$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/c530514b-3107-38ed-8ba7-591ca5caed72.roa File: c530514b-3107-38ed-8ba7-591ca5caed72.roa (raw, json) Hash identifier: InSmnB+fREChcDZGRyRDTVpaidSlafa37BxQ7KP2U7s= Subject key identifier: DD:78:44:C1:AF:E1:C7:4A:6D:F6:B1:6C:C3:D9:24:C9:6B:E2:03:CC Certificate issuer: /CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Certificate serial: 010D0C9F4328584F542DC18254C98518169BFF68 Authority key identifier: A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/c530514b-3107-38ed-8ba7-591ca5caed72.roa Signing time: Mon 28 Sep 2026 21:15:33 +0000 ROA not before: Mon 28 Sep 2026 21:15:33 +0000 ROA not after: Sun 27 Dec 2026 22:15:33 +0000 asID: 32586 IP address blocks: 148.66.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:2d:c1:82:54:c9:85:18:16:9b:ff:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Validity Not Before: Sep 28 21:15:33 2026 GMT Not After : Dec 27 22:15:33 2026 GMT Subject: CN=ea1b6815-07cd-4290-acbf-fc134ad8bb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:a3:13:72:0b:4c:24:a7:c3:ca:45:01:f8: 24:ef:a1:f3:d2:a7:aa:b4:04:49:ad:2d:e5:90:86: e9:e7:f4:dc:35:02:3a:54:a6:29:09:29:fa:7a:0a: fa:08:25:cc:86:16:a2:11:63:30:39:1b:a7:3c:2d: 90:cc:f6:fe:a8:61:cf:f6:1a:84:04:eb:9c:f2:f0: e1:9e:eb:30:2e:c6:78:9c:bd:90:34:9c:b2:93:1c: 09:56:1b:1b:b1:6f:9e:de:7c:51:75:1c:da:d3:07: b4:e9:28:4a:a8:95:ed:57:48:0f:06:7d:e5:ff:15: 7a:62:8c:72:46:85:6b:d8:b2:98:5f:21:d7:6e:33: 8c:f2:b8:f0:d1:5b:0e:14:59:62:fa:18:bb:47:e1: 6a:2f:80:88:18:3f:ab:90:79:f2:40:8b:e4:35:a7: 47:fa:ef:84:c0:04:d6:10:62:af:60:50:76:b2:e6: 86:00:28:41:d7:5a:29:91:72:20:0b:35:4c:e2:3d: 11:51:2f:c2:c9:fa:31:ee:96:9c:81:be:ab:a9:b3: ed:56:1a:52:71:04:a6:5a:59:01:0d:ec:48:05:c8: d4:d8:da:3d:51:bd:5f:ee:31:20:e7:d3:46:b5:71: b5:a4:65:ab:f0:ad:47:dc:8f:6e:39:4f:d7:35:e5: c8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:78:44:C1:AF:E1:C7:4A:6D:F6:B1:6C:C3:D9:24:C9:6B:E2:03:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/c530514b-3107-38ed-8ba7-591ca5caed72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl X509v3 Authority Key Identifier: keyid:A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer sbgp-ipAddrBlock: critical IPv4: 148.66.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f0:12:7b:b8:59:32:6a:be:94:15:23:a8:b3:ef:7f:53:2d: 34:3b:8b:ad:83:66:11:ec:41:be:74:a3:52:46:94:aa:94:5d: ea:13:ad:d8:fe:5d:6c:e4:2d:e8:ae:86:8b:0e:3d:41:66:cb: 99:c8:aa:68:65:86:56:26:fe:0d:46:cb:df:b7:f9:cd:0a:5d: cc:76:ec:e7:99:de:ed:81:e8:3b:2b:84:2d:06:a6:a7:dc:e4: 5b:9a:b4:65:a7:9e:f9:91:8a:b1:e4:f2:64:45:93:57:55:cd: fd:74:bb:46:6c:76:96:6b:57:5b:be:9a:7a:ca:bb:e3:9f:ed: f3:41:f9:3a:3a:db:90:26:7a:27:eb:ef:05:7f:f0:c0:a2:71: 57:bc:c7:7a:75:21:e4:8e:6a:ac:3b:c9:e8:c8:16:73:17:20: c8:bf:44:62:eb:95:b7:f5:7f:1f:06:dd:09:0a:a0:71:4a:7e: 4a:2f:4b:51:7e:43:4e:86:25:1d:6a:60:05:d8:f9:23:2c:8f: 78:eb:98:06:8c:05:5a:ec:4a:0d:6d:c2:5d:a7:79:29:e7:a1: 88:b6:80:60:77:09:18:b3:e2:6d:fa:8f:49:7f:d0:32:ac:16: 0d:e5:2e:dc:41:6e:2e:e5:78:23:25:2a:c0:ca:a7:af:51:26: e8:b7:73:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ULcGCVMmFGBab/2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQwN2Y1OGQtMjdhOC00MmE1LWI3M2UtMWZlMzUwODFj NmRmMB4XDTI2MDkyODIxMTUzM1oXDTI2MTIyNzIyMTUzM1owLzEtMCsGA1UEAxMk ZWExYjY4MTUtMDdjZC00MjkwLWFjYmYtZmMxMzRhZDhiYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEWjE3ILTCSnw8pFAfgk76Hz0qeqtARJrS3l kIbp5/TcNQI6VKYpCSn6egr6CCXMhhaiEWMwORunPC2QzPb+qGHP9hqEBOuc8vDh nuswLsZ4nL2QNJyykxwJVhsbsW+e3nxRdRza0we06ShKqJXtV0gPBn3l/xV6Yoxy RoVr2LKYXyHXbjOM8rjw0VsOFFli+hi7R+FqL4CIGD+rkHnyQIvkNadH+u+EwATW EGKvYFB2suaGAChB11opkXIgCzVM4j0RUS/Cyfox7pacgb6rqbPtVhpScQSmWlkB DexIBcjU2No9Ub1f7jEg59NGtXG1pGWr8K1H3I9uOU/XNeXIJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN14RMGv4cdKbfaxbMPZJMlr4gPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3 ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUzNTA4MWM2ZGYvYzUzMDUxNGItMzEwNy0z OGVkLThiYTctNTkxY2E1Y2FlZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTQwN2Y1OGQtMjdhOC00MmE1LWI3 M2UtMWZlMzUwODFjNmRmLzE0MDdmNThkLTI3YTgtNDJhNS1iNzNlLTFmZTM1MDgx YzZkZi5jcmwwHwYDVR0jBBgwFoAUqXHCIBuAdC31fIHIgg2qq+D9GyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUz NTA4MWM2ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlEIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/wEnu4WTJqvpQVI6iz739TLTQ7i62DZhHsQb50o1JGlKqUXeoTrdj+ XWzkLeiuhosOPUFmy5nIqmhlhlYm/g1Gy9+3+c0KXcx27OeZ3u2B6DsrhC0Gpqfc 5FuatGWnnvmRirHk8mRFk1dVzf10u0ZsdpZrV1u+mnrKu+Of7fNB+To625Ameifr 7wV/8MCicVe8x3p1IeSOaqw7yejIFnMXIMi/RGLrlbf1fx8G3QkKoHFKfkovS1F+ Q06GJR1qYAXY+SMsj3jrmAaMBVrsSg1twl2neSnnoYi2gGB3CRiz4m36j0l/0DKs Fg3lLtxBbi7leCMlKsDKp69RJui3c5I= -----END CERTIFICATE-----Generated at Tue Oct 6 12:29:36 2026 by rpki-client