$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/0f5de3cf-38f4-358d-87b9-d26a85402381.roa File: 0f5de3cf-38f4-358d-87b9-d26a85402381.roa (raw, json) Hash identifier: HQsh0mWqhaizwUK/V/6dEbDH5xUWQcaPTf3t637P4nw= Subject key identifier: FD:85:F8:5C:A8:69:B3:FC:A1:06:6E:97:A1:12:CA:A9:2A:9D:E8:9E Certificate issuer: /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Certificate serial: 010D0C9F4328584DFBD6222985B3ED90FED65780 Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/0f5de3cf-38f4-358d-87b9-d26a85402381.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 7029 IP address blocks: 66.207.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d6:22:29:85:b3:ed:90:fe:d6:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=7b25ad31-3e53-4e79-b761-4511c631e470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:b9:79:f5:ca:72:16:90:43:5b:78:b8:10: 28:64:ae:fb:fa:62:24:3c:d5:c6:e7:ec:d2:0b:86: 70:fe:94:00:b5:b4:a0:39:a6:ee:7b:e3:22:63:90: 2f:10:3c:9a:b1:b2:d3:e9:db:22:09:59:3c:ed:30: 64:3b:ef:d3:f7:14:14:b3:40:3a:9a:bf:cb:65:92: 71:f4:97:d9:7c:54:04:9a:a4:a8:45:df:4c:f2:d4: fc:af:a3:2e:1f:13:f8:56:d1:c1:74:06:81:9f:e9: e2:bc:30:33:b8:97:14:98:b4:4c:4c:f2:96:b6:1c: 25:2d:3e:c3:93:b8:95:e8:93:b0:27:9d:7a:91:72: 2b:71:f7:31:bd:ef:ca:cb:93:8c:8f:6f:df:ba:75: 44:71:0d:61:22:14:cc:08:a5:f6:11:63:45:03:a9: 83:ad:e4:84:24:b6:99:18:8e:a1:d9:c2:cc:03:05: 2e:b9:26:ba:20:4a:db:f6:61:3f:fa:97:e7:3b:51: 3a:72:5f:fa:98:fa:5d:c6:ee:a6:fe:a3:e2:5c:e5: 37:94:d6:21:78:c5:5d:bd:49:e1:df:e7:6d:37:66: 94:d3:62:7f:73:bc:1a:53:f5:b6:6c:95:29:59:85: 5e:bb:82:d1:cc:d6:ed:59:19:c0:9a:9f:91:20:4b: 00:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:85:F8:5C:A8:69:B3:FC:A1:06:6E:97:A1:12:CA:A9:2A:9D:E8:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/0f5de3cf-38f4-358d-87b9-d26a85402381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl X509v3 Authority Key Identifier: keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer sbgp-ipAddrBlock: critical IPv4: 66.207.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:8a:20:9f:cd:cd:89:d8:b2:57:8e:ce:3c:51:e1:47:a9:6e: 44:9d:a8:fc:27:a7:47:92:1d:85:ba:e0:68:c9:9c:85:62:5b: c4:ee:23:41:fb:11:a4:fb:86:b4:4b:60:48:a9:66:49:a0:0d: 0a:8c:10:82:a4:39:28:c8:32:23:c1:66:58:fa:dd:25:58:19: 21:98:7c:20:3f:80:22:6e:50:a0:de:01:ad:41:1c:93:c2:fa: 2c:e3:35:ea:c4:e6:c5:cf:4e:93:4f:62:84:e6:fc:12:e8:d8: d5:5f:8c:79:9a:0f:d3:ec:85:e7:c5:d9:62:38:f0:72:12:0d: d2:51:f7:9f:8d:68:c7:4e:60:cd:de:00:c1:41:12:b5:cd:45: f0:f8:4d:22:e0:30:5b:59:51:00:04:55:c8:68:9e:8b:91:bd: 5e:67:17:66:0f:33:be:6d:da:36:8c:96:b5:65:4f:49:bb:c5: 01:0b:e5:d0:da:f3:6c:c7:cc:bc:89:57:c2:0a:db:2e:0d:59: 5e:e3:c5:f3:dc:97:a6:7a:84:51:db:e0:1d:98:66:8e:be:44: 84:6c:42:71:98:57:96:0e:b2:45:53:10:a8:f1:f3:33:a4:02: 8d:c3:51:1b:ab:e7:b1:c6:9c:8b:e1:b6:3c:52:8e:98:12:21: 79:79:a5:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371iIphbPtkP7WV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YTUzYzItYWQzZC00ODI2LThjNDktODQ4NTdkZDRk YjYwMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk N2IyNWFkMzEtM2U1My00ZTc5LWI3NjEtNDUxMWM2MzFlNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZi5efXKchaQQ1t4uBAoZK77+mIkPNXG5+zS C4Zw/pQAtbSgOabue+MiY5AvEDyasbLT6dsiCVk87TBkO+/T9xQUs0A6mr/LZZJx 9JfZfFQEmqSoRd9M8tT8r6MuHxP4VtHBdAaBn+nivDAzuJcUmLRMTPKWthwlLT7D k7iV6JOwJ516kXIrcfcxve/Ky5OMj2/funVEcQ1hIhTMCKX2EWNFA6mDreSEJLaZ GI6h2cLMAwUuuSa6IErb9mE/+pfnO1E6cl/6mPpdxu6m/qPiXOU3lNYheMVdvUnh 3+dtN2aU02J/c7waU/W2bJUpWYVeu4LRzNbtWRnAmp+RIEsAxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2F+FyoabP8oQZul6ESyqkqneieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh NTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1N2RkNGRiNjAvMGY1ZGUzY2YtMzhmNC0z NThkLTg3YjktZDI2YTg1NDAyMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YTUzYzItYWQzZC00ODI2LThj NDktODQ4NTdkZDRkYjYwLzVjNWE1M2MyLWFkM2QtNDgyNi04YzQ5LTg0ODU3ZGQ0 ZGI2MC5jcmwwHwYDVR0jBBgwFoAUOpNtDGAmuMECDnX45ZtKtMXiNyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhNTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1 N2RkNGRiNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQs+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOKIJ/NzYnYsleOzjxR4UepbkSdqPwnp0eSHYW64GjJnIViW8TuI0H7 EaT7hrRLYEipZkmgDQqMEIKkOSjIMiPBZlj63SVYGSGYfCA/gCJuUKDeAa1BHJPC +izjNerE5sXPTpNPYoTm/BLo2NVfjHmaD9PshefF2WI48HISDdJR95+NaMdOYM3e AMFBErXNRfD4TSLgMFtZUQAEVchonouRvV5nF2YPM75t2jaMlrVlT0m7xQEL5dDa 82zHzLyJV8IK2y4NWV7jxfPcl6Z6hFHb4B2YZo6+RIRsQnGYV5YOskVTEKjx8zOk Ao3DURur57HGnIvhtjxSjpgSIXl5pRM= -----END CERTIFICATE-----Generated at Tue Jun 2 21:59:19 2026 by rpki-client