$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa File: 5717c9fc-bf14-3da4-9371-4fc98a870156.roa (raw, json) Hash identifier: kQ5R1J6T2orldEuZrgpCkKjucHlNIyddTJiH6cik0VM= Subject key identifier: 11:5E:5B:33:77:01:BF:37:C1:D2:6A:C7:A9:D2:93:C2:E4:36:38:2E Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F4328584F49752475ED2C75248674AB00 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 139648 IP address blocks: 66.118.0.0/22 maxlen: 22 66.118.0.0/24 maxlen: 24 66.118.1.0/24 maxlen: 24 66.118.2.0/24 maxlen: 24 66.118.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:24:75:ed:2c:75:24:86:74:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=197e1ac3-a5b0-4a51-8430-afc06702c28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d4:d9:0f:4e:5b:47:8b:1b:78:bd:91:73:6b: a2:53:6b:60:26:1d:7c:8f:a3:72:17:ed:4c:a1:8e: 7b:07:af:0e:45:81:05:c0:3a:78:c5:2f:14:f7:d1: 77:0c:25:fd:42:13:3e:45:17:ce:ea:db:6d:06:42: 55:b1:6d:f7:84:5e:e0:ed:93:5d:7a:49:5b:b8:3a: b5:03:1c:4a:3a:28:31:5d:6d:fb:f5:53:fd:05:6e: 57:3b:e2:78:b7:ce:17:2e:a8:6d:b1:08:d6:b2:8a: 9c:53:ec:07:ee:65:28:f9:99:b8:0c:5a:18:aa:01: 95:b9:17:10:bf:aa:df:d5:68:db:c8:96:9e:3b:9d: d9:86:97:fe:b9:38:7f:32:86:9e:89:66:f3:f7:e5: 12:e4:5b:e2:5f:fb:ce:db:50:ec:4f:8e:bd:3d:8b: 1c:e3:1a:0c:84:80:48:6d:6a:1f:99:6c:18:cc:94: 2a:36:a9:da:06:4a:d7:a1:be:d5:24:88:c4:cd:30: c5:03:1f:33:8b:08:fd:f9:4e:f6:38:2a:17:0e:e9: 28:aa:3e:b2:9d:c5:0d:e7:09:56:c7:7b:97:46:11: 1c:13:8c:1f:42:ad:1f:0d:fb:c5:75:26:1b:ad:7a: c3:ce:8a:5c:5e:62:e2:81:91:ea:8e:2d:eb:0f:e9: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5E:5B:33:77:01:BF:37:C1:D2:6A:C7:A9:D2:93:C2:E4:36:38:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:bb:f1:59:39:e2:96:b3:52:f2:22:6c:33:b5:00:b9:b3:b5: 2d:3b:ce:0d:84:34:76:e1:79:4e:c3:2d:4e:c5:93:e1:7b:6e: d9:ea:7f:9d:8c:e8:3b:a8:69:e4:06:a8:7b:71:c2:f2:de:1f: 1d:0d:cf:30:26:4a:7e:4c:90:d8:fb:c9:fc:d8:0d:83:00:21: 05:ea:82:34:6b:8a:78:77:6e:9d:1a:25:c2:13:b0:72:5e:36: 31:4b:ed:d9:b2:12:b5:77:6c:6a:10:f1:2c:24:6c:0d:96:c7: ea:1d:b8:11:4f:88:0b:e4:f1:1f:47:6d:92:cd:3a:8d:58:be: 5e:8f:ba:76:73:c1:1d:62:4c:0a:84:57:76:91:ac:a5:16:b6: 43:3d:44:41:6e:93:34:d4:a3:47:82:8b:4c:72:79:93:be:42: 0e:d8:47:b4:12:7b:34:33:cd:f6:a6:0b:1f:cf:60:8d:41:54: 18:f3:17:b5:ca:07:aa:e3:9d:4d:b2:39:b5:32:39:88:3e:93: 00:ba:78:30:d5:98:96:65:20:47:ee:b3:97:c0:c7:05:23:5f: 42:89:cb:80:ec:7e:4f:29:e8:b7:f8:54:61:15:a7:0b:54:62: 31:39:92:a0:aa:de:d3:ce:43:04:ac:88:52:10:7c:6f:4a:5f: 8c:92:d2:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdSR17Sx1JIZ0qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTk3ZTFhYzMtYTViMC00YTUxLTg0MzAtYWZjMDY3MDJjMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNTZD05bR4sbeL2Rc2uiU2tgJh18j6NyF+1M oY57B68ORYEFwDp4xS8U99F3DCX9QhM+RRfO6tttBkJVsW33hF7g7ZNdeklbuDq1 AxxKOigxXW379VP9BW5XO+J4t84XLqhtsQjWsoqcU+wH7mUo+Zm4DFoYqgGVuRcQ v6rf1WjbyJaeO53Zhpf+uTh/MoaeiWbz9+US5FviX/vO21DsT469PYsc4xoMhIBI bWofmWwYzJQqNqnaBkrXob7VJIjEzTDFAx8ziwj9+U72OCoXDukoqj6yncUN5wlW x3uXRhEcE4wfQq0fDfvFdSYbrXrDzopcXmLigZHqji3rD+mvRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFeWzN3Ab83wdJqx6nSk8LkNjguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvNTcxN2M5ZmMtYmYxNC0z ZGE0LTkzNzEtNGZjOThhODcwMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD278Vk54pazUvIibDO1ALmztS07zg2ENHbheU7DLU7Fk+F7btnqf52M 6DuoaeQGqHtxwvLeHx0NzzAmSn5MkNj7yfzYDYMAIQXqgjRrinh3bp0aJcITsHJe NjFL7dmyErV3bGoQ8SwkbA2Wx+oduBFPiAvk8R9HbZLNOo1Yvl6PunZzwR1iTAqE V3aRrKUWtkM9REFukzTUo0eCi0xyeZO+Qg7YR7QSezQzzfamCx/PYI1BVBjzF7XK B6rjnU2yObUyOYg+kwC6eDDVmJZlIEfus5fAxwUjX0KJy4Dsfk8p6Lf4VGEVpwtU YjE5kqCq3tPOQwSsiFIQfG9KX4yS0gI= -----END CERTIFICATE-----Generated at Tue Sep 29 17:54:05 2026 by rpki-client