$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa File: 039bc77e-6087-3093-9191-6772277f3e24.roa (raw, json) Hash identifier: ekBiNtvK7QN0jdXsUjEEVPVXRo7+W7LDUm9Zgryc4Io= Subject key identifier: 4E:F6:31:11:BA:DF:7E:13:12:90:E6:52:D5:99:39:BB:BD:55:71:34 Certificate issuer: /CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Certificate serial: 010D0C9F4328584F480D445C6714866C4DAA2A80 Authority key identifier: 48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 33115 IP address blocks: 66.223.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:44:5c:67:14:86:6c:4d:aa:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=d72b5b25-c90d-4f39-b073-802eb148f0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:87:94:48:f6:b6:5c:fc:2e:8f:63:09:69: 11:f8:ba:c2:88:d0:f9:d5:4e:6a:1d:e2:46:17:9f: 7e:8e:a9:ae:d0:52:9c:a5:d7:39:ec:c0:2b:61:39: c9:28:bc:84:35:87:92:7d:61:1a:b4:b7:6e:73:ba: 0b:36:50:b3:1d:ff:a0:f6:f0:19:27:29:1c:07:c3: ce:27:04:a5:c2:8c:31:05:8d:f9:2b:5c:62:64:a5: 14:48:0f:e1:a2:03:1c:2e:3c:51:07:5a:12:01:f1: fc:ae:2c:de:1b:65:ce:4d:95:fb:10:2d:7d:22:dd: db:81:f4:c3:1e:33:47:73:cf:5b:2e:05:38:98:d0: 78:db:15:7a:4a:e6:24:76:13:da:72:d0:f2:9b:4e: 9d:78:33:bd:62:91:72:06:e8:d2:ff:39:ff:b1:7f: 8b:46:15:a5:d3:b3:23:9d:e8:f2:f3:e5:0d:49:5c: 06:be:3d:5c:7a:f7:83:1d:cc:9e:40:70:86:66:51: c4:ce:c8:c8:c1:41:66:bd:85:c9:53:b1:d4:a2:78: e6:42:5e:c2:2f:4a:4c:3e:a6:53:79:af:91:b9:ba: ce:3b:11:e0:fa:12:61:a0:e1:f1:59:0e:cf:65:9b: ac:dd:ac:87:55:fe:3d:8c:92:4f:ec:e3:36:b5:90: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F6:31:11:BA:DF:7E:13:12:90:E6:52:D5:99:39:BB:BD:55:71:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl X509v3 Authority Key Identifier: keyid:48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer sbgp-ipAddrBlock: critical IPv4: 66.223.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:57:a0:b6:9c:ae:db:09:9a:75:10:d8:c9:a3:b8:80:10:4f: 1a:a6:54:33:e6:9e:4b:cc:dc:cf:74:a3:c4:39:03:a1:10:2e: 79:0b:48:6b:a5:a1:af:ea:59:a5:99:34:41:e9:fe:e0:fe:9f: 3c:92:e7:bf:0f:d8:75:9d:39:c9:32:b8:c9:87:f6:fa:fc:bb: 08:8f:38:33:05:78:a1:9f:51:8c:de:6e:01:f2:6a:43:7c:e4: ed:c8:7e:21:0a:2f:1c:f8:72:7e:c8:19:c4:49:b8:24:68:d8: b8:f9:53:5f:6e:5b:66:82:fb:28:01:8e:19:f2:a9:b9:b5:3b: 1e:83:14:2f:95:15:0f:76:65:f1:28:95:05:29:2f:f6:70:52: 4c:c4:0e:3c:39:aa:fd:77:92:be:6b:4b:30:00:c1:09:e6:bc: aa:df:07:ee:e6:33:35:ba:a7:f5:a1:cd:1b:42:03:f6:14:19: 0c:7f:19:b8:41:f8:98:17:46:e5:d1:e8:83:05:23:2b:df:1b: f0:65:60:78:cf:7e:0a:9f:a2:3e:6c:f8:84:1f:da:0e:91:39: 5b:28:85:80:79:08:5e:f4:e4:aa:3a:2b:d8:b1:de:c1:1c:2a: 79:68:76:d8:21:90:41:8a:60:82:22:23:a2:59:27:39:27:ac: 93:89:c2:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDURcZxSGbE2qKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5YmU3M2ItZTU2OC00NGI3LWJkNjMtZWJjNGU4ZmU2 ZjE3MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDcyYjViMjUtYzkwZC00ZjM5LWIwNzMtODAyZWIxNDhmMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEyHlEj2tlz8Lo9jCWkR+LrCiND51U5qHeJG F59+jqmu0FKcpdc57MArYTnJKLyENYeSfWEatLduc7oLNlCzHf+g9vAZJykcB8PO JwSlwowxBY35K1xiZKUUSA/hogMcLjxRB1oSAfH8rizeG2XOTZX7EC19It3bgfTD HjNHc89bLgU4mNB42xV6SuYkdhPactDym06deDO9YpFyBujS/zn/sX+LRhWl07Mj nejy8+UNSVwGvj1ceveDHcyeQHCGZlHEzsjIwUFmvYXJU7HUonjmQl7CL0pMPqZT ea+RubrOOxHg+hJhoOHxWQ7PZZus3ayHVf49jJJP7OM2tZBt5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE72MRG6334TEpDmUtWZObu9VXE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDli ZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0ZThmZTZmMTcvMDM5YmM3N2UtNjA4Ny0z MDkzLTkxOTEtNjc3MjI3N2YzZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5YmU3M2ItZTU2OC00NGI3LWJk NjMtZWJjNGU4ZmU2ZjE3LzEwOWJlNzNiLWU1NjgtNDRiNy1iZDYzLWViYzRlOGZl NmYxNy5jcmwwHwYDVR0jBBgwFoAUSChgdlx5Je88amZt2R9BiXnOIGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDliZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0 ZThmZTZmMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQt9jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRXoLacrtsJmnUQ2MmjuIAQTxqmVDPmnkvM3M90o8Q5A6EQLnkLSGul oa/qWaWZNEHp/uD+nzyS578P2HWdOckyuMmH9vr8uwiPODMFeKGfUYzebgHyakN8 5O3IfiEKLxz4cn7IGcRJuCRo2Lj5U19uW2aC+ygBjhnyqbm1Ox6DFC+VFQ92ZfEo lQUpL/ZwUkzEDjw5qv13kr5rSzAAwQnmvKrfB+7mMzW6p/WhzRtCA/YUGQx/GbhB +JgXRuXR6IMFIyvfG/BlYHjPfgqfoj5s+IQf2g6ROVsohYB5CF705Ko6K9ix3sEc KnlodtghkEGKYIIiI6JZJzknrJOJwuQ= -----END CERTIFICATE-----Generated at Sat Sep 26 10:34:49 2026 by rpki-client