$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa File: 1aab2dbe-d208-3e83-ad04-b139cc44c834.roa (raw, json) Hash identifier: BG+rXxlFeMY/Vb3RQLSw+yn3sd8rGdyzBF4FKIrwjUU= Subject key identifier: 9A:FB:0E:49:0B:A3:9E:DD:58:41:FE:C7:B4:C0:95:FD:A7:71:9F:8B Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584F498789D2F7B88B460FFC1000 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40509 IP address blocks: 66.241.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:89:d2:f7:b8:8b:46:0f:fc:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=df564207-ba47-46fa-bb21-ab218392123b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c4:b2:4c:fe:ba:a5:ad:c5:08:53:a3:d7:93: de:de:8c:b7:83:8a:a6:7a:5e:f2:b0:5d:e9:59:1b: 2e:20:76:a6:35:a9:8b:4b:6b:36:f3:54:c7:d2:d7: 4f:e2:7d:a8:35:ed:c0:c6:5c:1e:3c:a8:07:65:97: 64:9e:2f:ef:49:b6:11:d5:43:e3:5e:0f:51:e4:92: e9:39:4a:6d:cc:12:ed:78:e8:e8:80:29:62:8a:b6: ff:d2:3b:ed:b7:1d:89:eb:56:04:a6:0f:f3:1d:2d: 36:08:ca:40:ee:de:9c:f0:1a:7b:fa:60:68:08:c6: 89:34:2c:a5:fa:7d:5b:e2:9c:cc:8c:d3:4a:c7:bb: 65:80:27:86:24:1a:4d:57:84:04:54:c2:c5:ed:13: cf:2e:a0:41:c3:0a:48:0c:20:13:36:f6:19:6d:80: 38:b0:80:45:01:26:9b:d8:46:36:30:8b:ce:c8:f8: 32:9c:6d:39:23:21:1d:cf:19:ff:a2:96:85:3e:2e: 60:07:7b:a4:42:96:94:6c:2a:3d:48:25:36:92:9a: 69:6d:a6:35:9b:f9:8a:29:df:4f:81:c0:8b:16:d7: 57:28:78:9e:4e:bb:a5:23:75:00:23:90:83:15:50: ee:5e:9b:58:e9:b1:02:96:9e:2a:97:0c:7d:28:ca: a1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FB:0E:49:0B:A3:9E:DD:58:41:FE:C7:B4:C0:95:FD:A7:71:9F:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 66.241.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:66:7c:61:b3:05:a3:f2:de:df:b5:b3:93:69:39:8e:c1:45: 85:47:08:05:ac:cf:23:5c:91:d8:19:66:2a:31:85:30:fc:be: ff:01:95:8c:2f:24:16:23:99:37:7b:5a:9a:e9:9e:a5:bb:4a: 0a:bd:07:e1:cb:48:05:f6:52:12:26:02:7c:b7:1d:9d:b5:0c: e3:9b:de:dd:76:d8:82:fb:03:50:af:9e:97:c8:34:de:6b:fb: d6:4c:1a:1a:d5:7d:0c:5f:36:e6:93:f9:dc:d9:91:1e:e7:33: 03:a1:b4:bf:ed:0e:79:21:e3:b3:f6:60:06:d3:5d:04:ed:9c: 5f:0d:4d:b7:6d:90:1b:0e:6c:63:cc:a5:a5:81:f0:d6:80:f0: 48:51:f7:92:31:ba:4b:3e:01:71:b8:c1:8c:65:90:a8:81:e5: fc:ed:d5:e3:9c:05:74:a6:97:95:c2:ef:51:15:2f:b6:ae:96: 78:94:b8:30:88:12:b7:ba:f2:e0:98:78:18:2a:2c:cc:9a:6b: ec:69:dd:8e:74:30:51:09:5b:6c:11:45:40:9c:53:c6:4b:8a: b4:a1:4a:82:97:17:2c:fb:c1:86:23:47:11:bb:cf:68:9c:ae: 40:fd:db:44:55:b6:8d:a2:c4:b1:f2:8d:95:71:7c:a1:19:4f: 01:fa:65:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh4nS97iLRg/8EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGY1NjQyMDctYmE0Ny00NmZhLWJiMjEtYWIyMTgzOTIxMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8SyTP66pa3FCFOj15Pe3oy3g4qmel7ysF3p WRsuIHamNamLS2s281TH0tdP4n2oNe3AxlwePKgHZZdkni/vSbYR1UPjXg9R5JLp OUptzBLteOjogCliirb/0jvttx2J61YEpg/zHS02CMpA7t6c8Bp7+mBoCMaJNCyl +n1b4pzMjNNKx7tlgCeGJBpNV4QEVMLF7RPPLqBBwwpIDCATNvYZbYA4sIBFASab 2EY2MIvOyPgynG05IyEdzxn/opaFPi5gB3ukQpaUbCo9SCU2kpppbaY1m/mKKd9P gcCLFtdXKHieTrulI3UAI5CDFVDuXptY6bEClp4qlwx9KMqh4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr7DkkLo57dWEH+x7TAlf2ncZ+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMWFhYjJkYmUtZDIwOC0z ZTgzLWFkMDQtYjEzOWNjNDRjODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQvFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlmfGGzBaPy3t+1s5NpOY7BRYVHCAWszyNckdgZZioxhTD8vv8BlYwv JBYjmTd7WprpnqW7Sgq9B+HLSAX2UhImAny3HZ21DOOb3t122IL7A1CvnpfINN5r +9ZMGhrVfQxfNuaT+dzZkR7nMwOhtL/tDnkh47P2YAbTXQTtnF8NTbdtkBsObGPM paWB8NaA8EhR95Ixuks+AXG4wYxlkKiB5fzt1eOcBXSml5XC71EVL7aulniUuDCI Ere68uCYeBgqLMyaa+xp3Y50MFEJW2wRRUCcU8ZLirShSoKXFyz7wYYjRxG7z2ic rkD920RVto2ixLHyjZVxfKEZTwH6ZQQ= -----END CERTIFICATE-----Generated at Tue Sep 29 10:52:16 2026 by rpki-client