$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa File: 3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa (raw, json) Hash identifier: 8YAhNOI0RWDJsebNTei4W9NJ4+NmfB3jpcCeMBSDCBA= Subject key identifier: E3:AC:13:D2:AC:0B:C5:4F:8D:DE:E5:A0:F8:0C:F7:DE:68:E6:5A:9E Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584F498764B73226FCEFA039FC00 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1403 IP address blocks: 66.158.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:64:b7:32:26:fc:ef:a0:39:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f659a583-eb53-429e-a1b8-6d1dfc2c0085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:14:6c:15:ed:46:97:a9:83:84:4d:57:50: 93:4c:c6:90:2d:53:3d:9a:8a:72:a3:3d:e9:98:36: 4d:08:02:cb:78:7a:22:17:40:89:2b:4b:49:cc:3b: 9d:2e:82:ec:56:e7:39:24:eb:aa:0d:77:0d:92:e1: 2e:3d:4c:11:0c:56:7a:76:9f:1d:86:1e:a6:a4:1f: f5:06:6c:3f:44:28:38:68:3a:82:6d:6d:12:87:91: 4b:ec:a9:94:56:8f:32:77:89:73:c8:a7:91:65:9a: 05:3a:2d:90:13:54:1d:13:67:00:6a:c3:f2:7d:72: 6a:26:11:a0:b7:e4:59:41:2f:c9:38:67:96:b1:47: 1d:80:ab:d9:31:78:d5:d1:3b:46:13:0d:ca:b3:a4: 97:3f:c7:72:35:5e:8a:25:5d:33:b7:4d:70:3d:ff: 9d:ee:4f:1c:0d:d9:57:ce:a9:2e:af:b4:ab:3d:d3: d2:2e:8b:35:fd:f7:2c:ce:5b:50:40:29:56:7f:24: 35:2c:8c:d0:2e:f9:47:b2:ac:a0:0d:7a:9c:7a:56: 17:ba:8e:94:46:36:fe:2a:2f:69:8b:bb:e0:54:65: 34:4e:7e:98:8c:64:68:a5:c5:35:5f:a7:c9:88:2f: 4c:e5:c2:a0:08:2d:21:55:49:30:66:0f:f5:bc:29: 27:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AC:13:D2:AC:0B:C5:4F:8D:DE:E5:A0:F8:0C:F7:DE:68:E6:5A:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.158.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:06:b9:bd:4a:ff:b1:1b:0f:10:96:38:1f:a0:2c:72:4a:db: 82:4d:63:fb:5e:16:0e:e9:69:8a:60:dd:fd:5c:e0:d5:5a:24: 74:ce:a5:a5:12:a8:99:23:65:8e:22:04:0b:ef:ee:df:22:c9: ee:a0:dd:55:81:47:40:f6:b1:e4:a7:d0:2e:7e:fb:7f:34:d2: 5c:a8:02:d8:b3:9f:77:c3:89:f5:d8:0d:e8:da:70:db:93:e2: 3b:8c:e6:ed:a3:6c:a5:4f:c9:c1:c2:ff:18:1f:0b:53:42:10: d8:62:5d:51:eb:1c:b9:0f:ba:52:06:ba:49:17:23:69:46:86: bc:b6:bb:d8:50:b8:7f:56:fb:36:47:9e:33:15:c5:89:e6:e1: 56:78:70:9f:cb:bb:6e:a2:18:f6:c3:51:f8:23:01:bb:7e:5d: fa:a5:2f:d0:cf:69:02:8f:3e:67:9e:ab:d2:8e:91:85:3f:c6: ed:ed:35:2f:17:72:a1:a0:38:74:b1:d6:cf:60:ba:10:91:7b: 2f:c9:de:53:40:29:d3:44:3f:ad:44:f4:68:a8:43:21:92:5b: 7a:8e:6a:d7:52:8a:27:38:5c:3e:51:06:52:9c:91:9c:47:64: cd:17:d1:57:a9:9e:0c:c3:0d:2c:49:c8:66:67:2c:84:8d:82: 22:dd:e8:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh2S3Mib876A5/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjY1OWE1ODMtZWI1My00MjllLWExYjgtNmQxZGZjMmMwMDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVYUbBXtRpepg4RNV1CTTMaQLVM9mopyoz3p mDZNCALLeHoiF0CJK0tJzDudLoLsVuc5JOuqDXcNkuEuPUwRDFZ6dp8dhh6mpB/1 Bmw/RCg4aDqCbW0Sh5FL7KmUVo8yd4lzyKeRZZoFOi2QE1QdE2cAasPyfXJqJhGg t+RZQS/JOGeWsUcdgKvZMXjV0TtGEw3Ks6SXP8dyNV6KJV0zt01wPf+d7k8cDdlX zqkur7SrPdPSLos1/fcszltQQClWfyQ1LIzQLvlHsqygDXqcelYXuo6URjb+Ki9p i7vgVGU0Tn6YjGRopcU1X6fJiC9M5cKgCC0hVUkwZg/1vCknVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOsE9KsC8VPjd7loPgM995o5lqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvM2IwYWM4ZGQtMDQyNC0z MGIwLWIwZDUtN2ZjZDI4YjE1MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQp6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwGub1K/7EbDxCWOB+gLHJK24JNY/teFg7paYpg3f1c4NVaJHTOpaUS qJkjZY4iBAvv7t8iye6g3VWBR0D2seSn0C5++3800lyoAtizn3fDifXYDejacNuT 4juM5u2jbKVPycHC/xgfC1NCENhiXVHrHLkPulIGukkXI2lGhry2u9hQuH9W+zZH njMVxYnm4VZ4cJ/Lu26iGPbDUfgjAbt+XfqlL9DPaQKPPmeeq9KOkYU/xu3tNS8X cqGgOHSx1s9guhCRey/J3lNAKdNEP61E9GioQyGSW3qOatdSiic4XD5RBlKckZxH ZM0X0VepngzDDSxJyGZnLISNgiLd6As= -----END CERTIFICATE-----Generated at Sat Sep 26 05:52:58 2026 by rpki-client