$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa File: 3480552e-78d8-3380-996d-dd3f947bb79c.roa (raw, json) Hash identifier: OYqxq7AYrLcIBoq4Q1TawFJ5C8Yes9DQamQMpd3LQoI= Subject key identifier: 68:F3:E0:7C:5F:3E:CF:C1:FC:30:CB:E3:5B:00:25:26:C3:D0:15:0C Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F4328584EF2E769C57C1B3F584164EA80 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 209242 IP address blocks: 66.118.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:69:c5:7c:1b:3f:58:41:64:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=4a727584-62db-4142-891e-fc7c7906569f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:d3:dd:76:02:02:31:80:92:13:fb:6d:91:02: e5:98:df:49:6c:e7:15:7a:67:bf:74:02:68:70:6b: 51:b0:8c:49:62:b2:7a:32:8f:ff:5d:ec:4d:5a:93: 10:e3:43:2d:e5:2d:c9:2c:c3:eb:bc:09:31:35:fc: 25:9e:ed:24:cf:b8:4e:23:e2:e2:48:a5:f8:2f:1d: d8:69:7d:d5:29:fe:d1:de:66:c8:ed:12:ed:e4:db: eb:e5:ce:b1:51:68:80:de:d8:95:7a:c1:13:2b:cb: cb:d5:cf:d8:d1:ba:fc:72:ab:49:ab:aa:6d:56:ee: d2:2d:5c:23:1f:db:f9:1e:82:5a:70:0b:42:bc:d4: d5:67:0c:4a:5c:01:29:f7:36:4f:b5:e0:5d:06:58: 54:bb:7a:74:46:1c:fa:cc:a1:e3:0a:35:fa:fc:af: a1:72:22:55:e6:ab:87:23:a5:76:69:e2:27:74:1d: 1f:4f:a6:48:67:11:26:15:cd:b3:5b:de:e5:9a:3e: a4:8b:10:ca:37:73:4f:fb:55:0a:af:98:ec:cc:e1: ed:d6:17:fb:ae:68:e5:2d:0c:f9:59:7a:58:e8:be: e6:45:a0:02:11:dc:07:a9:57:da:65:f3:6f:6c:1c: ba:82:3d:0d:2a:01:7a:d3:4e:d6:c6:27:89:02:55: 8a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F3:E0:7C:5F:3E:CF:C1:FC:30:CB:E3:5B:00:25:26:C3:D0:15:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/3480552e-78d8-3380-996d-dd3f947bb79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7c:b3:69:ad:df:c0:6f:4f:7a:13:26:a9:0a:42:45:a7:8a: 8e:16:64:d3:de:35:76:21:19:d7:09:08:8c:a9:c9:ce:54:1c: c0:44:08:b1:df:d9:e3:29:7a:33:44:b8:32:4b:c5:6e:26:e3: 0b:8a:63:0b:56:d3:3c:6e:27:de:64:1d:eb:31:99:d1:61:18: 9e:d5:8c:c5:51:d5:77:c4:2d:09:67:c7:80:97:2d:9b:19:aa: 06:92:da:4d:09:8e:10:d2:fc:c9:70:12:09:00:96:f7:05:4a: 40:fa:86:41:37:13:b8:a7:48:8f:aa:41:e2:04:32:c4:1e:8c: b7:73:cd:4f:25:15:90:82:e2:1e:fa:42:b5:f8:8e:d6:c3:f9: 1a:ea:6d:ec:f0:2e:b2:88:c6:68:17:ff:3b:1c:42:84:6b:a8: 7e:f6:4b:bf:12:46:2a:04:11:95:7c:d8:f6:6f:d6:d7:01:aa: 1d:b3:17:8c:e9:44:58:64:14:a0:94:08:19:f9:0d:ce:ac:4a: 7e:7a:2b:79:bb:20:18:d7:ce:50:09:33:5e:6a:d8:a3:d9:c5: 61:62:4a:a7:54:b9:4b:f3:ee:80:85:5d:1f:e5:87:c0:76:b7: d4:d3:4b:81:21:9a:7b:23:c9:8b:c5:0c:25:48:c7:04:1b:85: 0c:f5:1c:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52nFfBs/WEFk6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NGE3Mjc1ODQtNjJkYi00MTQyLTg5MWUtZmM3Yzc5MDY1NjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/NPddgICMYCSE/ttkQLlmN9JbOcVeme/dAJo cGtRsIxJYrJ6Mo//XexNWpMQ40Mt5S3JLMPrvAkxNfwlnu0kz7hOI+LiSKX4Lx3Y aX3VKf7R3mbI7RLt5Nvr5c6xUWiA3tiVesETK8vL1c/Y0br8cqtJq6ptVu7SLVwj H9v5HoJacAtCvNTVZwxKXAEp9zZPteBdBlhUu3p0Rhz6zKHjCjX6/K+hciJV5quH I6V2aeIndB0fT6ZIZxEmFc2zW97lmj6kixDKN3NP+1UKr5jszOHt1hf7rmjlLQz5 WXpY6L7mRaACEdwHqVfaZfNvbBy6gj0NKgF6007WxieJAlWK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjz4HxfPs/B/DDL41sAJSbD0BUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvMzQ4MDU1MmUtNzhkOC0z MzgwLTk5NmQtZGQzZjk0N2JiNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV8s2mt38BvT3oTJqkKQkWnio4WZNPeNXYhGdcJCIypyc5UHMBECLHf 2eMpejNEuDJLxW4m4wuKYwtW0zxuJ95kHesxmdFhGJ7VjMVR1XfELQlnx4CXLZsZ qgaS2k0JjhDS/MlwEgkAlvcFSkD6hkE3E7inSI+qQeIEMsQejLdzzU8lFZCC4h76 QrX4jtbD+RrqbezwLrKIxmgX/zscQoRrqH72S78SRioEEZV82PZv1tcBqh2zF4zp RFhkFKCUCBn5Dc6sSn56K3m7IBjXzlAJM15q2KPZxWFiSqdUuUvz7oCFXR/lh8B2 t9TTS4EhmnsjyYvFDCVIxwQbhQz1HBw= -----END CERTIFICATE-----Generated at Fri Sep 25 19:43:36 2026 by rpki-client