$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ef5006c4-95d1-4263-bf94-ad82afd1e7be/66c86207-460e-3f35-852b-50012307c848.roa File: 66c86207-460e-3f35-852b-50012307c848.roa (raw, json) Hash identifier: /dfk9PpIS+SuHY5/FFeEuUHq/vr7+wIQUEp9fbayatA= Subject key identifier: 31:07:8A:17:98:1B:F7:99:72:8E:E5:E4:01:21:F4:EF:1A:AE:0C:78 Certificate issuer: /CN=ef5006c4-95d1-4263-bf94-ad82afd1e7be Certificate serial: 010D0C9F4328584F4B730569BD8D500D779CB800 Authority key identifier: 27:1B:B1:F8:A9:A6:08:5F:1E:6F:38:F7:79:80:FA:3A:88:7D:B5:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ef5006c4-95d1-4263-bf94-ad82afd1e7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ef5006c4-95d1-4263-bf94-ad82afd1e7be/66c86207-460e-3f35-852b-50012307c848.roa Signing time: Fri 25 Sep 2026 18:12:50 +0000 ROA not before: Fri 25 Sep 2026 18:12:50 +0000 ROA not after: Thu 24 Dec 2026 19:12:50 +0000 asID: 394468 IP address blocks: 52.128.34.0/23 maxlen: 23 161.38.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ef5006c4-95d1-4263-bf94-ad82afd1e7be/ef5006c4-95d1-4263-bf94-ad82afd1e7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ef5006c4-95d1-4263-bf94-ad82afd1e7be/ef5006c4-95d1-4263-bf94-ad82afd1e7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ef5006c4-95d1-4263-bf94-ad82afd1e7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:73:05:69:bd:8d:50:0d:77:9c:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef5006c4-95d1-4263-bf94-ad82afd1e7be Validity Not Before: Sep 25 18:12:50 2026 GMT Not After : Dec 24 19:12:50 2026 GMT Subject: CN=1fb0d5ad-33c8-4bef-937c-df0db7912a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f3:0c:b4:d4:3f:f0:c0:e6:58:d7:5a:63:6b: 2f:09:e4:57:7e:b8:5c:68:eb:8a:80:8e:b3:85:5b: 64:99:a8:80:f7:c2:3e:b7:54:ef:3b:27:05:4e:f2: 69:88:d0:9a:ce:e0:4d:b9:7d:d6:f4:bd:05:ef:24: ef:06:f6:c7:14:5b:3f:18:8d:07:f9:61:37:86:70: 99:c5:44:fb:d0:c8:be:5f:16:b3:5e:a7:65:31:04: c6:3e:8c:5f:77:73:d7:44:6c:47:b1:b1:4b:5d:67: 08:ff:8a:9e:26:a9:c8:ec:31:96:8e:2b:93:03:b7: e9:31:16:af:93:7b:e7:af:90:22:ff:97:33:13:57: 45:72:6f:c7:cb:52:af:9f:e1:98:7b:af:b3:ba:47: 8c:76:3e:6c:d5:ac:39:70:d1:2d:23:85:2f:ba:fd: 4e:40:b0:94:fd:b2:88:8d:68:d8:89:fe:66:3a:a6: e0:80:83:b4:3d:f2:93:64:80:2b:49:dc:45:57:08: dc:c8:b3:3f:58:c3:c7:26:f2:71:48:8e:fa:c0:f5: 83:14:ae:ae:d2:41:ad:96:81:20:27:55:89:89:31: 19:6c:a2:99:b4:51:38:d5:f9:44:6f:cc:f5:15:fb: d6:69:b0:d4:c7:66:05:69:68:10:95:af:6d:bc:c5: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:07:8A:17:98:1B:F7:99:72:8E:E5:E4:01:21:F4:EF:1A:AE:0C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ef5006c4-95d1-4263-bf94-ad82afd1e7be/66c86207-460e-3f35-852b-50012307c848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ef5006c4-95d1-4263-bf94-ad82afd1e7be/ef5006c4-95d1-4263-bf94-ad82afd1e7be.crl X509v3 Authority Key Identifier: keyid:27:1B:B1:F8:A9:A6:08:5F:1E:6F:38:F7:79:80:FA:3A:88:7D:B5:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ef5006c4-95d1-4263-bf94-ad82afd1e7be.cer sbgp-ipAddrBlock: critical IPv4: 52.128.34.0/23 161.38.