$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5f0f5afd-d920-3425-8eb7-9099d7d27309.roa File: 5f0f5afd-d920-3425-8eb7-9099d7d27309.roa (raw, json) Hash identifier: vCz+vTGz5c5rUMxv5OfH6VxEwFhoy0a/qdnSmDr7bzs= Subject key identifier: AD:74:4D:DC:73:85:3C:7C:9B:5F:99:C9:64:11:E7:17:7D:73:91:A8 Certificate issuer: /CN=5012fdc3-55c8-4825-af14-cdf211570229 Certificate serial: 010D0C9F4328584F4F08059209DED5A6C4F00B00 Authority key identifier: B2:D0:29:F6:A6:69:07:EB:B2:A5:AA:C3:8A:D6:15:BE:97:AF:01:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5f0f5afd-d920-3425-8eb7-9099d7d27309.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 46595 IP address blocks: 66.132.145.0/24 maxlen: 24 2607:84c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5012fdc3-55c8-4825-af14-cdf211570229.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5012fdc3-55c8-4825-af14-cdf211570229.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:05:92:09:de:d5:a6:c4:f0:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5012fdc3-55c8-4825-af14-cdf211570229 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=eb2e2cbb-9f49-4a87-a8d5-9f311d978827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:93:15:d8:2e:8f:b2:64:83:5b:12:7e:db: 6e:3d:97:9e:54:c7:0d:7f:96:25:bd:81:1e:f1:e6: 28:24:63:f7:ef:f0:ce:8a:33:8c:c1:25:fa:77:90: e2:13:27:b6:7c:ce:51:9c:3e:fe:c0:d2:d6:c5:f2: b7:ab:95:9d:cb:ae:18:b1:6d:02:6c:6c:8f:ee:f0: ec:47:9a:e2:4c:7a:76:23:38:b0:8a:76:0d:8b:42: 1c:07:85:60:7f:4f:a6:ba:08:f2:fa:ee:96:8c:a3: e2:ae:e7:60:0f:c0:7c:fc:59:a3:8d:70:14:23:51: 7f:3c:33:11:4b:9c:42:31:16:18:c7:47:b3:45:80: df:1d:cb:94:94:c2:09:8a:81:6f:57:06:65:0d:82: 40:2e:4c:74:85:23:e1:9a:c3:3d:a7:2a:e4:11:7c: 0f:17:96:1f:fe:d3:20:41:93:65:2b:7b:bc:a0:66: 7d:05:70:4e:05:33:76:0a:9b:70:1c:a0:61:99:94: fa:9b:1b:5c:ad:70:2f:0d:a7:e7:6f:3a:0f:fe:3a: ff:eb:20:2e:80:5b:9b:2e:71:c3:ea:63:3d:40:08: 1c:c1:a5:72:eb:9a:f6:0e:da:32:a8:1b:33:ad:1e: 5a:80:74:33:2b:88:92:17:87:f6:c3:a1:0a:d6:bd: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:74:4D:DC:73:85:3C:7C:9B:5F:99:C9:64:11:E7:17:7D:73:91:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5f0f5afd-d920-3425-8eb7-9099d7d27309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5012fdc3-55c8-4825-af14-cdf211570229.crl X509v3 Authority Key Identifier: keyid:B2:D0:29:F6:A6:69:07:EB:B2:A5:AA:C3:8A:D6:15:BE:97:AF:01:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229.cer sbgp-ipAddrBlock: critical IPv4: 66.132.145.0/24 IPv6: 2607:84c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:db:73:ce:3c:28:91:a8:c0:25:0e:b3:a2:b1:ef:3e:75:6e: