$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa File: 8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa (raw, json) Hash identifier: yZ54VmVCeT9StXcRaq6oEZEulZ9y+93T9GQ1Oa4FHkA= Subject key identifier: 8E:88:FC:E9:E0:5C:6A:71:B3:74:AA:B1:53:16:C1:D1:A8:84:54:08 Certificate issuer: /CN=de8b5430-108d-4deb-960f-6c438a23adc4 Certificate serial: 010D0C9F4328584F4975DAFB3BB76D219CA3C580 Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 66.132.138.0/24 maxlen: 24 198.73.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:da:fb:3b:b7:6d:21:9c:a3:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1c934cb3-b6fc-4b83-94ac-b58be79a89d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:b1:0f:b2:1e:66:d5:6e:23:25:98:bc:b2: 9b:f5:a8:51:d1:b1:42:0f:84:dc:d3:3f:65:62:a4: d8:ca:e6:18:06:1a:25:81:95:9f:2e:97:96:f1:5b: 42:94:4f:14:48:8d:b1:d6:6c:c0:33:c5:2b:33:fd: 2b:49:30:5e:1a:a4:ad:4a:36:4e:36:de:c3:5c:50: 2e:0c:d8:20:55:fd:cb:30:4c:cf:51:16:e5:9b:ad: fa:e1:5c:d5:c8:1e:01:db:a5:0c:b8:7b:28:f8:52: b3:f8:1d:9b:67:c4:8f:09:f6:97:fc:81:9b:d2:33: 07:9c:d7:79:2d:e2:0a:28:1a:3e:6a:0f:f5:f8:28: af:50:93:61:a3:b2:18:fb:82:ea:e7:41:10:e9:b8: b1:db:b6:42:54:97:0a:f7:1e:17:89:fc:a7:13:a7: 50:fb:0f:55:53:7e:d2:d4:1f:cb:81:b2:a6:4b:dc: ca:cc:41:b4:f7:cc:db:b5:04:9c:02:2f:29:1e:85: 1e:3b:7e:b2:01:d4:e7:6b:ea:eb:4c:61:6a:f0:f7: c9:9b:52:3e:d7:57:b9:dd:1a:83:2b:fe:f4:9b:ba: 9e:ba:3e:60:40:57:84:ce:3e:5b:c7:45:fb:07:12: e1:81:1c:ac:df:d7:ef:31:8a:6f:54:52:35:6d:b6: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:88:FC:E9:E0:5C:6A:71:B3:74:AA:B1:53:16:C1:D1:A8:84:54:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl X509v3 Authority Key Identifier: keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer sbgp-ipAddrBlock: critical IPv4: 66.132.138.0/24 198.73.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f3:22:11:68:fc:c8:3f:1c:09:8f:9b:7e:71:65:e1:1d:bb: 4e:20:7d:3f:99:70:52:e1:c4:53:dd:ff:50:9f:34:d3:88:b4: 23:55:84:9e:88:04:d1:cb:42:0d:98:7f:5f:22:2c:6e:9a:71: f9:4b:31:99:c8:79:42:ae:71:7b:bd:88:2c:a8:e1:9d:1f:71: 3c:83:73:36:aa:f9:63:41:f2:d0:7f:8b:e3:21:6f:5c:dc:41: ee:c6:b4:64:74:52:70:8b:43:07:4f:da:11:f2:12:fd:fd:cd: 75:dd:1c:2e:16:8b:2d:8f:60:41:2f:7f:c6:ad:ee:bd:00:8a: a1:c4:ec:87:25:91:80:4a:c7:2a:9d:27:ea:84:43:48:07:10: 9c:3c:3f:b7:65:36:f3:db:94:1c:4e:f8:30:1d:fc:35:c6:7b: e2:cb:ff:c1:6e:0e:ca:e0:11:ec:75:34:ad:0b:d9:e8:db:9a: 5c:b8:dd:1f:7c:df:cd:98:e7:a0:6b:ba:f8:0a:f9:2a:35:77: 18:c1:40:31:7a:b8:f0:39:52:6e:e8:e5:55:9b:d0:3e:44:d4: 2b:31:21:50:19:3e:77:52:80:40:59:db:52:68:8b:dc:30:ed: 82:59:9e:dc:1d:26:8d:bf:bb:aa:04:c1:57:12:6a:d9:f0:b7: b9:a1:4e:b1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jddr7O7dtIZyjxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4YjU0MzAtMTA4ZC00ZGViLTk2MGYtNmM0MzhhMjNh ZGM0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWM5MzRjYjMtYjZmYy00YjgzLTk0YWMtYjU4YmU3OWE4OWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxaxD7IeZtVuIyWYvLKb9ahR0bFCD4Tc0z9l YqTYyuYYBholgZWfLpeW8VtClE8USI2x1mzAM8UrM/0rSTBeGqStSjZONt7DXFAu DNggVf3LMEzPURblm6364VzVyB4B26UMuHso+FKz+B2bZ8SPCfaX/IGb0jMHnNd5 LeIKKBo+ag/1+CivUJNho7IY+4Lq50EQ6bix27ZCVJcK9x4XifynE6dQ+w9VU37S 1B/LgbKmS9zKzEG098zbtQScAi8pHoUeO36yAdTna+rrTGFq8PfJm1I+11e53RqD K/70m7qeuj5gQFeEzj5bx0X7BxLhgRys39fvMYpvVFI1bbYA9QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFI6I/OngXGpxs3SqsVMWwdGohFQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZThi NTQzMC0xMDhkLTRkZWItOTYwZi02YzQzOGEyM2FkYzQvOGY5OTc3YjQtYmYzZC0z ODg2LTg2ZDItMmU1NzRmZjE2ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU4YjU0MzAtMTA4ZC00ZGViLTk2 MGYtNmM0MzhhMjNhZGM0L2RlOGI1NDMwLTEwOGQtNGRlYi05NjBmLTZjNDM4YTIz YWRjNC5jcmwwHwYDVR0jBBgwFoAUha0TpZ716DwRUj8UxDGinwSP3TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZThiNTQzMC0xMDhkLTRkZWItOTYwZi02YzQz OGEyM2FkYzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQoSKAwQA xkk1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADXzIhFo/Mg/HAmPm35xZeEdu04gfT+ZcFLhxFPd/1CfNNOI tCNVhJ6IBNHLQg2Yf18iLG6acflLMZnIeUKucXu9iCyo4Z0fcTyDczaq+WNB8tB/ i+Mhb1zcQe7GtGR0UnCLQwdP2hHyEv39zXXdHC4Wiy2PYEEvf8at7r0AiqHE7Icl kYBKxyqdJ+qEQ0gHEJw8P7dlNvPblBxO+DAd/DXGe+LL/8FuDsrgEex1NK0L2ejb mly43R98382Y56BruvgK+So1dxjBQDF6uPA5Um7o5VWb0D5E1CsxIVAZPndSgEBZ 21Joi9ww7YJZntwdJo2/u6oEwVcSatnwt7mhTrE= -----END CERTIFICATE-----Generated at Sun Sep 27 08:38:27 2026 by rpki-client