$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/61a787c6-030b-3402-a4cd-bf57e546464c.roa File: 61a787c6-030b-3402-a4cd-bf57e546464c.roa (raw, json) Hash identifier: 9trkPMIUdBkI9c87Vwyp7N1gsIYW/ee8EaDTY53ah8U= Subject key identifier: 7B:71:00:EB:C6:EE:99:2F:4D:1A:E5:8C:95:58:C7:6B:8E:D6:F9:36 Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584D75DE92B6AD870FE8B6458760 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/61a787c6-030b-3402-a4cd-bf57e546464c.roa Signing time: Fri 10 Apr 2026 13:19:37 +0000 ROA not before: Fri 10 Apr 2026 13:19:37 +0000 ROA not after: Thu 09 Jul 2026 13:19:37 +0000 asID: 1403 IP address blocks: 66.158.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:de:92:b6:ad:87:0f:e8:b6:45:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Apr 10 13:19:37 2026 GMT Not After : Jul 9 13:19:37 2026 GMT Subject: CN=efed0e45-f99b-457d-a512-b698e530c0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bb:24:67:8d:a4:2b:1d:89:86:0c:d1:ef:57: 96:5b:67:82:0d:89:c9:1a:52:2b:34:7e:dc:92:bc: fc:1f:9b:1e:3d:bf:d2:05:1e:dd:39:36:aa:6d:9b: c1:8f:2a:d4:f8:23:1e:78:99:ca:94:6c:67:cf:c0: 29:6d:36:4a:5c:4d:f6:ff:53:38:e1:92:4f:b5:53: 19:4a:a9:1f:67:47:84:fc:b5:a3:38:ab:6e:50:d5: 53:1f:01:57:4c:2b:9d:07:fd:42:3a:41:95:89:89: 7f:81:77:5d:31:64:32:09:91:15:c6:c1:a2:61:6a: c0:23:20:3e:27:bf:14:82:eb:04:9c:33:fd:14:ce: ab:ad:3c:3a:74:d8:ed:e6:6f:86:ae:2f:25:8a:a2: dc:26:89:b3:96:75:52:45:bd:5c:30:a3:67:10:d7: 82:a9:3f:56:27:6f:ab:ef:a9:80:1d:7b:0c:11:13: e9:c0:73:f1:79:08:8a:db:fa:47:9e:fc:83:60:5c: 7e:c7:f5:06:05:5c:63:a7:e1:67:f7:40:45:16:70: 8f:1c:25:57:a2:5e:4e:f7:1f:0c:3b:b3:2b:4f:a4: 84:06:e9:20:ae:9e:a8:75:d2:91:36:50:11:34:af: 30:84:e8:28:c6:ec:cc:8b:04:14:c1:05:a7:ea:01: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:71:00:EB:C6:EE:99:2F:4D:1A:E5:8C:95:58:C7:6B:8E:D6:F9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/61a787c6-030b-3402-a4cd-bf57e546464c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.158.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5d:f0:e8:a7:e8:a4:f1:e8:ed:b4:a6:3c:2d:97:fd:91:ae: 84:f0:ad:fc:cf:92:49:e8:7d:a9:8d:17:94:ae:1d:99:fa:36: f7:30:d9:16:aa:37:01:f3:a5:19:a4:28:84:28:4d:82:34:ad: 7c:cf:1a:ed:32:00:4c:09:1a:ad:1c:e7:9b:a1:16:ee:90:b9: 47:e3:07:e0:65:32:31:2b:d8:66:74:3c:84:