$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa File: 8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa (raw, json) Hash identifier: lac9Eyaxa4+fItKzPVZokac70REXcgwlrQzx4CaklIs= Subject key identifier: 44:6F:C7:5E:75:F7:F4:58:4F:AA:BD:4A:61:2E:F4:08:81:2A:3F:91 Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F4328584F698D9E30F0B641B2A114D680 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 395301 IP address blocks: 208.74.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:9e:30:f0:b6:41:b2:a1:14:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=42d73ee6-b541-4218-b194-16b52b7760aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0f:7f:30:9c:be:57:74:4c:22:f6:e9:03:3d: 4e:de:0a:57:ad:3a:d4:97:40:32:76:12:70:3a:63: fe:ed:d5:bd:fb:ad:12:a0:e4:50:ad:01:e3:5a:ed: 19:c8:05:6e:62:b3:e4:ac:a5:f3:23:e3:2e:da:1c: 03:79:4a:51:3b:27:ac:e5:98:4c:13:a8:9e:4d:10: b6:1e:2c:58:50:8b:33:ad:e3:7c:41:e8:ff:01:67: 04:e7:b1:cc:56:de:69:bd:f3:b4:ac:04:a5:44:eb: 67:84:5d:37:a7:68:44:76:08:c0:85:ab:3d:38:19: a0:55:4d:3d:83:15:a0:c1:e1:75:fd:5c:b5:d4:6a: ad:7d:e8:ae:fc:dc:17:f8:37:ca:ce:0c:c3:5d:09: 22:d7:a5:d8:88:74:22:7b:3d:07:cc:25:cf:f6:e0: eb:6c:a7:a9:59:04:29:77:e5:56:59:e5:9a:29:8d: 9f:e8:fa:be:4b:b6:a9:98:43:ff:cb:24:e9:0b:0c: 0c:12:0a:04:a4:12:d1:27:9b:62:bf:60:0c:04:54: 0c:6f:96:41:bc:5b:0c:3a:7b:29:5b:c7:42:ae:38: a5:e8:bd:02:8f:da:8f:ee:d2:0a:af:47:5d:70:9e: c0:8e:d9:8e:f7:20:df:fa:72:f4:d6:34:e8:d7:38: a7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6F:C7:5E:75:F7:F4:58:4F:AA:BD:4A:61:2E:F4:08:81:2A:3F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 208.74.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4c:a2:83:58:b3:da:8c:5b:bd:dc:d1:05:23:b0:0a:43:ff: 17:4f:64:11:40:ec:b0:a5:34:33:0e:21:50:0d:a6:08:76:16: 86:8e:24:18:cf:45:ac:74:79:eb:a7:a3:6c:df:5a:6d:71:8d: c4:88:b7:80:b6:c6:20:4b:1a:8d:bb:f0:aa:69:12:7f:48:f7: 74:f4:3f:d0:a4:1d:04:fa:60:d8:71:03:cc:c4:c9:22:b0:c8: 64:4d:29:a8:8b:40:3f:da:97:9b:52:0b:9c:0b:7c:8e:0f:65: 1e:25:45:a3:b9:df:ca:a3:82:e4:51:bc:b4:54:dc:3e:7f:91: e0:59:c3:93:ba:b7:c8:6c:02:86:e5:6d:b1:04:97:97:98:7e: 1d:a1:5b:60:81:80:5c:6d:81:40:92:f7:4b:98:fb:2b:dc:dc: 66:56:10:fc:8e:43:5f:e0:66:0a:73:53:ef:7c:a7:d7:50:c1: 4d:9c:2a:b7:74:09:f2:02:08:d7:6b:a3:2c:51:54:b4:10:35: 3c:ca:d1:17:e8:87:69:f0:a3:68:22:64:aa:93:e0:e7:a7:ba: 2a:0b:b1:24:2d:53:0d:8e:9f:a2:db:b0:df:fb:2e:6f:1c:4d: 78:7a:1e:e9:fc:64:0a:38:d4:31:bf:63:a3:11:56:07:b1:c4: 38:bf:7b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjZ4w8LZBsqEU1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk NDJkNzNlZTYtYjU0MS00MjE4LWIxOTQtMTZiNTJiNzc2MGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA9/MJy+V3RMIvbpAz1O3gpXrTrUl0AydhJw OmP+7dW9+60SoORQrQHjWu0ZyAVuYrPkrKXzI+Mu2hwDeUpROyes5ZhME6ieTRC2 HixYUIszreN8Qej/AWcE57HMVt5pvfO0rASlROtnhF03p2hEdgjAhas9OBmgVU09 gxWgweF1/Vy11Gqtfeiu/NwX+DfKzgzDXQki16XYiHQiez0HzCXP9uDrbKepWQQp d+VWWeWaKY2f6Pq+S7apmEP/yyTpCwwMEgoEpBLRJ5tiv2AMBFQMb5ZBvFsMOnsp W8dCrjil6L0Cj9qP7tIKr0ddcJ7AjtmO9yDf+nL01jTo1zinpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERvx1519/RYT6q9SmEu9AiBKj+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvOGJlZjc5YTctZWM1Zi0z Nzk3LTgzYTgtYWEwMGIwYmM2ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVMooNYs9qMW73c0QUjsApD/xdPZBFA7LClNDMOIVANpgh2FoaOJBjP Rax0eeuno2zfWm1xjcSIt4C2xiBLGo278KppEn9I93T0P9CkHQT6YNhxA8zEySKw yGRNKaiLQD/al5tSC5wLfI4PZR4lRaO538qjguRRvLRU3D5/keBZw5O6t8hsAobl bbEEl5eYfh2hW2CBgFxtgUCS90uY+yvc3GZWEPyOQ1/gZgpzU+98p9dQwU2cKrd0 CfICCNdroyxRVLQQNTzK0Rfoh2nwo2giZKqT4OenuioLsSQtUw2On6LbsN/7Lm8c TXh6Hun8ZAo41DG/Y6MRVgexxDi/e5o= -----END CERTIFICATE-----Generated at Thu Oct 8 16:49:59 2026 by rpki-client