$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/d2e9a628-bb73-378c-9508-2db3fb689656.roa File: d2e9a628-bb73-378c-9508-2db3fb689656.roa (raw, json) Hash identifier: 9fSzmRudDZ2wivccV1gWi0rpZNl9z7gGDmYxszQA8P4= Subject key identifier: B5:4D:5D:48:29:A6:87:3E:EC:99:74:80:43:89:F6:78:6F:E7:3F:AA Certificate issuer: /CN=66cf51f2-af3c-4c05-a781-3b923f753475 Certificate serial: 010D0C9F4328584D8EF5660B1A17FB26EECD4180 Authority key identifier: 2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/d2e9a628-bb73-378c-9508-2db3fb689656.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 21976 IP address blocks: 192.100.64.0/24 maxlen: 24 192.154.128.0/24 maxlen: 24 192.154.129.0/24 maxlen: 24 192.154.130.0/24 maxlen: 24 204.152.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:66:0b:1a:17:fb:26:ee:cd:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cf51f2-af3c-4c05-a781-3b923f753475 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=3387fe81-ecaa-4e30-95f6-8f9fb54db92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:e2:d9:b3:bf:17:89:32:4a:0c:ee:99:1f: fa:1d:d3:4c:94:b0:7a:c7:0f:b5:54:3d:d9:6f:73: 43:72:ae:45:9e:a4:29:d5:bc:6a:cc:f4:eb:d4:18: 58:5d:6a:d9:34:fe:88:3c:b8:c2:72:71:ee:56:86: e1:75:27:ac:fc:61:ad:fb:6e:0c:82:ad:2c:49:25: e6:89:ab:e3:8b:b6:53:70:41:ac:ed:51:cc:da:c4: 05:aa:6e:1c:79:40:14:eb:a7:37:06:c3:94:1e:2d: dd:e6:2b:be:9a:24:26:8b:11:2f:4c:13:91:76:9c: 7a:cb:04:51:03:fc:1e:9e:86:c9:a0:e9:5f:bb:ef: 9d:d6:eb:24:33:8a:49:17:dc:3e:22:9e:a5:28:2c: e5:10:a8:77:71:0b:b0:99:a9:b6:0f:c1:b0:c3:da: be:e0:29:58:aa:bd:0b:c6:ea:1c:3d:90:d1:ac:d1: c0:f7:12:dd:20:28:1c:67:0b:b5:b5:9f:5d:f4:aa: 4f:f5:0f:ea:ac:4a:70:27:d2:1c:32:9c:29:96:f5: 07:1f:ca:35:d9:b2:74:09:8c:91:51:68:30:be:c7: c0:6b:4b:d9:e4:92:fa:54:91:34:6f:29:54:c8:5e: 6d:3b:92:c6:2c:74:f0:f0:1d:97:32:16:a4:48:af: ba:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4D:5D:48:29:A6:87:3E:EC:99:74:80:43:89:F6:78:6F:E7:3F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/d2e9a628-bb73-378c-9508-2db3fb689656.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl X509v3 Authority Key Identifier: keyid:2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer sbgp-ipAddrBlock: critical IPv4: 192.100.64.0/24 192.154.128.0-192.154.130.255 204.152.