$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/2b6e9adb-d61b-35d6-a666-5361dd3fad1a.roa File: 2b6e9adb-d61b-35d6-a666-5361dd3fad1a.roa (raw, json) Hash identifier: 04kYcOBM3f9nnXJvuetm9afG2IiXH4OvgxrykMBvq+0= Subject key identifier: CE:7D:2C:BB:B1:BA:CC:EA:A0:97:8C:24:59:E8:35:0D:D4:2B:D4:08 Certificate issuer: /CN=65b88e69-185f-4918-be77-5fca89cf3c16 Certificate serial: 010D0C9F4328584D5F7FAC746D1E5F935C3AA900 Authority key identifier: C9:C8:ED:37:AB:AA:F8:A2:6C:2E:F6:9E:99:A0:A3:5F:57:0D:2C:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/2b6e9adb-d61b-35d6-a666-5361dd3fad1a.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 19156 IP address blocks: 66.232.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:ac:74:6d:1e:5f:93:5c:3a:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b88e69-185f-4918-be77-5fca89cf3c16 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=36d99bfd-380c-413e-a104-6dd3da89e006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:d6:8f:4a:e3:a3:32:83:b1:3b:d1:fe:69: bd:93:b8:e4:d3:35:e1:78:fd:40:1a:73:3e:ae:e6: f1:b3:43:c1:42:cf:c4:cf:4d:c2:6b:67:e0:34:3c: c2:ef:71:8f:af:21:ed:62:1a:30:33:6f:20:01:82: 5e:78:03:af:93:bf:91:97:1a:a3:68:49:2c:07:51: 73:21:4f:16:b7:bd:3d:d2:8a:cd:9a:24:21:70:c1: a9:bf:99:8f:fc:9b:85:91:19:93:c3:78:d0:4b:3f: f6:35:11:51:aa:7b:dc:22:9a:bd:34:31:b4:ec:1c: aa:ea:47:28:91:ca:35:61:7e:b1:a5:2c:bc:d1:21: 93:72:c8:d6:87:75:53:66:35:72:c4:25:6b:e6:6b: c4:36:39:75:10:77:d0:53:6f:ed:30:2e:f5:38:cc: 6d:ee:82:4d:10:84:75:65:02:49:30:7d:b5:21:7d: 9b:6f:1d:35:3a:47:a1:6d:68:89:6b:28:28:70:6a: 6c:53:b5:77:52:c7:04:e5:1c:cf:c2:53:cc:90:c4: 33:d4:16:3a:33:a9:27:c2:35:54:50:05:fa:d5:49: 20:8b:12:5a:16:56:8e:84:e2:5b:a5:d7:1e:28:94: ac:ab:c2:1d:66:94:7d:45:ed:02:a9:ba:d5:51:63: 20:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7D:2C:BB:B1:BA:CC:EA:A0:97:8C:24:59:E8:35:0D:D4:2B:D4:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/2b6e9adb-d61b-35d6-a666-5361dd3fad1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.crl X509v3 Authority Key Identifier: keyid:C9:C8:ED:37:AB:AA:F8:A2:6C:2E:F6:9E:99:A0:A3:5F:57:0D:2C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer sbgp-ipAddrBlock: critical IPv4: 66.232.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:2f:13:cc:e2:a4:3b:b8:28:05:6d:a9:0d:c3:db:6f:69:f2: 72:30:98:e5:30:f6:e0:dd:bd:fa:f4:8e:a8:a4:7e:95:8b:e6: fc:4a:d1:a4:4a:dc:77:56:57:81:dd:62:dc:44:ce:a7:b3:5b: 2c:44:cd:3e:df:76:ef:65:58:b8:4e:93:9c:fd:f7:a5:9c:cd: 4a:9c:10:52:91:2a:89:a3:5d:87:37:d8:49:86:97:f3:a9:6f: c7:96:b5:e0:4c:76:47:51:0e:0c:2a:ff:51:57:a6:e6:af:af: af:c2:23:6a:a9:91:ac:95:4b:49:7b:a2:bf:9c:08:9e:e5:fa: ae:6b:d5:c4:74:6b:a2:56:29:45:2e:53:7c:b2:aa:4c:98:a3: 92:60:da:b8:e7:73:75:25:76:5c:8f:73:59:4e:ef:7e:19:5f: c3:11:97:e6:db:95:79:37:9e:19:91:09:8f:4d:2c:cc:23:66: 8c:af:3d:bf:f5:8b:6c:96:38:f2:43:3c:9d:11:ed:1c:9f:57: 9e:11:08:92:5a:81:7d:18:17:5c:55:db:d3:89:9d:95:da:55: 14:37:55:d6:f1:7f:de:07:8e:73:c8:fd:a7:89:cb:56:9a:92: ea:78:5b:19:3f:17:c8:4f:94:8a:24:5b:65:ee:37:96:ad:d0: cd:f7:0e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff6x0bR5fk1w6qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjViODhlNjktMTg1Zi00OTE4LWJlNzctNWZjYTg5Y2Yz YzE2MB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk MzZkOTliZmQtMzgwYy00MTNlLWExMDQtNmRkM2RhODllMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHPWj0rjozKDsTvR/mm9k7jk0zXheP1AGnM+ rubxs0PBQs/Ez03Ca2fgNDzC73GPryHtYhowM28gAYJeeAOvk7+RlxqjaEksB1Fz IU8Wt7090orNmiQhcMGpv5mP/JuFkRmTw3jQSz/2NRFRqnvcIpq9NDG07Byq6kco kco1YX6xpSy80SGTcsjWh3VTZjVyxCVr5mvENjl1EHfQU2/tMC71OMxt7oJNEIR1 ZQJJMH21IX2bbx01OkehbWiJaygocGpsU7V3UscE5RzPwlPMkMQz1BY6M6knwjVU UAX61UkgixJaFlaOhOJbpdceKJSsq8IdZpR9Re0CqbrVUWMgdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM59LLuxuszqoJeMJFnoNQ3UK9QIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82NWI4 OGU2OS0xODVmLTQ5MTgtYmU3Ny01ZmNhODljZjNjMTYvMmI2ZTlhZGItZDYxYi0z NWQ2LWE2NjYtNTM2MWRkM2ZhZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjViODhlNjktMTg1Zi00OTE4LWJl NzctNWZjYTg5Y2YzYzE2LzY1Yjg4ZTY5LTE4NWYtNDkxOC1iZTc3LTVmY2E4OWNm M2MxNi5jcmwwHwYDVR0jBBgwFoAUycjtN6uq+KJsLvaemaCjX1cNLHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82NWI4OGU2OS0xODVmLTQ5MTgtYmU3Ny01ZmNh ODljZjNjMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQugQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0vE8zipDu4KAVtqQ3D229p8nIwmOUw9uDdvfr0jqikfpWL5vxK0aRK 3HdWV4HdYtxEzqezWyxEzT7fdu9lWLhOk5z996WczUqcEFKRKomjXYc32EmGl/Op b8eWteBMdkdRDgwq/1FXpuavr6/CI2qpkayVS0l7or+cCJ7l+q5r1cR0a6JWKUUu U3yyqkyYo5Jg2rjnc3UldlyPc1lO734ZX8MRl+bblXk3nhmRCY9NLMwjZoyvPb/1 i2yWOPJDPJ0R7RyfV54RCJJagX0YF1xV29OJnZXaVRQ3Vdbxf94HjnPI/aeJy1aa kup4Wxk/F8hPlIokW2XuN5at0M33DgA= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:10 2026 by rpki-client