$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d3766780-da13-374d-97af-ab9e3203de65.roa File: d3766780-da13-374d-97af-ab9e3203de65.roa (raw, json) Hash identifier: eWZnBi/juww6tZwDWE9fE3vVnNBR4z3kIBPHuBITc24= Subject key identifier: F8:E0:07:01:CC:77:42:C8:3B:49:29:12:41:C1:DB:E2:ED:45:D1:59 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584D91C007843AD5270D7FF5BF80 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d3766780-da13-374d-97af-ab9e3203de65.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 36352 IP address blocks: 66.248.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:07:84:3a:d5:27:0d:7f:f5:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=f43d168c-12da-4c04-acef-5fc5f0405c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cc:d9:d5:e9:b9:2e:0c:a9:01:cd:f9:6e:8e: aa:09:6a:0d:8f:86:07:3a:28:a9:63:35:24:a6:d7: e8:89:73:7d:c1:18:98:98:2f:7d:05:d4:b3:03:85: 5d:0f:e2:2c:a6:c1:1a:3c:e0:11:cd:b5:30:7a:af: 75:e5:1c:74:27:b0:11:17:4f:73:e9:67:fa:33:0f: 66:00:01:82:fd:78:b6:4a:57:2c:de:82:3d:6a:f1: b6:d9:01:50:12:f6:0a:58:9c:6f:5e:c2:a9:3d:73: c5:72:e2:28:3b:d6:30:f5:1b:59:6d:e5:ea:e1:90: fb:e9:cc:b5:9a:dc:a3:00:01:3e:67:6e:61:98:41: 33:36:4d:33:35:1a:91:e5:c5:4a:3f:c5:8b:0c:c9: 1c:3d:22:33:30:d3:01:b5:e4:2d:f2:b5:36:39:aa: 5e:72:ec:3c:54:4c:9f:72:09:f2:ea:27:33:d9:24: 18:00:cf:61:33:1a:6e:3c:03:08:ed:a1:23:11:b1: ca:1f:1f:57:91:08:d7:bd:26:b6:bb:ff:72:0d:10: 17:93:69:36:25:9a:f6:8b:d3:b2:94:80:19:38:ab: 82:f9:33:ab:6e:43:67:da:e4:f1:3d:43:b3:99:48: d1:be:ec:fe:da:b8:d1:59:6d:50:90:a9:d7:1c:44: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E0:07:01:CC:77:42:C8:3B:49:29:12:41:C1:DB:E2:ED:45:D1:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d3766780-da13-374d-97af-ab9e3203de65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 66.248.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c4:22:54:46:a6:6d:e6:cc:15:5e:fc:8b:02:84:53:d1:2b: da:68:5c:21:22:6a:cf:6a:9b:60:ca:6b:db:72:40:21:71:70: 14:85:3c:d3:3b:7a:ab:c0:bc:9b:0a:48:26:b0:77:92:19:ad: bc:d2:0d:be:e0:c7:d3:0e:d4:20:82:78:48:1f:5c:44:2a:dd: 4c:52:e7:39:3f:5e:51:de:27:24:f7:03:90:17:4b:7f:60:77: cd:9e:37:72:5c:7a:a5:f8:09:f2:61:0c:44:2d:39:cb:40:ce: 22:ed:a2:93:52:e0:4c:d6:c5:e3:57:d4:2c:2c:76:3a:8a:74: 22:a0:b4:3d:d1:cc:f6:34:70:46:04:57:87:c5:c2:99:5e:b8: 49:09:6b:18:85:be:5d:5c:4e:70:a7:70:a2:d5:ad:09:29:5a: 5d:a5:54:95:a0:0a:4e:28:ae:1e:42:66:8a:47:99:c3:7c:aa: 2c:ae:b0:26:15:ce:8b:4a:24:67:d1:34:1e:98:c8:55:ef:3b: 4e:59:7f:61:4d:75:c7:f8:a6:c7:3b:43:47:8e:f9:45:ce:01: 0a:09:3d:04:a3:9e:ff:cf:3d:0a:09:ea:d8:86:a0:ff:a1:8b: a0:92:0e:11:b6:cc:6f:31:42:85:af:75:fa:d2:4a:77:7f:d5: fb:02:11:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAeEOtUnDX/1v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZjQzZDE2OGMtMTJkYS00YzA0LWFjZWYtNWZjNWYwNDA1YzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8zZ1em5LgypAc35bo6qCWoNj4YHOiipYzUk ptfoiXN9wRiYmC99BdSzA4VdD+IspsEaPOARzbUweq915Rx0J7ARF09z6Wf6Mw9m AAGC/Xi2Slcs3oI9avG22QFQEvYKWJxvXsKpPXPFcuIoO9Yw9RtZbeXq4ZD76cy1 mtyjAAE+Z25hmEEzNk0zNRqR5cVKP8WLDMkcPSIzMNMBteQt8rU2Oapecuw8VEyf cgny6icz2SQYAM9hMxpuPAMI7aEjEbHKHx9XkQjXvSa2u/9yDRAXk2k2JZr2i9Oy lIAZOKuC+TOrbkNn2uTxPUOzmUjRvuz+2rjRWW1QkKnXHETfXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjgBwHMd0LIO0kpEkHB2+LtRdFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZDM3NjY3ODAtZGExMy0z NzRkLTk3YWYtYWI5ZTMyMDNkZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHEIlRGpm3mzBVe/IsChFPRK9poXCEias9qm2DKa9tyQCFxcBSFPNM7 eqvAvJsKSCawd5IZrbzSDb7gx9MO1CCCeEgfXEQq3UxS5zk/XlHeJyT3A5AXS39g d82eN3JceqX4CfJhDEQtOctAziLtopNS4EzWxeNX1CwsdjqKdCKgtD3RzPY0cEYE V4fFwpleuEkJaxiFvl1cTnCncKLVrQkpWl2lVJWgCk4orh5CZopHmcN8qiyusCYV zotKJGfRNB6YyFXvO05Zf2FNdcf4psc7Q0eO+UXOAQoJPQSjnv/PPQoJ6tiGoP+h i6CSDhG2zG8xQoWvdfrSSnd/1fsCEQU= -----END CERTIFICATE-----Generated at Sat May 2 19:42:10 2026 by rpki-client