$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/422eb3dd-2af0-3bf0-8904-43695ea6e58a.roa File: 422eb3dd-2af0-3bf0-8904-43695ea6e58a.roa (raw, json) Hash identifier: F+OaHc515MuuIWjtOEqppQLNakozW7ECmN38y69TE6s= Subject key identifier: 02:65:B8:1A:7E:86:74:42:5D:C3:AB:11:70:AC:E8:25:5C:92:54:5F Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584E2F045F5E7C693ABCE1607180 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/422eb3dd-2af0-3bf0-8904-43695ea6e58a.roa Signing time: Mon 15 Jun 2026 21:00:12 +0000 ROA not before: Mon 15 Jun 2026 21:00:12 +0000 ROA not after: Sun 13 Sep 2026 21:00:12 +0000 asID: 26496 IP address blocks: 66.248.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2f:04:5f:5e:7c:69:3a:bc:e1:60:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Jun 15 21:00:12 2026 GMT Not After : Sep 13 21:00:12 2026 GMT Subject: CN=580b73ff-890d-4179-9c80-7eca03e18911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1d:a5:d2:7b:ba:5e:93:7f:84:75:a8:7e:a6: e7:b1:8c:24:a0:8b:b9:34:65:8a:40:06:fe:57:d9: 67:e7:fa:39:15:9e:0c:4a:50:16:f6:d7:31:b7:7b: d3:d9:d1:fa:94:f1:99:45:3b:91:a3:11:bb:65:17: 73:11:e0:3a:c4:1c:74:ad:99:10:7b:aa:ad:cc:a4: a0:99:c3:73:20:92:eb:c4:03:8a:dc:98:e7:a3:a0: 5d:31:ab:67:e8:e7:c1:ef:b1:67:90:44:7a:ca:dc: ec:a0:ae:04:a5:a0:25:de:55:48:6a:34:ba:e2:e2: 82:c3:cf:30:dd:0f:71:52:43:2f:a2:08:15:83:18: 5e:aa:cb:ed:0e:c5:38:8f:ff:8d:3a:fa:66:82:56: eb:c8:f9:9b:a0:15:28:12:73:f2:72:67:d9:6e:d9: 63:df:1a:21:45:1b:e0:bd:ce:55:dc:8e:a7:6f:4f: 6c:ec:ed:1e:33:f6:26:76:df:cc:09:cd:d5:30:92: a0:e2:99:64:d5:63:66:35:24:54:51:c2:d4:b3:d4: b6:fa:a3:5d:8e:05:cc:e4:cc:11:a3:bc:95:50:83: 40:e7:50:27:a3:b1:e7:e9:16:6c:ae:37:53:0a:d6: d5:34:9b:b8:2c:a5:fb:e7:dd:f7:bb:6c:83:98:d1: d8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:65:B8:1A:7E:86:74:42:5D:C3:AB:11:70:AC:E8:25:5C:92:54:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/422eb3dd-2af0-3bf0-8904-43695ea6e58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 66.248.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b1:49:54:e0:ba:2d:a6:20:44:63:e5:cc:51:8b:7d:93:31: 4f:2c:19:fc:56:78:11:f6:9b:e1:ad:0d:a0:54:2b:04:cc:29: a3:7c:85:1e:5f:ae:32:32:cd:1a:4c:2f:87:6f:95:5e:21:ce: db:08:9d:59:54:47:c7:74:13:dc:00:22:bd:74:cb:2e:e2:ce: 90:38:8c:f3:3a:92:60:35:30:84:c9:85:b6:24:ce:6f:cf:f5: a7:00:d5:e1:4b:6a:8a:f9:ba:bc:8f:4f:a8:2c:4b:88:75:c4: 96:27:a0:0a:50:00:ec:6f:9d:a4:1a:f4:58:f5:92:a9:02:7d: 3b:44:31:a5:e4:74:e4:07:2b:7d:e3:65:b3:1f:ed:43:56:94: 10:ed:7b:5e:98:f9:93:58:e8:81:98:d2:f5:d2:41:4b:c5:8c: 31:04:eb:14:45:96:a7:8e:e9:47:de:b0:84:d9:84:2f:c6:83: 95:24:b3:25:53:12:be:d3:7f:5f:93:5d:05:8a:3b:79:75:19: 3a:ea:53:ea:ec:e6:1a:9d:b8:04:79:88:6e:72:8c:2e:5a:18: de:90:f4:8b:ff:cd:c2:5b:a7:80:c0:1a:be:d5:f1:fd:9e:93: fe:d8:a7:46:11:a8:25:c6:b9:12:a0:cc:5c:41:f7:7c:ef:4d: e5:1c:cb:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vBF9efGk6vOFgcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk NTgwYjczZmYtODkwZC00MTc5LTljODAtN2VjYTAzZTE4OTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix2l0nu6XpN/hHWofqbnsYwkoIu5NGWKQAb+ V9ln5/o5FZ4MSlAW9tcxt3vT2dH6lPGZRTuRoxG7ZRdzEeA6xBx0rZkQe6qtzKSg mcNzIJLrxAOK3Jjno6BdMatn6OfB77FnkER6ytzsoK4EpaAl3lVIajS64uKCw88w 3Q9xUkMvoggVgxheqsvtDsU4j/+NOvpmglbryPmboBUoEnPycmfZbtlj3xohRRvg vc5V3I6nb09s7O0eM/Ymdt/MCc3VMJKg4plk1WNmNSRUUcLUs9S2+qNdjgXM5MwR o7yVUINA51Ano7Hn6RZsrjdTCtbVNJu4LKX75933u2yDmNHY7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJluBp+hnRCXcOrEXCs6CVcklRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvNDIyZWIzZGQtMmFmMC0z YmYwLTg5MDQtNDM2OTVlYTZlNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmxSVTgui2mIERj5cxRi32TMU8sGfxWeBH2m+GtDaBUKwTMKaN8hR5f rjIyzRpML4dvlV4hztsInVlUR8d0E9wAIr10yy7izpA4jPM6kmA1MITJhbYkzm/P 9acA1eFLaor5uryPT6gsS4h1xJYnoApQAOxvnaQa9Fj1kqkCfTtEMaXkdOQHK33j ZbMf7UNWlBDte16Y+ZNY6IGY0vXSQUvFjDEE6xRFlqeO6UfesITZhC/Gg5UksyVT Er7Tf1+TXQWKO3l1GTrqU+rs5hqduAR5iG5yjC5aGN6Q9Iv/zcJbp4DAGr7V8f2e k/7Yp0YRqCXGuRKgzFxB93zvTeUcy3k= -----END CERTIFICATE-----Generated at Mon Jul 6 22:18:01 2026 by rpki-client