$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa File: 1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa (raw, json) Hash identifier: zRbNHop88QIwQlE5a1zFdn1B/NpV2laZ35mHYy810FI= Subject key identifier: 27:18:83:FB:A4:52:E9:4D:42:22:1A:6A:39:C8:A7:42:42:0A:0C:E1 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584F225CFDA07CE3F40DDA689D00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 30058 IP address blocks: 66.90.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:fd:a0:7c:e3:f4:0d:da:68:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=36dd7e3c-2284-4833-a375-8056ba2acc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:30:84:f6:17:36:c2:db:96:20:9c:e2:76: 5d:54:6e:33:65:29:25:2e:ca:72:f8:c4:95:82:2b: 70:9d:58:24:f2:33:57:b5:4c:b1:63:9b:1e:ca:6c: b2:84:23:b4:d1:b8:e4:e3:1a:a2:e9:fc:18:04:fe: 17:dd:a8:56:e5:33:ca:7e:69:ee:06:fa:99:84:f7: 2b:36:68:99:64:6d:f7:63:90:34:7e:f7:13:71:05: 38:67:4d:e0:4d:b8:0c:07:7a:c8:d9:e8:29:77:4a: 66:76:eb:8d:dc:ab:6a:00:62:bb:89:36:92:41:fc: 89:90:67:b9:af:f4:7f:ac:4c:01:e7:94:9a:c6:f5: b1:87:e3:3a:ea:db:7a:f1:68:a9:ba:95:69:1e:f3: cf:4c:f9:88:08:15:3e:f7:95:25:d8:5b:71:79:77: 67:b7:a2:a0:81:b9:b8:fe:16:39:ef:ab:3c:ce:7a: e7:5b:25:4d:7b:bf:05:09:1d:0e:61:f2:66:1a:3f: a4:11:48:a6:bf:74:3b:a0:74:e5:31:84:3e:c9:88: 87:b1:81:be:a7:49:96:27:08:fd:5a:17:e0:fa:3e: 74:05:20:8f:f3:06:6b:1e:25:05:45:bc:2c:b6:84: 53:72:11:af:ca:43:d6:ec:1f:2c:5c:ab:b2:6b:d8: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:18:83:FB:A4:52:E9:4D:42:22:1A:6A:39:C8:A7:42:42:0A:0C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 66.90.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:6a:d7:74:e9:1e:41:6e:e2:48:40:6a:e7:0a:3d:20:a3:30: 2e:fd:02:95:ce:83:6a:60:08:97:fc:bd:4f:dc:c3:66:4f:92: 6d:ba:5e:a8:7a:7a:9e:8e:3e:06:51:93:bf:8a:b2:02:26:08: 51:99:5f:bd:42:95:f4:7b:1c:56:14:b7:42:e3:7f:f3:61:86: 82:43:12:a8:d2:2c:10:d3:b8:22:d6:18:de:f9:81:b8:65:77: 4b:6a:17:29:3c:1c:f2:2f:b3:db:b3:77:23:1f:b0:5e:ff:63: cd:2a:a8:a1:6e:20:ba:0c:45:6e:13:b1:a7:59:0a:5d:1c:08: 7e:8f:6d:b3:5c:89:c4:ef:32:41:5c:80:c6:7a:34:16:e4:3b: b2:46:2e:3b:1a:59:25:7b:f6:3d:f1:13:e6:26:24:27:f2:85: d2:78:a7:8d:fa:99:37:17:99:dc:3c:e3:66:95:73:d9:78:1c: 3c:35:44:58:8a:16:6f:88:b0:d2:92:fa:37:7a:05:44:68:a0: 56:1b:9b:41:6d:e4:6a:6f:f2:e5:ae:fd:07:48:93:cf:12:e3: 73:fe:74:20:eb:ee:3d:13:04:65:81:04:92:a1:36:da:7a:4d: 5a:01:a2:c4:61:c4:36:a3:1b:ff:47:5d:f7:85:4e:51:9e:2d: 0b:7b:85:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXP2gfOP0DdponQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MzZkZDdlM2MtMjI4NC00ODMzLWEzNzUtODA1NmJhMmFjYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzEwhPYXNsLbliCc4nZdVG4zZSklLspy+MSV gitwnVgk8jNXtUyxY5seymyyhCO00bjk4xqi6fwYBP4X3ahW5TPKfmnuBvqZhPcr NmiZZG33Y5A0fvcTcQU4Z03gTbgMB3rI2egpd0pmduuN3KtqAGK7iTaSQfyJkGe5 r/R/rEwB55SaxvWxh+M66tt68WipupVpHvPPTPmICBU+95Ul2FtxeXdnt6Kggbm4 /hY576s8znrnWyVNe78FCR0OYfJmGj+kEUimv3Q7oHTlMYQ+yYiHsYG+p0mWJwj9 Whfg+j50BSCP8wZrHiUFRbwstoRTchGvykPW7B8sXKuya9ieTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcYg/ukUulNQiIaajnIp0JCCgzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWMyMWVkNzMtYTFiOS0z NjJhLThkODMtNWNjYWQ0YTQzYWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQlpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpq13TpHkFu4khAaucKPSCjMC79ApXOg2pgCJf8vU/cw2ZPkm26Xqh6 ep6OPgZRk7+KsgImCFGZX71ClfR7HFYUt0Ljf/NhhoJDEqjSLBDTuCLWGN75gbhl d0tqFyk8HPIvs9uzdyMfsF7/Y80qqKFuILoMRW4TsadZCl0cCH6PbbNcicTvMkFc gMZ6NBbkO7JGLjsaWSV79j3xE+YmJCfyhdJ4p436mTcXmdw842aVc9l4HDw1RFiK Fm+IsNKS+jd6BURooFYbm0Ft5Gpv8uWu/QdIk88S43P+dCDr7j0TBGWBBJKhNtp6 TVoBosRhxDajG/9HXfeFTlGeLQt7hfc= -----END CERTIFICATE-----Generated at Sun Sep 27 05:29:45 2026 by rpki-client