$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa File: 9b36560a-9f38-3318-a869-aa0d360ca5c4.roa (raw, json) Hash identifier: L1Gks4rxeEuaRQ6N3MoNYlu1q4wpalTIYvOwWizDXEM= Subject key identifier: A1:0F:8E:3F:8A:F2:38:61:0B:5F:2D:E4:B9:29:C8:6D:1D:FC:50:CD Certificate issuer: /CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Certificate serial: 010D0C9F4328584E86F4EE517C7BDD6B44478300 Authority key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 955 IP address blocks: 66.118.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:ee:51:7c:7b:dd:6b:44:47:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=3a319e13-7a6c-45de-8c82-f1e65176d9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:27:90:04:32:af:d4:de:8b:c8:f9:31:d4:f0: 40:39:9c:71:50:72:40:54:d6:89:ba:08:b7:29:6c: 07:ad:1a:0a:cb:00:6b:8d:bf:69:e4:a0:6e:91:0b: c6:72:5e:9b:13:1e:0b:ae:e5:af:90:fb:35:2a:54: 32:44:e8:f4:59:38:86:c6:a2:eb:b2:69:3d:9a:d7: f5:86:1c:16:4d:c7:a3:9f:b4:19:d0:43:f3:69:fe: f8:93:8a:0a:49:b4:2d:8d:f1:b8:79:77:09:0c:2b: 2f:34:00:fb:ec:43:58:91:fa:c4:af:2f:64:82:87: 5f:34:bd:49:88:7e:5b:2b:bd:7b:43:09:68:1c:e9: 99:89:cd:de:92:c6:a2:0c:ee:58:52:cb:86:9f:f6: 24:32:09:80:4d:7c:0c:5b:90:05:29:d7:1c:0c:f0: ce:8e:fa:52:31:80:0a:41:f3:b0:fa:05:ad:2f:07: 54:0b:59:ba:0f:00:df:87:60:63:ae:9c:95:35:29: 3b:12:d2:b8:ac:cc:34:91:09:03:33:fd:b3:cc:66: 2b:f0:6f:03:e9:6a:e2:b0:8f:83:bf:d8:b4:e3:49: 7d:5e:e3:09:de:9c:5e:7c:18:e4:ff:ac:a7:a8:07: ec:c1:0e:49:a4:31:1f:4f:68:3f:95:1d:f2:9c:74: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0F:8E:3F:8A:F2:38:61:0B:5F:2D:E4:B9:29:C8:6D:1D:FC:50:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl X509v3 Authority Key Identifier: keyid:DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer sbgp-ipAddrBlock: critical IPv4: 66.118.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:30:e8:f9:b2:c2:80:10:4e:b1:66:bd:df:39:18:87:c0:ab: 83:fe:56:e4:9d:ed:61:3d:20:c8:d2:6f:6b:a8:e0:93:50:36: 83:f6:0c:fa:f6:f9:7c:41:d5:33:84:4e:26:8c:15:e5:6f:bd: d5:9d:9b:a4:b9:87:0d:51:29:2d:d5:54:4d:26:7c:86:6f:71: a3:83:ca:a5:a8:61:7c:c3:13:50:a8:4c:30:fb:8c:ef:b0:90: e1:9b:06:e6:bf:4b:a7:3b:79:a2:47:76:80:58:f5:53:3f:ef: a4:56:9c:b1:a2:99:bd:e1:5e:5f:aa:33:1e:36:61:99:92:af: 70:69:dd:8f:c2:30:b7:e8:f6:6a:5a:9c:de:6e:87:d2:31:ee: ac:f8:62:51:5a:a5:27:95:5e:a5:92:62:5b:ec:79:cf:82:16: 27:d0:ee:ae:c4:a7:51:16:33:e8:41:89:40:c4:eb:80:e1:1d: d7:94:b2:30:41:12:6f:8c:61:0f:de:bc:b3:cb:ec:18:f9:d2: e5:86:7f:bc:72:fe:bc:f4:e8:12:d6:8c:d9:d1:8e:cd:44:a2: 9b:5a:84:db:9c:0e:74:76:8b:53:f3:d3:cb:d4:98:17:29:c8: b4:26:14:c9:e1:55:6a:fa:d0:6f:e5:a0:c8:4b:f1:b2:c4:2a: 61:79:1e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9O5RfHvda0RHgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiNmUwOTMtZjYzNi00ZTI1LTkzNmItNmZjNjIzMmY1 MGM1MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk M2EzMTllMTMtN2E2Yy00NWRlLThjODItZjFlNjUxNzZkOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCeQBDKv1N6LyPkx1PBAOZxxUHJAVNaJugi3 KWwHrRoKywBrjb9p5KBukQvGcl6bEx4LruWvkPs1KlQyROj0WTiGxqLrsmk9mtf1 hhwWTcejn7QZ0EPzaf74k4oKSbQtjfG4eXcJDCsvNAD77ENYkfrEry9kgodfNL1J iH5bK717QwloHOmZic3eksaiDO5YUsuGn/YkMgmATXwMW5AFKdccDPDOjvpSMYAK QfOw+gWtLwdUC1m6DwDfh2BjrpyVNSk7EtK4rMw0kQkDM/2zzGYr8G8D6WrisI+D v9i040l9XuMJ3pxefBjk/6ynqAfswQ5JpDEfT2g/lR3ynHTnOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEPjj+K8jhhC18t5LkpyG0d/FDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2 ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2MjMyZjUwYzUvOWIzNjU2MGEtOWYzOC0z MzE4LWE4NjktYWEwZDM2MGNhNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDJiNmUwOTMtZjYzNi00ZTI1LTkz NmItNmZjNjIzMmY1MGM1LzQyYjZlMDkzLWY2MzYtNGUyNS05MzZiLTZmYzYyMzJm NTBjNS5jcmwwHwYDVR0jBBgwFoAU3yUdEw9M5iucaaNOwOaqFJ5YHjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2 MjMyZjUwYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMw6PmywoAQTrFmvd85GIfAq4P+VuSd7WE9IMjSb2uo4JNQNoP2DPr2 +XxB1TOETiaMFeVvvdWdm6S5hw1RKS3VVE0mfIZvcaODyqWoYXzDE1CoTDD7jO+w kOGbBua/S6c7eaJHdoBY9VM/76RWnLGimb3hXl+qMx42YZmSr3Bp3Y/CMLfo9mpa nN5uh9Ix7qz4YlFapSeVXqWSYlvsec+CFifQ7q7Ep1EWM+hBiUDE64DhHdeUsjBB Em+MYQ/evLPL7Bj50uWGf7xy/rz06BLWjNnRjs1EoptahNucDnR2i1Pz08vUmBcp yLQmFMnhVWr60G/loMhL8bLEKmF5HpA= -----END CERTIFICATE-----Generated at Tue Jul 21 21:05:37 2026 by rpki-client