$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa File: 3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa (raw, json) Hash identifier: jtGcnfnkzez3+THt+/Xfo0N0b20cKgBzJqjpZM45zDI= Subject key identifier: 35:F5:8C:01:22:25:C5:D5:39:A6:73:98:EE:A4:90:0A:81:F0:3C:1B Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584F5E62C52918BAC69219188790 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 33724 IP address blocks: 66.85.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c5:29:18:ba:c6:92:19:18:87:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=1f066826-c0c4-440b-a2c6-b06f22cfa538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:25:b7:a5:f9:4c:5d:03:f0:f7:23:8e:15: 82:6e:65:e7:ae:b5:d1:26:4f:e5:a6:c1:cc:a4:72: 54:fa:c2:8e:12:ec:a2:7c:42:2d:5f:08:7f:a8:0c: 01:72:b7:71:23:03:d6:c3:60:78:ba:af:88:96:4d: e9:9d:eb:fe:96:73:75:cd:e8:74:ae:1a:fc:1b:91: 96:3e:e8:eb:de:0b:4d:0d:6f:4b:56:14:60:24:5e: 45:8a:87:1a:67:8f:f8:e1:0c:58:87:d4:12:c4:bc: fa:23:df:96:9a:aa:ed:cb:ba:28:af:eb:1e:6c:ce: 77:b8:95:6a:de:31:79:e6:28:9c:93:58:31:d6:4e: fa:dd:da:bb:95:a5:7a:75:d1:00:ea:29:96:86:59: d8:db:63:53:fa:12:6d:90:a3:20:af:41:0a:48:10: fd:00:c5:87:0d:57:0f:b4:ea:05:fa:08:f8:31:2c: 74:2a:d3:56:bb:02:8f:b0:00:70:e4:8f:87:be:77: c0:14:0c:b2:f9:30:94:70:e6:ed:98:0d:56:52:c4: 7d:2b:7e:9e:75:4c:d7:e2:f5:fc:d3:6d:dc:7f:3d: 6b:f1:d6:45:fa:68:a5:0d:44:0f:62:26:e6:9d:de: 78:20:6e:7d:5c:5b:fe:95:67:ae:11:d7:7f:bf:55: 0d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F5:8C:01:22:25:C5:D5:39:A6:73:98:EE:A4:90:0A:81:F0:3C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 66.85.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:fc:80:e0:cd:6b:55:47:d3:38:72:da:0e:d2:6d:ff:a0:d0: 38:52:db:dc:7b:1b:f0:df:eb:79:56:07:f0:a0:27:54:3d:33: 3b:64:52:40:92:f4:95:a6:cf:51:bc:25:8f:f4:3a:36:d5:96: 2b:8d:fd:32:5f:24:eb:fc:60:07:61:b4:68:9f:51:a5:8a:4e: 6b:5e:e9:38:4b:56:71:7b:94:78:d8:bb:ca:21:3e:a8:21:fb: 31:e2:fd:5d:db:55:94:8d:00:3d:c8:92:b6:66:69:d7:58:bc: 90:8e:32:33:0a:63:c7:c3:16:1e:f6:4e:e1:94:f6:99:06:5f: 90:d9:3f:b0:24:ec:ee:eb:cb:a5:d7:95:be:26:91:ad:f9:1b: 6f:02:6d:bb:70:1e:6b:88:41:99:ba:63:ab:13:9d:da:2f:5c: 4c:21:28:74:e2:ce:f6:8a:41:31:8f:f6:61:02:0e:41:17:0e: fb:e2:e3:90:4f:6e:15:01:82:ac:88:1e:45:e1:4e:a2:6a:65: 14:ca:aa:75:8a:91:a8:2d:fe:2b:79:77:66:f9:f6:17:d7:84: e9:fc:85:05:6c:3b:c8:4f:e4:29:36:1d:d4:27:04:b2:ef:7f: e4:53:7e:8d:dc:85:5d:95:fc:ae:50:e5:f7:11:2d:4b:4b:8f: 62:eb:42:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsUpGLrGkhkYh5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MWYwNjY4MjYtYzBjNC00NDBiLWEyYzYtYjA2ZjIyY2ZhNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI8lt6X5TF0D8PcjjhWCbmXnrrXRJk/lpsHM pHJU+sKOEuyifEItXwh/qAwBcrdxIwPWw2B4uq+Ilk3pnev+lnN1zeh0rhr8G5GW Pujr3gtNDW9LVhRgJF5FiocaZ4/44QxYh9QSxLz6I9+Wmqrty7oor+sebM53uJVq 3jF55iick1gx1k763dq7laV6ddEA6imWhlnY22NT+hJtkKMgr0EKSBD9AMWHDVcP tOoF+gj4MSx0KtNWuwKPsABw5I+HvnfAFAyy+TCUcObtmA1WUsR9K36edUzX4vX8 023cfz1r8dZF+milDUQPYibmnd54IG59XFv+lWeuEdd/v1UNywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX1jAEiJcXVOaZzmO6kkAqB8DwbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvM2I3YTBlMTctZjZmOS0z ZmI5LTk4NzktZmU4OTA2YzRmMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACX8gODNa1VH0zhy2g7Sbf+g0DhS29x7G/Df63lWB/CgJ1Q9MztkUkCS 9JWmz1G8JY/0OjbVliuN/TJfJOv8YAdhtGifUaWKTmte6ThLVnF7lHjYu8ohPqgh +zHi/V3bVZSNAD3IkrZmaddYvJCOMjMKY8fDFh72TuGU9pkGX5DZP7Ak7O7ry6XX lb4mka35G28CbbtwHmuIQZm6Y6sTndovXEwhKHTizvaKQTGP9mECDkEXDvvi45BP bhUBgqyIHkXhTqJqZRTKqnWKkagt/it5d2b59hfXhOn8hQVsO8hP5Ck2HdQnBLLv f+RTfo3chV2V/K5Q5fcRLUtLj2LrQnI= -----END CERTIFICATE-----Generated at Sun Oct 4 10:21:49 2026 by rpki-client