$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/604a7dd0-0150-3ce6-9b25-62517e9d7b81.roa File: 604a7dd0-0150-3ce6-9b25-62517e9d7b81.roa (raw, json) Hash identifier: 6sSaJmmY2lz5uJQGq0YQw+Xco+mfp9XnWtJ1RuteOfY= Subject key identifier: 56:CC:DF:F0:74:B5:73:A9:4E:29:04:65:69:4D:CB:6B:32:4C:50:C0 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DABAF82293F414BDEB3BDD480 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/604a7dd0-0150-3ce6-9b25-62517e9d7b81.roa Signing time: Wed 29 Apr 2026 19:58:26 +0000 ROA not before: Wed 29 Apr 2026 19:58:26 +0000 ROA not after: Tue 28 Jul 2026 19:58:26 +0000 asID: 401152 IP address blocks: 166.1.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:af:82:29:3f:41:4b:de:b3:bd:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 29 19:58:26 2026 GMT Not After : Jul 28 19:58:26 2026 GMT Subject: CN=4b31d517-c837-4a25-a534-1a7eaa61690a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d3:26:eb:da:28:b7:6e:a9:e0:8c:7f:51:0b: 8a:a6:23:4d:46:27:c2:6f:f5:82:0d:5a:98:77:8a: aa:4a:02:14:c3:57:ae:40:3e:ff:f1:71:f3:fc:8a: f4:bf:07:cb:1c:6a:78:3a:49:70:8e:3d:20:d8:13: 82:53:88:e2:3e:49:e2:98:61:bc:36:48:14:5b:0b: f2:17:0b:d7:b1:e4:0b:e4:57:2f:05:f4:ac:cf:80: ac:90:0f:b2:79:a6:01:e3:bf:ed:f8:f6:b9:e5:8f: b7:12:7d:7e:a6:4d:6b:ae:f6:4d:f6:a7:cf:7e:bf: e3:16:cc:9b:20:45:f8:9f:61:d0:b5:6d:fc:38:bc: 98:0d:3d:ec:e7:0b:4a:1c:da:9b:46:58:29:50:92: 16:8b:94:83:03:86:ee:cc:99:c8:6e:79:61:13:44: 62:d7:86:c5:1f:d3:58:60:24:bd:29:14:03:53:7d: 94:85:d8:96:9a:ba:e5:ee:cf:8f:85:31:28:db:82: dc:c0:4c:64:fa:f3:69:84:12:98:8a:47:bb:54:df: 66:0b:f1:5f:e2:d2:bd:4d:06:c0:ad:82:60:50:ef: 55:9b:54:97:56:e4:0c:ad:c6:2b:31:d8:dd:48:73: 19:3d:e2:9f:d8:90:06:0e:07:57:79:e0:52:0f:d1: e4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CC:DF:F0:74:B5:73:A9:4E:29:04:65:69:4D:CB:6B:32:4C:50:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/604a7dd0-0150-3ce6-9b25-62517e9d7b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6e:c6:bd:aa:cb:4c:6e:60:6f:fc:22:62:d8:da:32:93:82: dc:2c:31:d7:b9:1b:e7:8d:39:f4:73:66:84:1c:21:f5:7e:8e: df:12:28:06:10:7e:e9:00:a0:9e:f3:f9:0c:77:0b:89:69:d8: f4:58:c3:bf:a4:1f:93:e1:2c:b1:e7:d8:83:c4:5a:f8:60:f3: 67:e1:14:71:d3:0d:1a:25:d6:61:11:74:ac:45:cc:8f:27:56: da:a7:5e:4b:85:60:13:76:5c:35:b1:04:8d:f2:a6:ba:c1:8f: b9:bf:bd:0a:78:c2:b4:ce:c7:e5:67:9c:fd:37:96:19:1c:ad: ca:8e:68:d4:ee:ef:b9:db:41:31:c1:cf:b4:a7:05:e8:bb:27: c0:ff:63:4b:98:86:83:98:98:08:3f:a0:d8:75:33:54:e3:2f: fc:f2:8e:83:77:21:5e:53:d7:1d:5e:cb:40:96:db:04:d1:3c: a4:8c:b8:02:81:57:af:71:89:34:16:2c:11:1a:3a:3b:4f:2c: 60:9f:75:4c:55:0d:c4:20:85:65:9f:b2:6c:eb:b1:ff:8f:0e: 22:01:6b:db:8e:2e:84:b0:59:b9:66:75:a8:c4:52:15:72:d0: 27:f4:b5:a3:55:a7:62:cf:55:0f:13:38:27:30:e8:06:50:87: 75:54:62:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2rr4IpP0FL3rO91IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQyOTE5NTgyNloXDTI2MDcyODE5NTgyNlowLzEtMCsGA1UEAxMk NGIzMWQ1MTctYzgzNy00YTI1LWE1MzQtMWE3ZWFhNjE2OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtMm69oot26p4Ix/UQuKpiNNRifCb/WCDVqY d4qqSgIUw1euQD7/8XHz/Ir0vwfLHGp4Oklwjj0g2BOCU4jiPknimGG8NkgUWwvy FwvXseQL5FcvBfSsz4CskA+yeaYB47/t+Pa55Y+3En1+pk1rrvZN9qfPfr/jFsyb IEX4n2HQtW38OLyYDT3s5wtKHNqbRlgpUJIWi5SDA4buzJnIbnlhE0Ri14bFH9NY YCS9KRQDU32UhdiWmrrl7s+PhTEo24LcwExk+vNphBKYike7VN9mC/Ff4tK9TQbA rYJgUO9Vm1SXVuQMrcYrMdjdSHMZPeKf2JAGDgdXeeBSD9HkPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbM3/B0tXOpTikEZWlNy2syTFDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjA0YTdkZDAtMDE1MC0z Y2U2LTliMjUtNjI1MTdlOWQ3YjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgE5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABluxr2qy0xuYG/8ImLY2jKTgtwsMde5G+eNOfRzZoQcIfV+jt8SKAYQ fukAoJ7z+Qx3C4lp2PRYw7+kH5PhLLHn2IPEWvhg82fhFHHTDRol1mERdKxFzI8n VtqnXkuFYBN2XDWxBI3yprrBj7m/vQp4wrTOx+VnnP03lhkcrcqOaNTu77nbQTHB z7SnBei7J8D/Y0uYhoOYmAg/oNh1M1TjL/zyjoN3IV5T1x1ey0CW2wTRPKSMuAKB V69xiTQWLBEaOjtPLGCfdUxVDcQghWWfsmzrsf+PDiIBa9uOLoSwWblmdajEUhVy 0Cf0taNVp2LPVQ8TOCcw6AZQh3VUYjE= -----END CERTIFICATE-----Generated at Sat May 2 23:10:00 2026 by rpki-client