$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa File: ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa (raw, json) Hash identifier: lXiQwT3Df/+F2JOyAIBSg9xw1cDf5LQPplU+s7VIRRk= Subject key identifier: D9:72:0B:1E:64:66:26:8E:A9:76:FB:BA:8A:D6:57:C0:0A:FD:A4:73 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584FB0BDECF6B9DB9D4E22809A40 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 35908 IP address blocks: 66.186.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:ec:f6:b9:db:9d:4e:22:80:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=f2092a36-9d63-44b0-9ceb-a582393987b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:2b:de:b7:14:98:48:fa:29:c3:e3:08:e6: 0a:d9:9d:32:ea:9a:df:fa:cb:08:bf:1e:c0:2c:02: a8:2d:fc:f9:d2:8d:a8:6a:0d:03:aa:a6:21:16:6d: ee:9c:01:1c:62:fa:c0:61:3f:67:c2:51:e7:a5:a8: c2:6c:63:f7:ac:48:ac:6b:20:16:e5:da:05:a2:3d: 77:a3:c4:cd:f2:26:35:35:be:de:0f:33:7c:74:ca: fd:ff:c7:03:ac:5b:d0:e6:44:92:b8:15:58:4d:9b: 66:7f:48:af:21:e1:01:85:fb:6e:4a:c4:71:bc:87: d1:a9:85:ac:a4:8f:f8:b9:e6:4b:a6:b1:e3:6b:2c: 69:46:78:62:90:47:87:b8:11:0b:5c:3d:3d:64:8b: 3d:b7:63:34:67:20:61:7a:82:b6:ae:9b:b9:9e:3f: 7e:73:91:07:9a:da:ad:ec:fb:37:57:38:f8:66:0f: 13:bb:ac:86:2d:f9:e7:67:e3:23:82:a2:d6:35:46: d0:51:9d:0b:22:a2:ad:88:95:86:86:94:74:7b:d6: 01:10:09:a8:c7:e7:26:29:86:e9:3f:fc:36:82:23: 49:9b:bb:56:bf:95:30:bc:5d:75:8f:ab:ed:cf:59: 63:67:e7:2c:e3:38:1e:22:1d:ba:19:81:d4:bf:e7: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:72:0B:1E:64:66:26:8E:A9:76:FB:BA:8A:D6:57:C0:0A:FD:A4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 66.186.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:ae:5f:fc:67:57:1e:56:9f:70:85:b6:ac:8f:c4:1d:aa:04: a6:65:8f:1e:ff:fc:f7:32:d4:0d:ec:aa:1f:20:8e:64:24:46: c6:74:7f:08:64:6a:c0:58:4a:da:83:a8:62:d6:a9:88:e9:5b: 10:4d:e3:bf:8d:f3:f0:69:85:75:c4:19:c7:a7:3e:85:a5:36: 11:42:8a:4f:e5:61:31:46:ba:7b:80:ad:c3:a9:41:2d:c3:da: 80:4a:0c:1a:25:98:a7:e2:7b:ea:a8:b5:01:8e:90:7c:9c:8b: 88:23:2a:84:ef:8f:37:68:4f:0b:55:34:f5:d2:d0:b1:78:9f: c3:6a:ad:ee:b7:80:e6:16:b2:6e:45:d6:ae:77:8d:f2:d2:0e: c5:4a:94:d4:8a:70:98:de:f5:02:41:4c:78:17:1a:ab:d3:8b: d9:07:a3:a4:31:8b:62:05:9d:5e:fa:9e:cd:bb:0a:e4:35:ad: af:ee:ab:3d:94:94:e9:7a:0a:8f:27:5b:64:4c:3e:af:aa:98: 1f:1e:b4:f2:2e:6b:25:de:d0:7d:29:18:be:1e:8b:cc:eb:e2: 43:61:65:e6:ce:f3:31:30:91:93:b2:04:ea:29:da:1a:29:f2: 1e:a5:77:c9:7f:b3:2a:f0:40:14:9b:d8:ef:c5:45:8d:54:b8: 17:fd:0d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wvez2ududTiKAmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk ZjIwOTJhMzYtOWQ2My00NGIwLTljZWItYTU4MjM5Mzk4N2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCsr3rcUmEj6KcPjCOYK2Z0y6prf+ssIvx7A LAKoLfz50o2oag0DqqYhFm3unAEcYvrAYT9nwlHnpajCbGP3rEisayAW5doFoj13 o8TN8iY1Nb7eDzN8dMr9/8cDrFvQ5kSSuBVYTZtmf0ivIeEBhftuSsRxvIfRqYWs pI/4ueZLprHjayxpRnhikEeHuBELXD09ZIs9t2M0ZyBheoK2rpu5nj9+c5EHmtqt 7Ps3Vzj4Zg8Tu6yGLfnnZ+MjgqLWNUbQUZ0LIqKtiJWGhpR0e9YBEAmox+cmKYbp P/w2giNJm7tWv5UwvF11j6vtz1ljZ+cs4zgeIh26GYHUv+c30wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlyCx5kZiaOqXb7uorWV8AK/aRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZWUyY2VlODAtNjY5Mi0z MDdmLWEwZWUtMzllZTNlNjFmZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQrogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGuX/xnVx5Wn3CFtqyPxB2qBKZljx7//Pcy1A3sqh8gjmQkRsZ0fwhk asBYStqDqGLWqYjpWxBN47+N8/BphXXEGcenPoWlNhFCik/lYTFGunuArcOpQS3D 2oBKDBolmKfie+qotQGOkHyci4gjKoTvjzdoTwtVNPXS0LF4n8Nqre63gOYWsm5F 1q53jfLSDsVKlNSKcJje9QJBTHgXGqvTi9kHo6Qxi2IFnV76ns27CuQ1ra/uqz2U lOl6Co8nW2RMPq+qmB8etPIuayXe0H0pGL4ei8zr4kNhZebO8zEwkZOyBOop2hop 8h6ld8l/syrwQBSb2O/FRY1UuBf9Dck= -----END CERTIFICATE-----Generated at Sun Nov 15 17:50:26 2026 by rpki-client