$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/3a515a29-1e95-3903-93fc-60ebc2a4c0a8.roa File: 3a515a29-1e95-3903-93fc-60ebc2a4c0a8.roa (raw, json) Hash identifier: zIcV7K+nWpEb4kMCfFDcWpUBvK+AKGffJWN0OvXRIJg= Subject key identifier: 07:53:7B:59:8F:25:84:AE:8F:28:C0:EC:51:5E:1F:94:A2:84:5C:DD Certificate issuer: /CN=65b88e69-185f-4918-be77-5fca89cf3c16 Certificate serial: 010D0C9F4328584D5F7FAFC92260C73CF3986D00 Authority key identifier: C9:C8:ED:37:AB:AA:F8:A2:6C:2E:F6:9E:99:A0:A3:5F:57:0D:2C:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/3a515a29-1e95-3903-93fc-60ebc2a4c0a8.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 19156 IP address blocks: 66.223.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:af:c9:22:60:c7:3c:f3:98:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b88e69-185f-4918-be77-5fca89cf3c16 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=20f654b4-2b00-4f53-881a-b458eeee7c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:19:9b:ab:5d:f5:db:b5:36:bb:39:8d:4b:a3: 20:b3:90:42:28:94:ba:3e:6d:80:19:98:34:11:0a: ae:84:e4:59:fd:d5:df:8f:30:52:77:e0:2d:46:0d: 49:24:74:16:77:ff:88:8a:2a:90:26:c4:5f:63:8f: 1a:ff:34:d0:28:7e:3a:88:6a:1b:68:05:29:0a:b7: 40:70:8d:4c:1e:79:b1:2b:b3:04:1c:fb:33:b5:c3: a8:b2:07:fa:75:bc:e7:3f:4c:0b:88:b0:8c:38:2b: b1:11:2c:00:fb:bd:ae:72:23:6f:93:ab:34:4b:17: a2:92:10:ec:75:73:a7:96:cb:c5:0c:10:f0:f8:d2: 91:6b:9f:79:32:dd:29:75:11:47:21:f9:d3:af:31: 8e:6f:6d:e3:96:6e:16:55:80:bf:09:4d:1e:83:d8: 9f:b0:25:87:37:32:f5:42:3d:af:84:e4:ca:ee:37: 46:5a:0f:44:bf:79:bd:b7:81:fa:2c:7d:bf:55:1c: 63:25:1d:80:4e:f4:0d:d1:83:65:68:b1:be:db:f8: f3:df:08:e9:63:21:c4:49:71:0b:54:62:e5:4b:b2: 32:dc:86:c8:df:88:6d:f8:ac:5c:3f:74:20:74:3c: c0:52:79:24:1a:59:b8:47:e7:fb:bd:ac:8c:33:1e: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:53:7B:59:8F:25:84:AE:8F:28:C0:EC:51:5E:1F:94:A2:84:5C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/3a515a29-1e95-3903-93fc-60ebc2a4c0a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.crl X509v3 Authority Key Identifier: keyid:C9:C8:ED:37:AB:AA:F8:A2:6C:2E:F6:9E:99:A0:A3:5F:57:0D:2C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer sbgp-ipAddrBlock: critical IPv4: 66.223.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:30:2d:ea:93:3a:3f:68:4a:83:9b:a4:a8:2f:07:df:c1:23: 19:09:fb:c4:c7:99:1f:23:1c:b3:e3:df:e4:8f:d3:73:62:88: 32:73:c7:b0:0d:c5:03:ea:82:2a:6a:14:4c:55:cc:1e:d0:83: f7:13:7b:ae:65:cc:51:54:8a:da:01:77:c5:77:8c:64:6e:28: 46:d5:1a:91:a9:52:b9:c5:70:2b:6b:8f:0b:2e:4c:c9:50:02: 4d:f0:fd:fe:d8:c4:72:11:3f:d3:06:b7:50:ad:b5:0b:bb:54: eb:7f:4a:b6:81:a8:3b:2b:f8:c5:8c:88:5f:99:c4:05:83:a4: 2f:da:15:15:2a:94:40:fb:40:36:9e:b5:49:54:1f:e2:4a:9b: 98:9c:e6:6e:8e:54:90:70:fb:2f:7c:d9:fc:bb:56:1e:2b:e3: f4:8e:d4:e5:c4:91:e6:bf:e1:1c:29:3b:d8:22:a2:9b:9f:e6: e5:b1:d4:df:6a:4a:41:88:b8:84:b0:54:c1:f7:1f:e7:37:cb: 69:38:2c:78:9c:c4:07:69:90:4a:79:5a:fd:7e:12:0e:34:17: ea:06:b7:04:a6:c9:23:a3:df:d0:f7:95:3b:cf:58:fa:05:9c: 9e:b3:5d:d0:b1:68:25:d2:07:cb:27:3f:aa:14:c6:2a:b6:c1: db:4f:62:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff6/JImDHPPOYbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjViODhlNjktMTg1Zi00OTE4LWJlNzctNWZjYTg5Y2Yz YzE2MB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk MjBmNjU0YjQtMmIwMC00ZjUzLTg4MWEtYjQ1OGVlZWU3Yzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBmbq13127U2uzmNS6Mgs5BCKJS6Pm2AGZg0 EQquhORZ/dXfjzBSd+AtRg1JJHQWd/+IiiqQJsRfY48a/zTQKH46iGobaAUpCrdA cI1MHnmxK7MEHPsztcOosgf6dbznP0wLiLCMOCuxESwA+72uciNvk6s0SxeikhDs dXOnlsvFDBDw+NKRa595Mt0pdRFHIfnTrzGOb23jlm4WVYC/CU0eg9ifsCWHNzL1 Qj2vhOTK7jdGWg9Ev3m9t4H6LH2/VRxjJR2ATvQN0YNlaLG+2/jz3wjpYyHESXEL VGLlS7Iy3IbI34ht+KxcP3QgdDzAUnkkGlm4R+f7vayMMx7VTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdTe1mPJYSujyjA7FFeH5SihFzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82NWI4 OGU2OS0xODVmLTQ5MTgtYmU3Ny01ZmNhODljZjNjMTYvM2E1MTVhMjktMWU5NS0z OTAzLTkzZmMtNjBlYmMyYTRjMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjViODhlNjktMTg1Zi00OTE4LWJl NzctNWZjYTg5Y2YzYzE2LzY1Yjg4ZTY5LTE4NWYtNDkxOC1iZTc3LTVmY2E4OWNm M2MxNi5jcmwwHwYDVR0jBBgwFoAUycjtN6uq+KJsLvaemaCjX1cNLHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82NWI4OGU2OS0xODVmLTQ5MTgtYmU3Ny01ZmNh ODljZjNjMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQt8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcwLeqTOj9oSoObpKgvB9/BIxkJ+8THmR8jHLPj3+SP03NiiDJzx7AN xQPqgipqFExVzB7Qg/cTe65lzFFUitoBd8V3jGRuKEbVGpGpUrnFcCtrjwsuTMlQ Ak3w/f7YxHIRP9MGt1CttQu7VOt/SraBqDsr+MWMiF+ZxAWDpC/aFRUqlED7QDae tUlUH+JKm5ic5m6OVJBw+y982fy7Vh4r4/SO1OXEkea/4RwpO9giopuf5uWx1N9q SkGIuISwVMH3H+c3y2k4LHicxAdpkEp5Wv1+Eg40F+oGtwSmySOj39D3lTvPWPoF nJ6zXdCxaCXSB8snP6oUxiq2wdtPYlo= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:09 2026 by rpki-client