$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/3d8b75da-f9ad-3bd1-92fb-ba789e52f156.roa File: 3d8b75da-f9ad-3bd1-92fb-ba789e52f156.roa (raw, json) Hash identifier: rgrwwnCfcmNAtDwwzmR7SGVqpZgkQ0VRg7mEp8RAc2U= Subject key identifier: 44:ED:58:75:08:A7:CD:9F:2A:7B:9F:E3:BA:5A:8F:C6:DC:86:8D:AE Certificate issuer: /CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843 Certificate serial: 010D0C9F4328584FD7F1356775445C9200EE1100 Authority key identifier: 4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/3d8b75da-f9ad-3bd1-92fb-ba789e52f156.roa Signing time: Sun 15 Nov 2026 02:00:12 +0000 ROA not before: Sun 15 Nov 2026 02:00:12 +0000 ROA not after: Sat 13 Feb 2027 02:00:12 +0000 asID: 40676 IP address blocks: 66.117.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:f1:35:67:75:44:5c:92:00:ee:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843 Validity Not Before: Nov 15 02:00:12 2026 GMT Not After : Feb 13 02:00:12 2027 GMT Subject: CN=8e8364da-74a2-48b9-a66c-d0829a56c873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:58:ae:9f:15:0f:37:61:49:00:77:13:ec: 43:43:0c:94:96:64:42:60:46:29:d3:11:4e:41:a9: a7:5f:f1:f0:ef:b1:ae:1d:0c:b3:e5:9e:32:0c:05: c7:dc:dd:3f:b6:79:2c:1b:b7:d7:7a:6b:a8:c6:6e: 2b:ab:c5:e7:3a:59:74:5e:88:0d:79:6d:c6:45:30: 2b:46:d6:6a:1e:6c:2e:c6:cb:76:c7:08:52:3c:df: 31:f7:21:9c:08:02:fe:dd:02:87:8c:6a:c9:c7:a0: 7e:c5:49:b6:d9:7b:30:55:5f:5a:cc:d4:08:09:97: a3:c7:17:9b:bc:05:d2:54:09:e7:2d:3a:fd:71:97: 29:5e:43:dc:c2:db:f7:76:16:d1:43:0b:17:64:8f: 5d:1f:72:27:51:16:dd:fb:b0:9f:6e:59:c7:39:18: 6e:6f:18:39:17:f2:06:bd:a7:73:4a:99:dc:fe:dc: d0:2c:b1:d0:3d:3c:52:5d:08:4b:89:e7:50:02:30: 7d:7c:28:56:0f:33:2d:14:20:86:22:14:50:e7:71: 5f:cb:43:85:5f:57:e0:eb:e0:93:1f:bb:c3:a3:61: 28:1c:7d:bb:a6:21:69:40:d6:40:7d:5c:09:c2:91: 76:b6:54:1f:72:35:76:6f:3f:a4:88:e6:51:52:eb: 70:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:ED:58:75:08:A7:CD:9F:2A:7B:9F:E3:BA:5A:8F:C6:DC:86:8D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/3d8b75da-f9ad-3bd1-92fb-ba789e52f156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl X509v3 Authority Key Identifier: keyid:4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer sbgp-ipAddrBlock: critical IPv4: 66.117.