$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa304080-9357-339e-ba24-0401d5d0b55b.roa File: aa304080-9357-339e-ba24-0401d5d0b55b.roa (raw, json) Hash identifier: b2dz0sjzLmGolcWv6oGWU5f2SkrR+8tJZUKTttfPfHY= Subject key identifier: E1:C6:06:C8:DA:F3:49:23:F5:CD:C0:C6:B1:2D:68:99:20:5A:A1:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E31CF5A62DBED4A61F799CD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa304080-9357-339e-ba24-0401d5d0b55b.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 13367 IP address blocks: 66.41.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:5a:62:db:ed:4a:61:f7:99:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=bfd194c1-cd04-4207-ae04-0937f032e43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ca:ec:5a:6e:a6:40:be:bd:3d:96:a2:4f:34: c1:a4:7d:ef:d1:af:5a:88:d5:c8:a8:72:09:72:6f: d9:31:37:fa:e9:6b:14:ac:9c:3e:93:0b:a4:2c:aa: ac:c3:d6:18:3f:9c:e7:50:a5:08:81:a1:9d:1d:ca: aa:d4:87:a7:d7:97:64:55:00:ab:e7:c0:de:a7:ff: 19:32:93:a3:37:33:d6:15:18:3e:a6:2c:e2:66:0c: 77:cc:f1:47:9e:5a:ab:4f:37:90:14:ba:e3:9a:1d: 49:68:7b:b5:5a:b0:ed:31:23:d8:79:25:32:27:94: 27:c2:93:c4:5a:ce:4c:43:55:b2:e9:84:24:a2:c0: 91:ba:23:28:bd:96:74:e9:d9:ca:11:eb:10:2d:61: 3f:38:98:cc:d0:cc:90:3d:68:7b:03:2c:dd:82:9e: 02:d5:8f:16:cd:b0:64:c2:79:98:9f:53:63:64:dc: 8a:0e:99:1d:9c:2e:75:c3:f3:2b:36:27:de:d1:8d: 5b:14:74:6d:3f:3b:5d:42:77:b4:88:d7:28:08:05: 00:88:20:b9:db:4b:18:95:45:b9:3a:b6:d0:30:46: 02:a6:dc:7c:8e:4b:08:68:9a:d7:41:a5:1f:bd:3d: 92:55:14:11:f9:4f:d7:4c:49:36:c0:3d:76:77:63: 39:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C6:06:C8:DA:F3:49:23:F5:CD:C0:C6:B1:2D:68:99:20:5A:A1:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa304080-9357-339e-ba24-0401d5d0b55b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.41.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fb:e0:34:0c:35:20:25:ad:7e:ed:4c:04:f3:27:0d:44:90: d8:d8:a6:01:a1:64:5d:a7:a0:c3:fc:9f:4b:5a:53:31:0d:ed: f4:78:c2:ca:62:80:e0:ea:d7:57:ad:5f:1a:6b:30:86:72:02: 51:ad:f2:60:00:32:06:6b:f1:af:2f:2a:81:68:8f:ba:c8:3e: ab:fe:ee:30:c7:ec:29:f3:39:82:b6:ad:01:0b:6a:f1:55:57: 19:73:10:ee:d5:4e:3c:29:b8:c5:00:fb:92:ae:4e:d5:8f:6f: 7c:53:74:19:2d:85:e8:d1:17:b5:8c:ab:23:20:84:99:27:ec: 7c:f8:e0:0f:0d:e6:7c:f0:5c:42:19:7b:04:0a:e9:94:62:c7: 05:01:71:45:d0:d6:b0:d1:1a:d7:24:91:0c:58:1d:54:6e:32: de:ea:52:2d:21:97:22:59:1b:ad:06:29:5e:d4:5a:59:62:7f: 80:fa:b1:64:b6:c5:ac:9d:86:b4:92:4a:b7:7d:b0:fb:46:18: a8:f9:94:42:95:ab:5c:83:36:38:dc:67:82:0f:fc:d4:4b:26: 2f:ca:b5:fc:0a:54:74:82:b8:8a:32:e7:16:0a:7a:18:55:28: bb:7c:b5:15:de:3a:d2:07:90:35:09:87:37:bf:63:33:fe:29: 22:19:59:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz1pi2+1KYfeZzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk YmZkMTk0YzEtY2QwNC00MjA3LWFlMDQtMDkzN2YwMzJlNDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMrsWm6mQL69PZaiTzTBpH3v0a9aiNXIqHIJ cm/ZMTf66WsUrJw+kwukLKqsw9YYP5znUKUIgaGdHcqq1Ien15dkVQCr58Dep/8Z MpOjNzPWFRg+piziZgx3zPFHnlqrTzeQFLrjmh1JaHu1WrDtMSPYeSUyJ5QnwpPE Ws5MQ1Wy6YQkosCRuiMovZZ06dnKEesQLWE/OJjM0MyQPWh7Ayzdgp4C1Y8WzbBk wnmYn1NjZNyKDpkdnC51w/MrNife0Y1bFHRtPztdQne0iNcoCAUAiCC520sYlUW5 OrbQMEYCptx8jksIaJrXQaUfvT2SVRQR+U/XTEk2wD12d2M5ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHGBsja80kj9c3AxrEtaJkgWqG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEzMDQwODAtOTM1Ny0z MzllLWJhMjQtMDQwMWQ1ZDBiNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQimLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf74DQMNSAlrX7tTATzJw1EkNjYpgGhZF2noMP8n0taUzEN7fR4wspi gODq11etXxprMIZyAlGt8mAAMgZr8a8vKoFoj7rIPqv+7jDH7CnzOYK2rQELavFV VxlzEO7VTjwpuMUA+5KuTtWPb3xTdBkthejRF7WMqyMghJkn7Hz44A8N5nzwXEIZ ewQK6ZRixwUBcUXQ1rDRGtckkQxYHVRuMt7qUi0hlyJZG60GKV7UWllif4D6sWS2 xaydhrSSSrd9sPtGGKj5lEKVq1yDNjjcZ4IP/NRLJi/KtfwKVHSCuIoy5xYKehhV KLt8tRXeOtIHkDUJhze/YzP+KSIZWfQ= -----END CERTIFICATE-----Generated at Wed Jul 22 00:14:57 2026 by rpki-client