$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa File: faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa (raw, json) Hash identifier: sWXPSpINJBLiAj76wwyupYqGoPoyW1ZHK1zWcbATENE= Subject key identifier: EB:C7:6E:2E:7B:81:E9:6B:0A:4A:1D:03:DC:DB:A9:C6:B5:AD:C2:94 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584E1FA9A12FE25AC122C20B9CC0 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 5511 IP address blocks: 66.112.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:a1:2f:e2:5a:c1:22:c2:0b:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=0cad60bf-928b-4fe5-ac0e-e44f8ecce742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:ae:5f:a9:63:00:e0:b9:70:3a:86:3e:5f: 04:7d:7d:32:ca:ba:4e:fb:ce:30:6a:31:7f:9d:5e: 9b:3b:68:8c:05:0c:16:e9:43:16:34:d1:b1:02:c4: fc:cd:d2:c9:c1:18:af:bf:02:88:ea:12:bf:5b:fb: c1:25:e3:07:0a:c1:6d:5e:12:27:38:9f:0a:de:84: ce:f6:dc:46:e5:31:7a:23:71:30:3f:f6:03:4f:9c: 12:78:8b:97:af:03:70:0a:c3:51:e7:41:aa:e5:bd: fd:3b:32:3a:3f:fa:56:04:44:c1:08:a9:35:e1:77: 71:0f:f3:61:21:85:1b:0e:ba:74:77:41:30:70:04: 93:20:74:6f:83:cb:ec:8e:c3:fb:3f:bc:74:28:92: 5d:b2:e0:6f:86:03:fd:08:0b:8f:3e:d2:35:26:5d: 86:ad:9d:f2:ba:73:88:77:e4:d5:60:5a:ec:15:48: b5:12:c2:b3:70:ef:96:59:00:36:3c:2c:2b:17:05: 9c:b9:90:77:f0:6e:ea:13:40:b5:4c:bb:fb:03:b7: 34:f0:5d:77:4c:76:4c:1a:ca:58:d6:27:6b:8c:a3: bb:75:ce:76:05:82:fa:bf:5b:d1:b9:9b:43:b9:d8: fe:52:3d:d3:d3:24:38:39:62:17:a9:d7:fc:e3:f2: 64:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C7:6E:2E:7B:81:E9:6B:0A:4A:1D:03:DC:DB:A9:C6:B5:AD:C2:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:c5:4e:4d:a5:ba:2f:4a:d0:d9:85:ca:af:9a:68:5a:01:11: 35:4e:7f:d7:84:97:60:b0:ee:cf:81:82:7c:69:c7:f0:68:00: 9d:ee:05:be:e1:75:3e:b6:3f:af:82:7f:12:8d:63:d2:2c:58: b0:06:f4:fd:b5:da:b0:52:13:f9:06:32:2d:c8:69:9e:cf:0c: 89:2f:13:b3:5a:6d:a1:5b:5a:61:5e:a2:25:61:a7:f7:83:76: b5:42:9f:8c:81:25:9a:50:ea:f9:2d:df:93:0e:e3:bd:00:6f: fa:ae:56:ed:f2:5b:39:38:ae:45:8c:1c:c3:b1:45:41:41:f5: e8:1b:cf:23:c6:eb:45:6b:13:4b:66:7b:bc:65:62:d4:06:4a: 6f:7b:63:f4:b6:b0:fe:68:8a:73:5a:66:69:8f:ef:5a:6a:c2: 91:ed:f4:31:bd:23:f8:a0:22:d8:a1:a5:db:04:45:2a:5d:e7: 54:02:01:de:4e:dd:c3:ba:90:7d:89:47:f4:7d:ff:1a:d1:6c: ef:a6:88:65:28:e6:6e:55:75:f0:2e:dc:18:f1:30:10:46:70: 8c:ef:96:b4:8d:47:7a:13:22:38:b3:27:9d:a9:26:f5:b6:4f: 98:c9:1f:88:79:7c:d5:ba:1f:f0:fa:64:60:ec:85:a8:1c:b0: 46:63:f8:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqaEv4lrBIsILnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk MGNhZDYwYmYtOTI4Yi00ZmU1LWFjMGUtZTQ0ZjhlY2NlNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGWuX6ljAOC5cDqGPl8EfX0yyrpO+84wajF/ nV6bO2iMBQwW6UMWNNGxAsT8zdLJwRivvwKI6hK/W/vBJeMHCsFtXhInOJ8K3oTO 9txG5TF6I3EwP/YDT5wSeIuXrwNwCsNR50Gq5b39OzI6P/pWBETBCKk14XdxD/Nh IYUbDrp0d0EwcASTIHRvg8vsjsP7P7x0KJJdsuBvhgP9CAuPPtI1Jl2GrZ3yunOI d+TVYFrsFUi1EsKzcO+WWQA2PCwrFwWcuZB38G7qE0C1TLv7A7c08F13THZMGspY 1idrjKO7dc52BYL6v1vRuZtDudj+Uj3T0yQ4OWIXqdf84/JkDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvHbi57gelrCkodA9zbqca1rcKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZmFhZjk0ODgtNzVhNy0z NjEyLWI1YjYtYTY1YTllNGY2YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/FTk2lui9K0NmFyq+aaFoBETVOf9eEl2Cw7s+Bgnxpx/BoAJ3uBb7h dT62P6+CfxKNY9IsWLAG9P212rBSE/kGMi3IaZ7PDIkvE7NabaFbWmFeoiVhp/eD drVCn4yBJZpQ6vkt35MO470Ab/quVu3yWzk4rkWMHMOxRUFB9egbzyPG60VrE0tm e7xlYtQGSm97Y/S2sP5oinNaZmmP71pqwpHt9DG9I/igItihpdsERSpd51QCAd5O 3cO6kH2JR/R9/xrRbO+miGUo5m5VdfAu3BjxMBBGcIzvlrSNR3oTIjizJ52pJvW2 T5jJH4h5fNW6H/D6ZGDshagcsEZj+N0= -----END CERTIFICATE-----Generated at Fri Jun 12 00:30:51 2026 by rpki-client