$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff5e3ca1-1890-3bef-b6eb-746808d83ca8.roa File: ff5e3ca1-1890-3bef-b6eb-746808d83ca8.roa (raw, json) Hash identifier: D0Ye+aD+zcxNMK9cL9TjXSJRi6MPPjLVF26pQ0CZFSA= Subject key identifier: CF:F0:D8:F8:28:AF:F0:8C:FE:31:70:CF:DE:6E:4A:CD:84:63:BA:C8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F0ED24314156B1BFDD3F3EA80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff5e3ca1-1890-3bef-b6eb-746808d83ca8.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 66.253.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:43:14:15:6b:1b:fd:d3:f3:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=9bfab1b2-6bd8-4fa3-ab11-cacd62d7d1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:ec:75:99:5d:99:07:f4:a5:42:84:9b:1e: b7:0b:56:6f:cc:3c:1f:11:68:4a:60:f2:5b:42:9b: f2:d7:ce:03:c1:63:5f:14:23:bd:9d:92:40:2d:cd: 13:43:8a:a5:a5:e4:b1:e7:1c:6d:47:be:9d:d3:cd: 40:6a:ad:57:46:ec:35:fb:4c:b3:cb:a9:4e:20:ea: 35:52:b5:7a:7b:59:d9:60:fd:ba:c6:84:88:01:a3: 8f:f8:30:cd:cb:25:d7:c0:82:f0:a9:a3:be:68:da: a5:d7:82:37:f6:f5:1d:01:52:48:cb:68:e2:a3:dd: e8:4b:8e:a7:bb:23:3e:1a:66:46:55:44:93:ad:90: ce:4f:13:58:ec:cb:b2:68:0f:01:54:28:8b:0b:21: 95:92:02:c9:03:63:31:f7:39:e8:fa:d7:32:e2:d4: 84:8c:8c:f8:e9:8e:38:e2:6f:43:61:0a:da:25:67: 2a:92:ce:3f:42:a1:f4:ec:d1:fb:df:d9:6e:62:52: e6:2d:26:ae:c8:fc:18:ab:50:fd:89:41:5f:f9:58: af:a7:3f:d0:88:9a:f1:d9:14:03:38:06:e2:11:7d: e6:92:5d:93:95:81:c6:84:af:a5:eb:00:58:ce:f0: 88:6f:7b:ce:b1:b8:f8:f2:5c:b0:2c:cd:e9:a7:5c: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F0:D8:F8:28:AF:F0:8C:FE:31:70:CF:DE:6E:4A:CD:84:63:BA:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff5e3ca1-1890-3bef-b6eb-746808d83ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ec:b8:78:9b:eb:97:ec:07:0c:e5:2f:bf:ef:0f:a6:26:bf: 1f:6b:91:54:02:2e:46:99:b9:ea:4e:34:40:ed:ae:c0:0d:b1: 95:31:58:a6:9a:89:00:0e:d6:2a:a7:8c:30:ab:2f:5c:eb:41: 70:9c:33:39:7e:8c:4e:25:54:9a:04:f0:b2:01:b9:df:f1:16: 71:66:fb:57:12:4f:3e:ad:fe:56:98:31:eb:59:72:e3:2c:c8: 9b:d7:35:d5:c4:3b:fd:48:38:1d:6c:d4:ec:d2:22:8c:4f:ce: dd:40:90:a7:88:a2:89:7e:a6:fa:8f:1b:13:9f:03:ba:aa:e9: f8:8b:e9:de:f7:9f:c1:4a:f8:bd:4e:8e:c5:b3:c2:55:40:7e: 8d:8d:df:ed:23:e9:95:e9:d4:e4:e6:7b:1a:c2:fb:a9:ce:c4: 7d:3d:c2:80:62:cf:f5:1c:9b:37:ea:e9:51:1e:52:6b:02:42: 3a:a1:af:11:0e:78:d3:6a:37:44:42:34:93:af:18:00:bb:15: c1:40:82:60:91:8a:6f:c4:a9:7e:e1:93:cb:93:af:d9:a4:72: 01:5c:90:a7:6e:02:50:10:d6:89:8a:6a:1f:8a:59:ea:9f:47: ee:9c:64:9d:e9:37:3a:1e:f1:9f:f3:7d:24:49:cf:67:f1:c7: 17:1d:3f:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0kMUFWsb/dPz6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk OWJmYWIxYjItNmJkOC00ZmEzLWFiMTEtY2FjZDYyZDdkMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3bsdZldmQf0pUKEmx63C1ZvzDwfEWhKYPJb Qpvy184DwWNfFCO9nZJALc0TQ4qlpeSx5xxtR76d081Aaq1XRuw1+0yzy6lOIOo1 UrV6e1nZYP26xoSIAaOP+DDNyyXXwILwqaO+aNql14I39vUdAVJIy2jio93oS46n uyM+GmZGVUSTrZDOTxNY7MuyaA8BVCiLCyGVkgLJA2Mx9zno+tcy4tSEjIz46Y44 4m9DYQraJWcqks4/QqH07NH739luYlLmLSauyPwYq1D9iUFf+Vivpz/QiJrx2RQD OAbiEX3mkl2TlYHGhK+l6wBYzvCIb3vOsbj48lywLM3pp1w+CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/w2Pgor/CM/jFwz95uSs2EY7rIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmY1ZTNjYTEtMTg5MC0z YmVmLWI2ZWItNzQ2ODA4ZDgzY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrsuHib65fsBwzlL7/vD6Ymvx9rkVQCLkaZuepONEDtrsANsZUxWKaa iQAO1iqnjDCrL1zrQXCcMzl+jE4lVJoE8LIBud/xFnFm+1cSTz6t/laYMetZcuMs yJvXNdXEO/1IOB1s1OzSIoxPzt1AkKeIool+pvqPGxOfA7qq6fiL6d73n8FK+L1O jsWzwlVAfo2N3+0j6ZXp1OTmexrC+6nOxH09woBiz/Ucmzfq6VEeUmsCQjqhrxEO eNNqN0RCNJOvGAC7FcFAgmCRim/EqX7hk8uTr9mkcgFckKduAlAQ1omKah+KWeqf R+6cZJ3pNzoe8Z/zfSRJz2fxxxcdPxk= -----END CERTIFICATE-----Generated at Tue Sep 22 21:09:28 2026 by rpki-client