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:df:6d:7b:13:9b:93:c4:2a:e6:8f:58:ae:1b:3d:81:75:e4: ae:d7:73:74:13:26:fa:58:67:ca:b1:e3:4a:55:79:fe:75:c5: 1e:6f:73:1b:dd:24:b6:71:ac:bc:3f:b8:8f:85:9e:12:5a:ce: b4:4f:3a:25:58:79:3d:04:4a:16:a8:12:eb:83:6e:88:c8:c9: d4:03:94:04:43:11:86:ad:29:b6:36:d1:78:99:09:6b:3f:77: 07:1b:ba:18:52:29:1b:76:b5:ac:bc:70:96:b1:ed:14:53:25: ad:6e:b8:23:de:53:f3:24:92:d2:14:32:c3:01:08:3e:67:a4: d0:04:20:21:fc:e0:e5:59:24:f7:a6:fb:08:74:d7:c1:d0:2a: 3c:5d:52:35:47:7a:56:0c:9d:7e:db:fc:30:7e:05:26:22:32: ed:bf:3b:00:f2:40:9d:20:24:c6:19:a6:b6:5f:e5:2b:a5:c3: ab:8e:91:3c:1c:ae:31:27:89:cc:d7:82:d4:da:e1:b7:05:49: 64:9a:f0:49:57:6a:2f:89:2b:ea:9c:08:65:72:7e:23:ad:b5: 06:1a:7a:81:fe:28:97:1b:f3:ce:90:92:ce:96:47:54:89:1f: 75:3d:bf:35:53:d0:25:92:26:3b:64:9f:76:f6:3c:ac:52:e9: cb:fe:57:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/X8TVndURckgDuEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1ZjE2YTItNTlmMi00M2Q2LTk3ODMtYjU5YzNiOWFk ODQzMB4XDTI2MTExNTAyMDAxMloXDTI3MDIxMzAyMDAxMlowLzEtMCsGA1UEAxMk OGU4MzY0ZGEtNzRhMi00OGI5LWE2NmMtZDA4MjlhNTZjODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLBYrp8VDzdhSQB3E+xDQwyUlmRCYEYp0xFO QamnX/Hw77GuHQyz5Z4yDAXH3N0/tnksG7fXemuoxm4rq8XnOll0XogNeW3GRTAr RtZqHmwuxst2xwhSPN8x9yGcCAL+3QKHjGrJx6B+xUm22XswVV9azNQICZejxxeb vAXSVAnnLTr9cZcpXkPcwtv3dhbRQwsXZI9dH3InURbd+7CfblnHORhubxg5F/IG vadzSpnc/tzQLLHQPTxSXQhLiedQAjB9fChWDzMtFCCGIhRQ53Ffy0OFX1fg6+CT H7vDo2EoHH27piFpQNZAfVwJwpF2tlQfcjV2bz+kiOZRUutwEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETtWHUIp82fKnuf47paj8bcho2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVm MTZhMi01OWYyLTQzZDYtOTc4My1iNTljM2I5YWQ4NDMvM2Q4Yjc1ZGEtZjlhZC0z YmQxLTkyZmItYmE3ODllNTJmMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmE1ZjE2YTItNTlmMi00M2Q2LTk3 ODMtYjU5YzNiOWFkODQzLzJhNWYxNmEyLTU5ZjItNDNkNi05NzgzLWI1OWMzYjlh ZDg0My5jcmwwHwYDVR0jBBgwFoAUShal8/wXMG6gD99HdWeZ+wqqZU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVmMTZhMi01OWYyLTQzZDYtOTc4My1iNTlj M2I5YWQ4NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTfbXsTm5PEKuaPWK4bPYF15K7Xc3QTJvpYZ8qx40pVef51xR5vcxvd JLZxrLw/uI+FnhJazrRPOiVYeT0EShaoEuuDbojIydQDlARDEYatKbY20XiZCWs/ dwcbuhhSKRt2tay8cJax7RRTJa1uuCPeU/MkktIUMsMBCD5npNAEICH84OVZJPem +wh018HQKjxdUjVHelYMnX7b/DB+BSYiMu2/OwDyQJ0gJMYZprZf5Sulw6uOkTwc rjEniczXgtTa4bcFSWSa8ElXai+JK+qcCGVyfiOttQYaeoH+KJcb886Qks6WR1SJ H3U9vzVT0CWSJjtkn3b2PKxS6cv+Vyk= -----END CERTIFICATE-----Generated at Sun Nov 15 21:44:32 2026 by rpki-client