$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498ae72d-730e-3075-b632-778512aa8180.roa File: 498ae72d-730e-3075-b632-778512aa8180.roa (raw, json) Hash identifier: OacywsKqhgU5w87IQAY6gwWysLzxjG29xpvTK3Iz98U= Subject key identifier: D7:C9:AF:CD:CF:CE:D5:71:2B:F1:83:1A:0A:E0:7A:A4:9C:45:32:EF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49884EC02E23BF6C1819BB40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498ae72d-730e-3075-b632-778512aa8180.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5065 IP address blocks: 66.253.8.0/24 maxlen: 24 69.17.3.0/24 maxlen: 24 69.17.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:4e:c0:2e:23:bf:6c:18:19:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=68168637-ec1c-4693-8b8a-c8583ccfac39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f5:16:0b:8b:93:3e:40:af:4e:97:98:e4:dc: 13:18:de:bc:e7:ef:7e:d0:db:4f:22:15:04:dd:fd: f3:de:8a:90:63:63:77:0b:c4:4e:95:5a:e0:40:93: 71:5a:05:f8:7b:10:99:f6:19:30:59:96:0f:e9:33: f7:f6:49:7d:34:eb:2b:77:f5:33:17:be:07:aa:54: 65:4c:27:a9:91:fc:b7:f0:7e:0b:84:77:f0:1f:21: 8b:d9:76:0e:c8:b2:1f:de:15:db:68:dc:cd:e7:10: 6b:00:65:01:83:8a:cf:4f:01:1a:f8:33:7f:b6:36: 20:47:b0:7c:5d:78:50:e4:f0:b1:b5:01:b4:1e:e7: 59:b4:9d:f7:b8:56:29:75:0d:10:e3:76:d9:d7:74: ea:4c:42:3e:e6:70:aa:49:88:ae:c4:3d:d2:37:70: 5b:27:d9:53:6c:55:e9:91:7e:47:30:58:fb:3f:50: f9:ab:07:c4:30:6a:fa:fe:5c:fb:7f:9c:22:0a:0d: c9:d0:bf:a3:af:dd:95:bb:8b:2b:00:41:eb:ae:61: 7f:30:51:49:38:51:db:8b:d3:e7:6c:36:eb:ab:31: a6:9d:9d:41:84:c4:3a:aa:7f:e8:3a:6c:1c:2c:20: 30:36:ba:7b:74:05:9d:3a:34:26:7d:e0:06:76:46: 61:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C9:AF:CD:CF:CE:D5:71:2B:F1:83:1A:0A:E0:7A:A4:9C:45:32:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498ae72d-730e-3075-b632-778512aa8180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.8.0/24 69.17.3.0-69.17.4.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a5:33:33:76:fe:3d:e8:b5:86:4d:3d:f9:d1:72:e0:b1:22: f1:36:69:fa:fe:cc:be:9e:1d:0a:18:0e:fd:c3:0f:70:5d:d5: 74:c3:96:a8:bc:6b:83:83:65:60:f9:dd:0a:b3:48:a5:9e:d6: f2:5e:6d:dd:d2:6b:bf:9f:94:6f:02:43:7c:f0:c9:4b:ab:80: cf:d6:da:63:b0:b7:f1:ca:75:de:ff:20:32:fd:52:50:a2:28: 82:76:42:c7:54:d7:cd:f8:bf:24:9e:25:79:7e:fc:d7:4a:15: 28:4e:eb:21:9d:72:c2:52:2e:90:26:c7:bd:a2:01:d4:61:7b: 24:7d:e5:e4:51:63:e0:79:69:19:bb:d3:1f:7c:5c:b7:45:80: 64:de:38:e0:4c:d0:12:2a:f3:eb:f6:51:09:9a:4e:57:a5:11: e0:08:ef:16:d5:42:ad:32:b2:f5:e9:09:65:82:f5:97:d8:77: e5:73:23:46:53:33:e4:62:d1:28:ee:5a:56:ca:9b:bf:d4:2c: 2f:d3:23:83:75:1d:c3:95:44:20:d4:e6:a5:ec:1c:95:d8:55: 4c:47:06:76:73:79:64:ef:b1:93:40:22:99:67:a5:b7:be:4b: ae:67:3a:19:fc:75:73:06:1b:b8:38:04:c6:98:ae:bd:3a:57: fe:0c:27:ec -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE9JiE7ALiO/bBgZu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjgxNjg2MzctZWMxYy00NjkzLThiOGEtYzg1ODNjY2ZhYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvUWC4uTPkCvTpeY5NwTGN685+9+0NtPIhUE 3f3z3oqQY2N3C8ROlVrgQJNxWgX4exCZ9hkwWZYP6TP39kl9NOsrd/UzF74HqlRl TCepkfy38H4LhHfwHyGL2XYOyLIf3hXbaNzN5xBrAGUBg4rPTwEa+DN/tjYgR7B8 XXhQ5PCxtQG0HudZtJ33uFYpdQ0Q43bZ13TqTEI+5nCqSYiuxD3SN3BbJ9lTbFXp kX5HMFj7P1D5qwfEMGr6/lz7f5wiCg3J0L+jr92Vu4srAEHrrmF/MFFJOFHbi9Pn bDbrqzGmnZ1BhMQ6qn/oOmwcLCAwNrp7dAWdOjQmfeAGdkZhZQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFNfJr83PztVxK/GDGgrgeqScRTLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDk4YWU3MmQtNzMwZS0z MDc1LWI2MzItNzc4NTEyYWE4MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAQv0IMAwD BABFEQMDBABFEQQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAIqUzM3b+Pei1hk09+dFy4LEi8TZp+v7Mvp4d ChgO/cMPcF3VdMOWqLxrg4NlYPndCrNIpZ7W8l5t3dJrv5+UbwJDfPDJS6uAz9ba Y7C38cp13v8gMv1SUKIognZCx1TXzfi/JJ4leX7810oVKE7rIZ1ywlIukCbHvaIB 1GF7JH3l5FFj4HlpGbvTH3xct0WAZN444EzQEirz6/ZRCZpOV6UR4AjvFtVCrTKy 9ekJZYL1l9h35XMjRlMz5GLRKO5aVsqbv9QsL9Mjg3Udw5VEINTmpewcldhVTEcG dnN5ZO+xk0AimWelt75Lrmc6Gfx1cwYbuDgExpiuvTpX/gwn7A== -----END CERTIFICATE-----Generated at Mon Sep 28 19:19:26 2026 by rpki-client