$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa File: dc041d99-8872-3e16-ac74-885f3001767d.roa (raw, json) Hash identifier: AQNBHuBB6/TB6/97jwHEUNSYGyyCfQBoMev0ev5UFlQ= Subject key identifier: 0E:CD:62:0B:68:EA:E7:60:28:E9:9A:22:39:87:2B:85:37:FF:F2:D8 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584F49768C0C1D6C089A485DBE00 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46378 IP address blocks: 66.172.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:8c:0c:1d:6c:08:9a:48:5d:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8907e1ac-376f-46b3-8953-7ad4e6c0af17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f8:bd:d4:bb:a8:ce:8f:7a:7b:8f:35:1b:16: 71:ca:6d:ba:9f:a6:37:2c:b5:e2:f4:ed:75:18:c4: 2c:b8:cf:ef:30:d6:e9:1c:6b:75:e8:d3:21:f6:6b: 7a:be:ee:03:6b:9b:5c:3b:be:d9:b6:d8:83:c5:bc: aa:9e:69:d8:50:07:32:a6:6f:32:53:1d:24:8b:14: 20:96:0c:c1:fe:ee:b6:aa:0e:c1:86:fa:13:20:df: ec:ed:c5:d9:fe:ca:a1:b0:6a:66:bb:59:10:37:e2: eb:91:e8:51:95:af:87:96:4b:db:e7:6e:02:ae:13: b5:1b:ed:62:7b:9d:f4:02:22:e2:0e:07:fc:29:ce: fe:ec:f9:5d:23:1f:e8:11:fa:7e:7c:96:1b:5e:31: 9b:98:b2:1b:46:69:e9:2f:72:f9:58:54:f1:df:82: 16:5e:b5:d3:21:9d:ad:45:34:de:29:ae:63:39:c1: c6:a3:f3:57:cc:2d:2b:6e:87:c1:8d:77:8e:b2:40: 58:bf:e9:24:42:c3:8b:b5:36:6b:7e:c6:a7:84:b7: d9:9b:4a:5f:6b:80:da:92:48:98:85:8e:08:2e:45: 48:71:0e:b2:4a:9c:fb:ff:b8:c3:f2:54:9f:52:f6: 38:f4:93:b7:31:10:53:1c:53:27:68:2f:c5:87:ef: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CD:62:0B:68:EA:E7:60:28:E9:9A:22:39:87:2B:85:37:FF:F2:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 66.172.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:70:9f:4c:32:f1:2e:39:c3:ef:9f:56:51:b7:c3:c5:3f:00: f0:22:a2:12:85:a6:e8:3a:9b:5b:60:9d:f8:d9:02:19:d2:18: d6:79:38:2f:2b:59:fb:66:7a:d3:55:48:e7:ba:dc:35:12:6c: cc:6d:cf:72:e1:4b:07:0b:12:66:f3:2c:70:17:5b:ee:7f:2b: b7:ab:d8:bf:59:b8:c5:e0:2a:1d:d0:ce:64:ed:c0:87:c8:8b: d0:58:c1:a4:ca:f1:61:16:4d:b6:58:26:f3:6a:3d:04:05:bd: d9:8c:1c:78:5b:d5:54:d2:a8:ae:d1:58:62:c2:fa:78:ec:f4: 28:e1:18:d7:7f:80:61:bd:b1:33:25:79:55:0f:d7:36:c4:97: bb:03:9f:9f:a6:74:ca:cb:85:e8:4e:cb:a1:0f:c2:8c:e9:81: a8:cf:3b:71:ea:2c:61:2a:7e:dc:ec:80:23:fa:e7:bb:e7:4d: 74:18:dd:ce:61:ae:0d:dc:ae:8a:7f:d2:9e:9b:ce:3a:f4:99: 55:40:e9:66:e6:b0:bf:d9:84:f0:03:58:b5:40:97:75:af:37: 4c:23:2e:14:17:e3:11:de:2c:72:37:c1:e5:f0:7a:7c:18:22: 60:be:af:e1:df:78:f2:0a:99:d4:95:e4:48:ce:33:46:1a:a9: 90:91:18:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdowMHWwImkhdvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODkwN2UxYWMtMzc2Zi00NmIzLTg5NTMtN2FkNGU2YzBhZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvi91Luozo96e481GxZxym26n6Y3LLXi9O11 GMQsuM/vMNbpHGt16NMh9mt6vu4Da5tcO77ZttiDxbyqnmnYUAcypm8yUx0kixQg lgzB/u62qg7BhvoTIN/s7cXZ/sqhsGpmu1kQN+LrkehRla+Hlkvb524CrhO1G+1i e530AiLiDgf8Kc7+7PldIx/oEfp+fJYbXjGbmLIbRmnpL3L5WFTx34IWXrXTIZ2t RTTeKa5jOcHGo/NXzC0rbofBjXeOskBYv+kkQsOLtTZrfsanhLfZm0pfa4DakkiY hY4ILkVIcQ6ySpz7/7jD8lSfUvY49JO3MRBTHFMnaC/Fh+/hXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7NYgto6udgKOmaIjmHK4U3//LYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZGMwNDFkOTktODg3Mi0z ZTE2LWFjNzQtODg1ZjMwMDE3NjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQqwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhwn0wy8S45w++fVlG3w8U/APAiohKFpug6m1tgnfjZAhnSGNZ5OC8r WftmetNVSOe63DUSbMxtz3LhSwcLEmbzLHAXW+5/K7er2L9ZuMXgKh3QzmTtwIfI i9BYwaTK8WEWTbZYJvNqPQQFvdmMHHhb1VTSqK7RWGLC+njs9CjhGNd/gGG9sTMl eVUP1zbEl7sDn5+mdMrLhehOy6EPwozpgajPO3HqLGEqftzsgCP657vnTXQY3c5h rg3crop/0p6bzjr0mVVA6WbmsL/ZhPADWLVAl3WvN0wjLhQX4xHeLHI3weXwenwY ImC+r+HfePIKmdSV5EjOM0YaqZCRGBI= -----END CERTIFICATE-----Generated at Sat Sep 26 18:46:52 2026 by rpki-client