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:b9:74:a5:12:8c:70:f6:1e:8d:71:00:ac:98:1e:c5:bd:84: c5:79:6b:21:e6:71:81:c4:36:5b:4f:cc:a4:7c:e8:20:aa:af: a8:83:bc:ea:a9:b1:ee:b0:8c:f1:5f:b0:98:e8:fd:9b:51:6d: 69:09:5f:33:99:7d:99:ee:e7:62:a0:98:16:5c:2f:23:29:0b: 37:7f:fd:f3:06:2b:f9:c0:81:ba:4d:e3:56:a9:f6:2e:9f:38: 68:8a:f3:a7:be:03:b2:8b:91:91:bd:17:6c:6d:83:46:6e:7a: 12:67:f0:93:fa:4f:90:92:a5:00:cf:d2:70:78:b2:cc:30:21: 29:ad:4f:1c:3a:3a:2c:32:96:1c:d9:ef:f7:f9:0e:16:9f:d8: f0:3d:1e:1a:35:27:57:7c:35:75:50:18:31:64:97:13:e7:cc: c6:17:34:4f:e2:02:39:6a:0e:54:d0:93:80:2f:cb:08:00:da: a7:05:fc:61:1c:39:17:93:d3:e1:81:78:56:f4:d6:ae:42:67: 0f:67:26:36:84:10:fd:6e:ee:09:4a:83:cb:15:55:87:d5:44: b7:bb:38:8a:4e:f2:44:9a:89:3c:ee:07:5c:7d:3e:33:55:0a: be:49:af:24:ae:b8:39:2a:62:11:fa:b1:d5:dd:0b:c0:64:36: 9e:e7:35:6b -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE2O9WYLGhf7Ju7NQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZjUxZjItYWYzYy00YzA1LWE3ODEtM2I5MjNmNzUz NDc1MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzM4N2ZlODEtZWNhYS00ZTMwLTk1ZjYtOGY5ZmI1NGRiOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A/i2bO/F4kySgzumR/6HdNMlLB6xw+1VD3Z b3NDcq5FnqQp1bxqzPTr1BhYXWrZNP6IPLjCcnHuVobhdSes/GGt+24Mgq0sSSXm iavji7ZTcEGs7VHM2sQFqm4ceUAU66c3BsOUHi3d5iu+miQmixEvTBORdpx6ywRR A/wenobJoOlfu++d1uskM4pJF9w+Ip6lKCzlEKh3cQuwmam2D8Gww9q+4ClYqr0L xuocPZDRrNHA9xLdICgcZwu1tZ9d9KpP9Q/qrEpwJ9IcMpwplvUHH8o12bJ0CYyR UWgwvsfAa0vZ5JL6VJE0bylUyF5tO5LGLHTw8B2XMhakSK+64QIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFLVNXUgppoc+7Jl0gEOJ9nhv5z+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNm NTFmMi1hZjNjLTRjMDUtYTc4MS0zYjkyM2Y3NTM0NzUvZDJlOWE2MjgtYmI3My0z NzhjLTk1MDgtMmRiM2ZiNjg5NjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZjUxZjItYWYzYy00YzA1LWE3 ODEtM2I5MjNmNzUzNDc1LzY2Y2Y1MWYyLWFmM2MtNGMwNS1hNzgxLTNiOTIzZjc1 MzQ3NS5jcmwwHwYDVR0jBBgwFoAULbG3J4L3E2MeTADAY5+rGShIsDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNmNTFmMi1hZjNjLTRjMDUtYTc4MS0zYjky M2Y3NTM0NzUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwGRAMAwD BAfAmoADBADAmoIDBAHMmJQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAtrl0pRKMcPYejXEArJgexb2ExXlr IeZxgcQ2W0/MpHzoIKqvqIO86qmx7rCM8V+wmOj9m1FtaQlfM5l9me7nYqCYFlwv IykLN3/98wYr+cCBuk3jVqn2Lp84aIrzp74DsouRkb0XbG2DRm56Emfwk/pPkJKl AM/ScHiyzDAhKa1PHDo6LDKWHNnv9/kOFp/Y8D0eGjUnV3w1dVAYMWSXE+fMxhc0 T+ICOWoOVNCTgC/LCADapwX8YRw5F5PT4YF4VvTWrkJnD2cmNoQQ/W7uCUqDyxVV h9VEt7s4ik7yRJqJPO4HXH0+M1UKvkmvJK64OSpiEfqx1d0LwGQ2nuc1aw== -----END CERTIFICATE-----Generated at Mon Apr 27 11:19:43 2026 by rpki-client