$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa File: fbd0f42f-fbef-3f5d-b443-269369b555df.roa (raw, json) Hash identifier: 0VPKDNNK9zL1L5nwTfZu4sXfIsXwcDX0nSu+4XN80PQ= Subject key identifier: B2:25:AF:DD:02:11:2E:BD:F9:81:94:14:41:80:C1:B6:43:CF:00:44 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584F49740F8D82D856F20D4F7C20 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397673 IP address blocks: 66.11.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0f:8d:82:d8:56:f2:0d:4f:7c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d1c94ad9-52e7-4508-8fc3-75f95a85c3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:90:72:3f:06:69:20:9f:a5:7d:0e:51:3c:ea: 41:8a:89:32:94:92:c5:d4:54:39:bb:e8:a4:df:10: 2e:3f:35:e9:32:44:55:62:3f:bc:6c:56:50:2c:65: 5c:30:55:e8:4f:d8:be:29:95:7c:1e:b2:26:db:69: 11:ba:10:30:55:be:fa:50:1a:68:5d:a7:4f:46:41: d4:d1:e2:0a:0f:f6:65:a8:9a:f4:08:b0:6f:32:73: 1a:3c:75:e6:ab:08:85:4f:cf:65:29:15:13:8b:21: d1:43:56:f9:36:67:65:43:1b:a3:12:4d:3d:31:fb: 29:18:89:98:a8:7a:f0:18:b5:96:2f:a8:9c:22:ba: 85:64:a2:81:e2:68:0f:1a:df:2f:89:b9:0c:80:05: ab:03:4b:0a:47:94:d4:37:a8:14:60:3d:bb:77:b7: b6:e9:8e:a1:59:c0:a2:a1:8d:40:f3:7a:00:d5:31: 37:68:e8:99:6c:d7:f3:82:24:9b:d4:02:d1:32:e9: 42:c2:4d:5f:ea:9c:a6:29:c1:01:2e:8f:1f:c6:4e: 02:74:11:14:bc:eb:b7:b9:5e:5f:ba:f4:1a:e6:1f: f4:5b:48:bc:5c:ac:2e:ba:9b:66:61:4a:1e:36:1e: 6a:2b:fd:27:d2:06:09:62:da:63:84:a3:fb:0d:f1: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:25:AF:DD:02:11:2E:BD:F9:81:94:14:41:80:C1:B6:43:CF:00:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 66.11.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:32:5e:d1:dd:2d:88:7b:b2:0f:95:a2:b4:5e:f7:d8:14:e0: e4:31:b0:94:41:64:88:d6:76:13:f5:87:48:63:4d:50:35:75: 9f:a6:b5:c3:1d:c1:b2:0c:92:7b:35:24:64:fe:f9:90:e0:7d: f5:95:92:06:24:3b:19:99:8d:cd:62:10:7e:1a:f4:21:b9:5f: 53:d1:ae:a9:78:60:89:87:49:0e:90:0b:a9:81:d1:9a:9b:55: 31:d5:dd:3e:39:71:54:6f:ed:6a:ff:98:65:c2:83:ca:89:98: d2:71:84:6b:8c:58:b3:ae:3c:03:af:09:96:32:92:46:c9:0d: a0:08:66:3b:57:d0:04:64:e3:ac:67:d0:a6:1f:56:66:d2:99: 80:ae:81:b5:cd:eb:f3:f7:27:64:e3:29:cf:af:28:d4:0e:5a: 93:41:19:15:56:00:90:88:86:37:52:d4:64:cb:7f:83:13:cf: 92:93:22:45:5f:19:8a:ec:bd:58:63:0e:09:39:78:e3:fc:80: bd:20:e6:73:71:60:ee:30:4a:39:ec:ff:6d:6c:84:26:ae:fe: d0:cd:1b:1d:2f:55:6d:0d:e2:1c:ca:ef:62:17:7a:1f:58:77: a8:23:e5:1f:71:6c:e2:e0:26:9d:5d:17:fb:fb:f4:58:a9:51: 4b:ec:b5:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdA+NgthW8g1PfCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDFjOTRhZDktNTJlNy00NTA4LThmYzMtNzVmOTVhODVjM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JByPwZpIJ+lfQ5RPOpBiokylJLF1FQ5u+ik 3xAuPzXpMkRVYj+8bFZQLGVcMFXoT9i+KZV8HrIm22kRuhAwVb76UBpoXadPRkHU 0eIKD/ZlqJr0CLBvMnMaPHXmqwiFT89lKRUTiyHRQ1b5NmdlQxujEk09MfspGImY qHrwGLWWL6icIrqFZKKB4mgPGt8vibkMgAWrA0sKR5TUN6gUYD27d7e26Y6hWcCi oY1A83oA1TE3aOiZbNfzgiSb1ALRMulCwk1f6pymKcEBLo8fxk4CdBEUvOu3uV5f uvQa5h/0W0i8XKwuuptmYUoeNh5qK/0n0gYJYtpjhKP7DfHKWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIlr90CES69+YGUFEGAwbZDzwBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZmJkMGY0MmYtZmJlZi0z ZjVkLWI0NDMtMjY5MzY5YjU1NWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgsSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsyXtHdLYh7sg+VorRe99gU4OQxsJRBZIjWdhP1h0hjTVA1dZ+mtcMd wbIMkns1JGT++ZDgffWVkgYkOxmZjc1iEH4a9CG5X1PRrql4YImHSQ6QC6mB0Zqb VTHV3T45cVRv7Wr/mGXCg8qJmNJxhGuMWLOuPAOvCZYykkbJDaAIZjtX0ARk46xn 0KYfVmbSmYCugbXN6/P3J2TjKc+vKNQOWpNBGRVWAJCIhjdS1GTLf4MTz5KTIkVf GYrsvVhjDgk5eOP8gL0g5nNxYO4wSjns/21shCau/tDNGx0vVW0N4hzK72IXeh9Y d6gj5R9xbOLgJp1dF/v79FipUUvstZs= -----END CERTIFICATE-----Generated at Sun Oct 11 11:03:20 2026 by rpki-client