$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/68eaaf49-4083-3639-8759-30c3ccc560f7.roa File: 68eaaf49-4083-3639-8759-30c3ccc560f7.roa (raw, json) Hash identifier: 3wbI1TeZzQljbi3Wb1S820iFvUy4ETQML9vT3iCWjcg= Subject key identifier: CA:31:7C:B0:1C:85:41:55:0F:DB:BC:F6:3D:E2:F2:69:70:35:B2:7F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F024221ACC2DA8028CD35A800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/68eaaf49-4083-3639-8759-30c3ccc560f7.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 834 IP address blocks: 66.92.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:21:ac:c2:da:80:28:cd:35:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=4c31428e-eb52-4409-b5c1-41e9a410a4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:f7:a4:e4:3f:11:70:86:33:42:32:5c:e2: 3d:9d:3d:e8:49:12:77:1a:61:5f:c0:51:24:65:16: 7c:89:3a:82:3f:f1:d5:b9:17:3b:03:88:b0:97:d4: a1:d5:da:3a:86:8f:dc:eb:70:94:24:ec:78:b3:27: 7c:f3:96:09:af:82:52:88:2c:fb:d2:4c:df:0a:2d: f0:22:40:d5:65:6a:0a:db:49:0f:23:dd:30:01:dd: 4b:7a:14:ca:d7:bc:36:c2:28:73:ef:66:e9:0b:58: e1:7d:e6:37:bb:52:65:4c:d9:6b:18:d1:47:69:0d: 7f:a7:a7:02:51:0a:ec:1d:67:02:dd:11:16:dd:0a: da:76:22:67:72:fc:58:f4:15:75:9b:a1:2d:91:13: fa:ee:1f:a8:0b:39:55:50:5c:85:ea:c4:6a:05:16: 13:2a:1e:14:23:96:d0:96:4c:96:b1:38:19:76:4b: b1:0e:58:65:c9:ce:62:3c:75:eb:08:1d:ad:14:77: d8:53:98:09:c2:f0:c1:79:eb:4f:d4:33:05:a6:35: 84:96:de:39:59:1e:9a:9c:a1:96:84:5d:0a:e6:27: 9c:6f:f8:71:a8:cb:59:35:01:db:85:0b:73:b4:2c: 10:bf:ce:bb:d4:52:50:19:d4:dd:ff:76:c2:bf:17: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:31:7C:B0:1C:85:41:55:0F:DB:BC:F6:3D:E2:F2:69:70:35:B2:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/68eaaf49-4083-3639-8759-30c3ccc560f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:8a:8f:fb:10:8e:69:2a:c7:ce:73:00:7e:6a:0e:a7:48:22: 45:16:ff:1f:81:1e:59:9a:9e:92:f9:d8:4b:f0:a6:34:d4:3c: 2e:d8:a9:f3:aa:ed:1c:4a:09:5e:f9:d0:21:9b:3c:93:ce:1a: 07:f5:04:84:0e:6a:02:7e:7e:f0:28:c6:e2:af:3c:46:78:7f: 55:b1:ea:ef:ce:95:4f:10:90:de:3d:65:28:ec:68:37:15:5f: f7:73:04:5b:4c:2d:f2:cf:37:d6:56:09:7e:97:22:31:ae:34: 4d:3c:fc:3b:0e:5d:7a:3f:6f:2e:32:ff:4f:20:c4:09:cd:29: 1d:74:f1:29:23:49:4e:be:ad:cb:10:28:f4:d0:02:61:f2:11: de:0e:38:8d:9e:1e:bb:fb:db:9b:b8:c0:6c:c9:6e:4a:60:f5: cd:bd:9d:56:22:d0:af:11:c0:a9:1d:e5:d2:81:4a:91:85:63: 4d:41:4b:a4:c8:2a:d5:5e:86:40:85:7a:41:be:10:ab:71:91: 61:8f:da:66:72:4f:3d:db:17:66:31:3f:09:20:64:78:19:75: e7:02:34:22:85:0d:01:62:fa:e0:0d:a4:da:ad:6c:27:5f:3e: 4b:78:08:52:be:3c:05:63:64:00:ee:69:a4:24:88:a0:43:9e: ec:41:3b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQiGswtqAKM01qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NGMzMTQyOGUtZWI1Mi00NDA5LWI1YzEtNDFlOWE0MTBhNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfv3pOQ/EXCGM0IyXOI9nT3oSRJ3GmFfwFEk ZRZ8iTqCP/HVuRc7A4iwl9Sh1do6ho/c63CUJOx4syd885YJr4JSiCz70kzfCi3w IkDVZWoK20kPI90wAd1LehTK17w2wihz72bpC1jhfeY3u1JlTNlrGNFHaQ1/p6cC UQrsHWcC3REW3QradiJncvxY9BV1m6EtkRP67h+oCzlVUFyF6sRqBRYTKh4UI5bQ lkyWsTgZdkuxDlhlyc5iPHXrCB2tFHfYU5gJwvDBeetP1DMFpjWElt45WR6anKGW hF0K5iecb/hxqMtZNQHbhQtztCwQv8671FJQGdTd/3bCvxfI2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoxfLAchUFVD9u89j3i8mlwNbJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjhlYWFmNDktNDA4My0z NjM5LTg3NTktMzBjM2NjYzU2MGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyKj/sQjmkqx85zAH5qDqdIIkUW/x+BHlmanpL52EvwpjTUPC7YqfOq 7RxKCV750CGbPJPOGgf1BIQOagJ+fvAoxuKvPEZ4f1Wx6u/OlU8QkN49ZSjsaDcV X/dzBFtMLfLPN9ZWCX6XIjGuNE08/DsOXXo/by4y/08gxAnNKR108SkjSU6+rcsQ KPTQAmHyEd4OOI2eHrv725u4wGzJbkpg9c29nVYi0K8RwKkd5dKBSpGFY01BS6TI KtVehkCFekG+EKtxkWGP2mZyTz3bF2YxPwkgZHgZdecCNCKFDQFi+uANpNqtbCdf Pkt4CFK+PAVjZADuaaQkiKBDnuxBOx0= -----END CERTIFICATE-----Generated at Sat Oct 3 08:28:40 2026 by rpki-client