$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d622e83e-bed5-3a49-b356-2382addc5e6a.roa File: d622e83e-bed5-3a49-b356-2382addc5e6a.roa (raw, json) Hash identifier: 2kXG5k6wpQVJklyRSIsSYtffTe7+qUYooGgZK42HCaU= Subject key identifier: A7:4E:3B:9A:A1:81:AD:8B:09:BC:0A:63:2F:E4:6A:AF:13:0A:26:6E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DF375EB4FD57CCEFE4E159F50 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d622e83e-bed5-3a49-b356-2382addc5e6a.roa Signing time: Mon 25 May 2026 13:00:31 +0000 ROA not before: Mon 25 May 2026 13:00:31 +0000 ROA not after: Sun 23 Aug 2026 13:00:31 +0000 asID: 150671 IP address blocks: 66.102.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:75:eb:4f:d5:7c:ce:fe:4e:15:9f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 25 13:00:31 2026 GMT Not After : Aug 23 13:00:31 2026 GMT Subject: CN=d69305e8-51e1-4bc9-97cc-c1f3192816d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:ca:c0:7b:cc:4d:40:61:46:82:5d:6f:0b: 93:db:9d:da:f3:70:ce:6b:a6:48:46:d4:a7:3e:e4: b8:fd:e2:2e:d7:97:6f:17:6d:83:c1:8c:d7:4c:cb: 26:6f:d4:60:87:bf:12:5c:fc:0d:7d:22:52:2e:a6: 54:06:c3:04:fb:de:b3:0f:b8:18:73:30:72:e5:f4: cd:a7:b5:f9:ef:a5:df:28:e1:30:0f:96:3a:5b:b0: d8:5d:92:cc:37:59:e3:e8:e3:d7:40:ae:91:26:3e: 56:5b:c6:f7:2e:d5:75:30:01:6c:12:8b:57:ac:38: ff:34:54:3a:3f:4a:b9:5e:62:8d:2f:61:60:62:86: c1:a5:b7:65:b7:e1:5f:1b:3c:d1:07:21:54:03:ca: 13:6e:8b:42:22:85:78:21:c4:d8:db:86:07:31:63: 57:7b:56:9a:bd:0b:15:c7:52:22:13:87:ae:4a:7d: d0:94:4b:6a:2a:2c:c7:d2:56:a3:26:a7:ae:44:54: dd:bf:6e:cd:a0:7f:85:83:62:67:16:5c:56:bc:84: 1b:2e:b2:33:d4:fa:f9:f5:94:be:50:f2:b7:c1:17: d4:bd:05:05:73:4a:45:7a:fc:62:f8:d1:8c:66:55: 93:46:cc:59:c1:e7:f9:25:b6:ea:e6:b7:5a:33:ac: 25:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4E:3B:9A:A1:81:AD:8B:09:BC:0A:63:2F:E4:6A:AF:13:0A:26:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d622e83e-bed5-3a49-b356-2382addc5e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 66.102.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:be:fe:8f:92:91:2a:be:55:1f:2d:cc:67:f5:21:32:10:4d: 7c:41:8d:27:be:39:dc:ad:a1:73:50:50:64:e9:98:a4:72:a4: 0d:1f:a8:32:d2:9d:a0:e0:f6:90:84:15:36:6d:85:64:58:ec: 14:bf:58:79:86:8a:c1:97:41:6f:32:a7:15:95:98:25:fe:e7: a5:6a:68:64:63:37:d1:55:f1:13:2d:3d:21:d8:aa:45:76:89: d5:66:d3:9b:57:af:29:52:14:91:51:5b:3b:9a:69:e1:67:e8: 63:21:5a:12:81:99:e0:e1:08:b7:18:55:dd:1c:0a:3d:7e:9f: 21:9b:f1:da:1e:72:29:21:3c:39:15:55:30:c9:39:9d:e6:ab: 63:aa:4f:a9:38:a2:e4:ab:96:d1:0d:c7:af:af:05:e3:7c:f9: 6b:9c:d4:15:d3:c5:e4:ff:7a:9f:b5:51:d3:4f:60:fd:28:1d: 5c:69:07:fd:87:da:45:e9:76:30:f6:bd:33:f8:d6:d4:8c:e1: a3:5a:90:11:d6:84:27:e5:6c:10:9e:f3:57:5b:07:2b:05:cf: a9:71:e0:60:1b:d9:ee:7d:f5:02:92:a5:67:ed:f7:57:68:87: f2:77:0a:fa:c9:36:37:a4:3c:03:ae:b4:f4:94:33:3e:84:ab: 39:4e:5c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zdetP1XzO/k4Vn1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUyNTEzMDAzMVoXDTI2MDgyMzEzMDAzMVowLzEtMCsGA1UEAxMk ZDY5MzA1ZTgtNTFlMS00YmM5LTk3Y2MtYzFmMzE5MjgxNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMzKwHvMTUBhRoJdbwuT253a83DOa6ZIRtSn PuS4/eIu15dvF22DwYzXTMsmb9Rgh78SXPwNfSJSLqZUBsME+96zD7gYczBy5fTN p7X576XfKOEwD5Y6W7DYXZLMN1nj6OPXQK6RJj5WW8b3LtV1MAFsEotXrDj/NFQ6 P0q5XmKNL2FgYobBpbdlt+FfGzzRByFUA8oTbotCIoV4IcTY24YHMWNXe1aavQsV x1IiE4euSn3QlEtqKizH0lajJqeuRFTdv27NoH+Fg2JnFlxWvIQbLrIz1Pr59ZS+ UPK3wRfUvQUFc0pFevxi+NGMZlWTRsxZwef5Jbbq5rdaM6wlvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdOO5qhga2LCbwKYy/kaq8TCiZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDYyMmU4M2UtYmVkNS0z YTQ5LWIzNTYtMjM4MmFkZGM1ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL++/o+SkSq+VR8tzGf1ITIQTXxBjSe+OdytoXNQUGTpmKRypA0fqDLS naDg9pCEFTZthWRY7BS/WHmGisGXQW8ypxWVmCX+56VqaGRjN9FV8RMtPSHYqkV2 idVm05tXrylSFJFRWzuaaeFn6GMhWhKBmeDhCLcYVd0cCj1+nyGb8doecikhPDkV VTDJOZ3mq2OqT6k4ouSrltENx6+vBeN8+Wuc1BXTxeT/ep+1UdNPYP0oHVxpB/2H 2kXpdjD2vTP41tSM4aNakBHWhCflbBCe81dbBysFz6lx4GAb2e599QKSpWft91do h/J3CvrJNjekPAOutPSUMz6EqzlOXFo= -----END CERTIFICATE-----Generated at Fri Jun 12 22:38:20 2026 by rpki-client