$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/dbc2830d-081e-334f-9670-9d0454b3f4f5.roa File: dbc2830d-081e-334f-9670-9d0454b3f4f5.roa (raw, json) Hash identifier: GxG4nEF1K0aK9clmMpDx4InVcDBoQKMlslUUayJ2xvE= Subject key identifier: C5:6C:BB:DC:6E:C4:16:68:90:91:5F:0A:15:5E:CF:AE:FB:C7:38:5D Certificate issuer: /CN=f488b7b9-ef6e-4097-9207-940bc62289f1 Certificate serial: 010D0C9F4328584F480D66EB838CF3C40DAED400 Authority key identifier: 3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/dbc2830d-081e-334f-9670-9d0454b3f4f5.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 211392 IP address blocks: 66.235.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:66:eb:83:8c:f3:c4:0d:ae:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f488b7b9-ef6e-4097-9207-940bc62289f1 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=c0c8b9e5-fb50-4658-8383-7fa2dadfeccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:59:f0:53:ba:04:69:01:bf:fe:38:7f:32:ca: 01:5a:88:37:4e:f2:32:59:7d:89:dc:8b:90:fc:d0: 2f:ec:ee:46:0c:85:c1:0d:3e:54:98:4e:a1:90:aa: 4b:bb:94:48:74:17:aa:a4:ff:37:73:14:76:ff:5a: 54:8a:b3:ac:c1:ad:cf:b6:c1:65:83:14:bf:44:d8: 45:65:1e:bb:68:84:13:b7:18:fc:94:48:c7:47:41: 6e:00:a4:c0:22:d6:38:7a:6b:9c:f7:a7:65:d9:14: bf:8b:6b:af:72:dc:f6:33:3d:6e:f6:d9:e0:90:72: 51:b8:3e:b4:f7:09:9c:f7:30:2c:1c:1f:10:8f:e0: c5:6d:d2:d3:fc:2e:4e:c2:12:9c:c5:a1:4c:75:b4: ac:00:a1:9a:35:f2:e8:0e:ea:b3:a5:4c:1d:00:92: 31:b4:d6:2e:68:4b:af:68:6f:b1:ce:a3:e1:24:87: e9:ac:d5:89:fa:db:29:ec:ff:3b:a8:b1:6d:04:4f: 58:1b:23:c8:53:b8:b1:3a:38:c3:f9:81:28:ce:92: a7:cf:c8:22:3c:80:a4:5f:5e:d6:69:c3:fe:cc:13: 57:23:2a:7a:68:91:1a:54:f0:e8:b1:8f:61:71:9e: 5f:73:20:e0:4e:cb:cc:67:e5:d1:72:f7:a5:a5:e8: 4c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6C:BB:DC:6E:C4:16:68:90:91:5F:0A:15:5E:CF:AE:FB:C7:38:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/dbc2830d-081e-334f-9670-9d0454b3f4f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl X509v3 Authority Key Identifier: keyid:3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer sbgp-ipAddrBlock: critical IPv4: 66.235.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:be:2a:3c:66:3f:cb:9e:58:c8:c8:7a:01:ff:7d:3d:92:18: 03:1f:91:58:e2:90:95:9b:c4:98:a9:c8:59:bf:5d:d2:5c:e0: 3c:fb:8c:de:7d:4e:9d:5c:01:97:3f:0f:43:30:ab:27:ba:fa: 39:3f:bb:e8:73:8d:1e:31:bc:78:53:ac:21:df:62:a8:31:a6: d6:90:86:82:23:d0:9f:c1:88:e5:44:47:6b:ff:43:05:53:66: c2:80:ed:d4:f2:f6:66:ff:70:c4:36:20:ea:01:6f:2d:98:29: 50:a0:95:ee:3b:0f:0d:5c:7f:f3:02:ab:95:5b:4f:96:fe:41: 15:7b:d2:c6:54:2a:68:46:8c:78:59:76:45:57:cd:47:5f:13: d6:7b:9c:3d:c2:b0:ae:90:7a:26:d0:f9:f5:4b:15:ea:ef:cf: 5f:29:66:af:a8:eb:37:31:83:a4:62:a7:c4:58:5e:be:a9:8c: 78:df:5c:27:1f:2a:f1:ea:00:14:24:24:81:2a:0b:6c:a2:c5: d5:ea:f9:0c:15:b7:d1:2b:74:2c:c4:d7:50:9c:7e:ff:4c:46: 96:ef:15:71:aa:ee:6f:a7:b1:6e:0a:1a:0b:26:7e:62:14:1b: ec:c7:4a:9c:b8:d9:22:7f:08:1c:d1:fe:48:a4:01:cc:27:51: 34:08:5a:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWbrg4zzxA2u1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ4OGI3YjktZWY2ZS00MDk3LTkyMDctOTQwYmM2MjI4 OWYxMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YzBjOGI5ZTUtZmI1MC00NjU4LTgzODMtN2ZhMmRhZGZlY2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFnwU7oEaQG//jh/MsoBWog3TvIyWX2J3IuQ /NAv7O5GDIXBDT5UmE6hkKpLu5RIdBeqpP83cxR2/1pUirOswa3PtsFlgxS/RNhF ZR67aIQTtxj8lEjHR0FuAKTAItY4emuc96dl2RS/i2uvctz2Mz1u9tngkHJRuD60 9wmc9zAsHB8Qj+DFbdLT/C5OwhKcxaFMdbSsAKGaNfLoDuqzpUwdAJIxtNYuaEuv aG+xzqPhJIfprNWJ+tsp7P87qLFtBE9YGyPIU7ixOjjD+YEozpKnz8giPICkX17W acP+zBNXIyp6aJEaVPDosY9hcZ5fcyDgTsvMZ+XRcvelpehM9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVsu9xuxBZokJFfChVez677xzhdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNDg4 YjdiOS1lZjZlLTQwOTctOTIwNy05NDBiYzYyMjg5ZjEvZGJjMjgzMGQtMDgxZS0z MzRmLTk2NzAtOWQwNDU0YjNmNGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjQ4OGI3YjktZWY2ZS00MDk3LTky MDctOTQwYmM2MjI4OWYxL2Y0ODhiN2I5LWVmNmUtNDA5Ny05MjA3LTk0MGJjNjIy ODlmMS5jcmwwHwYDVR0jBBgwFoAUPxxUDNtcDmXdBrbdYFiUOGPEBQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNDg4YjdiOS1lZjZlLTQwOTctOTIwNy05NDBi YzYyMjg5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQutoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO+KjxmP8ueWMjIegH/fT2SGAMfkVjikJWbxJipyFm/XdJc4Dz7jN59 Tp1cAZc/D0Mwqye6+jk/u+hzjR4xvHhTrCHfYqgxptaQhoIj0J/BiOVER2v/QwVT ZsKA7dTy9mb/cMQ2IOoBby2YKVCgle47Dw1cf/MCq5VbT5b+QRV70sZUKmhGjHhZ dkVXzUdfE9Z7nD3CsK6QeibQ+fVLFervz18pZq+o6zcxg6Rip8RYXr6pjHjfXCcf KvHqABQkJIEqC2yixdXq+QwVt9ErdCzE11Ccfv9MRpbvFXGq7m+nsW4KGgsmfmIU G+zHSpy42SJ/CBzR/kikAcwnUTQIWtE= -----END CERTIFICATE-----Generated at Thu Oct 1 21:05:51 2026 by rpki-client