$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f4c01303-cca9-38d9-be17-e90b2354932e.roa File: f4c01303-cca9-38d9-be17-e90b2354932e.roa (raw, json) Hash identifier: se8APBbqX96b0vYEgf+haPUPNZ5gNiCj9LgcNqooqLA= Subject key identifier: 4A:DC:DD:8E:BF:32:64:C2:75:AC:5D:9D:50:A7:AA:6B:68:70:3F:B8 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584F07D77506105FC5A28714D900 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f4c01303-cca9-38d9-be17-e90b2354932e.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 400072 IP address blocks: 66.43.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:75:06:10:5f:c5:a2:87:14:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=07073cc0-143c-493d-a8dd-daa4a45fb589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:49:34:1c:ce:e4:5c:a3:37:ff:50:6a:e6:47: c3:b4:d3:f0:01:12:d7:03:f0:85:d7:11:c9:c3:8a: fc:95:80:cb:fb:5a:01:5e:8c:10:37:4e:8e:ee:87: b0:ea:35:f5:bd:07:a2:3c:f0:77:dc:63:a9:a5:e3: 83:b7:b1:00:ba:a8:e9:04:96:87:46:04:63:91:e9: aa:a3:d5:2c:b9:7b:03:c3:6b:d2:ba:2d:41:55:f9: f8:c6:1c:c9:aa:42:66:12:20:19:2c:2c:41:2a:9a: 65:cd:81:e5:8f:cb:09:33:33:f6:b1:8a:6e:ca:b5: d3:36:e5:85:a9:90:99:7a:b2:cf:e6:74:0c:20:b3: 90:98:97:28:8c:dc:37:3c:81:eb:86:b7:77:17:16: f1:5b:4a:85:45:97:18:e2:51:d5:65:cd:48:d4:f3: 27:23:5e:53:c0:9a:d2:b9:38:f3:7c:79:4f:15:6a: 71:c4:f7:b2:f8:62:14:da:99:e4:4a:96:12:1f:1a: af:0f:4f:a9:51:c9:22:5d:fb:0d:07:e5:40:01:b3: cd:87:e4:ce:a3:9f:f8:58:f4:63:71:6c:28:38:30: c5:b3:46:b2:08:01:2e:74:93:88:f1:8b:b9:d3:75: f3:c7:46:74:70:44:aa:9b:31:d3:b6:6d:09:b7:59: fb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DC:DD:8E:BF:32:64:C2:75:AC:5D:9D:50:A7:AA:6B:68:70:3F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f4c01303-cca9-38d9-be17-e90b2354932e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 66.43.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:be:4b:0c:03:f1:c0:4e:f7:1b:78:78:e4:6f:3d:f8:b2:92: 9c:9a:9f:e3:44:bc:13:6a:7d:a9:54:12:a7:a7:e5:a4:35:00: 41:21:b5:68:46:af:7f:e7:78:4b:08:79:4e:b0:25:c7:07:21: 30:f8:21:b2:ed:ac:a9:8a:41:49:72:8b:d9:a2:bf:cb:40:c4: 05:8b:65:84:1b:80:6f:2b:5f:3b:06:ea:d8:bf:4a:03:47:f5: 61:27:b8:a5:a0:c0:a8:00:74:03:bf:5f:f3:41:f1:8b:ce:d8: ef:ad:90:aa:5e:eb:73:fe:9f:88:3f:e6:c6:91:c0:78:26:b3: f3:7f:56:6a:41:78:b0:2c:a6:f5:99:d8:c7:09:85:6d:f2:58: 1b:c8:85:17:f9:5f:c1:bc:a7:00:c4:fd:a5:42:3b:c9:44:d4: f0:5c:1a:e5:57:d5:f9:3c:25:1d:1e:53:40:33:dd:cd:cb:03: 60:37:b7:55:02:92:22:e5:85:21:ac:3f:a1:a7:7f:65:4d:33: 66:13:b3:c3:75:36:5b:32:51:80:fe:76:62:0b:3e:21:3c:33: 12:2d:a3:cc:5b:bc:90:60:ad:5b:96:7c:e8:c0:8c:f3:80:66: be:61:35:d2:84:0f:b3:c0:72:d5:70:d1:b3:0e:18:0f:23:18: 73:d3:c0:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13UGEF/FoocU2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk MDcwNzNjYzAtMTQzYy00OTNkLWE4ZGQtZGFhNGE0NWZiNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0k0HM7kXKM3/1Bq5kfDtNPwARLXA/CF1xHJ w4r8lYDL+1oBXowQN06O7oew6jX1vQeiPPB33GOppeODt7EAuqjpBJaHRgRjkemq o9UsuXsDw2vSui1BVfn4xhzJqkJmEiAZLCxBKpplzYHlj8sJMzP2sYpuyrXTNuWF qZCZerLP5nQMILOQmJcojNw3PIHrhrd3FxbxW0qFRZcY4lHVZc1I1PMnI15TwJrS uTjzfHlPFWpxxPey+GIU2pnkSpYSHxqvD0+pUckiXfsNB+VAAbPNh+TOo5/4WPRj cWwoODDFs0ayCAEudJOI8Yu503Xzx0Z0cESqmzHTtm0Jt1n7qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErc3Y6/MmTCdaxdnVCnqmtocD+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvZjRjMDEzMDMtY2NhOS0z OGQ5LWJlMTctZTkwYjIzNTQ5MzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQisEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq+SwwD8cBO9xt4eORvPfiykpyan+NEvBNqfalUEqen5aQ1AEEhtWhG r3/neEsIeU6wJccHITD4IbLtrKmKQUlyi9miv8tAxAWLZYQbgG8rXzsG6ti/SgNH 9WEnuKWgwKgAdAO/X/NB8YvO2O+tkKpe63P+n4g/5saRwHgms/N/VmpBeLAspvWZ 2McJhW3yWBvIhRf5X8G8pwDE/aVCO8lE1PBcGuVX1fk8JR0eU0Az3c3LA2A3t1UC kiLlhSGsP6Gnf2VNM2YTs8N1NlsyUYD+dmILPiE8MxIto8xbvJBgrVuWfOjAjPOA Zr5hNdKED7PActVw0bMOGA8jGHPTwM0= -----END CERTIFICATE-----Generated at Fri Oct 2 17:32:57 2026 by rpki-client