$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa File: a8735f80-d635-36e0-a042-89c554b7b169.roa (raw, json) Hash identifier: SJRXnYmTJfjOuUocinmuFSi6Blmdh2o6FO3FxJZE3v8= Subject key identifier: FE:7D:52:52:9D:C4:E0:96:C2:C1:E8:A7:05:2C:E7:B7:D3:65:FE:86 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584F2957B3241AAA321147F21880 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 22808 IP address blocks: 66.112.128.16/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b3:24:1a:aa:32:11:47:f2:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=522b7d5b-e129-4f96-81f0-e352fecf239e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:64:a2:d8:46:2e:e7:34:d5:94:37:fc:71:e5: 80:ef:dd:5a:0b:34:7e:ea:e7:1e:ff:35:99:4d:a5: 00:56:8a:4c:ab:ad:db:3a:6e:9a:cc:c2:ed:47:11: 33:83:69:84:4b:a2:cd:e0:ac:23:34:29:dd:77:0c: 0d:60:b5:f8:17:f9:d0:35:3d:85:8f:9b:93:0f:61: 3d:9f:fa:10:64:1d:3f:23:0a:a6:26:44:78:b9:b6: 6f:43:e6:d1:dc:78:65:f8:d5:74:d3:18:61:67:01: 5b:71:92:d0:56:ec:4f:91:46:35:90:d5:7b:2a:ed: f7:d1:a2:ac:6c:e7:3f:44:21:98:5d:2e:b5:8a:3c: 58:76:58:b4:63:d9:ab:8d:a4:9f:2c:01:89:ec:05: 51:0d:dd:d6:57:a5:62:11:24:80:be:bc:72:34:80: 48:ff:65:44:7d:3e:e9:50:a0:33:a5:14:c6:c9:6e: 76:fe:e1:35:47:8d:8f:f5:67:53:35:61:1e:c8:4d: 8a:c0:4d:97:55:09:d2:f5:8a:f7:15:91:bb:7d:44: be:95:4f:6a:95:18:84:ca:ab:37:66:54:0b:64:de: 37:f9:51:fc:02:19:d0:3c:24:b8:c3:79:e2:c3:27: cf:a2:37:40:1c:f1:f3:a2:6e:77:75:15:23:6b:c5: 3a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7D:52:52:9D:C4:E0:96:C2:C1:E8:A7:05:2C:E7:B7:D3:65:FE:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.16/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:6d:e3:45:c0:09:d7:c1:f8:7a:68:b5:18:ca:08:c1:a2:47: c8:e0:c9:ad:ee:dc:a0:f2:b6:a5:8e:20:59:78:ab:da:e5:7f: b6:b4:d4:2f:bc:6e:06:07:68:ba:5b:d2:5b:b3:76:56:90:ff: c3:e7:b9:da:24:d0:10:dd:b4:50:6c:8e:a0:60:38:7a:80:b6: 12:a4:ae:73:ca:72:e4:e0:40:50:30:b6:19:8d:23:de:89:12: 6b:6c:11:4c:66:8c:3b:00:81:92:e5:2d:59:63:53:04:44:71: cb:30:86:f3:7c:29:27:6c:4d:ec:6c:5e:c5:d1:58:94:b2:60: d3:1b:fb:95:0d:19:49:95:39:65:fd:a7:52:47:74:6c:28:d9: 19:89:b1:79:85:2b:02:e8:4c:9b:c8:86:6a:d8:08:99:76:7a: ef:fb:f1:df:88:c0:27:04:c0:fa:85:6a:4c:7a:5e:56:97:fc: aa:86:18:20:8b:76:07:f6:d5:14:fb:0a:f5:2f:0d:34:79:ad: 6e:89:39:e6:7f:90:20:e5:f9:ab:25:16:4d:79:ab:46:58:7f: ae:50:8c:95:6d:ea:25:e5:49:c0:85:86:1c:e9:58:c8:55:87: bc:2c:70:6a:64:3c:31:30:12:4e:5c:e0:15:24:5a:27:1f:e5: 21:2b:60:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8pV7MkGqoyEUfyGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NTIyYjdkNWItZTEyOS00Zjk2LTgxZjAtZTM1MmZlY2YyMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2Si2EYu5zTVlDf8ceWA791aCzR+6uce/zWZ TaUAVopMq63bOm6azMLtRxEzg2mES6LN4KwjNCnddwwNYLX4F/nQNT2Fj5uTD2E9 n/oQZB0/IwqmJkR4ubZvQ+bR3Hhl+NV00xhhZwFbcZLQVuxPkUY1kNV7Ku330aKs bOc/RCGYXS61ijxYdli0Y9mrjaSfLAGJ7AVRDd3WV6ViESSAvrxyNIBI/2VEfT7p UKAzpRTGyW52/uE1R42P9WdTNWEeyE2KwE2XVQnS9Yr3FZG7fUS+lU9qlRiEyqs3 ZlQLZN43+VH8AhnQPCS4w3niwyfPojdAHPHzom53dRUja8U6yQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP59UlKdxOCWwsHopwUs57fTZf6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvYTg3MzVmODAtZDYzNS0z NmUwLWEwNDItODljNTU0YjdiMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQnCAEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFbeNFwAnXwfh6aLUYygjBokfI4Mmt7tyg8raljiBZeKva5X+2tNQv vG4GB2i6W9Jbs3ZWkP/D57naJNAQ3bRQbI6gYDh6gLYSpK5zynLk4EBQMLYZjSPe iRJrbBFMZow7AIGS5S1ZY1MERHHLMIbzfCknbE3sbF7F0ViUsmDTG/uVDRlJlTll /adSR3RsKNkZibF5hSsC6EybyIZq2AiZdnrv+/HfiMAnBMD6hWpMel5Wl/yqhhgg i3YH9tUU+wr1Lw00ea1uiTnmf5Ag5fmrJRZNeatGWH+uUIyVbeol5UnAhYYc6VjI VYe8LHBqZDwxMBJOXOAVJFonH+UhK2BG -----END CERTIFICATE-----Generated at Sat Sep 26 03:14:13 2026 by rpki-client