$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa File: 9b36560a-9f38-3318-a869-aa0d360ca5c4.roa (raw, json) Hash identifier: ICt+aWHJg2dROOWyjO8QBccXnzqwsgHkDkUDTrrjQrk= Subject key identifier: AC:80:D2:7C:D0:AE:3A:EB:35:1C:DA:3B:C3:77:5B:5D:A8:2A:69:BF Certificate issuer: /CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Certificate serial: 010D0C9F4328584F2957B2558FB841D9D2A30080 Authority key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 955 IP address blocks: 66.118.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b2:55:8f:b8:41:d9:d2:a3:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=4cc567b5-200c-41a1-90e9-a6d196ec9b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c0:61:c0:a6:8c:a6:10:f1:72:29:a7:67:9f: 1c:5c:e7:8c:ea:3d:59:59:bc:71:5e:36:e4:9f:c2: 96:b6:84:8e:d9:d1:15:79:ca:17:5f:f8:57:fd:16: 14:53:42:51:6f:0a:5c:91:08:75:e0:d1:6b:05:5f: 9e:8d:b0:ca:73:f7:8f:ab:92:40:69:a0:d2:b0:b7: 33:93:bc:ee:32:e4:fa:43:74:74:8f:9d:aa:13:b9: 56:19:df:dd:16:de:ea:a4:ec:30:f2:6a:df:06:ce: fb:ed:43:e9:60:5d:7a:32:04:e4:14:af:c5:06:eb: d0:7b:be:3d:06:49:aa:02:74:e7:99:1b:7d:30:45: d7:3b:78:84:08:28:5e:ee:fc:6f:ff:1c:10:c8:ea: 55:3f:3a:e3:98:1e:a5:c2:d3:c6:c2:f2:18:cb:04: 9f:2c:ce:84:6a:5b:a1:18:2d:75:71:ea:e2:ca:d4: 2b:22:3d:dc:53:97:cf:0a:6c:1f:77:57:e1:ab:92: 8d:fb:a5:80:59:cc:0f:7a:98:63:a1:73:c8:c7:ea: ad:78:7f:3e:d7:d6:09:3b:b7:49:30:f0:47:42:fd: c9:cd:6b:1c:e7:42:98:71:ef:4e:35:90:21:77:3e: 2b:45:df:0d:be:68:a5:4f:b0:ea:a5:e6:36:cd:6c: 9c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:80:D2:7C:D0:AE:3A:EB:35:1C:DA:3B:C3:77:5B:5D:A8:2A:69:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl X509v3 Authority Key Identifier: keyid:DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer sbgp-ipAddrBlock: critical IPv4: 66.118.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a9:9e:10:75:3b:11:42:70:17:9c:c0:13:27:1b:8f:4a:25: 42:0f:74:f4:ff:1f:b2:bb:51:1e:75:2d:90:b6:c9:86:76:29: 2a:af:71:6c:ca:f6:9e:4c:94:81:b3:f2:3e:30:e0:a6:e1:04: 1c:1d:1f:33:fc:fa:d0:2d:ce:4a:47:71:db:85:00:56:c5:da: 0a:4a:e5:f8:69:e0:5a:cb:62:26:c9:2a:e4:d6:6e:2b:5e:47: f8:0b:19:bf:5d:92:d9:48:8a:1d:bc:50:c7:08:8f:59:b4:5e: 5d:e8:92:4d:34:96:dd:26:91:94:00:b9:21:b5:2a:b1:a9:62: 89:3f:a3:bd:60:62:4d:c8:d2:d0:9d:6c:a0:f9:14:31:6a:eb: 42:b7:6e:14:3a:ae:5d:4e:9b:75:15:44:d6:73:3f:15:83:4b: d2:a4:7a:c0:bd:a4:c6:63:53:21:ae:39:c3:7e:71:59:85:73: 18:b2:fe:80:50:a7:b3:4d:aa:16:04:d3:e5:81:98:46:f4:73: 4e:5f:db:dc:5d:86:1e:80:6c:45:ed:18:f0:1f:ba:4b:25:b5: 84:c2:19:0b:d0:f1:8f:49:df:d3:76:9e:77:ec:fa:ad:73:48: 4d:a7:e8:67:7f:03:44:74:88:6b:14:df:db:46:f6:87:3a:34: 36:f5:5e:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7JVj7hB2dKjAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiNmUwOTMtZjYzNi00ZTI1LTkzNmItNmZjNjIzMmY1 MGM1MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NGNjNTY3YjUtMjAwYy00MWExLTkwZTktYTZkMTk2ZWM5YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cBhwKaMphDxcimnZ58cXOeM6j1ZWbxxXjbk n8KWtoSO2dEVecoXX/hX/RYUU0JRbwpckQh14NFrBV+ejbDKc/ePq5JAaaDSsLcz k7zuMuT6Q3R0j52qE7lWGd/dFt7qpOww8mrfBs777UPpYF16MgTkFK/FBuvQe749 BkmqAnTnmRt9MEXXO3iECChe7vxv/xwQyOpVPzrjmB6lwtPGwvIYywSfLM6Ealuh GC11ceriytQrIj3cU5fPCmwfd1fhq5KN+6WAWcwPephjoXPIx+qteH8+19YJO7dJ MPBHQv3JzWsc50KYce9ONZAhdz4rRd8NvmilT7DqpeY2zWycPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyA0nzQrjrrNRzaO8N3W12oKmm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2 ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2MjMyZjUwYzUvOWIzNjU2MGEtOWYzOC0z MzE4LWE4NjktYWEwZDM2MGNhNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDJiNmUwOTMtZjYzNi00ZTI1LTkz NmItNmZjNjIzMmY1MGM1LzQyYjZlMDkzLWY2MzYtNGUyNS05MzZiLTZmYzYyMzJm NTBjNS5jcmwwHwYDVR0jBBgwFoAU3yUdEw9M5iucaaNOwOaqFJ5YHjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2 MjMyZjUwYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+pnhB1OxFCcBecwBMnG49KJUIPdPT/H7K7UR51LZC2yYZ2KSqvcWzK 9p5MlIGz8j4w4KbhBBwdHzP8+tAtzkpHcduFAFbF2gpK5fhp4FrLYibJKuTWbite R/gLGb9dktlIih28UMcIj1m0Xl3okk00lt0mkZQAuSG1KrGpYok/o71gYk3I0tCd bKD5FDFq60K3bhQ6rl1Om3UVRNZzPxWDS9KkesC9pMZjUyGuOcN+cVmFcxiy/oBQ p7NNqhYE0+WBmEb0c05f29xdhh6AbEXtGPAfuksltYTCGQvQ8Y9J39N2nnfs+q1z SE2n6Gd/A0R0iGsU39tG9oc6NDb1Xi0= -----END CERTIFICATE-----Generated at Sat Oct 10 07:53:34 2026 by rpki-client