$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7a9ef347-8b09-3b67-88f5-eed86ebd77b7.roa File: 7a9ef347-8b09-3b67-88f5-eed86ebd77b7.roa (raw, json) Hash identifier: ESCmJpH8wt8guF7nCH7784GseU/8GFeGaEdDht7Yypg= Subject key identifier: A4:F4:20:72:83:38:58:73:DA:F8:FE:76:6C:37:40:6B:D1:37:9E:6C Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584EB9AC50F550DCA6E8C34DE240 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7a9ef347-8b09-3b67-88f5-eed86ebd77b7.roa Signing time: Tue 04 Aug 2026 13:00:12 +0000 ROA not before: Tue 04 Aug 2026 13:00:12 +0000 ROA not after: Mon 02 Nov 2026 14:00:12 +0000 asID: 1421 IP address blocks: 66.39.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:ac:50:f5:50:dc:a6:e8:c3:4d:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Aug 4 13:00:12 2026 GMT Not After : Nov 2 14:00:12 2026 GMT Subject: CN=e39c27eb-ce3d-4bff-b00c-47876968f250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7f:91:a2:f8:68:01:86:0d:3c:d3:47:d0:db: 08:40:ff:bf:7f:fa:fb:ef:d7:10:0c:98:bd:62:2f: c5:e3:78:4f:50:4a:6f:81:38:b3:9c:7b:2d:de:8f: 58:cb:fe:41:22:6f:00:2b:8d:40:76:21:ce:f8:03: ba:d3:8c:60:e8:0d:af:15:a6:c6:31:2b:8e:0d:41: b2:3b:9d:a8:b8:76:f5:9a:76:dd:fc:c7:3c:18:cb: ca:fe:93:03:6b:72:0c:97:d0:1e:c4:93:67:70:85: 66:48:71:a6:60:04:1d:32:7f:37:09:0c:ef:19:1d: 0f:ba:e1:72:7d:02:81:0f:38:05:89:1d:0e:22:b1: 20:74:2f:54:6d:78:89:c9:10:fb:68:10:60:35:cf: 88:6d:eb:b7:4c:00:ae:ad:e4:86:e7:35:6e:d4:4d: 54:09:28:92:62:ac:91:82:e9:ea:7e:d5:e0:3c:b5: 94:9a:e4:30:e8:71:df:a3:ac:c2:b3:17:82:27:4c: b4:50:56:59:80:40:47:a6:04:5c:d6:63:c9:42:dc: 54:3d:eb:8d:1d:02:a9:b1:c4:81:15:f5:7b:7a:58: 48:4a:bb:cf:34:7d:30:5f:22:10:7e:06:d5:3e:22: ed:24:ba:74:ce:f1:9a:b5:36:31:1b:02:cc:6f:1e: 80:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F4:20:72:83:38:58:73:DA:F8:FE:76:6C:37:40:6B:D1:37:9E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7a9ef347-8b09-3b67-88f5-eed86ebd77b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 66.39.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:eb:a1:01:a5:f4:5b:42:0e:e8:14:a0:c7:64:eb:c2:69:d5: 94:fd:97:66:9b:4e:e1:80:10:48:8c:b4:4e:52:8a:11:f4:88: 04:b2:c2:37:07:d1:b6:41:c0:36:71:e6:7a:51:94:21:c1:ec: d9:02:24:8d:0f:b1:93:9d:da:d1:83:5f:88:cf:d3:55:ea:7c: 6b:3d:fa:e3:b0:bd:a0:cd:63:e9:c9:66:10:c4:5c:ad:dd:3d: ef:49:fa:ef:e2:27:a0:34:23:f3:f1:6e:c3:c1:60:ec:d3:ca: 04:11:e4:8e:6e:8a:b3:0b:fb:17:c7:e5:55:07:88:64:cb:a9: f0:1b:2f:71:22:78:40:c4:09:8c:02:26:4a:10:ee:54:fd:90: 33:80:a8:3e:25:df:37:cf:4c:b0:3c:2b:d3:b3:07:9b:eb:89: 5c:fa:a2:b8:e6:0f:6b:10:46:47:b7:f6:34:30:0d:e9:19:1a: c6:ff:2b:b7:d4:17:7f:b1:37:62:15:86:b1:1e:c5:ce:06:b6: 8d:e0:6b:0d:39:c0:26:50:5d:e0:d8:5c:d9:52:6d:cf:3c:69: 9c:c2:3d:56:78:30:3e:f3:10:00:ff:17:d9:1c:02:81:42:1e: f2:9e:57:57:0c:2b:13:dd:2f:c2:52:5d:f9:14:ce:db:ea:48: a2:71:03:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65rFD1UNym6MNN4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDgwNDEzMDAxMloXDTI2MTEwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTM5YzI3ZWItY2UzZC00YmZmLWIwMGMtNDc4NzY5NjhmMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn+RovhoAYYNPNNH0NsIQP+/f/r779cQDJi9 Yi/F43hPUEpvgTiznHst3o9Yy/5BIm8AK41AdiHO+AO604xg6A2vFabGMSuODUGy O52ouHb1mnbd/Mc8GMvK/pMDa3IMl9AexJNncIVmSHGmYAQdMn83CQzvGR0PuuFy fQKBDzgFiR0OIrEgdC9UbXiJyRD7aBBgNc+Ibeu3TACureSG5zVu1E1UCSiSYqyR gunqftXgPLWUmuQw6HHfo6zCsxeCJ0y0UFZZgEBHpgRc1mPJQtxUPeuNHQKpscSB FfV7elhISrvPNH0wXyIQfgbVPiLtJLp0zvGatTYxGwLMbx6AQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT0IHKDOFhz2vj+dmw3QGvRN55sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvN2E5ZWYzNDctOGIwOS0z YjY3LTg4ZjUtZWVkODZlYmQ3N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQifVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/roQGl9FtCDugUoMdk68Jp1ZT9l2abTuGAEEiMtE5SihH0iASywjcH 0bZBwDZx5npRlCHB7NkCJI0PsZOd2tGDX4jP01XqfGs9+uOwvaDNY+nJZhDEXK3d Pe9J+u/iJ6A0I/PxbsPBYOzTygQR5I5uirML+xfH5VUHiGTLqfAbL3EieEDECYwC JkoQ7lT9kDOAqD4l3zfPTLA8K9OzB5vriVz6orjmD2sQRke39jQwDekZGsb/K7fU F3+xN2IVhrEexc4Gto3gaw05wCZQXeDYXNlSbc88aZzCPVZ4MD7zEAD/F9kcAoFC HvKeV1cMKxPdL8JSXfkUztvqSKJxA+4= -----END CERTIFICATE-----Generated at Fri Sep 11 15:48:02 2026 by rpki-client