$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/3b8c871f-2359-3b77-9740-9c32d000de8c.roa File: 3b8c871f-2359-3b77-9740-9c32d000de8c.roa (raw, json) Hash identifier: IGW9l/i2/RBJeKLBnPEHITXw0sarEQ2xbX5Wt1bJVIg= Subject key identifier: E2:E8:B3:4F:F8:FF:FF:2B:E0:EA:50:D6:BA:02:72:27:0C:F3:58:4A Certificate issuer: /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Certificate serial: 010D0C9F4328584D8C2AA28960F9452DAA03BA80 Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/3b8c871f-2359-3b77-9740-9c32d000de8c.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 400947 IP address blocks: 66.76.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:a2:89:60:f9:45:2d:aa:03:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=6156c45f-962d-40d7-8b76-0d3c16ae616a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:a0:94:9f:30:e2:9e:13:ce:aa:e4:fe:6f: 45:72:20:ee:af:1b:a0:80:51:cd:a0:75:46:17:fe: e9:56:ce:1f:8f:5f:e4:cd:d0:6f:0e:53:b3:12:1f: d9:05:b4:a0:de:f8:0b:bd:d6:d1:66:68:af:08:72: 6a:9e:8e:66:8e:77:e9:bf:a4:f1:b6:e1:f2:37:a9: e8:45:f2:b4:ac:8c:b3:ff:8d:a4:42:b0:8c:ca:0f: f1:98:ce:8b:f3:ac:4d:2b:2c:c1:03:35:f0:40:21: 40:0e:07:52:cc:ea:01:46:50:0c:72:d6:b6:a2:4f: 1b:5d:ee:10:17:b6:e2:1d:61:55:d7:99:3b:cc:da: 62:45:86:ad:1f:fb:6d:c4:9f:3c:c9:6c:a0:67:8a: a6:be:77:3c:b4:39:8d:85:c5:95:a6:d0:22:d8:aa: 7e:ca:00:45:73:6e:f9:37:96:d3:d6:9e:2a:d7:7a: 57:14:aa:f4:3e:24:0f:2e:86:c5:25:02:c5:2c:7b: f7:dd:6e:04:22:92:6e:bc:f7:ed:75:66:f0:6f:62: eb:c4:3e:3f:9f:03:3b:a7:87:be:c3:3b:ad:4c:dc: bc:cf:e9:47:ad:e7:af:b1:ca:dc:bd:8c:ca:26:0f: 78:83:08:5e:ca:83:8d:34:ea:0a:02:24:e7:52:ef: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E8:B3:4F:F8:FF:FF:2B:E0:EA:50:D6:BA:02:72:27:0C:F3:58:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/3b8c871f-2359-3b77-9740-9c32d000de8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl X509v3 Authority Key Identifier: keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer sbgp-ipAddrBlock: critical IPv4: 66.76.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3f:57:f1:d1:c7:d9:9a:98:69:58:32:a9:1b:29:ab:66:71: 43:3b:da:c2:73:44:b0:52:25:26:5c:dc:76:b4:52:c1:15:39: 3d:ac:18:9e:dd:a0:65:ee:dd:4c:37:35:8c:00:09:49:14:b0: 58:3e:e9:4a:d6:ee:4c:1b:72:a5:82:03:f5:06:74:b6:a3:98: 7f:af:43:1b:f1:4e:b7:fe:40:0e:b5:f2:ae:81:0b:10:51:a3: d6:e6:d9:28:31:92:33:81:59:c6:c7:12:10:35:b9:72:e9:a9: bf:1e:47:62:13:e1:95:bd:7c:c5:64:62:2f:de:45:18:04:08: a2:41:30:86:a3:42:73:10:13:b0:81:cd:72:62:12:df:9f:60: 80:8f:4d:bc:42:38:f3:da:48:bb:51:31:5e:d9:61:90:3e:25: e3:e6:ea:a3:94:21:54:12:69:be:00:b4:63:1b:c0:9e:50:17: 6c:9a:d1:d8:db:2a:22:77:0b:da:0c:50:c7:21:4d:57:23:9e: 58:9e:c4:56:e0:fa:a4:02:58:ee:f9:d2:22:ee:49:c6:a4:a2: 21:ed:42:31:41:7d:f2:69:03:27:46:54:3e:2b:41:ac:e7:3a: 50:b7:a1:fc:a9:84:be:d3:87:15:c8:9f:4a:0e:03:46:e6:9a: ed:eb:14:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKqKJYPlFLaoDuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E3YWJlZmYtZmVhYy00Y2M5LTkwNzctODY2ZjBiYjFi OGNjMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk NjE1NmM0NWYtOTYyZC00MGQ3LThiNzYtMGQzYzE2YWU2MTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrGglJ8w4p4Tzqrk/m9FciDurxuggFHNoHVG F/7pVs4fj1/kzdBvDlOzEh/ZBbSg3vgLvdbRZmivCHJqno5mjnfpv6TxtuHyN6no RfK0rIyz/42kQrCMyg/xmM6L86xNKyzBAzXwQCFADgdSzOoBRlAMcta2ok8bXe4Q F7biHWFV15k7zNpiRYatH/ttxJ88yWygZ4qmvnc8tDmNhcWVptAi2Kp+ygBFc275 N5bT1p4q13pXFKr0PiQPLobFJQLFLHv33W4EIpJuvPftdWbwb2LrxD4/nwM7p4e+ wzutTNy8z+lHreevscrcvYzKJg94gwheyoONNOoKAiTnUu+4ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLos0/4//8r4OpQ1roCcicM81hKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTdh YmVmZi1mZWFjLTRjYzktOTA3Ny04NjZmMGJiMWI4Y2MvM2I4Yzg3MWYtMjM1OS0z Yjc3LTk3NDAtOWMzMmQwMDBkZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2E3YWJlZmYtZmVhYy00Y2M5LTkw NzctODY2ZjBiYjFiOGNjLzdhN2FiZWZmLWZlYWMtNGNjOS05MDc3LTg2NmYwYmIx YjhjYy5jcmwwHwYDVR0jBBgwFoAU+79+OuW9smvC3UATG67xRb6sEjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTdhYmVmZi1mZWFjLTRjYzktOTA3Ny04NjZm MGJiMWI4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQkytMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc/V/HRx9mamGlYMqkbKatmcUM72sJzRLBSJSZc3Ha0UsEVOT2sGJ7d oGXu3Uw3NYwACUkUsFg+6UrW7kwbcqWCA/UGdLajmH+vQxvxTrf+QA618q6BCxBR o9bm2SgxkjOBWcbHEhA1uXLpqb8eR2IT4ZW9fMVkYi/eRRgECKJBMIajQnMQE7CB zXJiEt+fYICPTbxCOPPaSLtRMV7ZYZA+JePm6qOUIVQSab4AtGMbwJ5QF2ya0djb KiJ3C9oMUMchTVcjnliexFbg+qQCWO750iLuScakoiHtQjFBffJpAydGVD4rQazn OlC3ofyphL7ThxXIn0oOA0bmmu3rFBw= -----END CERTIFICATE-----Generated at Tue Apr 28 11:11:53 2026 by rpki-client