$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa File: 43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa (raw, json) Hash identifier: QAsjwNlwQXBR3U1Ll9fqvVaGah+LDTTL8lY8v/EXo8s= Subject key identifier: 62:A9:5B:04:B3:F3:29:3B:82:44:BD:9F:BB:D8:8B:53:C0:37:1E:0A Certificate issuer: /CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e Certificate serial: 010D0C9F4328584F4976500A0FB95EF09B534E00 Authority key identifier: 93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 29900 IP address blocks: 66.146.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:50:0a:0f:b9:5e:f0:9b:53:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=45999d50-57bb-48f1-a42c-6ffbd8d3faf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:2b:7c:02:c0:77:bd:83:57:cc:78:42:e2: 56:dd:49:35:34:10:dc:a3:fa:54:83:90:15:20:71: 9e:62:6b:83:b7:29:01:12:92:fe:9b:e6:9a:ea:91: d2:70:62:4b:ae:19:e8:95:5b:98:5c:6f:91:ce:9e: b8:04:fb:40:ae:e6:0a:73:98:72:4a:ce:e5:77:57: 0c:c8:05:e7:5f:92:ae:2f:57:69:47:06:28:56:0e: 41:1b:ab:dd:34:71:9f:78:76:40:ff:3b:ec:ef:66: ac:22:60:1c:c3:a6:0a:53:0d:81:cc:26:8b:8a:c2: 3a:a6:13:5f:de:46:ca:c8:c4:c6:25:e2:71:3c:d8: 1c:d5:7e:3d:09:84:15:98:b2:f5:bf:18:bd:6a:08: 04:e9:1a:25:3e:0f:14:f0:ff:98:a6:9c:fd:9d:a6: de:eb:cf:47:d6:b8:58:fd:7e:d8:34:c0:ee:c2:07: 2d:9f:4d:84:0c:08:a8:62:3b:0d:70:87:d4:21:37: 80:69:c9:b8:15:ef:4e:c3:bc:29:de:8c:d0:fe:15: 5b:02:ad:35:6f:fd:48:d4:8e:37:74:98:cc:82:a1: b6:05:3c:6a:e7:fe:a3:f1:f7:5e:a4:6b:ba:ca:ce: ca:d9:c4:75:fc:79:47:1f:21:e2:77:b2:55:8e:80: 66:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A9:5B:04:B3:F3:29:3B:82:44:BD:9F:BB:D8:8B:53:C0:37:1E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl X509v3 Authority Key Identifier: keyid:93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer sbgp-ipAddrBlock: critical IPv4: 66.146.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:c5:db:7f:cc:61:fa:b6:59:a3:34:1a:1b:ff:77:57:22:25: cf:c0:23:ff:9b:9f:30:cf:29:71:32:38:c4:44:91:00:28:46: 1a:77:e2:cb:eb:1e:49:68:1d:b0:41:fa:48:6d:db:09:a9:5e: d2:5a:c7:3c:5b:86:84:12:eb:c4:6e:77:f8:60:a7:65:6a:b4: 12:6a:d6:04:a1:dd:17:98:b7:18:29:24:72:d8:88:95:08:2c: f4:6d:57:45:ec:d2:19:63:e0:3c:33:e1:d0:86:78:64:c1:bc: fc:69:69:e6:02:ea:2e:75:81:37:b8:bf:96:ca:e4:b8:f9:d9: 78:6f:52:48:be:e9:df:eb:e2:27:35:24:ed:d7:a8:4e:12:7b: 84:f1:a3:13:33:21:f5:94:47:97:8c:f5:55:85:96:64:1b:17: e4:8d:19:58:14:ac:6b:d9:6e:3c:85:03:a0:5c:36:40:de:cd: 40:eb:18:82:eb:c0:bc:98:4d:5d:9b:b3:30:4e:f4:e2:f1:d0: 61:fa:b7:5a:b1:7c:11:2d:da:2f:ac:87:65:f5:76:dd:9c:db: 01:dd:fe:f8:a5:0a:14:96:0d:e6:00:a4:8e:e8:57:fc:ad:af: d4:b2:f0:35:d2:a7:a8:0c:cb:11:27:f9:1a:96:3a:da:58:ae: 90:cc:f9:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdlAKD7le8JtTTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTVkYjE5OWQtOWRjOC00YjgzLWI1M2ItYjA5MmYwZDZl NzhlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDU5OTlkNTAtNTdiYi00OGYxLWE0MmMtNmZmYmQ4ZDNmYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHErfALAd72DV8x4QuJW3Uk1NBDco/pUg5AV IHGeYmuDtykBEpL+m+aa6pHScGJLrhnolVuYXG+Rzp64BPtAruYKc5hySs7ld1cM yAXnX5KuL1dpRwYoVg5BG6vdNHGfeHZA/zvs72asImAcw6YKUw2BzCaLisI6phNf 3kbKyMTGJeJxPNgc1X49CYQVmLL1vxi9aggE6RolPg8U8P+Yppz9nabe689H1rhY /X7YNMDuwgctn02EDAioYjsNcIfUITeAacm4Fe9Ow7wp3ozQ/hVbAq01b/1I1I43 dJjMgqG2BTxq5/6j8fdepGu6ys7K2cR1/HlHHyHid7JVjoBmTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKpWwSz8yk7gkS9n7vYi1PANx4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNWRi MTk5ZC05ZGM4LTRiODMtYjUzYi1iMDkyZjBkNmU3OGUvNDNkZTNiNWYtN2ZlNS0z MmNkLWI3MzItOGJhOThmNTFkYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTVkYjE5OWQtOWRjOC00YjgzLWI1 M2ItYjA5MmYwZDZlNzhlL2U1ZGIxOTlkLTlkYzgtNGI4My1iNTNiLWIwOTJmMGQ2 ZTc4ZS5jcmwwHwYDVR0jBBgwFoAUk0BH5PEQeGn9DIj0jnfJii1qqMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNWRiMTk5ZC05ZGM4LTRiODMtYjUzYi1iMDky ZjBkNmU3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQpLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrF23/MYfq2WaM0Ghv/d1ciJc/AI/+bnzDPKXEyOMREkQAoRhp34svr HkloHbBB+kht2wmpXtJaxzxbhoQS68Rud/hgp2VqtBJq1gSh3ReYtxgpJHLYiJUI LPRtV0Xs0hlj4Dwz4dCGeGTBvPxpaeYC6i51gTe4v5bK5Lj52XhvUki+6d/r4ic1 JO3XqE4Se4TxoxMzIfWUR5eM9VWFlmQbF+SNGVgUrGvZbjyFA6BcNkDezUDrGILr wLyYTV2bszBO9OLx0GH6t1qxfBEt2i+sh2X1dt2c2wHd/vilChSWDeYApI7oV/yt r9Sy8DXSp6gMyxEn+RqWOtpYrpDM+V0= -----END CERTIFICATE-----Generated at Sat Sep 26 09:08:22 2026 by rpki-client