$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa File: 891132c6-0309-32ba-a1d3-ef9e3b909c24.roa (raw, json) Hash identifier: VNGpu3ZIOHftgDqcKfZsrsqZgeIcsPMryr0FVexm2L4= Subject key identifier: 75:60:F4:23:9E:C8:AA:9F:EF:F6:2A:34:90:B5:44:28:07:64:FE:06 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584F2527AB7CD52A3C66087765D8 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa Signing time: Sat 12 Sep 2026 01:00:12 +0000 ROA not before: Sat 12 Sep 2026 01:00:12 +0000 ROA not after: Fri 11 Dec 2026 02:00:12 +0000 asID: 22785 IP address blocks: 66.109.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:27:ab:7c:d5:2a:3c:66:08:77:65:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 12 01:00:12 2026 GMT Not After : Dec 11 02:00:12 2026 GMT Subject: CN=27e20746-97fe-4060-b6d0-e0b124b041fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:ca:e2:6d:9d:39:47:62:1f:80:89:bb:9b: 27:b1:ef:ca:1d:40:30:ad:2a:91:dd:43:4c:e7:e4: 14:a2:9f:54:6e:8f:20:39:eb:b9:cf:a8:e5:5a:56: 0e:ca:59:d8:90:78:41:47:20:4b:71:7b:38:e1:51: 29:58:bb:dd:ad:4d:af:c2:82:e7:ef:a9:75:4e:8f: 6c:7b:82:f8:e1:7c:95:76:07:af:86:51:6b:7a:f6: 3c:df:16:54:b6:29:c2:52:32:da:2a:ba:87:ca:ad: 14:09:20:ac:3e:58:b7:ee:7d:10:14:41:94:3d:32: 43:a8:85:6d:79:27:65:18:2b:16:5f:33:4f:51:f6: 15:38:f3:44:d9:a1:ad:1f:5f:58:57:30:f3:87:b0: d9:72:fc:72:f9:2e:12:7e:4e:c3:2e:72:e5:1a:71: 7c:2c:66:e2:4f:e4:42:17:1d:a3:0b:25:38:34:66: fe:86:15:63:2f:fb:52:f4:a4:d0:a2:8f:ff:8c:0f: 54:2f:fc:85:63:54:dc:3a:db:2f:bd:7e:2e:ec:67: 32:46:92:04:e1:df:5e:6f:84:a8:27:88:d0:e7:11: d5:e4:44:5d:a5:d9:41:69:c2:af:6a:e8:61:7a:13: 7e:e0:0b:62:b8:5e:2c:4e:4f:59:e2:e6:74:82:6e: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:60:F4:23:9E:C8:AA:9F:EF:F6:2A:34:90:B5:44:28:07:64:FE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 66.109.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d8:41:69:ac:41:95:0a:2c:0f:50:bd:ca:62:cd:2d:32:71: 9c:3d:40:9d:23:81:76:7c:96:d8:4a:d7:55:4e:f4:f7:62:ec: 85:73:0f:42:8d:c5:6e:6d:15:29:8c:41:c9:8f:89:9a:f2:84: f2:4f:2b:41:ab:1b:12:cc:a0:4b:4e:ab:59:15:04:ad:75:fa: 52:0c:3f:d8:20:1b:b3:32:ad:85:fa:08:70:b5:b0:9e:51:87: 60:24:e4:2b:d9:f0:a2:27:65:14:4b:7e:77:60:1c:bc:3b:a6: 05:4d:be:62:0b:07:bb:17:07:a9:89:b4:4c:4e:1b:1f:d3:15: 54:06:a7:c5:5a:31:df:93:6d:39:fa:d9:a8:70:c1:30:c9:fc: 5a:cc:4f:97:46:12:7e:b9:6c:c6:95:72:8d:95:90:0f:52:65: ff:47:d9:8e:ae:dc:7d:32:c7:d6:0c:25:b6:96:79:98:03:3e: 20:7a:03:29:92:b0:74:1b:2f:39:ca:50:58:7e:9c:05:27:e5: 4f:a9:38:64:2c:1c:4e:73:f5:04:cf:a4:c7:5a:c3:df:a6:82: 45:27:03:96:5f:79:dd:ee:42:bf:d0:83:ac:1a:e1:4a:1a:db: ed:22:08:a4:36:dd:5f:fe:af:e4:8b:93:84:28:53:7c:24:94: 19:e2:ed:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8lJ6t81So8Zgh3ZdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk MjdlMjA3NDYtOTdmZS00MDYwLWI2ZDAtZTBiMTI0YjA0MWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47LK4m2dOUdiH4CJu5snse/KHUAwrSqR3UNM 5+QUop9Ubo8gOeu5z6jlWlYOylnYkHhBRyBLcXs44VEpWLvdrU2vwoLn76l1To9s e4L44XyVdgevhlFrevY83xZUtinCUjLaKrqHyq0UCSCsPli37n0QFEGUPTJDqIVt eSdlGCsWXzNPUfYVOPNE2aGtH19YVzDzh7DZcvxy+S4Sfk7DLnLlGnF8LGbiT+RC Fx2jCyU4NGb+hhVjL/tS9KTQoo//jA9UL/yFY1TcOtsvvX4u7GcyRpIE4d9eb4So J4jQ5xHV5ERdpdlBacKvauhhehN+4AtiuF4sTk9Z4uZ0gm64lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVg9COeyKqf7/YqNJC1RCgHZP4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvODkxMTMyYzYtMDMwOS0z MmJhLWExZDMtZWY5ZTNiOTA5YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQm2WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrYQWmsQZUKLA9QvcpizS0ycZw9QJ0jgXZ8lthK11VO9Pdi7IVzD0KN xW5tFSmMQcmPiZryhPJPK0GrGxLMoEtOq1kVBK11+lIMP9ggG7MyrYX6CHC1sJ5R h2Ak5CvZ8KInZRRLfndgHLw7pgVNvmILB7sXB6mJtExOGx/TFVQGp8VaMd+TbTn6 2ahwwTDJ/FrMT5dGEn65bMaVco2VkA9SZf9H2Y6u3H0yx9YMJbaWeZgDPiB6AymS sHQbLznKUFh+nAUn5U+pOGQsHE5z9QTPpMdaw9+mgkUnA5Zfed3uQr/Qg6wa4Uoa 2+0iCKQ23V/+r+SLk4QoU3wklBni7aQ= -----END CERTIFICATE-----Generated at Thu Sep 24 21:07:00 2026 by rpki-client