$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4b68678e-021f-3536-acd6-84f61ed7e1d0.roa File: 4b68678e-021f-3536-acd6-84f61ed7e1d0.roa (raw, json) Hash identifier: 7rooSSCvo2AMTkIIcZtc1AK7uvh9/8OeaU7L8l+Csrs= Subject key identifier: 88:2A:1B:87:8F:5C:DB:2F:C5:61:E8:FD:58:74:76:17:DA:05:AB:61 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F5B97FE1E9E633C95E82A1D80 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4b68678e-021f-3536-acd6-84f61ed7e1d0.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 1421 IP address blocks: 66.39.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fe:1e:9e:63:3c:95:e8:2a:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=65ca8edd-6f7d-4f49-8867-457efc9d6084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:92:16:e8:8b:ab:9f:51:b0:51:28:9d:08: ab:cc:2d:ab:4b:d3:8a:36:a9:33:0c:17:08:4f:f9: 52:77:f1:bb:76:24:ad:82:57:e6:26:1b:0b:27:69: de:0a:cc:30:51:90:5a:61:80:e6:70:96:93:5f:b8: 40:c9:fc:a5:cd:ec:e3:e0:64:4f:b1:55:6d:34:89: 27:cd:da:0e:48:60:01:57:2a:55:8d:6a:be:a4:c8: 94:ab:3c:6d:63:18:7c:39:13:fc:18:74:d3:4e:91: 69:b5:ef:18:d7:05:13:11:2c:26:48:b1:18:b0:cc: c4:1c:de:44:cf:02:59:7e:86:ad:2d:69:bb:cf:10: 72:5a:eb:96:2f:3b:27:74:94:ba:0d:4b:f9:16:ef: db:f8:f0:62:19:9e:34:98:78:59:0c:6d:61:48:e4: f1:15:11:1b:ec:99:72:a0:61:b3:69:63:38:9c:c4: e4:d2:83:7f:08:ed:e2:4d:ef:fc:b2:93:d8:44:e2: 71:11:b5:82:37:d3:f9:88:da:4c:e7:a4:ef:38:03: fe:93:84:03:09:5c:c0:a7:37:7a:19:5c:c2:ef:90: c3:9a:a0:05:94:08:f6:1a:1d:c2:bf:07:bc:4c:02: 2c:1c:91:ea:1d:da:2d:ef:77:49:f2:dc:2f:f6:25: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2A:1B:87:8F:5C:DB:2F:C5:61:E8:FD:58:74:76:17:DA:05:AB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4b68678e-021f-3536-acd6-84f61ed7e1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 66.39.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:59:4a:c1:4f:24:a0:d7:70:dc:d0:0e:ba:17:d8:d3:05:be: 77:38:95:db:62:59:7f:b3:ff:c8:b0:43:16:58:2c:ac:b7:c8: 44:1e:4a:e7:f6:4b:45:7f:4b:eb:ce:71:9c:6c:46:bc:7e:30: 4f:18:91:a8:b0:e5:5b:6c:53:86:b7:37:af:f1:38:91:b4:07: 82:d2:79:cd:d7:52:47:c1:62:c4:2c:24:c5:40:5b:aa:dc:28: 9c:59:80:0b:e9:d2:f2:7f:f7:96:b9:a7:17:48:36:e6:c6:ec: c2:fd:c0:fc:b6:f8:4b:75:2f:0c:43:41:3d:91:74:25:fa:eb: ac:c7:6c:e1:db:b9:c3:64:69:73:5d:d8:0f:d7:de:e7:dc:1d: f9:3d:5b:5f:c0:72:8b:07:90:db:3c:06:29:6c:ef:3c:f4:9b: d4:1b:c6:fa:43:cc:52:de:58:65:2f:9e:9c:11:a9:b7:56:de: 20:17:57:0c:53:4f:38:2e:ac:ae:d0:3a:3a:1b:69:e3:39:cb: 21:f4:c7:cd:9a:3f:1b:53:23:8b:d7:f0:01:32:06:72:f9:ea: c0:a6:c1:0b:21:33:f4:d1:91:b9:49:77:6d:e3:39:bd:25:8e: 91:62:4b:eb:b7:7b:f5:28:43:f8:6a:5a:15:54:f3:b9:f2:86: 91:8e:3a:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/4enmM8legqHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk NjVjYThlZGQtNmY3ZC00ZjQ5LTg4NjctNDU3ZWZjOWQ2MDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz06SFuiLq59RsFEonQirzC2rS9OKNqkzDBcI T/lSd/G7diStglfmJhsLJ2neCswwUZBaYYDmcJaTX7hAyfylzezj4GRPsVVtNIkn zdoOSGABVypVjWq+pMiUqzxtYxh8ORP8GHTTTpFpte8Y1wUTESwmSLEYsMzEHN5E zwJZfoatLWm7zxByWuuWLzsndJS6DUv5Fu/b+PBiGZ40mHhZDG1hSOTxFREb7Jly oGGzaWM4nMTk0oN/CO3iTe/8spPYROJxEbWCN9P5iNpM56TvOAP+k4QDCVzApzd6 GVzC75DDmqAFlAj2Gh3Cvwe8TAIsHJHqHdot73dJ8twv9iUBfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgqG4ePXNsvxWHo/Vh0dhfaBathMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNGI2ODY3OGUtMDIxZi0z NTM2LWFjZDYtODRmNjFlZDdlMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQifeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5ZSsFPJKDXcNzQDroX2NMFvnc4ldtiWX+z/8iwQxZYLKy3yEQeSuf2 S0V/S+vOcZxsRrx+ME8Ykaiw5VtsU4a3N6/xOJG0B4LSec3XUkfBYsQsJMVAW6rc KJxZgAvp0vJ/95a5pxdINubG7ML9wPy2+Et1LwxDQT2RdCX666zHbOHbucNkaXNd 2A/X3ufcHfk9W1/AcosHkNs8Bils7zz0m9QbxvpDzFLeWGUvnpwRqbdW3iAXVwxT TzgurK7QOjobaeM5yyH0x82aPxtTI4vX8AEyBnL56sCmwQshM/TRkblJd23jOb0l jpFiS+u3e/UoQ/hqWhVU87nyhpGOOrw= -----END CERTIFICATE-----Generated at Wed Oct 28 14:15:11 2026 by rpki-client