$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/14c7c0ba-3f79-380b-9ae5-fcff71693563.roa File: 14c7c0ba-3f79-380b-9ae5-fcff71693563.roa (raw, json) Hash identifier: xETfNjVAH6YM+HNqUR/mbeNW97/FrK43L89q+fZKwvk= Subject key identifier: 17:46:69:50:09:58:32:61:66:55:14:52:32:D7:DD:A4:45:DE:84:90 Certificate issuer: /CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Certificate serial: 010D0C9F4328584F6F230FCB381C34EB5BFEA780 Authority key identifier: 8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/14c7c0ba-3f79-380b-9ae5-fcff71693563.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 19919 IP address blocks: 160.19.0.0/20 maxlen: 20 162.245.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:0f:cb:38:1c:34:eb:5b:fe:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=9f7c3645-af3b-4c38-ae7a-c17ea0fdf9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:9e:68:b0:76:8e:12:be:e2:b4:af:ad:e1: 98:a8:db:38:f4:9f:6a:37:57:58:ec:1b:cd:dd:7c: c1:1d:7b:31:47:e6:44:76:79:f4:c4:ea:53:37:05: 8b:04:92:64:79:57:43:19:88:38:15:67:f5:26:1a: 90:39:4f:a7:6a:42:49:1f:c3:95:a3:07:49:b8:c5: 12:0a:89:4b:e3:b1:aa:20:fa:b8:58:77:c5:f1:9f: 85:a5:62:0c:49:96:3a:83:eb:a7:5f:81:66:b9:6d: f1:1e:72:47:99:5f:43:80:e9:90:9d:35:f3:d9:18: 48:70:91:1d:3d:30:04:da:60:d5:7a:1b:34:15:6c: 7a:a1:3f:91:1d:fa:3d:30:84:1d:1d:b9:c5:d5:79: ff:b1:4b:ee:6f:77:56:0d:a5:b5:83:58:bf:b9:7c: 76:a0:c1:f4:34:53:df:39:01:8a:47:5f:9a:b3:a1: 72:f9:4d:48:de:a0:f2:23:8b:ad:c2:87:9e:f4:61: 7a:1f:6a:53:6b:f1:9b:d0:96:9f:b5:f5:a5:af:86: 89:40:5b:16:e4:7b:b4:25:52:87:91:5b:26:66:96: a0:e4:b2:e5:f8:d5:db:24:c7:dc:52:ce:f7:59:d7: 5f:05:30:f2:8b:92:ca:a7:68:33:7b:ad:ba:d5:05: 69:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:46:69:50:09:58:32:61:66:55:14:52:32:D7:DD:A4:45:DE:84:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/14c7c0ba-3f79-380b-9ae5-fcff71693563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl X509v3 Authority Key Identifier: keyid:8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer sbgp-ipAddrBlock: critical IPv4: 160.19.0.0/20 162.245.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:37:00:2c:e4:f2:15:d8:2e:14:10:8d:4a:f4:a9:a5:d1:15: 4f:e3:34:6e:35:55:c2:6b:81:b9:bc:00:45:e1:e9:6f:9e:4a: 5d:8c:47:43:11:cf:3e:68:b7:5f:b8:ac:49:43:e8:8b:8c:25: 4e:9b:92:f1:73:09:96:e6:fd:d4:a8:f8:8f:84:8f:5c:87:ca: 99:a5:15:bb:47:0d:d4:54:06:3c:08:8a:82:a3:f8:ba:b0:9f: 2c:c6:a6:17:99:1f:61:4b:5c:da:6a:bb:ba:c9:3e:e6:c7:dd: e6:1b:29:fa:6c:b7:56:d7:c5:65:f2:46:ea:a4:25:b7:3e:59: 41:82:0d:69:37:c6:5b:8f:a7:6b:a6:6a:b2:a9:b3:aa:ea:32: 0f:c6:9c:f0:48:4e:71:fe:20:d8:7f:72:2b:4a:fd:29:d2:8c: 0d:3a:f5:89:28:e9:b2:ce:aa:20:ab:7b:75:3e:f2:95:7a:88: 5a:34:49:8b:0b:20:7c:fd:34:cc:25:3d:2f:e5:6f:3a:fb:ae: 4e:0d:24:ab:73:cf:ab:f7:0a:83:e4:c7:0b:6a:9b:ed:f9:3b: 77:32:1e:ab:d9:16:9f:80:cb:cb:43:32:04:9a:10:7a:68:95: 5a:7d:d1:6e:44:54:9d:08:2e:ff:8a:df:3a:a0:09:d0:29:3e: 7b:37:92:f1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9vIw/LOBw061v+p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZhZmM3YTAtOTQyNC00MzFiLTg3YWEtZmFiNGM3MDMy ZWQyMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk OWY3YzM2NDUtYWYzYi00YzM4LWFlN2EtYzE3ZWEwZmRmOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDKeaLB2jhK+4rSvreGYqNs49J9qN1dY7BvN 3XzBHXsxR+ZEdnn0xOpTNwWLBJJkeVdDGYg4FWf1JhqQOU+nakJJH8OVowdJuMUS ColL47GqIPq4WHfF8Z+FpWIMSZY6g+unX4FmuW3xHnJHmV9DgOmQnTXz2RhIcJEd PTAE2mDVehs0FWx6oT+RHfo9MIQdHbnF1Xn/sUvub3dWDaW1g1i/uXx2oMH0NFPf OQGKR1+as6Fy+U1I3qDyI4utwoee9GF6H2pTa/Gb0JaftfWlr4aJQFsW5Hu0JVKH kVsmZpag5LLl+NXbJMfcUs73WddfBTDyi5LKp2gze6261QVpoQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBdGaVAJWDJhZlUUUjLX3aRF3oSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NmFm YzdhMC05NDI0LTQzMWItODdhYS1mYWI0YzcwMzJlZDIvMTRjN2MwYmEtM2Y3OS0z ODBiLTlhZTUtZmNmZjcxNjkzNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjZhZmM3YTAtOTQyNC00MzFiLTg3 YWEtZmFiNGM3MDMyZWQyLzY2YWZjN2EwLTk0MjQtNDMxYi04N2FhLWZhYjRjNzAz MmVkMi5jcmwwHwYDVR0jBBgwFoAUi7dDLh1Lr9B5AwaWTKytXGQkYSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NmFmYzdhMC05NDI0LTQzMWItODdhYS1mYWI0 YzcwMzJlZDIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEoBMAAwQD ovWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGQ3ACzk8hXYLhQQjUr0qaXRFU/jNG41VcJrgbm8AEXh6W+e Sl2MR0MRzz5ot1+4rElD6IuMJU6bkvFzCZbm/dSo+I+Ej1yHypmlFbtHDdRUBjwI ioKj+LqwnyzGpheZH2FLXNpqu7rJPubH3eYbKfpst1bXxWXyRuqkJbc+WUGCDWk3 xluPp2umarKps6rqMg/GnPBITnH+INh/citK/SnSjA069Yko6bLOqiCre3U+8pV6 iFo0SYsLIHz9NMwlPS/lbzr7rk4NJKtzz6v3CoPkxwtqm+35O3cyHqvZFp+Ay8tD MgSaEHpolVp90W5EVJ0ILv+K3zqgCdApPns3kvE= -----END CERTIFICATE-----Generated at Mon Oct 12 19:37:09 2026 by rpki-client