$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/66f6e611-63f4-4fa5-bf97-7488cef555cc/3f9de12e-20b8-3da5-928f-870cc3a78b45.roa File: 3f9de12e-20b8-3da5-928f-870cc3a78b45.roa (raw, json) Hash identifier: KLg22OJiDtmKUMfC9aOsm8LYzU4jq2FWk7VMOJPV/JI= Subject key identifier: E2:A6:27:66:A5:EC:6F:0B:ED:7F:BB:3E:39:8B:FB:D4:7B:4C:0D:DB Certificate issuer: /CN=66f6e611-63f4-4fa5-bf97-7488cef555cc Certificate serial: 010D0C9F4328584F542817AFF3B4691F1D63CDE0 Authority key identifier: F0:3D:A5:29:4E:E2:55:F3:88:69:61:0B:38:4E:80:C1:CA:0F:9D:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/66f6e611-63f4-4fa5-bf97-7488cef555cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/66f6e611-63f4-4fa5-bf97-7488cef555cc/3f9de12e-20b8-3da5-928f-870cc3a78b45.roa Signing time: Mon 28 Sep 2026 21:04:08 +0000 ROA not before: Mon 28 Sep 2026 21:04:08 +0000 ROA not after: Sun 27 Dec 2026 22:04:08 +0000 asID: 32586 IP address blocks: 169.197.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/66f6e611-63f4-4fa5-bf97-7488cef555cc/66f6e611-63f4-4fa5-bf97-7488cef555cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/66f6e611-63f4-4fa5-bf97-7488cef555cc/66f6e611-63f4-4fa5-bf97-7488cef555cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/66f6e611-63f4-4fa5-bf97-7488cef555cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:28:17:af:f3:b4:69:1f:1d:63:cd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f6e611-63f4-4fa5-bf97-7488cef555cc Validity Not Before: Sep 28 21:04:08 2026 GMT Not After : Dec 27 22:04:08 2026 GMT Subject: CN=93799c7c-73ec-4c9c-bf50-fe0bfacf61b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:43:48:3a:da:4a:a5:f3:ed:ec:43:65:61: 1f:08:d2:65:a2:26:d5:59:24:b0:3e:81:ad:35:b5: a2:c9:62:18:8d:27:17:3e:9a:d5:8e:3e:8f:a6:07: a2:95:ca:02:e3:e1:bf:63:6f:a5:37:a2:f2:31:98: e9:4b:cc:4f:0e:6c:32:ac:a6:a3:65:0d:70:9f:24: c0:cc:48:21:fb:6e:9c:67:93:36:32:1e:ee:85:0b: ac:44:b0:e1:ad:cf:e1:40:ad:03:6c:7b:e0:a8:35: 55:6b:67:b7:4d:ec:2b:be:61:39:f4:cc:bf:7a:20: 10:da:0b:c5:69:77:6f:ef:f8:ff:13:df:ca:0a:2b: fd:27:a7:d0:f3:96:1e:86:c6:62:9c:fa:39:96:5c: 75:7a:2f:2a:d3:cc:42:fd:67:08:e6:08:b1:2f:d1: f8:04:68:96:91:48:8b:bb:24:f7:c7:63:ce:0b:40: d2:98:58:85:6d:e0:e0:c2:61:50:e7:d2:8a:93:68: 48:bf:f6:14:f9:cd:3e:f7:a9:45:10:a8:e1:7a:50: 31:48:4c:4c:7a:e0:77:30:67:a5:be:a6:96:d9:c9: bd:72:0b:45:20:be:e2:ba:48:96:ad:a8:f6:83:cb: e3:0b:95:a6:31:17:be:1d:98:6b:a8:85:c4:97:50: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A6:27:66:A5:EC:6F:0B:ED:7F:BB:3E:39:8B:FB:D4:7B:4C:0D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/66f6e611-63f4-4fa5-bf97-7488cef555cc/3f9de12e-20b8-3da5-928f-870cc3a78b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/66f6e611-63f4-4fa5-bf97-7488cef555cc/66f6e611-63f4-4fa5-bf97-7488cef555cc.crl X509v3 Authority Key Identifier: keyid:F0:3D:A5:29:4E:E2:55:F3:88:69:61:0B:38:4E:80:C1:CA:0F:9D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/66f6e611-63f4-4fa5-bf97-7488cef555cc.cer sbgp-ipAddrBlock: critical IPv4: 169.197.