$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa File: 2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa (raw, json) Hash identifier: GFHKPiwevESmz3qFgAmvD+BGtkpX7d5spY6/9yphBd0= Subject key identifier: AD:18:07:7D:7F:8A:43:8E:88:24:75:41:07:84:FD:F1:7B:2E:45:38 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4975F936401A1804EAA2E4F0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 66.54.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:f9:36:40:1a:18:04:ea:a2:e4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=efa44be3-bc88-4ec6-9665-6a70e0fab3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5d:81:81:96:ed:16:8a:2f:6b:7d:68:63:ee: 35:6f:4b:df:da:e6:5a:d3:59:9e:54:31:9a:ba:82: ca:2f:a7:73:0a:8d:5f:32:8e:59:56:3e:68:ad:f2: 25:37:3d:60:29:5d:b7:e3:f0:31:7e:4d:99:0f:5a: 2c:b6:19:60:06:51:76:8f:f2:b0:ea:97:69:6b:21: 62:3b:89:18:e1:e1:bb:bd:7f:98:1c:ab:9f:a2:0f: 17:bc:e8:81:3b:1a:5f:04:05:a2:02:c7:88:01:12: ea:3f:d4:71:46:06:62:9e:7f:a4:76:ec:d3:19:8e: d2:ef:3b:7a:d5:df:22:10:21:a7:d2:e2:44:59:f2: 1e:41:c6:66:2c:f9:c6:2f:65:09:1b:a6:79:08:df: 29:dd:13:ec:00:8b:f2:3d:6f:66:fc:5c:3a:54:f7: 40:05:b6:f3:0f:5d:bd:9f:0d:3e:08:5a:6e:69:61: e9:02:05:e0:49:ee:b7:69:9d:45:d7:66:93:e5:56: 1d:eb:8e:5d:f9:1b:51:59:ce:12:ff:14:64:98:c2: bd:e8:0e:7d:08:c2:9a:0b:a7:f6:98:f2:bd:ac:2d: a2:32:48:18:47:d3:e1:43:06:c1:d7:0f:12:07:e7: 9d:99:93:42:53:39:42:5e:e8:fd:be:5c:de:d2:64: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:18:07:7D:7F:8A:43:8E:88:24:75:41:07:84:FD:F1:7B:2E:45:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5b:47:b3:8d:28:30:ff:3d:d1:12:2e:b6:e0:b5:c3:1c:68: 92:59:98:c3:a6:a6:41:57:67:c9:94:56:63:be:e9:7a:ce:a3: e6:45:28:83:f8:f2:b6:1d:4d:8b:ce:79:48:9b:d3:b1:b5:40: 38:9d:a9:95:27:32:6e:cc:1e:d5:db:6c:b9:25:eb:46:11:ed: ef:f7:f9:89:20:db:f2:b4:f0:16:86:b1:bb:25:94:4f:48:9f: a3:4d:eb:ef:c9:96:dd:5e:e9:4d:7a:bd:ed:42:4c:60:bf:cd: 15:6c:05:58:35:ae:2e:d0:1c:61:58:e8:c1:a3:0b:42:fb:b6: 3b:f5:01:6d:7d:19:26:54:f8:ac:ef:e7:60:c7:76:fa:35:c1: 3a:cd:12:84:e6:61:ba:d9:b2:60:06:e9:f3:cd:cb:b4:f7:b4: bc:76:7c:c9:52:f1:44:db:ae:63:93:3c:60:18:7d:10:f0:7c: 32:34:93:42:1b:fe:46:74:b7:16:ee:e0:3b:fc:b6:c3:d3:ef: 6a:00:9a:95:21:d3:b2:ed:65:0d:97:79:b1:a3:5d:c2:40:92: 19:b3:a3:a0:fa:e2:cc:f9:59:9a:7f:eb:ac:f8:12:f6:af:ad: 96:9c:3a:e3:c5:bb:d3:d8:20:61:04:7f:d3:f1:4d:1c:f7:10: 64:1e:ce:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdfk2QBoYBOqi5PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWZhNDRiZTMtYmM4OC00ZWM2LTk2NjUtNmE3MGUwZmFiM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV2BgZbtFoova31oY+41b0vf2uZa01meVDGa uoLKL6dzCo1fMo5ZVj5orfIlNz1gKV234/Axfk2ZD1osthlgBlF2j/Kw6pdpayFi O4kY4eG7vX+YHKufog8XvOiBOxpfBAWiAseIARLqP9RxRgZinn+kduzTGY7S7zt6 1d8iECGn0uJEWfIeQcZmLPnGL2UJG6Z5CN8p3RPsAIvyPW9m/Fw6VPdABbbzD129 nw0+CFpuaWHpAgXgSe63aZ1F12aT5VYd645d+RtRWc4S/xRkmMK96A59CMKaC6f2 mPK9rC2iMkgYR9PhQwbB1w8SB+edmZNCUzlCXuj9vlze0mTkRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0YB31/ikOOiCR1QQeE/fF7LkU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmFhNDFhYzEtNjA2NS0z ZTE4LTk2MmQtYjU1OWNhMWYxYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBbR7ONKDD/PdESLrbgtcMcaJJZmMOmpkFXZ8mUVmO+6XrOo+ZFKIP4 8rYdTYvOeUib07G1QDidqZUnMm7MHtXbbLkl60YR7e/3+Ykg2/K08BaGsbsllE9I n6NN6+/Jlt1e6U16ve1CTGC/zRVsBVg1ri7QHGFY6MGjC0L7tjv1AW19GSZU+Kzv 52DHdvo1wTrNEoTmYbrZsmAG6fPNy7T3tLx2fMlS8UTbrmOTPGAYfRDwfDI0k0Ib /kZ0txbu4Dv8tsPT72oAmpUh07LtZQ2XebGjXcJAkhmzo6D64sz5WZp/66z4Evav rZacOuPFu9PYIGEEf9PxTRz3EGQezlM= -----END CERTIFICATE-----Generated at Fri Sep 25 18:57:55 2026 by rpki-client