$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa File: a661538f-4136-32b8-a899-88104881e2db.roa (raw, json) Hash identifier: lfo2rLRspbVlUuRqq20s7QNkZytKGf6SH1ooo5RYJIM= Subject key identifier: 63:13:84:05:A0:2D:F0:81:C8:37:02:91:CD:1D:A7:1C:81:C9:E8:90 Certificate issuer: /CN=d64341ea-4a31-4684-bf89-237774f5a468 Certificate serial: 010D0C9F4328584F3E47D96947D2C5D34FE23B55 Authority key identifier: A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16509 IP address blocks: 66.22.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d9:69:47:d2:c5:d3:4f:e2:3b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d64341ea-4a31-4684-bf89-237774f5a468 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=1d07eacd-74cf-4079-b657-00f4019ce33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:d1:e6:9f:91:bf:32:29:b2:69:b5:1a:d5: 40:ca:7e:34:d1:40:f9:ba:2a:34:f8:61:fa:6f:5f: 73:1b:47:25:31:49:a2:7d:a5:67:ad:cd:24:23:e9: 20:9d:16:0e:ef:a4:c0:ff:b5:79:f0:7b:dc:bd:b9: ae:ee:fa:2f:7b:2e:1d:b4:50:0e:d7:f8:d0:aa:e7: 66:de:51:cd:b0:6d:8f:f7:cc:9b:e5:fa:f4:2a:e5: 31:c1:0c:aa:b8:aa:89:0e:c4:4d:a7:56:1f:2c:52: 6c:cd:60:da:2b:a8:ef:2f:79:22:55:71:81:a5:87: 7f:47:29:9f:a6:e4:47:a1:65:61:c6:fe:8b:50:f0: 02:d8:7f:77:ce:a6:54:ec:3c:3a:9b:e4:a8:80:8a: 03:9a:b4:67:97:47:c8:99:95:1a:9d:b8:65:03:1a: d1:d2:fd:c5:21:1d:22:63:c1:92:fd:90:e1:ba:df: ca:46:0f:b9:b8:4c:97:4f:96:10:a8:f1:e0:b9:74: 50:f5:c6:4b:68:39:1c:71:46:55:1f:39:64:c4:a9: 14:b7:d1:3b:f3:0c:5a:4c:1c:b4:be:60:d7:2f:0a: 0d:9a:56:6c:d3:89:53:9b:cd:7b:03:3a:04:33:f4: 87:c4:d6:33:74:9b:f8:5b:99:58:2f:a2:41:0e:dc: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:13:84:05:A0:2D:F0:81:C8:37:02:91:CD:1D:A7:1C:81:C9:E8:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl X509v3 Authority Key Identifier: keyid:A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer sbgp-ipAddrBlock: critical IPv4: 66.22.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:90:77:a1:4e:d1:52:10:ea:0f:6f:9c:c1:61:ef:e9:cf:9b: cc:cc:70:95:ce:d9:01:2e:e9:7e:02:08:b7:0e:65:1c:79:52: c0:e4:f7:1e:6a:d8:1e:1b:bc:8e:6a:35:4c:6e:b3:f8:f4:09: cf:19:b0:96:f6:12:e6:50:6f:20:01:9f:08:80:61:2e:25:26: 95:05:46:11:83:d2:af:61:cc:57:0f:9b:32:8f:12:b8:27:cc: fe:7c:81:55:ff:d4:65:93:2a:00:d2:8a:ea:2a:41:3f:34:ab: 8e:9e:7b:e2:e0:dd:e3:b6:cf:d9:f5:83:40:05:b5:56:39:c1: b3:04:3b:5d:2a:f1:68:38:73:63:79:a0:30:63:f2:66:b3:f7: 0a:63:55:6f:40:aa:48:23:8e:71:37:41:1e:ba:b6:97:c0:2e: c1:a0:6d:3a:f0:3f:7d:1b:89:34:77:1e:97:57:44:fb:5b:20: c3:99:92:7f:65:b8:0b:10:d0:8c:28:39:f4:71:84:8d:5b:2b: 71:ba:61:54:fc:63:35:1c:da:3e:f1:62:50:32:7e:33:b8:4d: 8f:89:f8:d4:7f:30:19:53:13:93:be:dd:fa:9d:cf:92:a4:5d: 63:03:e1:b6:d8:32:5a:23:06:28:84:73:23:ce:f3:84:a7:41: 05:bf:4d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9lpR9LF00/iO1UwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY0MzQxZWEtNGEzMS00Njg0LWJmODktMjM3Nzc0ZjVh NDY4MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MWQwN2VhY2QtNzRjZi00MDc5LWI2NTctMDBmNDAxOWNlMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuPR5p+RvzIpsmm1GtVAyn400UD5uio0+GH6 b19zG0clMUmifaVnrc0kI+kgnRYO76TA/7V58Hvcvbmu7vovey4dtFAO1/jQqudm 3lHNsG2P98yb5fr0KuUxwQyquKqJDsRNp1YfLFJszWDaK6jvL3kiVXGBpYd/Rymf puRHoWVhxv6LUPAC2H93zqZU7Dw6m+SogIoDmrRnl0fImZUanbhlAxrR0v3FIR0i Y8GS/ZDhut/KRg+5uEyXT5YQqPHguXRQ9cZLaDkccUZVHzlkxKkUt9E78wxaTBy0 vmDXLwoNmlZs04lTm817AzoEM/SHxNYzdJv4W5lYL6JBDtzDAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMThAWgLfCByDcCkc0dpxyByeiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNjQz NDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3NzRmNWE0NjgvYTY2MTUzOGYtNDEzNi0z MmI4LWE4OTktODgxMDQ4ODFlMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDY0MzQxZWEtNGEzMS00Njg0LWJm ODktMjM3Nzc0ZjVhNDY4L2Q2NDM0MWVhLTRhMzEtNDY4NC1iZjg5LTIzNzc3NGY1 YTQ2OC5jcmwwHwYDVR0jBBgwFoAUoO8vnwBda9ZyIfSWE7ac8RT9OlQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNjQzNDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3 NzRmNWE0NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyQd6FO0VIQ6g9vnMFh7+nPm8zMcJXO2QEu6X4CCLcOZRx5UsDk9x5q 2B4bvI5qNUxus/j0Cc8ZsJb2EuZQbyABnwiAYS4lJpUFRhGD0q9hzFcPmzKPErgn zP58gVX/1GWTKgDSiuoqQT80q46ee+Lg3eO2z9n1g0AFtVY5wbMEO10q8Wg4c2N5 oDBj8maz9wpjVW9AqkgjjnE3QR66tpfALsGgbTrwP30biTR3HpdXRPtbIMOZkn9l uAsQ0IwoOfRxhI1bK3G6YVT8YzUc2j7xYlAyfjO4TY+J+NR/MBlTE5O+3fqdz5Kk XWMD4bbYMlojBiiEcyPO84SnQQW/TTo= -----END CERTIFICATE-----Generated at Sat Oct 3 19:03:11 2026 by rpki-client