$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa File: 8d688a7e-be14-37fa-9233-e8b2572cd686.roa (raw, json) Hash identifier: lgCx8Iy7NMacCbS0mPoKOP0kk8PBWmDx5v2WRIR6RcQ= Subject key identifier: 0D:EE:45:2F:60:7A:7B:93:61:AF:41:9C:7E:CA:2B:DC:26:AA:93:B0 Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584F305280C520EB0C64CF112640 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 19740 IP address blocks: 66.249.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:80:c5:20:eb:0c:64:cf:11:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=a2a149e2-e0ba-4ab1-a42a-380ed4b414ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:84:3d:6d:83:97:f0:0c:0d:6f:7f:ca:d3: b7:a8:67:af:7a:4b:8a:43:04:dc:60:6b:a6:8f:60: b5:4b:eb:9e:b3:6d:07:39:4f:6a:b0:1d:4c:47:94: ca:c1:df:63:56:44:f0:e4:5a:d6:17:7e:98:05:e2: 80:44:9f:61:3d:81:0c:85:7c:bd:5e:10:9e:c3:ba: f5:69:3a:36:55:c2:8b:af:34:ce:32:2c:d9:11:b3: ad:6f:e1:3a:14:53:6e:0e:10:e7:8d:03:18:17:23: 32:6b:08:8a:83:b0:25:58:41:80:57:68:83:85:1f: c6:93:6c:2c:3a:6d:7c:e9:77:7d:f5:bd:ec:7a:d6: 20:55:c0:b6:41:ed:a6:81:bd:30:3f:73:3e:b4:c3: 8c:87:74:1a:30:52:c5:76:d4:45:42:79:96:f4:4f: 25:28:e6:ae:07:c7:e3:87:77:b3:3c:ee:64:5a:81: 5c:7d:98:9e:ee:5c:15:12:15:e5:d4:b2:05:da:01: 08:1e:ee:3e:f3:28:e9:f8:80:4c:c6:2b:8c:0e:90: 82:b9:ce:65:38:ee:12:e9:ea:c9:ec:4d:97:c8:1f: 81:0a:9b:6e:f0:fb:1b:be:a0:f3:cc:5a:01:c0:bb: 3c:6e:bd:bd:61:b9:f2:07:6d:83:dd:c5:9f:f7:a2: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EE:45:2F:60:7A:7B:93:61:AF:41:9C:7E:CA:2B:DC:26:AA:93:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:6f:f8:d2:6a:64:11:ea:af:93:fa:c9:f7:e0:9b:12:dc:e4: d7:92:bd:a7:03:0b:8c:24:29:9a:ff:ee:51:9e:9c:00:e9:b6: 0a:26:a9:a1:21:e3:95:ff:b1:a8:05:4d:fe:d4:69:1c:98:d3: 48:e8:fa:5a:16:f7:fb:d3:db:19:64:18:0c:e4:4a:90:28:34: 8d:a0:86:07:dd:21:a1:55:27:01:c5:81:12:a6:0c:78:1b:8d: 72:10:d7:14:88:0a:c1:e2:b0:11:b8:76:d7:c2:c5:dc:24:3a: ee:1e:c2:3d:8f:1f:ae:25:8a:8d:1a:68:d0:62:06:b8:45:c7: 31:17:b5:9b:c5:25:a9:be:22:ec:c5:34:a6:7b:00:80:c4:92: b4:8d:24:11:12:fe:24:a7:cc:03:2f:67:41:5e:c6:4f:83:6f: e3:97:0f:f4:0b:31:e0:d0:5e:4f:2c:17:33:d7:36:d0:38:b6: 42:a6:9d:ce:31:68:77:a4:22:01:6f:89:22:2c:72:82:7e:4a: 2d:cc:a8:cc:70:e5:44:bf:69:51:40:ab:8e:70:07:7d:8a:67: 63:b7:e2:bd:e4:b1:49:03:34:c2:ad:18:63:90:1e:f0:a8:21: 6b:da:bb:ec:93:36:e2:8a:c4:d3:95:8f:e7:30:53:c8:d9:fc: 54:5a:ad:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUoDFIOsMZM8RJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YTJhMTQ5ZTItZTBiYS00YWIxLWE0MmEtMzgwZWQ0YjQxNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshSEPW2Dl/AMDW9/ytO3qGevekuKQwTcYGum j2C1S+ues20HOU9qsB1MR5TKwd9jVkTw5FrWF36YBeKARJ9hPYEMhXy9XhCew7r1 aTo2VcKLrzTOMizZEbOtb+E6FFNuDhDnjQMYFyMyawiKg7AlWEGAV2iDhR/Gk2ws Om186Xd99b3setYgVcC2Qe2mgb0wP3M+tMOMh3QaMFLFdtRFQnmW9E8lKOauB8fj h3ezPO5kWoFcfZie7lwVEhXl1LIF2gEIHu4+8yjp+IBMxiuMDpCCuc5lOO4S6erJ 7E2XyB+BCptu8PsbvqDzzFoBwLs8br29YbnyB22D3cWf96JzUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3uRS9genuTYa9BnH7KK9wmqpOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvOGQ2ODhhN2UtYmUxNC0z N2ZhLTkyMzMtZThiMjU3MmNkNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRv+NJqZBHqr5P6yffgmxLc5NeSvacDC4wkKZr/7lGenADptgomqaEh 45X/sagFTf7UaRyY00jo+loW9/vT2xlkGAzkSpAoNI2ghgfdIaFVJwHFgRKmDHgb jXIQ1xSICsHisBG4dtfCxdwkOu4ewj2PH64lio0aaNBiBrhFxzEXtZvFJam+IuzF NKZ7AIDEkrSNJBES/iSnzAMvZ0Fexk+Db+OXD/QLMeDQXk8sFzPXNtA4tkKmnc4x aHekIgFviSIscoJ+Si3MqMxw5US/aVFAq45wB32KZ2O34r3ksUkDNMKtGGOQHvCo IWvau+yTNuKKxNOVj+cwU8jZ/FRarXY= -----END CERTIFICATE-----Generated at Sat Sep 26 07:29:05 2026 by rpki-client