$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa File: aaaac3ee-1605-31c1-81a4-003c07299c97.roa (raw, json) Hash identifier: MNzLDdI+j1cpXNcfBE+EFW/qA+usmZGdQNjEuAruafo= Subject key identifier: 78:D8:86:9D:24:8D:90:E5:4F:14:A7:90:62:40:53:F5:97:7C:F1:49 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584F4F08131A985F6F2A6BA616C0 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 55293 IP address blocks: 68.66.208.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:13:1a:98:5f:6f:2a:6b:a6:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=f12988cb-5b68-412a-ae02-8ae64d68f503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:04:f5:76:ac:95:e5:26:68:7b:a8:d0:0c:2b: f8:d9:cb:ba:f7:a5:02:08:63:cb:f3:bf:25:91:01: d2:e3:af:db:3d:f7:49:8b:34:e1:2d:d8:a2:4d:4b: 3f:2b:fe:9d:54:32:20:ae:b6:f5:a7:18:45:a0:32: ee:24:78:20:dd:cb:49:ee:6f:60:7f:0a:7a:44:d7: 2e:2d:ad:86:e1:39:06:2d:64:d7:93:00:65:b2:da: 08:ad:fa:95:c9:15:a4:67:76:17:f9:e3:5a:fa:9e: 37:27:ae:9b:86:7c:57:53:02:b9:fc:97:56:73:30: f4:ed:92:5a:94:02:9a:86:14:58:26:b4:6c:77:d4: 7f:51:7d:93:4a:f3:65:b6:b1:51:55:67:52:17:c7: d8:10:b6:c6:c3:55:8a:b8:12:a7:94:01:5a:ce:05: 5f:75:6a:25:d1:09:7b:01:9d:45:94:5f:03:27:53: 45:26:9f:fd:54:c0:20:17:cd:66:e7:06:1b:4d:a1: 4d:2a:ab:96:dc:78:c6:0e:21:05:63:85:c0:de:4c: 8c:02:f3:c8:8e:08:9a:a6:41:7c:c6:ab:03:a1:9c: 9d:7c:57:17:9c:6d:56:32:e0:05:4c:5f:5a:39:88: b6:79:68:11:ac:bc:b3:b1:76:08:ee:ec:e4:f5:ed: e4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D8:86:9D:24:8D:90:E5:4F:14:A7:90:62:40:53:F5:97:7C:F1:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 68.66.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c9:11:ad:ce:7f:ca:b1:e0:e4:d2:e1:16:41:9e:5e:03:b8: 65:e9:e4:e4:44:7a:5c:5e:f6:c7:c8:b2:d8:fc:ff:b3:85:0a: ce:d4:a2:b7:e0:7e:ad:41:0a:db:5a:33:e7:e2:b7:e4:e2:c1: 7e:0a:46:b4:51:9e:3b:8b:5c:4a:64:08:3b:70:13:75:de:d4: 27:07:18:c8:8a:2d:0b:87:7f:a6:d4:69:24:49:51:38:e9:30: 64:d6:5d:ef:3f:2b:bf:bc:1d:11:e3:42:08:76:17:bc:76:ec: 8a:f1:98:77:f2:0d:1b:58:73:0c:66:ca:8a:77:ac:6b:22:d5: 4d:6b:c7:c4:24:cd:74:ea:31:7a:1d:d8:a3:38:4b:bf:cf:1e: d4:5c:d2:fd:b5:18:6a:3a:0b:a1:e5:52:c0:51:d6:66:bc:3b: 37:23:c7:e4:e9:ef:24:53:5e:c7:15:86:6d:48:9d:dc:40:7e: 5c:ac:2b:82:63:d0:dc:e3:d1:fc:b8:f3:60:cf:d6:d9:61:12: 35:10:de:29:f5:e3:bb:9f:f8:e2:12:dd:40:34:0d:89:d1:ef: 12:f5:2e:1f:7b:ef:59:15:49:55:7c:7f:83:fb:7f:8a:36:cd: b6:77:7a:f0:c8:51:71:eb:59:a6:2b:63:f6:f4:95:a5:a7:aa: 7f:d1:e7:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBMamF9vKmumFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZjEyOTg4Y2ItNWI2OC00MTJhLWFlMDItOGFlNjRkNjhmNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAT1dqyV5SZoe6jQDCv42cu696UCCGPL878l kQHS46/bPfdJizThLdiiTUs/K/6dVDIgrrb1pxhFoDLuJHgg3ctJ7m9gfwp6RNcu La2G4TkGLWTXkwBlstoIrfqVyRWkZ3YX+eNa+p43J66bhnxXUwK5/JdWczD07ZJa lAKahhRYJrRsd9R/UX2TSvNltrFRVWdSF8fYELbGw1WKuBKnlAFazgVfdWol0Ql7 AZ1FlF8DJ1NFJp/9VMAgF81m5wYbTaFNKquW3HjGDiEFY4XA3kyMAvPIjgiapkF8 xqsDoZydfFcXnG1WMuAFTF9aOYi2eWgRrLyzsXYI7uzk9e3kbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjYhp0kjZDlTxSnkGJAU/WXfPFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYWFhYWMzZWUtMTYwNS0z MWMxLTgxYTQtMDAzYzA3Mjk5Yzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRELQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHJEa3Of8qx4OTS4RZBnl4DuGXp5OREelxe9sfIstj8/7OFCs7Uorfg fq1BCttaM+fit+TiwX4KRrRRnjuLXEpkCDtwE3Xe1CcHGMiKLQuHf6bUaSRJUTjp MGTWXe8/K7+8HRHjQgh2F7x27IrxmHfyDRtYcwxmyop3rGsi1U1rx8QkzXTqMXod 2KM4S7/PHtRc0v21GGo6C6HlUsBR1ma8Ozcjx+Tp7yRTXscVhm1IndxAflysK4Jj 0Nzj0fy482DP1tlhEjUQ3in147uf+OIS3UA0DYnR7xL1Lh9771kVSVV8f4P7f4o2 zbZ3evDIUXHrWaYrY/b0laWnqn/R53c= -----END CERTIFICATE-----Generated at Sun Sep 27 19:31:22 2026 by rpki-client