$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa File: 66c24ca4-75ad-3583-bab3-0d338b0cb433.roa (raw, json) Hash identifier: FR3PFr6r9lz2qEG0jy9FqXMYzZ+1Uuzl31888+kWvEs= Subject key identifier: 7C:A6:2F:16:21:3C:54:2B:A0:30:33:6E:6F:A3:7A:04:FE:AC:2D:23 Certificate issuer: /CN=8cb64613-5b0d-4968-b601-e2f2cf053f18 Certificate serial: 010D0C9F4328584DAAE034D8DEAC60668FB5B8C0 Authority key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 271 IP address blocks: 198.162.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:34:d8:de:ac:60:66:8f:b5:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=f191b41f-b29c-48fe-974b-224119e6ae97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:37:1d:15:a2:c2:18:2a:6a:35:66:d5:e6: 2f:77:2a:ea:d1:fc:23:0f:f7:be:b6:12:55:be:59: 93:b1:6a:e5:76:92:9f:e7:36:b3:d9:f2:f6:9d:0a: 4e:54:1e:6a:dc:25:28:1a:c2:bd:96:e2:64:ee:ae: 3c:c4:c9:ca:1e:ac:87:df:0a:f7:27:3a:31:20:5d: 71:c6:19:cb:ce:44:23:59:e0:7c:c9:10:15:4a:ce: 1e:56:8c:e8:da:82:fd:27:14:d3:87:d9:17:6f:5d: db:c7:61:ac:c3:3c:a8:84:2e:c3:0c:2c:40:37:3d: c0:36:d7:54:14:b5:ad:e7:c4:6b:8b:cb:24:0d:83: 11:92:45:b8:d1:4e:2e:d9:a3:84:7e:2a:18:31:c6: 18:e8:52:73:d8:20:b5:2f:fe:13:72:cf:49:6a:88: ed:29:8c:1d:b3:cf:1d:2a:6e:91:c0:23:a2:1e:f6: f4:7a:cf:6d:2b:e2:b1:c2:e5:8e:6f:85:9c:90:4f: f0:2e:6c:bb:d6:06:c8:d3:63:51:1c:c1:e2:47:ca: c5:b7:4d:be:99:fd:fb:fb:47:45:dd:e0:c0:4b:33: 85:44:86:9f:75:c6:79:bc:2c:51:50:3a:ef:49:53: 39:d6:c2:bf:c7:5c:00:24:11:9b:3a:1e:c4:be:25: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A6:2F:16:21:3C:54:2B:A0:30:33:6E:6F:A3:7A:04:FE:AC:2D:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl X509v3 Authority Key Identifier: keyid:98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer sbgp-ipAddrBlock: critical IPv4: 198.162.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:60:65:d3:03:7e:0a:fe:1b:1a:f4:1f:fa:e4:ca:cf:38:79: 9d:a3:80:86:43:cc:65:be:cb:c8:c2:97:b2:b1:d0:31:21:63: 47:2b:86:92:7e:aa:d9:26:3d:cf:a9:25:48:91:f0:0a:16:15: 40:df:a6:8c:0e:29:96:d7:eb:8e:68:88:2e:bb:ef:af:9c:86: cf:76:13:d0:93:31:99:55:2a:4c:0c:d4:7c:18:3c:b5:55:be: c7:f1:7d:78:89:7c:99:44:de:92:ed:6d:08:fe:6e:3e:8e:dd: 48:e6:2b:1c:7b:86:96:02:95:cd:e0:af:60:9c:21:57:01:cb: ac:37:c2:b9:41:09:51:5b:8f:a0:9a:7d:8f:c5:ea:fc:79:1d: 63:91:df:1b:5e:3d:06:04:6e:1a:df:62:73:3f:81:40:ef:a8: ea:f5:b3:06:90:26:7c:56:a1:0c:c3:e8:b1:c0:2c:63:67:f9: 34:6c:a0:79:e7:d5:b4:2a:14:a2:da:e4:c3:98:fb:9d:0d:5e: 50:13:5f:82:9e:d4:97:31:35:39:eb:cc:e5:e1:0d:32:04:52: 22:7a:15:72:e2:a2:5c:7c:fb:f7:92:bd:41:f5:b2:a6:d5:da: 06:d9:9a:d6:0e:6d:0e:ee:d6:79:1f:85:91:22:5d:22:8b:7c: 05:f1:66:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DTY3qxgZo+1uMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiNjQ2MTMtNWIwZC00OTY4LWI2MDEtZTJmMmNmMDUz ZjE4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk ZjE5MWI0MWYtYjI5Yy00OGZlLTk3NGItMjI0MTE5ZTZhZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/83HRWiwhgqajVm1eYvdyrq0fwjD/e+thJV vlmTsWrldpKf5zaz2fL2nQpOVB5q3CUoGsK9luJk7q48xMnKHqyH3wr3JzoxIF1x xhnLzkQjWeB8yRAVSs4eVozo2oL9JxTTh9kXb13bx2GswzyohC7DDCxANz3ANtdU FLWt58Rri8skDYMRkkW40U4u2aOEfioYMcYY6FJz2CC1L/4Tcs9JaojtKYwds88d Km6RwCOiHvb0es9tK+KxwuWOb4WckE/wLmy71gbI02NRHMHiR8rFt02+mf37+0dF 3eDASzOFRIafdcZ5vCxRUDrvSVM51sK/x1wAJBGbOh7EviXbDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHymLxYhPFQroDAzbm+jegT+rC0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84Y2I2 NDYxMy01YjBkLTQ5NjgtYjYwMS1lMmYyY2YwNTNmMTgvNjZjMjRjYTQtNzVhZC0z NTgzLWJhYjMtMGQzMzhiMGNiNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGNiNjQ2MTMtNWIwZC00OTY4LWI2 MDEtZTJmMmNmMDUzZjE4LzhjYjY0NjEzLTViMGQtNDk2OC1iNjAxLWUyZjJjZjA1 M2YxOC5jcmwwHwYDVR0jBBgwFoAUmFXdTZzJoIFeqTEMx78iaxZ96QgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84Y2I2NDYxMy01YjBkLTQ5NjgtYjYwMS1lMmYy Y2YwNTNmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERgZdMDfgr+Gxr0H/rkys84eZ2jgIZDzGW+y8jCl7Kx0DEhY0crhpJ+ qtkmPc+pJUiR8AoWFUDfpowOKZbX645oiC6776+chs92E9CTMZlVKkwM1HwYPLVV vsfxfXiJfJlE3pLtbQj+bj6O3UjmKxx7hpYClc3gr2CcIVcBy6w3wrlBCVFbj6Ca fY/F6vx5HWOR3xtePQYEbhrfYnM/gUDvqOr1swaQJnxWoQzD6LHALGNn+TRsoHnn 1bQqFKLa5MOY+50NXlATX4Ke1JcxNTnrzOXhDTIEUiJ6FXLiolx8+/eSvUH1sqbV 2gbZmtYObQ7u1nkfhZEiXSKLfAXxZkE= -----END CERTIFICATE-----Generated at Fri May 1 01:40:48 2026 by rpki-client