$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8db2243c-82f8-30cb-9787-d9c9babb9e1c.roa File: 8db2243c-82f8-30cb-9787-d9c9babb9e1c.roa (raw, json) Hash identifier: 3ljfHsEUKNzkDH/mPIOz9zD5zXboqaBFQ8XTklje57I= Subject key identifier: A6:FF:B9:8D:8B:9E:C1:DC:1A:07:C0:C5:EE:69:E7:66:E7:15:DD:0A Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584EF87CB6D4C5041F1265B96C00 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8db2243c-82f8-30cb-9787-d9c9babb9e1c.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 1403 IP address blocks: 66.158.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:b6:d4:c5:04:1f:12:65:b9:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=db2df529-3df1-49f6-8f78-5c4865c20b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:d2:e8:8d:db:b5:8c:09:22:d0:72:50:03: 33:23:7f:1a:51:32:26:d8:16:89:6c:fd:f5:41:69: bd:d5:56:a4:0c:2e:9e:ac:3d:f2:87:57:64:41:7a: 5d:21:aa:2d:ad:a6:c7:99:23:71:97:38:d0:17:57: 61:d7:c4:04:63:7f:1c:43:0c:f7:cd:76:42:1b:de: 66:45:15:c7:87:25:29:2c:bd:d5:32:e1:0b:d0:b8: 5b:f2:85:fc:4a:45:d9:6e:53:6c:f5:57:0d:23:34: f0:b3:dc:51:a4:bf:0d:ac:63:8b:93:f6:6a:1c:f0: 83:9f:aa:b4:7e:7a:1f:fa:9f:4a:91:37:73:5b:75: 7e:7a:c1:c3:a3:de:1d:63:57:5d:a3:64:45:77:3a: d8:0e:96:bb:0d:61:67:81:8a:4e:44:f2:3e:6d:dc: a4:fc:93:be:24:90:83:11:73:83:57:60:e8:85:73: 5a:82:01:89:3d:6a:f2:3f:18:bc:1f:40:68:c5:94: 11:28:be:7e:26:17:86:2b:56:e9:62:1d:ef:9f:bb: d5:51:f2:4e:be:22:dd:b4:7e:77:a5:23:ea:f5:e3: 45:79:ed:74:71:ae:c4:9f:f2:e9:93:84:0b:08:c3: 2c:a2:94:63:16:83:ed:58:bc:e1:36:c3:91:59:e6: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FF:B9:8D:8B:9E:C1:DC:1A:07:C0:C5:EE:69:E7:66:E7:15:DD:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8db2243c-82f8-30cb-9787-d9c9babb9e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.158.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:bd:07:f9:e8:b2:81:a7:86:78:75:93:bb:f2:4a:80:07:2b: ee:f4:b7:aa:5a:8c:07:4b:e6:1b:a6:86:50:67:be:a0:8a:d0: 7f:25:a7:a0:42:0a:1d:81:c1:6e:0e:cf:f5:1d:00:67:37:38: 7f:47:46:4a:c8:91:56:41:73:4e:c8:2b:a9:13:54:32:cc:9b: 01:bc:b8:cc:ef:ea:56:c1:c2:fd:1e:94:76:e7:39:30:3b:ac: 94:0c:de:61:59:e5:e3:dd:68:08:e0:2f:e2:d0:23:80:b9:d7: f5:10:14:57:53:39:73:da:59:3e:af:0b:e7:80:76:dc:95:02: 6a:60:d3:29:55:2b:52:88:d7:44:3c:25:50:99:1a:70:08:02: c3:58:76:8d:5d:3b:9b:a7:ac:8e:0d:bc:b8:14:5f:6b:62:41: 9d:7b:55:fe:cb:b8:57:dd:95:b7:b7:83:67:f9:2d:aa:ed:b9: 0f:3b:1f:21:54:56:51:2a:a5:8c:a2:61:69:59:fc:f1:f9:58: 4a:4c:9f:54:4b:0c:d9:b9:ab:78:f7:00:b7:a1:43:82:1a:0e: c3:fc:0f:fe:18:75:00:1d:7e:de:79:b7:cf:63:90:15:8e:50: b0:f3:e6:89:b3:e5:8b:13:1a:82:9b:b4:ad:01:01:26:71:b4: e1:56:0a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLbUxQQfEmW5bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZGIyZGY1MjktM2RmMS00OWY2LThmNzgtNWM0ODY1YzIwYjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7vS6I3btYwJItByUAMzI38aUTIm2BaJbP31 QWm91VakDC6erD3yh1dkQXpdIaotrabHmSNxlzjQF1dh18QEY38cQwz3zXZCG95m RRXHhyUpLL3VMuEL0Lhb8oX8SkXZblNs9VcNIzTws9xRpL8NrGOLk/ZqHPCDn6q0 fnof+p9KkTdzW3V+esHDo94dY1ddo2RFdzrYDpa7DWFngYpORPI+bdyk/JO+JJCD EXODV2DohXNaggGJPWryPxi8H0BoxZQRKL5+JheGK1bpYh3vn7vVUfJOviLdtH53 pSPq9eNFee10ca7En/Lpk4QLCMMsopRjFoPtWLzhNsORWebDUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb/uY2LnsHcGgfAxe5p52bnFd0KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvOGRiMjI0M2MtODJmOC0z MGNiLTk3ODctZDljOWJhYmI5ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQp6FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi9B/nosoGnhnh1k7vySoAHK+70t6pajAdL5humhlBnvqCK0H8lp6BC Ch2BwW4Oz/UdAGc3OH9HRkrIkVZBc07IK6kTVDLMmwG8uMzv6lbBwv0elHbnOTA7 rJQM3mFZ5ePdaAjgL+LQI4C51/UQFFdTOXPaWT6vC+eAdtyVAmpg0ylVK1KI10Q8 JVCZGnAIAsNYdo1dO5unrI4NvLgUX2tiQZ17Vf7LuFfdlbe3g2f5LartuQ87HyFU VlEqpYyiYWlZ/PH5WEpMn1RLDNm5q3j3ALehQ4IaDsP8D/4YdQAdft55t89jkBWO ULDz5omz5YsTGoKbtK0BASZxtOFWCoc= -----END CERTIFICATE-----Generated at Sun Sep 27 19:27:52 2026 by rpki-client