$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa File: 4f857680-6d43-32b8-9d58-a4dfa622acf3.roa (raw, json) Hash identifier: fEi7DZTLnZ1G5BYEiURC6YW/w9e5LTwfgN//kdqN79g= Subject key identifier: 57:C0:78:4F:38:9C:69:3B:D5:6A:BB:B7:B6:09:4F:DE:ED:14:16:7F Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584D65150D2E2A201D04DEB4C400 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 16509 IP address blocks: 66.178.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:0d:2e:2a:20:1d:04:de:b4:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=1d0bad98-05ea-470a-94fc-f9f1f7d54cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:83:e7:ae:10:f9:ef:b1:a4:59:0c:5b:77:40: 9b:9b:81:3c:35:e9:7d:49:bc:1d:0a:ef:f1:da:d0: c8:6f:7e:b8:98:d5:cb:a6:51:ca:0e:22:95:c0:4b: 74:52:e1:f1:2b:d9:88:9b:55:92:e2:cd:87:2e:46: 79:47:b2:c1:53:17:50:eb:bd:e2:45:ab:5b:1b:26: 7f:17:44:46:28:b2:40:38:f2:2d:9c:9e:65:ac:52: a8:f0:a2:b1:53:1e:ad:0b:3d:fa:47:33:5e:ce:e8: c9:8b:78:0a:81:09:76:21:dc:35:b0:ff:ed:31:27: 44:69:0d:07:2e:b0:05:83:8b:73:77:ad:1c:82:1b: 98:f9:8e:e4:2e:fa:9a:86:8d:62:3b:f4:86:87:6d: 95:bd:d8:d7:a9:59:37:ec:f3:96:b3:c9:72:67:21: 9f:68:49:65:62:90:1e:d7:c1:9d:c1:dc:ed:a6:60: 35:07:41:99:dc:5f:84:60:78:4e:06:82:80:95:40: d1:67:79:bb:b3:0f:13:6e:ab:86:b3:93:6b:44:d7: 98:a0:7c:90:98:77:dc:b5:73:cc:b7:14:91:1a:c7: f7:05:3f:0e:19:57:82:ca:a7:ab:19:1a:77:7a:d9: 6a:17:40:0b:2d:90:d9:3c:b7:2a:ff:91:02:3a:9e: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C0:78:4F:38:9C:69:3B:D5:6A:BB:B7:B6:09:4F:DE:ED:14:16:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 66.178.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9a:93:10:b4:88:00:eb:4c:ce:cc:a2:56:47:98:7e:a1:87: 0b:63:72:68:59:c1:3c:e1:0d:a9:4d:26:cd:4d:bb:05:83:52: c1:19:6b:c7:c1:47:29:c3:42:71:9a:12:bc:77:aa:3f:ff:4c: ef:6a:22:dd:91:87:1c:80:75:16:83:ef:05:58:a3:ba:80:c2: 09:e8:83:99:73:9e:e8:9f:94:39:96:f5:b8:15:ee:db:26:2c: d5:c0:30:eb:16:5f:74:ee:d2:de:e1:be:bd:4e:d0:9b:21:d7: 76:01:90:af:32:fa:67:5a:0c:b1:cc:e7:58:dc:8a:c6:32:71: c9:93:bc:4f:c2:d9:5e:51:78:2f:4c:1d:63:37:98:3d:73:26: f1:23:41:74:f4:5f:7e:ef:ad:21:15:33:c8:e8:0b:9b:fd:c6: 5d:2b:13:f7:8d:6f:2a:65:c8:0e:5e:76:d0:ee:ec:9e:42:fe: 5b:36:18:2b:a7:31:28:69:56:34:6e:d7:d8:37:4e:e3:eb:04: dc:1b:b4:e0:a3:e1:14:af:c5:f7:6a:5e:02:56:8d:04:b3:50: 18:0e:09:4e:2d:e9:3f:2f:b9:28:b9:c2:26:16:ba:4d:77:2f: 0b:d5:fb:03:93:fa:c7:40:73:92:6c:b7:6d:07:42:8e:6c:4a: 9f:c8:cb:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQ0uKiAdBN60xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MWQwYmFkOTgtMDVlYS00NzBhLTk0ZmMtZjlmMWY3ZDU0Y2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YPnrhD577GkWQxbd0Cbm4E8Nel9SbwdCu/x 2tDIb364mNXLplHKDiKVwEt0UuHxK9mIm1WS4s2HLkZ5R7LBUxdQ673iRatbGyZ/ F0RGKLJAOPItnJ5lrFKo8KKxUx6tCz36RzNezujJi3gKgQl2Idw1sP/tMSdEaQ0H LrAFg4tzd60cghuY+Y7kLvqaho1iO/SGh22VvdjXqVk37POWs8lyZyGfaEllYpAe 18GdwdztpmA1B0GZ3F+EYHhOBoKAlUDRZ3m7sw8TbquGs5NrRNeYoHyQmHfctXPM txSRGsf3BT8OGVeCyqerGRp3etlqF0ALLZDZPLcq/5ECOp7ENwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfAeE84nGk71Wq7t7YJT97tFBZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvNGY4NTc2ODAtNmQ0My0z MmI4LTlkNTgtYTRkZmE2MjJhY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyakxC0iADrTM7MolZHmH6hhwtjcmhZwTzhDalNJs1NuwWDUsEZa8fB RynDQnGaErx3qj//TO9qIt2RhxyAdRaD7wVYo7qAwgnog5lznuiflDmW9bgV7tsm LNXAMOsWX3Tu0t7hvr1O0Jsh13YBkK8y+mdaDLHM51jcisYyccmTvE/C2V5ReC9M HWM3mD1zJvEjQXT0X37vrSEVM8joC5v9xl0rE/eNbyplyA5edtDu7J5C/ls2GCun MShpVjRu19g3TuPrBNwbtOCj4RSvxfdqXgJWjQSzUBgOCU4t6T8vuSi5wiYWuk13 LwvV+wOT+sdAc5Jst20HQo5sSp/Iy4M= -----END CERTIFICATE-----Generated at Tue Apr 7 13:32:03 2026 by rpki-client