$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/c5e9ba99-4fa0-3f59-a02f-13b9a935f0e7.roa File: c5e9ba99-4fa0-3f59-a02f-13b9a935f0e7.roa (raw, json) Hash identifier: LKkqJRSGCfT1vW9xYUG6Uct/DEFMFCp7OQWcFfGyFGE= Subject key identifier: 35:52:89:B1:6E:9C:BC:38:FB:59:1D:5A:78:41:C8:9E:CC:C2:31:18 Certificate issuer: /CN=3505b615-7597-4cdc-9539-0a0a5c49dee8 Certificate serial: 010D0C9F4328584FC7311ACC337F84655BEDD3E0 Authority key identifier: 31:55:AB:E7:30:1A:2B:F4:40:A6:01:0B:A7:CB:0F:C3:B4:9D:F5:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/c5e9ba99-4fa0-3f59-a02f-13b9a935f0e7.roa Signing time: Mon 09 Nov 2026 02:00:13 +0000 ROA not before: Mon 09 Nov 2026 02:00:13 +0000 ROA not after: Sun 07 Feb 2027 02:00:13 +0000 asID: 11708 IP address blocks: 66.85.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/3505b615-7597-4cdc-9539-0a0a5c49dee8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/3505b615-7597-4cdc-9539-0a0a5c49dee8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c7:31:1a:cc:33:7f:84:65:5b:ed:d3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3505b615-7597-4cdc-9539-0a0a5c49dee8 Validity Not Before: Nov 9 02:00:13 2026 GMT Not After : Feb 7 02:00:13 2027 GMT Subject: CN=e78c9ed7-bd60-446d-9dae-48eae4e643cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:29:d0:47:07:bf:6d:11:a0:ec:dc:25:4e:31: e4:d7:2b:0c:62:92:63:68:39:14:8a:e1:a8:80:76: 5a:fc:3f:e7:09:54:92:85:d9:67:9e:f7:ea:e7:a2: 02:29:0e:74:9c:4e:2e:a2:9b:83:26:4b:04:b0:1a: a2:8b:a9:20:a0:66:14:23:e8:8b:54:e1:15:1f:7e: 8e:b4:e4:bd:e4:f9:24:bc:e0:6d:35:99:c0:ed:39: 92:7b:e1:1b:a7:17:aa:6f:e7:55:e9:2b:44:4c:05: d4:e2:5c:3d:70:ba:01:e6:6c:54:87:c5:31:16:66: 61:94:90:cc:08:88:3c:8c:a3:48:e2:d1:ef:32:8d: 54:ff:c9:e1:14:54:ca:9b:0a:71:0f:57:9a:1c:45: dc:59:ca:a2:33:aa:37:d4:d0:21:5a:84:4d:96:a7: 2a:e2:6d:ca:8c:29:d3:7f:04:e2:54:ed:7a:d3:bf: bf:5b:4b:fe:ce:60:65:a7:ca:80:b1:36:d6:f9:f9: 45:ef:46:9a:c0:ae:af:06:51:b1:7b:ba:24:99:e1: 92:c2:da:f9:4f:79:73:e5:7e:cc:cc:c8:ca:06:c3: 87:d8:42:39:cd:de:c6:b4:cb:62:a9:7c:8c:6f:21: 7d:72:c1:75:76:6a:25:56:09:64:61:be:2f:c7:63: f0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:52:89:B1:6E:9C:BC:38:FB:59:1D:5A:78:41:C8:9E:CC:C2:31:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/c5e9ba99-4fa0-3f59-a02f-13b9a935f0e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/3505b615-7597-4cdc-9539-0a0a5c49dee8.crl X509v3 Authority Key Identifier: keyid:31:55:AB:E7:30:1A:2B:F4:40:A6:01:0B:A7:CB:0F:C3:B4:9D:F5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8.cer sbgp-ipAddrBlock: critical IPv4: 66.85.