$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa File: ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa (raw, json) Hash identifier: oxWtnb7DYZQBgAp2UkuSfgDsHIXXHj6TByAlmxtpDTs= Subject key identifier: 26:D0:02:3A:56:B2:33:84:00:52:7D:9E:77:0B:5A:C1:B8:4C:DB:08 Certificate issuer: /CN=654e0ef8-ac77-456b-9a63-98fdb228488b Certificate serial: 010D0C9F4328584E66DA17231A26CBAFFBEFA140 Authority key identifier: 20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 400404 IP address blocks: 66.71.208.0/21 maxlen: 24 96.45.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:17:23:1a:26:cb:af:fb:ef:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654e0ef8-ac77-456b-9a63-98fdb228488b Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=b49b6f4d-d933-4864-970e-f5eea8434661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:5c:d5:cd:44:57:24:f5:02:d3:01:36:7f: e3:6f:d1:44:26:2f:9b:82:e2:8c:1e:53:a7:a7:71: 10:13:f8:0b:2e:a9:cf:e5:43:2b:7e:d4:b0:1d:ea: 29:f1:34:9f:6a:8c:bb:b3:c5:df:f5:41:ea:6b:e6: 3b:ce:82:48:c0:92:4e:9b:3f:98:da:b6:d1:d4:b5: c0:8d:d0:17:5a:6f:a8:46:84:53:40:20:2b:d0:f8: b1:cd:b3:01:08:b7:7f:4c:10:00:54:d0:4e:e9:4e: 8c:51:e9:74:c2:d5:17:d3:35:50:38:be:55:c0:27: 59:54:c1:38:81:0e:8d:c3:49:f5:c6:47:80:d6:b6: d5:c3:df:c4:96:b2:90:a0:8c:5b:e6:33:14:db:57: cf:65:86:ed:ca:3c:0d:85:c1:b8:68:7f:b8:61:1b: b7:22:8c:b7:59:37:af:5f:0b:c5:31:fd:67:1d:a0: 1e:77:3b:c3:9c:33:a6:d5:f9:5d:78:d9:8d:e7:67: eb:4e:2b:14:53:b2:a8:8c:32:d0:47:67:cf:9a:40: 9a:a5:ce:16:5c:89:d9:62:44:a9:0c:c3:cf:cf:46: 91:20:b3:0e:68:e9:7d:9e:66:c6:8e:1a:67:ca:38: b7:4d:1c:e4:2e:a4:1f:d4:4b:67:9c:21:3f:a8:79: 42:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D0:02:3A:56:B2:33:84:00:52:7D:9E:77:0B:5A:C1:B8:4C:DB:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl X509v3 Authority Key Identifier: keyid:20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer sbgp-ipAddrBlock: critical IPv4: 66.71.208.0/21 96.45.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:86:88:54:5d:c4:2e:c2:65:09:f8:9d:60:4a:84:f2:40:6a: ea:b1:ee:1e:db:9f:74:20:b6:bc:07:e3:29:07:0a:a8:be:79: dd:d4:54:81:8d:70:05:25:1e:9e:cc:dc:bf:7a:22:7b:ad:6d: 28:16:34:bc:32:4f:d5:ac:ab:b3:06:4f:95:02:d5:c2:bc:8c: 9e:51:fa:fe:c9:02:1e:45:dd:d9:8f:87:af:3d:37:c1:93:3f: 4a:ac:ac:f9:b0:f8:fa:d6:f0:10:bf:40:7f:6d:7b:c0:78:9b: bd:07:20:27:2f:78:9d:3e:2b:b7:37:c9:ef:d3:ba:38:61:9e: f0:85:a3:cb:ed:30:1d:36:2d:76:be:02:5b:c5:a2:54:93:bb: 71:c8:4d:6b:25:61:e6:d5:00:6d:b4:6a:e5:7c:84:c5:87:78: e5:85:f5:13:28:7e:b4:2a:b6:4b:e6:5a:5a:ce:d3:dc:b0:82: fe:cd:7f:63:cc:f9:c6:6b:a6:04:42:1e:73:4c:4f:f6:05:7f: 31:b3:41:3d:b8:07:45:e3:c7:84:0e:2b:a8:3f:01:5b:0c:29: 17:1e:9e:59:fe:08:ea:90:52:a3:56:b1:0e:68:e5:77:40:e2: 1a:47:1a:cc:3e:72:65:89:f2:66:50:9d:84:38:f1:56:31:68: 5a:61:98:ed -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5m2hcjGibLr/vvoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU0ZTBlZjgtYWM3Ny00NTZiLTlhNjMtOThmZGIyMjg0 ODhiMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk YjQ5YjZmNGQtZDkzMy00ODY0LTk3MGUtZjVlZWE4NDM0NjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDRc1c1EVyT1AtMBNn/jb9FEJi+bguKMHlOn p3EQE/gLLqnP5UMrftSwHeop8TSfaoy7s8Xf9UHqa+Y7zoJIwJJOmz+Y2rbR1LXA jdAXWm+oRoRTQCAr0PixzbMBCLd/TBAAVNBO6U6MUel0wtUX0zVQOL5VwCdZVME4 gQ6Nw0n1xkeA1rbVw9/ElrKQoIxb5jMU21fPZYbtyjwNhcG4aH+4YRu3Ioy3WTev XwvFMf1nHaAedzvDnDOm1fldeNmN52frTisUU7KojDLQR2fPmkCapc4WXInZYkSp DMPPz0aRILMOaOl9nmbGjhpnyji3TRzkLqQf1EtnnCE/qHlCQQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCbQAjpWsjOEAFJ9nncLWsG4TNsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRl MGVmOC1hYzc3LTQ1NmItOWE2My05OGZkYjIyODQ4OGIvZmZhMzRlMTUtNGVjYS0z NDFiLWE1ZDEtOTZkNTE0M2IwNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjU0ZTBlZjgtYWM3Ny00NTZiLTlh NjMtOThmZGIyMjg0ODhiLzY1NGUwZWY4LWFjNzctNDU2Yi05YTYzLTk4ZmRiMjI4 NDg4Yi5jcmwwHwYDVR0jBBgwFoAUIIAKlrpCPOd9vFC7tCAnZ+KIXMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRlMGVmOC1hYzc3LTQ1NmItOWE2My05OGZk YjIyODQ4OGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQkfQAwQE YC2QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABaGiFRdxC7CZQn4nWBKhPJAauqx7h7bn3QgtrwH4ykHCqi+ ed3UVIGNcAUlHp7M3L96InutbSgWNLwyT9Wsq7MGT5UC1cK8jJ5R+v7JAh5F3dmP h689N8GTP0qsrPmw+PrW8BC/QH9te8B4m70HICcveJ0+K7c3ye/TujhhnvCFo8vt MB02LXa+AlvFolSTu3HITWslYebVAG20auV8hMWHeOWF9RMofrQqtkvmWlrO09yw gv7Nf2PM+cZrpgRCHnNMT/YFfzGzQT24B0Xjx4QOK6g/AVsMKRcenln+COqQUqNW sQ5o5XdA4hpHGsw+cmWJ8mZQnYQ48VYxaFphmO0= -----END CERTIFICATE-----Generated at Mon Jul 6 22:16:24 2026 by rpki-client