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:65:be:a2:ab:68:5b:14:70:97:6b:11:a9:44:be:9b:b7:c4: f2:5e:49:3e:64:1f:10:62:c6:03:44:c4:e2:44:01:0f:dd:2b: 47:68:b1:de:e3:c4:89:05:3c:14:da:61:fc:6c:d4:d0:50:99: 2d:ee:e7:1c:ac:67:3a:ff:71:79:4c:86:d4:5a:6e:59:9d:1e: b1:99:ec:d7:8e:4e:6a:fb:d5:bc:36:de:bb:8b:38:60:76:52: 54:08:4f:bf:1f:8c:37:58:56:cd:30:0f:6f:1f:83:4d:44:54: 28:10:96:46:b1:23:46:4b:e6:24:51:93:f0:1f:d4:19:4b:91: fc:35:4e:be:15:85:e1:fc:7f:d5:12:19:0c:2b:75:93:b3:a2: 69:1d:e6:be:22:bc:ad:6c:2a:6b:ad:a9:02:81:23:3b:78:c5: c2:3c:d0:14:d6:41:aa:f7:82:3a:fe:0d:87:6f:51:84:1b:3e: 2f:47:55:11:2a:b5:bf:96:4a:ba:84:4c:ad:4d:5e:e7:ed:a9: df:e5:cd:5a:76:0c:19:7a:e0:0d:b0:6c:64:6a:9c:31:22:2c: 19:db:d7:58:9b:8a:5e:13:5a:11:2d:73:88:01:07:f0:66:32: 55:62:30:1f:5e:f7:37:24:20:0f:fd:a4:e0:ca:e7:84:b0:91: de:80:5e:d1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9LcwVpvY1QDXecuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY1MDA2YzQtOTVkMS00MjYzLWJmOTQtYWQ4MmFmZDFl N2JlMB4XDTI2MDkyNTE4MTI1MFoXDTI2MTIyNDE5MTI1MFowLzEtMCsGA1UEAxMk MWZiMGQ1YWQtMzNjOC00YmVmLTkzN2MtZGYwZGI3OTEyYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPMMtNQ/8MDmWNdaY2svCeRXfrhcaOuKgI6z hVtkmaiA98I+t1TvOycFTvJpiNCazuBNuX3W9L0F7yTvBvbHFFs/GI0H+WE3hnCZ xUT70Mi+XxazXqdlMQTGPoxfd3PXRGxHsbFLXWcI/4qeJqnI7DGWjiuTA7fpMRav k3vnr5Ai/5czE1dFcm/Hy1Kvn+GYe6+zukeMdj5s1aw5cNEtI4Uvuv1OQLCU/bKI jWjYif5mOqbggIO0PfKTZIArSdxFVwjcyLM/WMPHJvJxSI76wPWDFK6u0kGtloEg J1WJiTEZbKKZtFE41flEb8z1FfvWabDUx2YFaWgQla9tvMXwoQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDEHiheYG/eZco7l5AEh9O8argx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9lZjUw MDZjNC05NWQxLTQyNjMtYmY5NC1hZDgyYWZkMWU3YmUvNjZjODYyMDctNDYwZS0z ZjM1LTg1MmItNTAwMTIzMDdjODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZWY1MDA2YzQtOTVkMS00MjYzLWJm OTQtYWQ4MmFmZDFlN2JlL2VmNTAwNmM0LTk1ZDEtNDI2My1iZjk0LWFkODJhZmQx ZTdiZS5jcmwwHwYDVR0jBBgwFoAUJxux+KmmCF8ebzj3eYD6Ooh9te4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9lZjUwMDZjNC05NWQxLTQyNjMtYmY5NC1hZDgy YWZkMWU3YmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBNIAiAwQD oSYwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADNlvqKraFsUcJdrEalEvpu3xPJeST5kHxBixgNExOJEAQ/d K0dosd7jxIkFPBTaYfxs1NBQmS3u5xysZzr/cXlMhtRablmdHrGZ7NeOTmr71bw2 3ruLOGB2UlQIT78fjDdYVs0wD28fg01EVCgQlkaxI0ZL5iRRk/Af1BlLkfw1Tr4V heH8f9USGQwrdZOzomkd5r4ivK1sKmutqQKBIzt4xcI80BTWQar3gjr+DYdvUYQb Pi9HVREqtb+WSrqETK1NXuftqd/lzVp2DBl64A2wbGRqnDEiLBnb11ibil4TWhEt c4gBB/BmMlViMB9e9zckIA/9pODK54Swkd6AXtE= -----END CERTIFICATE-----Generated at Sat Sep 26 16:17:59 2026 by rpki-client