$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa File: c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa (raw, json) Hash identifier: Igcjbp1xYRXjbseuHnj7XoMsta/KwZhG+a5nb6Yj9Es= Subject key identifier: 74:83:3F:B3:FD:92:AE:60:7E:CE:E1:90:25:20:CA:53:F0:D7:D5:A3 Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F4328584DA8158597CD6FD6C2EE7EFB80 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 394056 IP address blocks: 66.33.8.0/21 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:85:97:cd:6f:d6:c2:ee:7e:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=628b85b2-97b8-4ed9-a437-1bf857c5ed80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:00:97:d3:8c:c9:e9:fe:7b:7a:4d:4d:cd: 6c:53:e9:bf:de:d6:f3:59:7b:0d:ae:22:ef:b9:48: 62:68:e7:3a:32:89:22:90:d5:f9:f7:e3:b4:93:e4: 0e:82:b4:57:f0:03:c5:68:90:5f:1e:9b:0e:19:ca: 94:14:7f:ac:e0:17:c6:07:27:8c:55:42:d6:b6:b6: f1:39:fd:a1:a9:bb:42:58:f1:40:fb:34:60:ec:93: c5:fb:5d:50:b0:f4:88:1c:6f:af:26:fd:7a:dd:cb: e1:a0:29:dc:0c:e2:99:7b:7a:33:4b:e4:7c:82:40: 80:c1:da:eb:2c:63:09:4f:2b:ef:31:5f:ca:9f:e9: db:7a:31:65:d3:a6:9b:99:19:80:fa:39:5b:d9:dd: 4b:ef:27:1a:f6:2a:cd:40:ca:78:ca:2d:0a:ec:8d: ac:3c:c4:49:84:97:49:1d:a5:14:0c:f5:5d:ff:75: b3:09:79:51:a1:ee:7d:57:d0:1e:b1:db:f9:6b:76: 11:0f:b8:59:55:27:26:8f:75:8d:d7:06:32:3d:04: da:a4:77:df:8f:75:5b:bc:b2:44:48:e7:3d:65:ca: f0:32:48:93:7b:f9:02:5e:c8:27:ce:83:65:d1:b8: 8c:4c:2c:6b:9a:2a:e4:11:cb:38:47:d0:e2:f8:09: 09:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:83:3F:B3:FD:92:AE:60:7E:CE:E1:90:25:20:CA:53:F0:D7:D5:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv4: 66.33.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6f:f6:62:cc:13:dd:d1:63:24:ce:b3:30:47:da:dd:a7:64: 3b:b3:28:17:a1:7d:d0:f6:8e:4f:23:27:19:76:4d:e6:12:02: 9b:c4:97:72:70:53:c9:8f:da:dc:4e:6c:ce:e0:dc:da:3f:24: 8b:dd:c2:ed:94:73:f2:26:26:2a:77:fc:fe:12:dd:49:46:54: d6:dc:74:d5:fc:5f:ef:d4:4f:39:6f:23:8d:15:13:49:74:ed: 0a:f5:33:f4:ec:c6:ca:84:74:85:4a:73:46:b0:76:f1:85:99: 51:36:f1:1f:0b:ca:e1:c2:f5:75:1c:67:72:86:f5:78:75:f5: b7:13:91:99:4b:4b:b5:c2:1f:61:6d:89:23:70:32:6c:7b:41: c3:cd:b6:9b:bd:c7:0e:c0:4e:7e:23:9a:10:60:36:bd:2d:fc: b2:e2:aa:cc:65:33:cb:43:a7:09:3d:25:54:f7:08:c0:da:ac: e0:62:94:58:aa:38:74:3f:36:d3:73:b6:db:1e:f6:82:96:1d: 27:3c:54:2a:95:22:28:d0:68:17:12:8c:2c:ff:a1:03:4a:67: 66:06:86:1d:a7:d0:bb:0d:fd:51:c3:25:e3:ba:8b:77:d3:31: 38:00:39:2d:ee:e5:1b:ff:e4:e0:3a:18:da:23:76:60:ac:8c: 76:0f:6b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYWXzW/Wwu5++4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk NjI4Yjg1YjItOTdiOC00ZWQ5LWE0MzctMWJmODU3YzVlZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDYAl9OMyen+e3pNTc1sU+m/3tbzWXsNriLv uUhiaOc6MokikNX59+O0k+QOgrRX8APFaJBfHpsOGcqUFH+s4BfGByeMVULWtrbx Of2hqbtCWPFA+zRg7JPF+11QsPSIHG+vJv163cvhoCncDOKZe3ozS+R8gkCAwdrr LGMJTyvvMV/Kn+nbejFl06abmRmA+jlb2d1L7yca9irNQMp4yi0K7I2sPMRJhJdJ HaUUDPVd/3WzCXlRoe59V9Aesdv5a3YRD7hZVScmj3WN1wYyPQTapHffj3VbvLJE SOc9ZcrwMkiTe/kCXsgnzoNl0biMTCxrmirkEcs4R9Di+AkJ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSDP7P9kq5gfs7hkCUgylPw19WjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvYzZlNmIyMDEtODcyYy0z YTk0LTg3YTEtZGQyMDA3M2ZlMmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxv9mLME93RYyTOszBH2t2nZDuzKBehfdD2jk8jJxl2TeYSApvEl3Jw U8mP2txObM7g3No/JIvdwu2Uc/ImJip3/P4S3UlGVNbcdNX8X+/UTzlvI40VE0l0 7Qr1M/TsxsqEdIVKc0awdvGFmVE28R8LyuHC9XUcZ3KG9Xh19bcTkZlLS7XCH2Ft iSNwMmx7QcPNtpu9xw7ATn4jmhBgNr0t/LLiqsxlM8tDpwk9JVT3CMDarOBilFiq OHQ/NtNzttse9oKWHSc8VCqVIijQaBcSjCz/oQNKZ2YGhh2n0LsN/VHDJeO6i3fT MTgAOS3u5Rv/5OA6GNojdmCsjHYPa4o= -----END CERTIFICATE-----Generated at Sun May 3 17:55:29 2026 by rpki-client