oAahn2aN0oP8RA0MEFLFzSV3UY7hVPXw8MI7/G oEqmamHGzVk6hCccL2c6aBPSy+MdK62IgFSbd5LniST6a+iloi2WJxEmiFpwYk/h 59hacgGCT6CGdL9zGkq3a5AXeZZVbzTxGdh6KGo797os92Uh+iUGR7JsX27mhA2P LfVtrRYJ0WvXFmrVmw0koZDoVKPBaRc5/Lm7izQZ/6xDlvxbeGd6XC3xBvJQNYVH xQjAO1cWTyxzGeB/8sTicPQqr72US6pX/Qek+gPOjHooH/aSlpluu68vuT3H71Q4 C2FX2vvHD/ycp2XwGq5O88odwAaiwXM= -----END CERTIFICATE-----Generated at Sun Nov 1 14:39:29 2026 by rpki-client