$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/3dcb8ac7-5a30-3673-86fb-a1f5682b1253.roa File: 3dcb8ac7-5a30-3673-86fb-a1f5682b1253.roa (raw, json) Hash identifier: ATg1/liGNBQJQrRCbd9lQk1u6jz3SHocbUo9V5u0qTs= Subject key identifier: 85:A2:53:6C:34:2A:58:86:6B:FE:71:B0:D4:9E:08:BA:88:BD:BE:D7 Certificate issuer: /CN=8fc21c27-e8e6-433a-86da-315992f3e55a Certificate serial: 010D0C9F4328584F498BCAFEFF62E3F57183AED0 Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/3dcb8ac7-5a30-3673-86fb-a1f5682b1253.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14537 IP address blocks: 66.212.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:ca:fe:ff:62:e3:f5:71:83:ae:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f04dda1e-a0c9-44a7-b2b7-e6e1f9e73f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:43:09:cb:38:5e:69:cd:53:f7:5f:85:29:c8: 3e:40:f4:72:e2:7a:ed:a6:60:83:70:d4:03:92:69: f3:c7:81:7b:75:ff:38:9f:78:96:79:eb:95:80:28: 90:8c:17:18:0b:63:c2:90:98:72:fd:87:23:b7:2f: d8:43:33:83:ab:04:dc:a4:16:34:81:c7:92:56:d3: f5:b1:14:e7:da:fe:d3:44:a4:0e:c2:24:f6:59:d4: ad:82:69:83:bc:df:94:e6:eb:42:4f:15:3a:a2:1f: 15:4b:f8:a4:8c:da:af:d5:32:6f:54:d2:1f:eb:33: 6a:49:ff:b5:95:5e:66:90:17:59:51:47:d9:ca:ac: 6c:22:55:17:03:7c:3d:20:a7:19:6f:b1:63:c6:3e: 1c:74:d5:48:e8:24:d8:f0:35:1b:86:67:67:14:49: d3:49:88:f5:24:83:91:78:dd:b4:9d:7b:84:21:32: 0c:4f:30:35:46:3f:aa:bf:0f:83:af:9d:ec:68:c5: e9:2f:d3:0d:74:12:83:55:d8:20:00:4c:2f:0f:d8: eb:eb:c5:5a:2a:d3:2d:f4:07:0e:8b:aa:a9:d0:db: 74:8d:8e:13:63:aa:de:64:cc:5e:75:19:81:3f:ba: 8f:82:3f:8a:88:4d:6f:e0:07:9e:f4:c4:39:95:02: f8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A2:53:6C:34:2A:58:86:6B:FE:71:B0:D4:9E:08:BA:88:BD:BE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/3dcb8ac7-5a30-3673-86fb-a1f5682b1253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl X509v3 Authority Key Identifier: keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer sbgp-ipAddrBlock: critical IPv4: 66.212.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:aa:e9:06:68:48:aa:93:fc:99:81:53:84:ba:02:17:d5:c8: 2c:ca:eb:47:dc:ed:83:69:1d:7a:e9:2e:39:26:c9:5b:b4:fb: 37:30:db:51:e7:5b:28:aa:33:fe:2e:83:96:57:86:39:81:3d: db:38:fa:96:78:8e:33:6a:43:a9:c9:1e:b1:ae:53:b3:b1:09: 05:93:26:d8:3e:d3:23:5e:12:4e:81:0c:c8:ad:51:8e:e7:29: 94:90:8f:e9:82:a1:ca:9b:79:ed:ab:2b:dc:f2:11:51:9c:eb: ae:b5:1e:df:f0:54:71:d3:69:cc:0d:7c:93:63:9a:98:e1:03: 3e:46:76:07:8a:4f:1e:13:39:04:38:37:4b:02:8a:9b:4a:56: a9:bc:03:d2:e4:b7:15:43:0d:b5:28:20:1c:4d:eb:cd:74:6c: 2c:85:da:40:e9:f6:10:db:15:89:84:d1:28:9b:06:eb:fa:e3: 92:2a:13:be:de:e3:c3:64:43:18:d7:dc:f7:7f:02:50:58:50: 0b:59:59:b3:d3:57:cd:6f:18:41:ff:2a:60:27:b1:ae:8c:d0: 14:b4:67:7f:27:0d:52:cf:0f:0a:59:77:e9:ec:b4:0d:58:ee: b3:c3:f9:82:59:53:a4:94:75:cc:92:07:59:57:9e:86:ef:30: 67:6e:12:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji8r+/2Lj9XGDrtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZjMjFjMjctZThlNi00MzNhLTg2ZGEtMzE1OTkyZjNl NTVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjA0ZGRhMWUtYTBjOS00NGE3LWIyYjctZTZlMWY5ZTczZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0MJyzheac1T91+FKcg+QPRy4nrtpmCDcNQD kmnzx4F7df84n3iWeeuVgCiQjBcYC2PCkJhy/Ycjty/YQzODqwTcpBY0gceSVtP1 sRTn2v7TRKQOwiT2WdStgmmDvN+U5utCTxU6oh8VS/ikjNqv1TJvVNIf6zNqSf+1 lV5mkBdZUUfZyqxsIlUXA3w9IKcZb7Fjxj4cdNVI6CTY8DUbhmdnFEnTSYj1JIOR eN20nXuEITIMTzA1Rj+qvw+Dr53saMXpL9MNdBKDVdggAEwvD9jr68VaKtMt9AcO i6qp0Nt0jY4TY6reZMxedRmBP7qPgj+KiE1v4Aee9MQ5lQL4cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWiU2w0KliGa/5xsNSeCLqIvb7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMy MWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5OTJmM2U1NWEvM2RjYjhhYzctNWEzMC0z NjczLTg2ZmItYTFmNTY4MmIxMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZjMjFjMjctZThlNi00MzNhLTg2 ZGEtMzE1OTkyZjNlNTVhLzhmYzIxYzI3LWU4ZTYtNDMzYS04NmRhLTMxNTk5MmYz ZTU1YS5jcmwwHwYDVR0jBBgwFoAUlUhx7ra/NDrkjpxLXkLjOlgb9bUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMyMWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5 OTJmM2U1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQtTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyq6QZoSKqT/JmBU4S6AhfVyCzK60fc7YNpHXrpLjkmyVu0+zcw21Hn WyiqM/4ug5ZXhjmBPds4+pZ4jjNqQ6nJHrGuU7OxCQWTJtg+0yNeEk6BDMitUY7n KZSQj+mCocqbee2rK9zyEVGc6661Ht/wVHHTacwNfJNjmpjhAz5GdgeKTx4TOQQ4 N0sCiptKVqm8A9LktxVDDbUoIBxN6810bCyF2kDp9hDbFYmE0SibBuv645IqE77e 48NkQxjX3Pd/AlBYUAtZWbPTV81vGEH/KmAnsa6M0BS0Z38nDVLPDwpZd+nstA1Y 7rPD+YJZU6SUdcySB1lXnobvMGduErU= -----END CERTIFICATE-----Generated at Sat Sep 26 09:03:34 2026 by rpki-client