$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/e5652748-b21b-3b97-9ed9-0874bee6c5a1.roa File: e5652748-b21b-3b97-9ed9-0874bee6c5a1.roa (raw, json) Hash identifier: hIHeP+Q1ro5nStgSoTSO6B4v+Nt9NOe+OSHfrfi2Yw8= Subject key identifier: 34:BF:F1:BC:C6:9F:CB:47:01:48:60:9B:73:CA:D6:91:4F:D3:8D:F9 Certificate issuer: /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Certificate serial: 010D0C9F4328584F3A17DD95BA13260E9CF86600 Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/e5652748-b21b-3b97-9ed9-0874bee6c5a1.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 26677 IP address blocks: 66.97.20.88/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:dd:95:ba:13:26:0e:9c:f8:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=d1d114d2-6308-4a44-af2d-02cf68ec0152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:43:ac:be:81:f0:e4:54:d9:28:c7:84:71:b3: 5b:e4:1c:50:c6:40:75:46:67:b5:a5:2b:92:88:60: 59:73:95:3d:7a:e3:5f:e3:d8:28:ca:a6:45:29:1c: 6a:74:f8:ff:8b:1e:88:42:da:e5:4f:91:25:85:c7: f4:72:9b:3c:7a:eb:82:39:c4:16:5c:0e:0b:11:bd: 1f:18:0b:78:a5:ca:37:d3:a4:20:e9:a1:ae:21:22: 2c:b5:b0:ee:1a:77:92:63:fd:16:26:c1:71:e9:d0: a2:1e:b6:b5:eb:7a:9f:f6:b1:89:06:a8:d7:3b:9d: 14:0f:ca:14:6d:6f:92:69:0a:ac:16:20:a4:4f:71: 6e:88:44:41:65:39:c3:1b:fc:9c:4e:1b:f1:70:a4: 12:ce:2e:2b:6d:94:79:09:3d:0a:bb:97:27:57:59: 50:b1:56:58:f3:f7:96:75:89:e8:e4:2f:41:5d:30: de:c0:6b:53:42:0f:20:6a:f8:ef:c2:34:83:7b:f4: 85:4e:b0:e6:3a:5d:c9:92:a9:01:e2:e0:6e:35:8c: a2:1a:86:40:a5:08:c7:c1:4e:38:54:ae:46:28:5b: a9:d6:40:be:6f:8d:db:4e:8b:14:60:25:8c:88:7a: 90:eb:4f:79:63:cf:41:91:80:2e:0b:81:e4:ce:b4: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BF:F1:BC:C6:9F:CB:47:01:48:60:9B:73:CA:D6:91:4F:D3:8D:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/e5652748-b21b-3b97-9ed9-0874bee6c5a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl X509v3 Authority Key Identifier: keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer sbgp-ipAddrBlock: critical IPv4: 66.97.20.88/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:07:7b:96:4f:72:00:dd:f7:29:a0:3b:d3:08:99:9f:f1:5f: c0:54:b6:c6:de:28:86:e9:20:44:17:57:42:0a:20:f3:19:5c: 45:ec:e6:2a:45:e4:9c:82:87:80:d6:5b:72:42:32:53:23:c1: 26:b0:dd:77:a1:1f:44:b6:84:63:f7:d5:fc:a9:7d:d2:26:4b: 28:14:17:4a:8b:20:98:f3:7b:9c:fc:ff:b5:e1:3a:09:a6:c3: 87:c6:7d:3c:3a:d6:9a:bb:7d:f0:a8:c7:70:0e:56:6e:30:df: 1e:71:4d:ce:56:a5:14:46:70:f2:65:d7:8e:7b:bb:53:59:0b: 3a:9c:63:c5:00:e5:de:e7:11:72:a7:14:b6:68:fc:6c:64:bf: fc:42:2f:71:65:a6:56:55:e7:9d:f5:04:eb:1f:30:e6:22:2d: 44:ef:e2:ad:09:9a:68:16:2a:b4:63:98:aa:40:65:48:d7:ec: 09:36:c5:a2:bf:9b:54:7a:7b:11:97:66:ae:77:1a:97:10:03: e3:90:ff:21:37:87:bb:25:d5:cf:ff:ad:a2:b4:7a:f3:73:c6: 6d:9e:9c:3d:45:02:8e:c0:84:e5:93:46:68:70:98:e2:32:be: 24:03:7d:49:8f:a4:26:dd:ac:35:cf:94:5b:ad:86:87:79:5a: 89:ae:f6:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE86F92VuhMmDpz4ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkNmQ5YzItZDM4MC00ZjFmLThmNmMtZWJjMmU1MDNj NGE4MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZDFkMTE0ZDItNjMwOC00YTQ0LWFmMmQtMDJjZjY4ZWMwMTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkOsvoHw5FTZKMeEcbNb5BxQxkB1Rme1pSuS iGBZc5U9euNf49goyqZFKRxqdPj/ix6IQtrlT5Elhcf0cps8euuCOcQWXA4LEb0f GAt4pco306Qg6aGuISIstbDuGneSY/0WJsFx6dCiHra163qf9rGJBqjXO50UD8oU bW+SaQqsFiCkT3FuiERBZTnDG/ycThvxcKQSzi4rbZR5CT0Ku5cnV1lQsVZY8/eW dYno5C9BXTDewGtTQg8gavjvwjSDe/SFTrDmOl3JkqkB4uBuNYyiGoZApQjHwU44 VK5GKFup1kC+b43bTosUYCWMiHqQ6095Y89BkYAuC4HkzrS5XQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDS/8bzGn8tHAUhgm3PK1pFP0435MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2 ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMyZTUwM2M0YTgvZTU2NTI3NDgtYjIxYi0z Yjk3LTllZDktMDg3NGJlZTZjNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWFkNmQ5YzItZDM4MC00ZjFmLThm NmMtZWJjMmU1MDNjNGE4LzVhZDZkOWMyLWQzODAtNGYxZi04ZjZjLWViYzJlNTAz YzRhOC5jcmwwHwYDVR0jBBgwFoAUkp+5FQB62pVW0xWBc41CAhzKOocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMy ZTUwM2M0YTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQmEUWDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC0B3uWT3IA3fcpoDvTCJmf8V/AVLbG3iiG6SBEF1dCCiDzGVxF7OYq ReScgoeA1ltyQjJTI8EmsN13oR9EtoRj99X8qX3SJksoFBdKiyCY83uc/P+14ToJ psOHxn08Otaau33wqMdwDlZuMN8ecU3OVqUURnDyZdeOe7tTWQs6nGPFAOXe5xFy pxS2aPxsZL/8Qi9xZaZWVeed9QTrHzDmIi1E7+KtCZpoFiq0Y5iqQGVI1+wJNsWi v5tUensRl2audxqXEAPjkP8hN4e7JdXP/62itHrzc8Ztnpw9RQKOwITlk0ZocJji Mr4kA31Jj6Qm3aw1z5RbrYaHeVqJrvYe -----END CERTIFICATE-----Generated at Sat Oct 3 19:35:04 2026 by rpki-client