$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89fd6bb2-f912-3ded-af1d-c7df74b7f0f7.roa File: 89fd6bb2-f912-3ded-af1d-c7df74b7f0f7.roa (raw, json) Hash identifier: iCGr1xtYIwTVoYGkENCmFdrpyIf/lTua88hGp6XNLBI= Subject key identifier: DD:B3:FF:8A:23:2B:86:E7:2E:6C:31:AA:68:7A:5C:C9:C5:38:8A:0B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4987429DB64A34FC79FE5B40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89fd6bb2-f912-3ded-af1d-c7df74b7f0f7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32620 IP address blocks: 66.253.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:42:9d:b6:4a:34:fc:79:fe:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d93d5980-e907-47f7-8314-3e66cc122825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:18:23:18:52:be:c4:06:69:77:5e:4d:c7: 8e:ee:35:a8:d7:18:59:ab:57:02:b6:f6:74:3a:bd: cc:4f:7c:6d:1b:83:9f:32:44:b3:6c:a1:9c:d7:a1: d2:98:87:da:82:75:87:ef:b9:93:81:6f:2f:58:df: 7a:25:8b:25:1a:8d:cc:b3:9d:a7:11:e9:7c:cb:b4: 75:d1:74:f6:c1:b2:3b:93:56:ff:57:8c:b6:90:c2: ea:8e:e1:db:06:a2:e0:95:88:01:e6:11:44:c2:dd: b6:b1:ba:29:ab:3e:9a:41:9b:eb:ae:c0:52:04:cf: b1:a6:97:b8:9d:32:19:d7:53:67:17:ce:1c:1e:bf: 0f:31:ef:07:cf:11:4c:a6:55:5c:1c:a1:e8:b6:29: 28:d3:1b:87:a8:7a:d4:31:33:0c:f2:98:c7:b5:c0: 59:ba:eb:67:f8:7b:b3:8f:22:67:13:a2:85:24:bc: 20:ab:18:d1:c7:d4:17:13:da:8f:f3:a3:81:99:79: 9c:b5:62:76:1d:f6:e8:1e:93:91:37:40:0c:5c:ad: b1:56:5e:0d:e9:55:66:ee:56:fc:7f:4e:05:f0:63: ef:73:54:17:32:dc:e3:4d:49:12:9b:1c:a0:c1:73: 2a:3f:48:6c:0d:10:31:bc:46:f9:eb:06:b8:96:e4: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B3:FF:8A:23:2B:86:E7:2E:6C:31:AA:68:7A:5C:C9:C5:38:8A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89fd6bb2-f912-3ded-af1d-c7df74b7f0f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a2:d9:74:57:7f:2b:b6:39:9c:31:b4:a9:4f:82:cb:ba:be: b3:5f:f0:50:15:b4:a8:43:70:87:31:64:e0:11:83:41:dc:d0: fc:f1:11:46:30:c0:11:4e:e5:2d:3a:56:94:25:4b:4b:ad:88: 79:b6:3a:37:eb:1e:da:9c:e2:f1:b6:5b:27:d1:62:73:ec:68: f0:2c:6d:67:4f:c4:8b:2e:b7:94:96:fc:e5:cc:af:76:95:10: a1:60:89:a4:d9:9c:9f:7b:99:14:67:14:cb:c2:1b:5a:89:b0: c6:f6:a0:d9:ef:34:aa:65:47:93:09:23:02:62:8f:8f:d3:58: 86:b6:6f:ec:67:96:60:b3:2d:2b:91:8f:3a:1b:5c:28:17:1b: 77:a7:5a:3b:8d:8f:f9:5b:f0:78:b4:8f:f7:be:77:1a:99:d9: 29:77:b0:8c:e6:3b:3b:e2:91:dc:48:9b:7e:38:43:65:bf:c1: 23:f7:c8:c0:7a:67:7a:f9:aa:35:f8:56:55:c9:31:b9:f6:8d: eb:57:e8:48:fd:95:6b:f2:ea:43:3e:9b:5d:c8:b6:a1:04:fa: 94:06:94:3c:45:88:05:8d:7b:69:c3:ee:2e:98:cc:ab:94:cd: 2b:d8:f2:fa:9f:0b:1a:bc:22:26:72:17:65:c5:e7:4a:20:52: a2:55:02:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh0Kdtko0/Hn+W0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDkzZDU5ODAtZTkwNy00N2Y3LTgzMTQtM2U2NmNjMTIyODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08kYIxhSvsQGaXdeTceO7jWo1xhZq1cCtvZ0 Or3MT3xtG4OfMkSzbKGc16HSmIfagnWH77mTgW8vWN96JYslGo3Ms52nEel8y7R1 0XT2wbI7k1b/V4y2kMLqjuHbBqLglYgB5hFEwt22sbopqz6aQZvrrsBSBM+xppe4 nTIZ11NnF84cHr8PMe8HzxFMplVcHKHotiko0xuHqHrUMTMM8pjHtcBZuutn+Huz jyJnE6KFJLwgqxjRx9QXE9qP86OBmXmctWJ2HfboHpORN0AMXK2xVl4N6VVm7lb8 f04F8GPvc1QXMtzjTUkSmxygwXMqP0hsDRAxvEb56wa4luRmLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2z/4ojK4bnLmwxqmh6XMnFOIoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODlmZDZiYjItZjkxMi0z ZGVkLWFmMWQtYzdkZjc0YjdmMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCi2XRXfyu2OZwxtKlPgsu6vrNf8FAVtKhDcIcxZOARg0Hc0PzxEUYw wBFO5S06VpQlS0utiHm2OjfrHtqc4vG2WyfRYnPsaPAsbWdPxIsut5SW/OXMr3aV EKFgiaTZnJ97mRRnFMvCG1qJsMb2oNnvNKplR5MJIwJij4/TWIa2b+xnlmCzLSuR jzobXCgXG3enWjuNj/lb8Hi0j/e+dxqZ2Sl3sIzmOzvikdxIm344Q2W/wSP3yMB6 Z3r5qjX4VlXJMbn2jetX6Ej9lWvy6kM+m13ItqEE+pQGlDxFiAWNe2nD7i6YzKuU zSvY8vqfCxq8IiZyF2XF50ogUqJVAlo= -----END CERTIFICATE-----Generated at Sat Oct 3 10:53:37 2026 by rpki-client