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7a:0c:00:03:16:56:ae:34:c7:6f:2d:21:5f:6f:4d:62:44: c1:c5:64:9a:55:cb:0f:26:0b:6f:62:67:e6:42:67:03:c8:3f: 47:df:12:f8:7b:24:ef:06:b0:ec:b6:4a:5e:46:f1:fa:e7:75: b8:d5:1f:c0:ae:ea:b8:3d:57:7b:aa:e4:2a:9f:a8:67:72:9e: cc:ef:15:d3:45:d7:97:2d:4d:71:b1:c9:3d:dc:4c:29:3b:10: 12:fe:18:da:34:f2:38:05:ee:0d:ed:a8:08:9f:e4:24:06:27: 2b:6e:c1:5e:6b:b0:18:f6:6e:4d:34:24:68:ea:44:88:35:f4: 84:b7:f3:ad:55:0a:fc:3a:18:85:9a:9e:31:b0:39:b6:d3:22: 1a:89:a3:42:db:96:99:c3:5a:fb:9e:58:5f:44:02:db:eb:6c: b6:4d:90:88:35:b0:bd:51:28:7d:cf:8e:b8:78:fc:a9:7b:bc: ac:df:40:3c:0d:e6:00:56:89:5b:7b:5f:0d:c6:5f:ec:a4:65: 32:fe:05:c7:af:44:e1:0f:2b:3c:76:ab:6e:b0:93:4e:c9:ed: c5:52:c0:23:93:6f:c8:40:51:c8:1d:33:cd:95:d8:57:ca:e2: 2f:b8:89:33:da:22:38:3b:92:3d:4b:37:5d:e9:97:4d:9c:f5: 9d:1c:c4:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UKBev87RpHx1jzeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZmNmU2MTEtNjNmNC00ZmE1LWJmOTctNzQ4OGNlZjU1 NWNjMB4XDTI2MDkyODIxMDQwOFoXDTI2MTIyNzIyMDQwOFowLzEtMCsGA1UEAxMk OTM3OTljN2MtNzNlYy00YzljLWJmNTAtZmUwYmZhY2Y2MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuJDSDraSqXz7exDZWEfCNJloibVWSSwPoGt NbWiyWIYjScXPprVjj6PpgeilcoC4+G/Y2+lN6LyMZjpS8xPDmwyrKajZQ1wnyTA zEgh+26cZ5M2Mh7uhQusRLDhrc/hQK0DbHvgqDVVa2e3TewrvmE59My/eiAQ2gvF aXdv7/j/E9/KCiv9J6fQ85YehsZinPo5llx1ei8q08xC/WcI5gixL9H4BGiWkUiL uyT3x2POC0DSmFiFbeDgwmFQ59KKk2hIv/YU+c0+96lFEKjhelAxSExMeuB3MGel vqaW2cm9cgtFIL7iukiWraj2g8vjC5WmMRe+HZhrqIXEl1B/0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKmJ2al7G8L7X+7PjmL+9R7TA3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82NmY2 ZTYxMS02M2Y0LTRmYTUtYmY5Ny03NDg4Y2VmNTU1Y2MvM2Y5ZGUxMmUtMjBiOC0z ZGE1LTkyOGYtODcwY2MzYTc4YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNjZmNmU2MTEtNjNmNC00ZmE1LWJm OTctNzQ4OGNlZjU1NWNjLzY2ZjZlNjExLTYzZjQtNGZhNS1iZjk3LTc0ODhjZWY1 NTVjYy5jcmwwHwYDVR0jBBgwFoAU8D2lKU7iVfOIaWELOE6AwcoPnWgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS82NmY2ZTYxMS02M2Y0LTRmYTUtYmY5Ny03NDg4 Y2VmNTU1Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqcWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ6DAADFlauNMdvLSFfb01iRMHFZJpVyw8mC29iZ+ZCZwPIP0ffEvh7 JO8GsOy2Sl5G8frndbjVH8Cu6rg9V3uq5CqfqGdynszvFdNF15ctTXGxyT3cTCk7 EBL+GNo08jgF7g3tqAif5CQGJytuwV5rsBj2bk00JGjqRIg19IS3861VCvw6GIWa njGwObbTIhqJo0LblpnDWvueWF9EAtvrbLZNkIg1sL1RKH3Pjrh4/Kl7vKzfQDwN 5gBWiVt7Xw3GX+ykZTL+BcevROEPKzx2q26wk07J7cVSwCOTb8hAUcgdM82V2FfK 4i+4iTPaIjg7kj1LN13pl02c9Z0cxDE= -----END CERTIFICATE-----Generated at Tue Oct 6 10:44:53 2026 by rpki-client