$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cbd84ef9-7935-35c0-a038-09d0d75c4bb1.roa File: cbd84ef9-7935-35c0-a038-09d0d75c4bb1.roa (raw, json) Hash identifier: 6QleWx7DSR2ylRMRXuLY+a3D4KkDs3zxh6mn3zyQtOE= Subject key identifier: D3:04:61:E1:51:27:B2:68:1A:06:4D:C4:7E:AD:94:C4:DD:8F:54:9B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F62930682FAF28DC6D98DCF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cbd84ef9-7935-35c0-a038-09d0d75c4bb1.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 66.102.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:06:82:fa:f2:8d:c6:d9:8d:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=9273a23f-7aba-40c3-a2b1-dadd9ea2d454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1f:53:98:12:5b:45:77:95:35:30:66:3f:3b: f9:b3:43:a0:a2:41:79:63:35:ba:a2:73:8c:1b:dd: 6f:9d:9a:ff:ff:d8:88:74:cf:0f:bf:50:4c:9e:ce: ad:99:0b:0a:dc:81:4e:55:5b:a7:73:28:28:52:1a: b6:98:08:d6:47:ce:70:2d:92:40:1c:b7:95:63:fd: 82:e8:18:44:07:18:8d:f5:4b:b6:16:2b:02:b6:f2: 1b:b8:df:43:2f:4e:c5:6a:ef:ff:a9:3e:b2:10:b8: b5:6a:11:b6:cb:0f:3e:65:62:f0:04:b2:6c:92:12: 9f:ad:f9:fb:9c:bd:39:62:c4:3c:4e:39:86:2c:7d: f1:81:e2:08:c7:8d:75:2d:6e:4f:25:ba:46:b0:8a: e7:15:57:77:a0:8a:e2:1b:2a:b5:ba:08:8d:05:d1: 2d:36:96:a7:c3:49:51:eb:c9:77:89:97:32:c4:45: 2f:dd:aa:d8:12:1a:f1:5e:52:b5:c4:a6:60:50:52: 74:ec:96:9f:80:07:12:a5:61:ca:5c:80:86:c0:1a: 0c:da:c5:7c:1b:1c:18:14:22:44:b1:2e:dd:9a:6a: 2a:c8:f2:e1:c2:83:b9:cc:e9:24:59:1e:5e:aa:90: 0d:94:9f:d6:98:d3:d6:48:ed:fe:66:0b:57:7f:65: ba:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:04:61:E1:51:27:B2:68:1A:06:4D:C4:7E:AD:94:C4:DD:8F:54:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cbd84ef9-7935-35c0-a038-09d0d75c4bb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.102.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:20:c2:30:a5:62:e4:42:0b:28:ad:b0:96:d0:7e:07:8c:d5: ee:66:80:9a:83:bf:45:5d:de:24:94:a9:9c:35:5c:d7:56:19: e8:4c:23:5f:cf:3e:bb:2f:7e:4c:b3:11:e4:a7:55:ae:81:fb: 33:1f:79:0d:a6:9a:8f:b2:cc:c0:cb:52:81:dd:61:66:c2:37: d3:3a:a7:22:8d:c4:97:60:24:36:53:e2:c5:71:82:07:59:6c: 4f:c9:a8:01:ff:15:1a:04:e9:26:1d:6f:7a:12:9e:9c:7b:09: 10:4f:89:02:b3:03:9a:d4:e4:e3:a5:8c:ca:f0:db:56:d0:19: 3a:2b:00:bd:f6:f6:ee:a0:4b:46:c4:a8:38:68:be:7e:ba:f1: 18:42:01:b4:da:a8:64:95:c3:6c:b8:11:c7:1c:7c:94:8e:ab: 12:b0:d6:35:f1:84:65:26:25:8a:cd:97:57:6d:55:47:28:a8: c5:e5:ce:8d:f1:48:06:0a:06:dc:b7:57:e7:b2:09:77:a6:2c: d3:77:32:37:09:00:e1:54:4d:96:18:83:b8:79:b6:c2:fd:85: f3:9f:cd:82:8e:61:c1:3a:7b:a6:c4:6e:36:a6:bd:05:a4:f4: f4:e2:27:eb:35:c0:81:d2:36:19:9e:ce:f6:f7:64:49:a8:6e: bf:ec:34:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwaC+vKNxtmNzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OTI3M2EyM2YtN2FiYS00MGMzLWEyYjEtZGFkZDllYTJkNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB9TmBJbRXeVNTBmPzv5s0OgokF5YzW6onOM G91vnZr//9iIdM8Pv1BMns6tmQsK3IFOVVuncygoUhq2mAjWR85wLZJAHLeVY/2C 6BhEBxiN9Uu2FisCtvIbuN9DL07Fau//qT6yELi1ahG2yw8+ZWLwBLJskhKfrfn7 nL05YsQ8TjmGLH3xgeIIx411LW5PJbpGsIrnFVd3oIriGyq1ugiNBdEtNpanw0lR 68l3iZcyxEUv3arYEhrxXlK1xKZgUFJ07JafgAcSpWHKXICGwBoM2sV8GxwYFCJE sS7dmmoqyPLhwoO5zOkkWR5eqpANlJ/WmNPWSO3+ZgtXf2W6MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMEYeFRJ7JoGgZNxH6tlMTdj1SbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2JkODRlZjktNzkzNS0z NWMwLWEwMzgtMDlkMGQ3NWM0YmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQgwjClYuRCCyitsJbQfgeM1e5mgJqDv0Vd3iSUqZw1XNdWGehMI1/P PrsvfkyzEeSnVa6B+zMfeQ2mmo+yzMDLUoHdYWbCN9M6pyKNxJdgJDZT4sVxggdZ bE/JqAH/FRoE6SYdb3oSnpx7CRBPiQKzA5rU5OOljMrw21bQGTorAL329u6gS0bE qDhovn668RhCAbTaqGSVw2y4EcccfJSOqxKw1jXxhGUmJYrNl1dtVUcoqMXlzo3x SAYKBty3V+eyCXemLNN3MjcJAOFUTZYYg7h5tsL9hfOfzYKOYcE6e6bEbjamvQWk 9PTiJ+s1wIHSNhmezvb3ZEmobr/sNE4= -----END CERTIFICATE-----Generated at Sun Nov 15 10:57:28 2026 by rpki-client