$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/c1a8df51-cd13-36bf-8ae8-c10d54a82d18.roa File: c1a8df51-cd13-36bf-8ae8-c10d54a82d18.roa (raw, json) Hash identifier: 7NjkQq5o/+lH0e4Ysc9QajPI+bEg0mBMx3c93brCQJI= Subject key identifier: E8:B5:02:97:17:C6:34:19:A2:4C:6D:3E:92:1B:50:8C:2E:AB:B6:AA Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F4328584F1CC7A9CDB83C2B78E9CA35C0 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/c1a8df51-cd13-36bf-8ae8-c10d54a82d18.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 13335 IP address blocks: 66.118.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a9:cd:b8:3c:2b:78:e9:ca:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=7b2d8abb-8ff8-4aaf-a389-d2e5e438379e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:16:d0:81:28:7c:ba:cb:5a:6e:ba:96:6e:5f: 88:8f:2d:ce:2c:dd:cd:98:8b:29:64:3e:6c:04:ef: 44:f3:d9:19:4c:b4:f7:c4:b7:15:96:f2:92:53:5d: b2:3a:b6:98:5e:c9:d6:4b:e7:d6:91:fc:5f:b6:be: 29:72:2d:d7:e7:b4:87:59:2b:1a:34:9d:a4:85:a8: 63:98:76:00:38:d0:01:59:f1:15:82:46:ec:de:d8: fa:4b:f4:d7:0e:df:a5:4f:9f:03:55:a8:c1:19:fe: b2:ce:e3:b7:7a:43:4f:71:3e:d8:e4:7e:05:13:ab: f8:6f:6e:8d:7e:ca:ba:e5:35:7e:16:15:eb:cb:e2: ff:8e:ab:7b:89:3d:f2:06:73:ef:d0:bb:4b:5d:bb: 48:31:45:db:ea:c3:5a:be:bc:1e:8e:c6:e5:f7:7e: 48:ab:11:ce:7e:d5:37:1d:29:cf:d1:41:1b:b0:5c: 7a:9e:e2:3f:47:bd:dc:af:f8:3e:08:26:63:d2:5e: 47:81:db:90:b0:31:68:cb:55:b8:f4:e7:f6:98:1b: e3:9c:7a:41:8b:00:b2:b9:fc:e6:c2:84:97:b4:54: d6:9d:70:ba:33:f9:37:10:89:00:b2:dc:77:a3:a6: 0e:bb:d4:99:b4:98:76:d1:e2:39:b9:5b:aa:3b:e4: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B5:02:97:17:C6:34:19:A2:4C:6D:3E:92:1B:50:8C:2E:AB:B6:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/c1a8df51-cd13-36bf-8ae8-c10d54a82d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f8:f2:92:fb:e2:d0:dd:bb:51:dd:ba:ca:50:e4:c8:ee:76: 07:a3:9a:bb:6e:29:40:ab:37:79:8e:c0:4e:5f:c4:6a:ff:c0: dd:22:34:96:77:97:1a:17:1d:2f:92:78:6e:9e:e3:ec:0b:43: 48:b2:54:6f:e6:25:28:47:e2:cc:e0:be:9e:87:ad:b4:44:9c: 20:0c:c3:cf:64:36:b5:d4:ca:6d:28:15:2e:73:85:e8:68:0f: fd:be:c4:ad:be:2e:e8:d9:0a:74:5f:23:79:3c:84:05:79:76: a9:f2:c2:f9:71:4e:c0:56:e2:df:e4:5d:10:12:33:98:f7:87: 6a:18:30:6b:63:1e:fa:a0:1e:1e:e0:99:61:7d:da:34:93:3b: cc:03:cc:3c:54:be:31:83:db:1e:30:38:60:de:26:17:56:04: b9:59:2f:52:42:fd:f4:c2:9d:01:83:d4:4f:cc:2a:5e:57:8f: 76:ed:95:27:c4:11:76:42:f0:55:4e:3b:14:06:74:e1:9f:b3: f8:ba:dc:99:f2:4f:3d:00:c6:5c:12:91:48:bd:ba:63:06:4f: 0c:e3:b0:85:18:ca:b8:a7:3a:cf:87:4b:22:01:08:76:01:0f: 33:ce:7f:55:54:81:aa:a2:9b:2e:0a:58:6a:18:58:94:75:42: 67:d5:6c:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6nNuDwreOnKNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk N2IyZDhhYmItOGZmOC00YWFmLWEzODktZDJlNWU0MzgzNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghbQgSh8ustabrqWbl+Ijy3OLN3NmIspZD5s BO9E89kZTLT3xLcVlvKSU12yOraYXsnWS+fWkfxftr4pci3X57SHWSsaNJ2khahj mHYAONABWfEVgkbs3tj6S/TXDt+lT58DVajBGf6yzuO3ekNPcT7Y5H4FE6v4b26N fsq65TV+FhXry+L/jqt7iT3yBnPv0LtLXbtIMUXb6sNavrwejsbl935IqxHOftU3 HSnP0UEbsFx6nuI/R73cr/g+CCZj0l5HgduQsDFoy1W49Of2mBvjnHpBiwCyufzm woSXtFTWnXC6M/k3EIkAstx3o6YOu9SZtJh20eI5uVuqO+Q51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi1ApcXxjQZokxtPpIbUIwuq7aqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvYzFhOGRmNTEtY2QxMy0z NmJmLThhZTgtYzEwZDU0YTgyZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL48pL74tDdu1HduspQ5MjudgejmrtuKUCrN3mOwE5fxGr/wN0iNJZ3 lxoXHS+SeG6e4+wLQ0iyVG/mJShH4szgvp6HrbREnCAMw89kNrXUym0oFS5zheho D/2+xK2+LujZCnRfI3k8hAV5dqnywvlxTsBW4t/kXRASM5j3h2oYMGtjHvqgHh7g mWF92jSTO8wDzDxUvjGD2x4wOGDeJhdWBLlZL1JC/fTCnQGD1E/MKl5Xj3btlSfE EXZC8FVOOxQGdOGfs/i63JnyTz0AxlwSkUi9umMGTwzjsIUYyrinOs+HSyIBCHYB DzPOf1VUgaqimy4KWGoYWJR1QmfVbCo= -----END CERTIFICATE-----Generated at Wed Sep 23 20:06:33 2026 by rpki-client