$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/62cbd2eb-69b9-3b1b-bcd9-88a91f711f9f.roa File: 62cbd2eb-69b9-3b1b-bcd9-88a91f711f9f.roa (raw, json) Hash identifier: VBE6wJetkhWKESaU6HgvRp+dmDp7lsDSUJ8BuUvaRRU= Subject key identifier: 47:5B:3D:99:DD:C6:C0:A4:A0:48:4B:1E:08:2B:0A:9D:07:35:37:F3 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584F3B7D1F9242BCA4441A67B200 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/62cbd2eb-69b9-3b1b-bcd9-88a91f711f9f.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 394828 IP address blocks: 66.11.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1f:92:42:bc:a4:44:1a:67:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=56b8b801-684e-425a-bd7e-1170e4504294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0e:eb:e4:65:3e:35:ae:74:8d:4f:3b:75:33: 93:18:20:3a:54:c8:c5:99:83:d4:bb:90:3b:73:f5: c0:a5:fa:d5:99:87:b3:8d:5f:ed:ba:04:8a:7c:17: a6:45:91:05:76:66:9d:2a:e3:ae:f2:23:27:6d:79: cf:4c:be:b7:f5:b2:16:93:a2:07:ad:34:2d:9e:6a: f7:93:6f:29:0d:0f:58:5b:fc:0e:46:66:85:07:44: e8:23:fa:16:ec:5c:46:93:b3:cc:92:0e:ef:f1:ef: fd:72:43:26:2b:de:9b:5b:8c:49:8a:27:1f:22:8c: ad:a2:d2:90:de:67:5d:8d:b4:dd:e9:8f:32:ff:91: b3:2c:e5:62:a7:a2:66:55:53:ca:59:20:24:38:77: ec:56:e4:26:3e:97:1c:14:fe:df:da:55:b6:79:45: d2:0e:14:88:a5:77:31:0f:70:8a:f1:44:59:f9:da: aa:f3:83:24:ff:ec:70:30:3e:37:9d:77:87:c8:4b: e4:97:c6:d1:db:80:c9:7f:df:65:b1:9e:54:ef:49: b9:28:6d:42:8b:95:0c:17:a4:8e:7a:03:b2:c2:be: 46:73:4c:3d:32:3f:17:3d:1a:e6:ab:79:d0:a2:5e: cc:10:6e:d6:0a:c6:56:a1:28:06:a1:0f:76:65:f5: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5B:3D:99:DD:C6:C0:A4:A0:48:4B:1E:08:2B:0A:9D:07:35:37:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/62cbd2eb-69b9-3b1b-bcd9-88a91f711f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 66.11.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:45:96:2e:33:cc:cc:0a:64:0f:85:43:85:8e:99:72:3c:66: 94:57:48:a7:2e:3f:36:69:33:24:53:90:ac:5c:28:4a:d4:81: d8:e9:1e:04:73:e3:35:09:2c:82:18:20:84:f2:19:69:51:e9: 3f:16:a4:48:52:c4:3b:67:4c:6d:cc:a6:4a:5c:2e:b3:a7:4a: cc:41:8e:8b:3d:f3:15:ef:bb:bf:82:21:98:3a:59:0c:e2:ea: f0:4b:92:91:ef:c7:ac:84:c4:84:44:66:f2:73:ad:1b:a0:62: 63:29:c1:a0:0a:a0:80:13:cf:c9:9e:fb:61:9c:9f:9a:dd:10: ee:0f:28:d2:13:32:e8:ae:31:69:4a:e2:cc:eb:0e:ff:2c:06: 0e:96:42:04:bf:21:19:1d:08:d8:5a:5c:83:ad:9b:65:a5:49: 8d:2b:80:a9:f0:61:b7:48:1e:a9:2a:2d:34:31:f7:31:a2:2f: 73:ec:0c:c3:9c:3f:92:43:dd:54:d6:f8:05:44:3d:cf:38:f2: 10:48:2c:0b:e5:f3:e5:00:52:28:be:8b:5f:95:80:e5:c1:0d: 5a:03:e4:ab:31:45:1b:bc:7e:a7:d3:f9:80:24:86:c6:b9:f3: 3e:bd:4f:9b:64:13:d0:c5:91:ed:01:bb:56:87:2d:7a:67:59: b4:44:3c:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fR+SQrykRBpnsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk NTZiOGI4MDEtNjg0ZS00MjVhLWJkN2UtMTE3MGU0NTA0Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Q7r5GU+Na50jU87dTOTGCA6VMjFmYPUu5A7 c/XApfrVmYezjV/tugSKfBemRZEFdmadKuOu8iMnbXnPTL639bIWk6IHrTQtnmr3 k28pDQ9YW/wORmaFB0ToI/oW7FxGk7PMkg7v8e/9ckMmK96bW4xJiicfIoytotKQ 3mddjbTd6Y8y/5GzLOVip6JmVVPKWSAkOHfsVuQmPpccFP7f2lW2eUXSDhSIpXcx D3CK8URZ+dqq84Mk/+xwMD43nXeHyEvkl8bR24DJf99lsZ5U70m5KG1Ci5UMF6SO egOywr5Gc0w9Mj8XPRrmq3nQol7MEG7WCsZWoSgGoQ92ZfVygQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdbPZndxsCkoEhLHggrCp0HNTfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNjJjYmQyZWItNjliOS0z YjFiLWJjZDktODhhOTFmNzExZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgsSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRFli4zzMwKZA+FQ4WOmXI8ZpRXSKcuPzZpMyRTkKxcKErUgdjpHgRz 4zUJLIIYIITyGWlR6T8WpEhSxDtnTG3MpkpcLrOnSsxBjos98xXvu7+CIZg6WQzi 6vBLkpHvx6yExIREZvJzrRugYmMpwaAKoIATz8me+2Gcn5rdEO4PKNITMuiuMWlK 4szrDv8sBg6WQgS/IRkdCNhaXIOtm2WlSY0rgKnwYbdIHqkqLTQx9zGiL3PsDMOc P5JD3VTW+AVEPc848hBILAvl8+UAUii+i1+VgOXBDVoD5KsxRRu8fqfT+YAkhsa5 8z69T5tkE9DFke0Bu1aHLXpnWbREPNk= -----END CERTIFICATE-----Generated at Mon Sep 28 18:08:52 2026 by rpki-client