a1:09:27:35:9f:3b:a4:e8:c8:17:16:6a:ce:40:7b:13:b6:28: d3:60:55:c0:eb:41:3e:bd:6a:63:0e:c3:6c:57:87:c6:b1:3c: 3b:4b:91:82:44:5b:f1:c3:35:81:a3:05:73:4d:9b:7d:5c:25: 4b:27:5a:e9:df:69:a1:43:11:ab:c3:92:b9:f9:af:0a:2e:c4: 2d:c7:cf:21:d7:26:e9:c7:ff:1b:c1:0b:e3:62:11:c1:d6:27: 12:b1:2f:f3:48:98:79:73:72:5b:dc:4b:46:92:25:10:1c:b2: 01:93:96:0e:07:00:81:5e:80:bd:85:2f:20:dd:e2:ee:22:d4: d0:0a:39:a9:8e:0e:f3:d7:58:10:f1:8a:a1:a5:23:54:9e:71: 03:2c:32:b8:c8:1a:09:19:8c:28:ee:d0:8e:d2:4e:e7:4f:f3: 1a:73:ab:99:06:e8:d2:d9:f6:b1:0f:a1:eb:4a:ba:46:1b:a9: b4:54:ca:62:ac:63:26:c1:85:1e:23:da:b5:bc:64:0e:56:55: c0:d8:47:0e:85:16:c4:99:0c:53:4f:68:b3:26:6d:0e:5a:71: 96:4e:9e:fb:ae:de:39:a1:9f:36:35:1c:77:be:e9:c9:91:24: 3d:d8:96:4a -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9PCAWSCd7VpsTwCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxMmZkYzMtNTVjOC00ODI1LWFmMTQtY2RmMjExNTcw MjI5MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZWIyZTJjYmItOWY0OS00YTg3LWE4ZDUtOWYzMTFkOTc4ODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxyTFdguj7Jkg1sSfttuPZeeVMcNf5YlvYEe 8eYoJGP37/DOijOMwSX6d5DiEye2fM5RnD7+wNLWxfK3q5Wdy64YsW0CbGyP7vDs R5riTHp2IziwinYNi0IcB4Vgf0+mugjy+u6WjKPirudgD8B8/FmjjXAUI1F/PDMR S5xCMRYYx0ezRYDfHcuUlMIJioFvVwZlDYJALkx0hSPhmsM9pyrkEXwPF5Yf/tMg QZNlK3u8oGZ9BXBOBTN2CptwHKBhmZT6mxtcrXAvDafnbzoP/jr/6yAugFubLnHD 6mM9QAgcwaVy65r2DtoyqBszrR5agHQzK4iSF4f2w6EK1r2FkQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFK10TdxzhTx8m1+ZyWQR5xd9c5GoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MDEy ZmRjMy01NWM4LTQ4MjUtYWYxNC1jZGYyMTE1NzAyMjkvNWYwZjVhZmQtZDkyMC0z NDI1LThlYjctOTA5OWQ3ZDI3MzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTAxMmZkYzMtNTVjOC00ODI1LWFm MTQtY2RmMjExNTcwMjI5LzUwMTJmZGMzLTU1YzgtNDgyNS1hZjE0LWNkZjIxMTU3 MDIyOS5jcmwwHwYDVR0jBBgwFoAUstAp9qZpB+uyparDitYVvpevATEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MDEyZmRjMy01NWM4LTQ4MjUtYWYxNC1jZGYy MTE1NzAyMjkuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAQoSRMA0E AgACMAcDBQAmB4TAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHjbc848KJGowCUOs6Kx7z51bqEJJzWfO6To yBcWas5AexO2KNNgVcDrQT69amMOw2xXh8axPDtLkYJEW/HDNYGjBXNNm31cJUsn WunfaaFDEavDkrn5rwouxC3HzyHXJunH/xvBC+NiEcHWJxKxL/NImHlzclvcS0aS JRAcsgGTlg4HAIFegL2FLyDd4u4i1NAKOamODvPXWBDxiqGlI1SecQMsMrjIGgkZ jCju0I7STudP8xpzq5kG6NLZ9rEPoetKukYbqbRUymKsYybBhR4j2rW8ZA5WVcDY Rw6FFsSZDFNPaLMmbQ5acZZOnvuu3jmhnzY1HHe+6cmRJD3Ylko= -----END CERTIFICATE-----Generated at Thu Oct 1 21:30:41 2026 by rpki-client