$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4b68678e-021f-3536-acd6-84f61ed7e1d0.roa File: 4b68678e-021f-3536-acd6-84f61ed7e1d0.roa (raw, json) Hash identifier: fldikVdu2+s0laAOC7jaJuTecgb4/83ouOMihzgkDXk= Subject key identifier: 71:E7:2B:03:3C:5C:8A:8E:64:AE:15:A5:7B:5B:DC:48:11:F1:2B:CF Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584EB9AC4D117B2E842A127F0180 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4b68678e-021f-3536-acd6-84f61ed7e1d0.roa Signing time: Tue 04 Aug 2026 13:00:12 +0000 ROA not before: Tue 04 Aug 2026 13:00:12 +0000 ROA not after: Mon 02 Nov 2026 14:00:12 +0000 asID: 1421 IP address blocks: 66.39.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:ac:4d:11:7b:2e:84:2a:12:7f:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Aug 4 13:00:12 2026 GMT Not After : Nov 2 14:00:12 2026 GMT Subject: CN=9411cc93-c163-410e-aa6f-c4ef11bf8012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fe:dc:f8:5d:84:ed:91:9a:91:a6:fa:2f:94: e0:f5:db:14:28:1a:2d:3b:92:d4:22:fb:38:c6:66: e5:a3:03:63:0a:72:2a:71:87:f0:fe:f8:b0:e6:1b: 96:a9:a5:04:9c:65:bc:87:1d:2e:4f:d9:7e:4c:51: 2e:b6:94:96:39:15:e4:4d:cd:10:3a:25:d3:f7:04: 63:3f:6f:5d:17:07:a5:ad:f0:71:dd:82:f0:5b:ba: 48:36:10:69:bf:e1:df:65:a3:49:c5:6b:68:22:08: e8:3f:17:68:7a:2e:78:8f:e3:e4:8b:65:94:e5:2a: 0a:60:6e:8f:39:7c:fc:1b:31:5d:9a:79:7e:e0:c7: e6:0f:0f:2c:74:3d:98:a4:81:17:e4:21:d2:2e:ad: 1b:e4:d1:10:d7:f5:d6:c2:82:87:da:6c:f5:42:2d: ef:91:31:85:4f:7b:7a:1d:10:32:ff:b1:7e:0f:91: 5e:03:a6:5f:8f:38:ec:ee:c5:4b:80:18:e0:ca:86: d0:c0:da:9f:28:4d:fa:35:be:7e:d1:7d:64:61:e3: 82:ff:40:35:fa:ca:3b:bf:3e:4d:ed:6c:a1:3d:f7: 33:99:c3:ac:06:40:5d:46:6c:7b:d2:28:c0:3e:1d: 83:18:cf:8c:11:e1:18:1b:c7:6d:d4:64:40:cf:b5: 7a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E7:2B:03:3C:5C:8A:8E:64:AE:15:A5:7B:5B:DC:48:11:F1:2B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4b68678e-021f-3536-acd6-84f61ed7e1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 66.39.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:bc:7d:87:3f:33:f1:ad:30:fd:e4:b7:a2:e5:4d:d9:19:26: 89:0d:19:fe:4e:a8:2c:3c:b8:36:8e:a2:52:44:0c:b9:e8:3e: a1:e1:e9:2e:d0:f9:28:b5:b0:da:f1:ee:0f:6d:4c:08:92:e8: f4:5d:da:34:d1:f8:03:61:75:32:11:14:bd:1a:84:b5:22:42: d7:3b:dd:51:9e:ec:26:05:b2:a5:5f:e7:59:53:04:49:90:c2: 89:43:c6:b0:36:f1:00:c5:7c:44:d5:18:a5:6f:8d:be:e3:f1: 00:b5:08:71:5e:c4:19:51:64:f4:f1:36:ef:cd:a4:b6:ad:04: 93:45:59:31:b0:da:0b:40:33:bd:41:d8:81:2c:fa:a6:22:91: d0:54:67:e1:d3:aa:63:41:31:22:67:1f:90:ee:8a:9a:c0:b8: ea:69:d4:2d:67:e0:e4:ee:17:e8:31:d6:bb:9b:18:02:17:11: 64:dc:19:3e:05:f7:f9:30:8b:f4:13:93:ec:2c:df:12:a1:ca: ff:4b:98:7b:d9:0f:60:97:e9:51:df:e2:6a:71:8b:e3:49:05: 5a:f0:cc:3f:51:1e:70:0b:0c:c7:e2:60:36:cb:ff:67:00:c7: 1a:bb:1d:f1:4f:cd:e5:75:ac:e0:c3:27:6b:81:d8:bf:92:66: 69:88:5f:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65rE0Rey6EKhJ/AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDgwNDEzMDAxMloXDTI2MTEwMjE0MDAxMlowLzEtMCsGA1UEAxMk OTQxMWNjOTMtYzE2My00MTBlLWFhNmYtYzRlZjExYmY4MDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v7c+F2E7ZGakab6L5Tg9dsUKBotO5LUIvs4 xmblowNjCnIqcYfw/viw5huWqaUEnGW8hx0uT9l+TFEutpSWORXkTc0QOiXT9wRj P29dFwelrfBx3YLwW7pINhBpv+HfZaNJxWtoIgjoPxdoei54j+Pki2WU5SoKYG6P OXz8GzFdmnl+4MfmDw8sdD2YpIEX5CHSLq0b5NEQ1/XWwoKH2mz1Qi3vkTGFT3t6 HRAy/7F+D5FeA6Zfjzjs7sVLgBjgyobQwNqfKE36Nb5+0X1kYeOC/0A1+so7vz5N 7WyhPfczmcOsBkBdRmx70ijAPh2DGM+MEeEYG8dt1GRAz7V6MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHnKwM8XIqOZK4VpXtb3EgR8SvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNGI2ODY3OGUtMDIxZi0z NTM2LWFjZDYtODRmNjFlZDdlMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQifeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu8fYc/M/GtMP3kt6LlTdkZJokNGf5OqCw8uDaOolJEDLnoPqHh6S7Q +Si1sNrx7g9tTAiS6PRd2jTR+ANhdTIRFL0ahLUiQtc73VGe7CYFsqVf51lTBEmQ wolDxrA28QDFfETVGKVvjb7j8QC1CHFexBlRZPTxNu/NpLatBJNFWTGw2gtAM71B 2IEs+qYikdBUZ+HTqmNBMSJnH5DuiprAuOpp1C1n4OTuF+gx1rubGAIXEWTcGT4F 9/kwi/QTk+ws3xKhyv9LmHvZD2CX6VHf4mpxi+NJBVrwzD9RHnALDMfiYDbL/2cA xxq7HfFPzeV1rODDJ2uB2L+SZmmIXwc= -----END CERTIFICATE-----Generated at Fri Sep 11 15:47:35 2026 by rpki-client