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6b:08:b6:02:a4:f4:52:35:16:14:ea:68:8c:dc:28:14:b5: fc:77:de:a2:0f:4f:e9:98:fc:58:73:18:92:99:f2:5d:2f:2f: 0a:d9:5f:23:88:04:a0:d4:0d:a3:f1:f6:1a:a0:eb:70:86:53: 67:1d:0d:08:8c:62:a7:9b:d6:d0:01:48:04:ed:50:36:2d:98: 18:23:e9:2b:44:f5:b9:d5:10:2a:fb:33:ce:7c:32:ed:46:76: 25:f5:a2:79:ef:68:88:e4:68:3d:c6:c1:c1:69:2c:45:d3:41: 19:ee:2f:41:19:94:31:81:b4:15:0f:1e:23:b4:c0:2e:0c:cd: b3:be:79:12:18:3c:a1:e9:b9:14:df:b9:91:c8:31:f5:48:86: c5:95:02:1c:4c:41:58:9c:55:80:bd:b7:a8:02:7d:ba:85:fe: 7d:53:dc:46:3c:d5:fb:b5:98:ac:b1:36:ef:a2:d6:03:9a:19: c9:55:ac:e9:0f:5d:7c:d7:51:f1:0a:b1:1e:41:ba:cd:f8:06: 35:af:56:8c:59:33:54:e2:70:a2:3d:4d:9c:3e:79:7d:c1:88: c4:d2:2c:79:f4:ff:6a:52:31:11:a6:e6:b6:d4:32:17:c3:9f: 5b:46:28:a9:8a:38:06:1f:de:92:42:76:e4:a3:c6:3b:17:43: 22:1e:6c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/HMRrMM3+EZVvt0+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUwNWI2MTUtNzU5Ny00Y2RjLTk1MzktMGEwYTVjNDlk ZWU4MB4XDTI2MTEwOTAyMDAxM1oXDTI3MDIwNzAyMDAxM1owLzEtMCsGA1UEAxMk ZTc4YzllZDctYmQ2MC00NDZkLTlkYWUtNDhlYWU0ZTY0M2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSnQRwe/bRGg7NwlTjHk1ysMYpJjaDkUiuGo gHZa/D/nCVSShdlnnvfq56ICKQ50nE4uopuDJksEsBqii6kgoGYUI+iLVOEVH36O tOS95PkkvOBtNZnA7TmSe+Ebpxeqb+dV6StETAXU4lw9cLoB5mxUh8UxFmZhlJDM CIg8jKNI4tHvMo1U/8nhFFTKmwpxD1eaHEXcWcqiM6o31NAhWoRNlqcq4m3KjCnT fwTiVO1607+/W0v+zmBlp8qAsTbW+flF70aawK6vBlGxe7okmeGSwtr5T3lz5X7M zMjKBsOH2EI5zd7GtMtiqXyMbyF9csF1dmolVglkYb4vx2Pw6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVSibFunLw4+1kdWnhByJ7MwjEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNTA1 YjYxNS03NTk3LTRjZGMtOTUzOS0wYTBhNWM0OWRlZTgvYzVlOWJhOTktNGZhMC0z ZjU5LWEwMmYtMTNiOWE5MzVmMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzUwNWI2MTUtNzU5Ny00Y2RjLTk1 MzktMGEwYTVjNDlkZWU4LzM1MDViNjE1LTc1OTctNGNkYy05NTM5LTBhMGE1YzQ5 ZGVlOC5jcmwwHwYDVR0jBBgwFoAUMVWr5zAaK/RApgELp8sPw7Sd9bQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNTA1YjYxNS03NTk3LTRjZGMtOTUzOS0wYTBh NWM0OWRlZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVrCLYCpPRSNRYU6miM3CgUtfx33qIPT+mY/FhzGJKZ8l0vLwrZXyOI BKDUDaPx9hqg63CGU2cdDQiMYqeb1tABSATtUDYtmBgj6StE9bnVECr7M858Mu1G diX1onnvaIjkaD3GwcFpLEXTQRnuL0EZlDGBtBUPHiO0wC4MzbO+eRIYPKHpuRTf uZHIMfVIhsWVAhxMQVicVYC9t6gCfbqF/n1T3EY81fu1mKyxNu+i1gOaGclVrOkP XXzXUfEKsR5Bus34BjWvVoxZM1TicKI9TZw+eX3BiMTSLHn0/2pSMRGm5rbUMhfD n1tGKKmKOAYf3pJCduSjxjsXQyIebL0= -----END CERTIFICATE-----Generated at Sun Nov 15 17:01:43 2026 by rpki-client