$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa File: a71bf399-4b1b-3700-8996-65eac6cc402a.roa (raw, json) Hash identifier: k9CYRGoUuaxAjGSXOsKk0jdutYHixT/fAqm3ZBrr+1k= Subject key identifier: 42:A4:ED:09:03:6C:27:14:5E:40:88:AA:E7:28:94:FD:FD:23:64:AB Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584D67DFC6E7F4459EF04C356E40 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13536 IP address blocks: 66.231.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:c6:e7:f4:45:9e:f0:4c:35:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=2ada8a60-35a4-477a-899e-ab47d0ae3960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5f:11:1e:5e:21:f0:63:f7:ff:dd:69:69:3b: 2f:3a:b6:e7:a5:83:d0:d1:f8:e8:55:d5:cc:82:e6: 8a:97:e1:cb:39:61:8f:f3:d7:85:3e:b8:f9:87:da: d5:33:96:c5:3e:13:46:db:dc:1b:3b:08:91:2e:7b: 7f:7e:d1:3a:bb:3f:1b:45:23:8b:47:b9:c2:d9:1c: ff:a2:98:29:f6:30:66:02:9c:a7:da:17:99:a7:b6: c3:7f:5b:52:34:27:25:5e:45:03:45:d4:11:c8:ef: 10:94:39:9d:56:d3:96:a1:dc:f8:e8:36:7a:4e:a0: 2d:7f:75:a9:8f:b0:5f:89:20:19:0b:b8:0c:b5:88: b2:49:83:fc:d2:85:ca:13:25:e3:a2:f2:18:e8:09: 4a:3e:1f:e6:82:f3:24:a1:15:de:1f:e1:f1:31:e3: 8a:0b:16:dc:46:a5:34:68:e1:c9:bf:d2:89:a9:8c: c4:1a:70:8e:2b:f9:1e:c1:54:24:02:74:45:c7:6f: c7:94:65:84:6f:24:b3:c7:40:f5:47:f7:bf:29:80: e2:d8:34:8c:1e:6d:08:b8:88:f6:27:2b:cb:68:1e: bb:61:97:b6:7c:e8:e8:46:7a:37:f6:73:41:cf:33: 8c:15:44:18:82:30:f2:a1:6a:ff:92:de:53:c6:9e: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A4:ED:09:03:6C:27:14:5E:40:88:AA:E7:28:94:FD:FD:23:64:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.231.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:28:8e:1e:11:05:11:e3:b9:8b:ee:57:ca:75:b6:f1:f6:21: 1a:d6:e1:a0:18:1a:92:44:60:c4:73:fe:3f:d0:6e:b1:c7:55: 3f:26:c9:cf:98:ce:c9:72:0a:04:d7:fc:8b:9e:4b:81:96:e7: 7e:44:d9:d6:dd:84:47:19:24:5c:a0:0a:a8:83:fe:f7:45:c9: 90:76:e7:af:b0:f0:49:1a:b7:33:a7:23:3d:5b:30:33:1e:25: 25:9c:4f:01:17:2e:c2:db:df:f5:1a:9b:09:3c:23:bf:96:23: 4f:2a:ba:35:33:56:08:18:d2:e2:b0:25:33:ed:f1:fe:3c:81: 10:6a:3f:4d:c7:1d:36:0d:b6:9d:dc:57:15:7f:71:af:c6:0d: 50:d1:32:67:b5:66:0c:ce:27:df:91:17:8c:59:c8:70:36:c6: cd:ab:92:c8:ad:59:62:42:26:bc:7b:80:fd:5f:eb:a5:0c:64: 76:20:37:cf:a1:ed:28:b9:60:91:9e:01:95:ce:9f:cb:88:7b: cb:d9:58:8d:3f:86:61:6a:9e:86:5a:bc:0b:42:06:cf:94:ed: 4c:10:fc:2a:c5:65:86:00:2b:d6:9e:6c:f1:84:55:73:95:b2: ab:21:f9:be:76:bb:b0:51:fd:86:7a:86:66:6e:c8:d8:51:9b: 31:dc:69:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38bn9EWe8Ew1bkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk MmFkYThhNjAtMzVhNC00NzdhLTg5OWUtYWI0N2QwYWUzOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6l8RHl4h8GP3/91paTsvOrbnpYPQ0fjoVdXM guaKl+HLOWGP89eFPrj5h9rVM5bFPhNG29wbOwiRLnt/ftE6uz8bRSOLR7nC2Rz/ opgp9jBmApyn2heZp7bDf1tSNCclXkUDRdQRyO8QlDmdVtOWodz46DZ6TqAtf3Wp j7BfiSAZC7gMtYiySYP80oXKEyXjovIY6AlKPh/mgvMkoRXeH+HxMeOKCxbcRqU0 aOHJv9KJqYzEGnCOK/kewVQkAnRFx2/HlGWEbySzx0D1R/e/KYDi2DSMHm0IuIj2 JyvLaB67YZe2fOjoRno39nNBzzOMFUQYgjDyoWr/kt5Txp5jUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKk7QkDbCcUXkCIqucolP39I2SrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYTcxYmYzOTktNGIxYi0z NzAwLTg5OTYtNjVlYWM2Y2M0MDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQufYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8ojh4RBRHjuYvuV8p1tvH2IRrW4aAYGpJEYMRz/j/QbrHHVT8myc+Y zslyCgTX/IueS4GW535E2dbdhEcZJFygCqiD/vdFyZB256+w8EkatzOnIz1bMDMe JSWcTwEXLsLb3/Uamwk8I7+WI08qujUzVggY0uKwJTPt8f48gRBqP03HHTYNtp3c VxV/ca/GDVDRMme1ZgzOJ9+RF4xZyHA2xs2rksitWWJCJrx7gP1f66UMZHYgN8+h 7Si5YJGeAZXOn8uIe8vZWI0/hmFqnoZavAtCBs+U7UwQ/CrFZYYAK9aebPGEVXOV sqsh+b52u7BR/YZ6hmZuyNhRmzHcaWU= -----END CERTIFICATE-----Generated at Mon Apr 13 12:30:15 2026 by rpki-client