$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa File: 2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa (raw, json) Hash identifier: M7SYHBMcDB2hQUoZm+X8oLxI8Q2cczEmEkZZ0dOfZPc= Subject key identifier: FA:2A:4C:CC:E1:1E:A9:74:BA:2C:2C:15:E5:A2:2B:9B:56:B7:71:EB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F498BC7ECF7DA3C544B794500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 66.93.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:c7:ec:f7:da:3c:54:4b:79:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d72e4436-e7f5-4f02-80ff-917d4933ddb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:77:f4:ff:ba:4f:a6:49:59:7a:41:bf:48: 01:c1:8f:0f:d5:65:8b:33:cb:2e:8d:f1:35:32:ee: 4b:9d:c7:da:65:64:34:ed:36:b2:2e:ec:b8:3f:0f: 42:41:f6:b0:bb:0e:72:86:de:ca:38:47:e4:39:5c: 01:59:36:1e:c1:a1:0f:8d:de:84:75:55:be:aa:98: 01:d9:e0:27:1d:a2:d7:c8:37:61:1a:ae:4e:7d:d5: 9a:a1:96:67:84:14:80:30:dc:fc:9c:bc:80:ef:2a: 12:27:67:3a:2b:bc:0e:e6:e7:11:7a:a8:21:e5:af: b6:86:0c:90:ce:31:dd:98:e2:1b:42:60:e3:dc:bd: ee:df:c6:af:ce:41:ae:34:e7:d6:f3:85:de:a2:02: 0b:92:24:86:9a:03:b0:2e:ed:2c:08:2f:49:0a:83: 7a:ea:94:8e:71:f3:1b:bf:e8:64:33:11:76:64:9c: 84:70:45:25:ca:ff:e1:36:ac:8a:33:8f:a3:1b:e1: c7:29:b7:1f:e8:48:aa:36:68:d9:7e:56:a5:33:ee: 99:ae:b5:a9:d9:2e:8e:c3:18:7e:c0:ea:44:f2:5c: 5b:f1:3d:d9:3b:3c:23:91:bb:6a:35:2c:c9:3c:69: ba:44:75:3b:d2:64:e4:36:38:64:86:26:ef:b8:ed: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2A:4C:CC:E1:1E:A9:74:BA:2C:2C:15:E5:A2:2B:9B:56:B7:71:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:17:0f:84:1d:11:5f:57:12:d7:15:1d:87:6c:34:94:fc:7b: d7:69:86:d3:2d:50:e5:7d:5b:4e:b7:81:68:a8:da:d0:2f:78: e8:fc:ef:f1:32:84:86:87:53:63:73:aa:80:71:a2:20:a8:50: d9:bc:de:21:c2:c5:6d:72:73:80:33:2d:ee:16:69:07:aa:78: b5:d4:42:a1:7c:67:f4:b5:63:6f:80:07:7b:5f:e3:ee:61:a0: a1:e0:78:2d:26:8d:4a:03:6f:e3:46:ee:f6:cd:4b:4c:43:ad: 5d:67:93:e5:b6:89:2d:bb:e3:b9:ec:99:92:4c:f0:1d:30:ba: fe:45:9f:1f:38:b5:e3:33:bb:98:d4:eb:68:12:a3:2f:4c:d7: 94:d7:bb:db:2a:2c:db:1e:8f:bb:c3:2f:8a:df:6f:f3:8d:1c: 0b:d5:d2:52:25:a9:87:79:62:b8:10:56:7f:35:7c:b7:10:c5: 4c:6e:1f:55:26:08:f3:22:42:52:bb:b4:98:d2:f6:be:ee:ac: 4d:8f:70:20:ff:35:b9:d1:85:89:cd:78:cd:80:b9:bc:9e:e7: 28:34:fe:ea:44:c4:93:b5:00:49:02:e2:cc:3c:fe:95:57:47: f5:69:e5:a0:31:c8:24:fa:fd:40:2e:01:7d:83:8a:a1:5c:d0: 9d:83:d3:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji8fs99o8VEt5RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDcyZTQ0MzYtZTdmNS00ZjAyLTgwZmYtOTE3ZDQ5MzNkZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbN39P+6T6ZJWXpBv0gBwY8P1WWLM8sujfE1 Mu5LncfaZWQ07TayLuy4Pw9CQfawuw5yht7KOEfkOVwBWTYewaEPjd6EdVW+qpgB 2eAnHaLXyDdhGq5OfdWaoZZnhBSAMNz8nLyA7yoSJ2c6K7wO5ucReqgh5a+2hgyQ zjHdmOIbQmDj3L3u38avzkGuNOfW84XeogILkiSGmgOwLu0sCC9JCoN66pSOcfMb v+hkMxF2ZJyEcEUlyv/hNqyKM4+jG+HHKbcf6EiqNmjZflalM+6ZrrWp2S6Owxh+ wOpE8lxb8T3ZOzwjkbtqNSzJPGm6RHU70mTkNjhkhibvuO3+MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoqTMzhHql0uiwsFeWiK5tWt3HrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmI2ZGRlYWMtZjIzMy0z NDI5LTg3ODUtNWRlZjBkNmE1YmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQl18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUXD4QdEV9XEtcVHYdsNJT8e9dphtMtUOV9W063gWio2tAveOj87/Ey hIaHU2NzqoBxoiCoUNm83iHCxW1yc4AzLe4WaQeqeLXUQqF8Z/S1Y2+AB3tf4+5h oKHgeC0mjUoDb+NG7vbNS0xDrV1nk+W2iS2747nsmZJM8B0wuv5Fnx84teMzu5jU 62gSoy9M15TXu9sqLNsej7vDL4rfb/ONHAvV0lIlqYd5YrgQVn81fLcQxUxuH1Um CPMiQlK7tJjS9r7urE2PcCD/NbnRhYnNeM2Aubye5yg0/upExJO1AEkC4sw8/pVX R/Vp5aAxyCT6/UAuAX2DiqFc0J2D05c= -----END CERTIFICATE-----Generated at Sun Oct 11 11:33:07 2026 by rpki-client