$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa File: a8f35c59-b971-3d84-a662-b03a19638ac2.roa (raw, json) Hash identifier: 0lRPl7vIr++yLkWq+MzRD3KS6jq1liBSHaG2TyewfHA= Subject key identifier: E9:F6:60:A0:84:53:63:67:3C:3C:99:4E:AB:7F:8F:A0:02:8B:32:D9 Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584E0D8422AB19884721CE837480 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 14877 IP address blocks: 166.66.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:22:ab:19:88:47:21:ce:83:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=561d0db6-f9d1-4881-9d97-ce8765bf8a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:0a:0c:c3:94:3f:d2:d7:af:14:cc:8e:49: d0:8e:a1:3c:2c:86:85:58:b6:5d:9d:02:8c:9b:37: a4:25:49:f5:ac:31:db:05:4f:e6:de:53:12:5b:bb: da:ef:b3:7e:b8:3e:12:db:51:b5:ce:1e:d3:e1:38: a1:9e:67:9b:01:cd:ab:51:5e:14:de:df:c4:03:44: 89:f7:09:92:b7:ca:db:65:bc:08:ea:05:42:d2:d2: 55:8a:c1:09:4d:93:ea:40:96:79:78:fa:20:e3:0b: 12:01:4b:83:da:1e:d7:84:0c:30:7e:34:35:8b:7d: 9e:f9:e3:2b:c8:a2:84:2c:57:10:1c:51:cd:9e:32: 1d:6a:3d:eb:99:99:9b:71:3a:4f:44:63:8a:69:74: 9c:34:7d:aa:28:68:98:f8:39:67:0d:24:8a:47:5a: 7e:49:6e:34:ba:ba:c7:01:3a:f3:87:b6:29:98:d1: d8:6d:ba:9e:a9:1e:81:d6:4f:ef:14:57:de:83:83: 53:16:6f:1c:68:82:a4:30:72:59:f7:96:19:a1:e0: 18:01:a8:56:05:28:71:a2:70:70:21:77:e8:a6:d3: 93:c3:a1:5d:40:00:6d:ae:ce:89:c0:8e:b9:bc:59: 16:ad:dd:3b:0f:86:e8:34:0e:cf:e0:33:2f:6a:19: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F6:60:A0:84:53:63:67:3C:3C:99:4E:AB:7F:8F:A0:02:8B:32:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: 166.66.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a2:16:8c:fa:49:04:e2:55:6b:4e:2e:fc:7a:60:70:73:ee: dc:60:62:c6:ec:45:e7:29:0c:c4:35:6c:67:c8:2e:54:1e:e0: 2a:99:00:c0:55:7c:cd:ce:b4:09:59:fe:16:1c:56:7f:8b:c4: 3d:24:43:fa:44:fb:92:3b:8c:4c:25:37:47:15:46:a6:76:a3: 69:68:8b:56:85:4e:7a:7b:8a:5f:c9:81:9a:34:e1:55:4c:f5: 67:40:f4:68:c4:b3:5d:2f:5d:43:0e:36:36:10:fe:14:76:36: 5a:b1:2a:76:a1:a1:ff:95:46:b3:b4:2b:e5:09:34:6c:9a:b6: d6:5c:75:a3:36:1d:27:8e:f8:f0:97:46:e3:db:33:cc:74:87: e4:a5:f6:23:70:69:97:99:9d:68:f7:cd:f6:5d:bc:14:95:5c: 04:25:12:56:67:2f:3c:55:0d:59:18:17:c6:a6:67:00:56:f2: 91:6d:97:84:94:b3:29:a2:f9:dc:15:5c:85:39:be:a6:f0:47: 7a:64:27:bf:d4:10:8b:06:df:81:bb:d7:21:76:5e:a5:7f:eb: 94:f4:24:aa:6e:bb:36:26:c9:8d:9f:29:8f:f0:a8:52:64:26: 56:c9:b2:54:17:fc:91:f5:4e:44:3f:7b:eb:f8:69:c6:a0:66: 4e:45:92:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCKrGYhHIc6DdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk NTYxZDBkYjYtZjlkMS00ODgxLTlkOTctY2U4NzY1YmY4YTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIMKDMOUP9LXrxTMjknQjqE8LIaFWLZdnQKM mzekJUn1rDHbBU/m3lMSW7va77N+uD4S21G1zh7T4TihnmebAc2rUV4U3t/EA0SJ 9wmSt8rbZbwI6gVC0tJVisEJTZPqQJZ5ePog4wsSAUuD2h7XhAwwfjQ1i32e+eMr yKKELFcQHFHNnjIdaj3rmZmbcTpPRGOKaXScNH2qKGiY+DlnDSSKR1p+SW40urrH ATrzh7YpmNHYbbqeqR6B1k/vFFfeg4NTFm8caIKkMHJZ95YZoeAYAahWBShxonBw IXfoptOTw6FdQABtrs6JwI65vFkWrd07D4boNA7P4DMvahlknQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn2YKCEU2NnPDyZTqt/j6ACizLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvYThmMzVjNTktYjk3MS0z ZDg0LWE2NjItYjAzYTE5NjM4YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApkLKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqiFoz6SQTiVWtOLvx6YHBz7txgYsbsRecpDMQ1bGfILlQe4CqZAMBV fM3OtAlZ/hYcVn+LxD0kQ/pE+5I7jEwlN0cVRqZ2o2loi1aFTnp7il/JgZo04VVM 9WdA9GjEs10vXUMONjYQ/hR2NlqxKnahof+VRrO0K+UJNGyattZcdaM2HSeO+PCX RuPbM8x0h+Sl9iNwaZeZnWj3zfZdvBSVXAQlElZnLzxVDVkYF8amZwBW8pFtl4SU symi+dwVXIU5vqbwR3pkJ7/UEIsG34G71yF2XqV/65T0JKpuuzYmyY2fKY/wqFJk JlbJslQX/JH1TkQ/e+v4acagZk5FkuQ= -----END CERTIFICATE-----Generated at Tue Jun 9 20:25:45 2026 by rpki-client