$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa File: 209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa (raw, json) Hash identifier: THxQs10OWtgnWwBsBNbHxhiOuJsd3Ld6Mbm2JCTy0hw= Subject key identifier: 92:2A:44:8B:FD:81:09:E6:02:82:E2:3F:4D:8C:D2:8C:B0:58:5A:6F Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584F49774BA70727D856AFCB8000 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 931 IP address blocks: 66.118.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:4b:a7:07:27:d8:56:af:cb:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1dad8f48-2521-4bf7-ae0f-4fca427f45ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:76:bb:44:1a:b2:6f:c9:6b:c3:a1:ef:05:0e: 46:2f:b3:3d:47:75:d2:23:e2:4b:74:d0:67:0f:91: ca:f0:26:a2:65:4c:3e:38:a5:d4:1d:95:3b:4e:ee: 84:67:e7:e4:ce:f0:6c:c4:d9:99:3b:da:01:cd:96: 1c:ec:f9:a1:24:d4:55:53:1a:df:5a:92:80:8e:43: d2:81:21:78:f0:cc:5e:6f:7f:cf:44:5e:4d:56:60: 71:82:c7:c4:fa:b7:bb:ba:fc:00:5e:1c:27:3c:ef: 34:50:83:12:26:24:2f:0c:ae:7a:f6:6d:42:87:a1: 76:4e:f9:f1:c0:3e:47:c3:30:fa:85:55:2c:f7:9c: 5d:12:1a:18:28:7a:13:b2:d5:20:71:5f:de:00:8f: 06:79:8e:b3:4c:a4:06:21:1d:cf:57:18:80:77:8b: 36:03:6c:2f:56:02:66:4f:45:5e:95:1d:8d:86:3d: a1:ed:47:e6:af:61:5e:d4:c0:60:7d:eb:e7:9e:28: 8a:e0:5b:23:b1:d4:d1:68:87:4c:80:6c:33:0a:fd: 97:5c:da:ee:97:72:17:1c:ac:d7:f2:e4:05:28:f8: f5:64:d2:84:21:86:92:9c:47:63:05:d3:f2:29:4f: 97:0d:cd:16:b1:3c:c7:9b:b1:60:7a:d5:37:e5:2d: 1c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2A:44:8B:FD:81:09:E6:02:82:E2:3F:4D:8C:D2:8C:B0:58:5A:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d9:80:69:3a:a7:01:4f:ee:16:6a:e6:6e:a9:b9:f7:da:45: fd:c4:8a:b2:e2:36:6b:2a:0e:e7:81:2e:1b:2f:10:7b:21:c1: bb:0f:f0:9e:f7:c9:ce:df:92:97:f4:e0:ba:d0:37:84:46:11: cc:f6:af:cb:d7:2b:ab:71:2f:50:3f:f6:8a:06:72:a6:be:f6: 21:3a:ad:37:f8:01:54:bc:ee:01:10:a8:40:c1:d5:59:b6:90: 6c:5c:b0:d9:c2:64:97:6a:bb:e0:b9:db:62:17:ed:5e:9b:9b: 9e:ce:a9:04:2b:39:ef:59:5d:c9:d2:d2:31:7b:ca:d7:91:b5: 7c:86:a3:da:fd:88:22:cb:04:a6:7b:d4:22:b8:6e:76:16:c6: 00:2d:06:72:5b:07:b9:6b:d6:1b:6f:89:da:b7:bc:f8:e2:ae: b1:ff:6d:24:ff:7a:d9:ff:16:7b:de:1e:5f:70:9b:e7:2f:5c: b8:98:d7:e8:78:39:d4:ef:cb:aa:eb:e7:17:64:13:b1:80:9f: a6:b7:bd:c9:4d:b0:2b:4c:61:04:11:d9:73:68:85:2d:eb:49: b6:a7:44:a1:8b:6d:74:ef:5f:a6:c9:97:b0:9a:a2:2d:d2:42: 74:cf:86:89:10:d1:1f:60:63:f3:49:1f:9c:38:a9:0c:6f:1a: 88:31:5c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd0unByfYVq/LgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWRhZDhmNDgtMjUyMS00YmY3LWFlMGYtNGZjYTQyN2Y0NWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ha7RBqyb8lrw6HvBQ5GL7M9R3XSI+JLdNBn D5HK8CaiZUw+OKXUHZU7Tu6EZ+fkzvBsxNmZO9oBzZYc7PmhJNRVUxrfWpKAjkPS gSF48Mxeb3/PRF5NVmBxgsfE+re7uvwAXhwnPO80UIMSJiQvDK569m1Ch6F2Tvnx wD5HwzD6hVUs95xdEhoYKHoTstUgcV/eAI8GeY6zTKQGIR3PVxiAd4s2A2wvVgJm T0VelR2Nhj2h7Ufmr2Fe1MBgfevnniiK4FsjsdTRaIdMgGwzCv2XXNrul3IXHKzX 8uQFKPj1ZNKEIYaSnEdjBdPyKU+XDc0WsTzHm7FgetU35S0cUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIqRIv9gQnmAoLiP02M0oywWFpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMjA5ZTUyYTktN2FkMC0z ZDNkLThlYTktOWVjOTZjNjkwOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPZgGk6pwFP7hZq5m6puffaRf3EirLiNmsqDueBLhsvEHshwbsP8J73 yc7fkpf04LrQN4RGEcz2r8vXK6txL1A/9ooGcqa+9iE6rTf4AVS87gEQqEDB1Vm2 kGxcsNnCZJdqu+C522IX7V6bm57OqQQrOe9ZXcnS0jF7yteRtXyGo9r9iCLLBKZ7 1CK4bnYWxgAtBnJbB7lr1htvidq3vPjirrH/bST/etn/FnveHl9wm+cvXLiY1+h4 OdTvy6rr5xdkE7GAn6a3vclNsCtMYQQR2XNohS3rSbanRKGLbXTvX6bJl7Caoi3S QnTPhokQ0R9gY/NJH5w4qQxvGogxXEQ= -----END CERTIFICATE-----Generated at Sat Sep 26 16:46:56 2026 by rpki-client