$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa File: 0de08070-992e-334f-8090-a4c3a88677f1.roa (raw, json) Hash identifier: h7kHUEZ4NihLb5QmZwb5FOqje0kZ8TY6pE3wq6dKo0o= Subject key identifier: 3A:9D:5B:DE:6A:7D:8C:63:99:E3:84:30:05:E7:C0:60:ED:AB:0D:49 Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584ED001E1538B6F7A446D664B40 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 30148 IP address blocks: 66.248.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:e1:53:8b:6f:7a:44:6d:66:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=4f98cdfc-c800-4605-9e81-62906817a3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:d3:96:8e:30:13:ca:20:95:52:3e:cd:d9: 84:4b:b5:de:5b:f4:61:4e:2a:1e:c8:50:b8:92:d8: ea:50:2a:04:9b:d6:55:84:05:fb:f5:44:20:0d:f9: 64:2b:34:21:58:b5:e1:c7:bd:37:e7:4e:c1:67:ae: f3:27:0f:b6:52:cb:37:e5:d9:7d:54:59:c0:b9:14: 8a:de:de:48:b4:f8:d2:8e:55:53:2d:e9:53:cd:14: 50:91:36:1d:30:95:fa:98:37:23:50:17:5e:c2:6b: 42:b1:c0:1f:b8:2e:9b:60:79:8d:8d:59:58:64:e9: eb:95:f5:0d:58:55:76:12:9b:61:f6:dd:87:97:13: 45:7b:89:73:11:bf:27:f6:28:37:b6:95:31:1f:4e: bd:61:2f:89:29:9a:6a:57:e1:f4:5a:a9:75:0f:2c: b4:81:6d:70:c9:40:55:8c:08:56:b8:23:0f:b8:f3: 13:a2:0c:ab:fc:d0:97:56:a0:1a:72:50:08:25:c2: d6:66:26:a8:b9:94:1b:af:3a:34:77:fc:df:3d:96: 01:2e:80:95:79:b8:94:95:97:2e:88:ef:9b:d9:bc: 43:e4:4a:ab:6d:0a:45:84:d5:c2:fe:45:85:e4:e2: c2:8c:ef:32:da:5c:cf:29:51:b8:41:2c:ae:9d:7e: 61:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9D:5B:DE:6A:7D:8C:63:99:E3:84:30:05:E7:C0:60:ED:AB:0D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 66.248.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:77:68:2d:4c:8f:d8:2a:12:13:95:d5:ac:b4:b2:9e:03:92: ab:3a:7f:76:78:1c:3d:57:30:10:98:e9:20:b6:7e:33:0c:e1: f1:d8:1f:2e:b8:66:94:a8:43:68:fa:53:1a:c4:66:93:32:cd: 37:3c:22:4e:c2:0e:de:23:f5:cd:21:10:73:95:04:f2:a5:f3: 22:45:df:a9:0d:08:cd:81:d5:91:c8:6d:f4:eb:0d:fd:5b:ff: e2:78:29:26:d3:72:00:59:0e:bd:0c:15:b8:0b:db:51:78:26: b5:0b:e7:bf:3a:aa:1a:e6:5c:61:82:82:ac:47:86:2d:1e:14: 8c:f1:31:2c:02:84:98:0f:f2:4d:0d:bc:64:cb:f2:93:02:e6: 85:d4:36:15:5b:cf:a6:08:07:88:35:db:66:f3:d2:b6:77:8f: 5b:94:ad:c5:63:43:d6:12:56:b5:ed:b0:c2:b1:a5:1b:74:26: 34:04:88:23:59:ad:05:65:64:ad:67:3e:3a:fe:2c:81:84:a6: bc:18:6e:29:29:66:71:01:6b:d4:30:e2:62:a4:ae:7e:72:78: 45:c4:d5:05:34:73:82:e9:56:ba:7f:dd:39:2e:0b:cb:8b:8b: 8e:42:f6:c2:db:79:af:bf:c5:1f:76:77:1b:0a:18:cd:9b:e2: 41:33:a4:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAeFTi296RG1mS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NGY5OGNkZmMtYzgwMC00NjA1LTllODEtNjI5MDY4MTdhM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHbTlo4wE8oglVI+zdmES7XeW/RhTioeyFC4 ktjqUCoEm9ZVhAX79UQgDflkKzQhWLXhx703507BZ67zJw+2Uss35dl9VFnAuRSK 3t5ItPjSjlVTLelTzRRQkTYdMJX6mDcjUBdewmtCscAfuC6bYHmNjVlYZOnrlfUN WFV2Epth9t2HlxNFe4lzEb8n9ig3tpUxH069YS+JKZpqV+H0Wql1Dyy0gW1wyUBV jAhWuCMPuPMTogyr/NCXVqAaclAIJcLWZiaouZQbrzo0d/zfPZYBLoCVebiUlZcu iO+b2bxD5EqrbQpFhNXC/kWF5OLCjO8y2lzPKVG4QSyunX5htwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqdW95qfYxjmeOEMAXnwGDtqw1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvMGRlMDgwNzAtOTkyZS0z MzRmLTgwOTAtYTRjM2E4ODY3N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd3aC1Mj9gqEhOV1ay0sp4Dkqs6f3Z4HD1XMBCY6SC2fjMM4fHYHy64 ZpSoQ2j6UxrEZpMyzTc8Ik7CDt4j9c0hEHOVBPKl8yJF36kNCM2B1ZHIbfTrDf1b /+J4KSbTcgBZDr0MFbgL21F4JrUL5786qhrmXGGCgqxHhi0eFIzxMSwChJgP8k0N vGTL8pMC5oXUNhVbz6YIB4g122bz0rZ3j1uUrcVjQ9YSVrXtsMKxpRt0JjQEiCNZ rQVlZK1nPjr+LIGEprwYbikpZnEBa9Qw4mKkrn5yeEXE1QU0c4LpVrp/3TkuC8uL i45C9sLbea+/xR92dxsKGM2b4kEzpFU= -----END CERTIFICATE-----Generated at Thu Oct 8 17:18:41 2026 by rpki-client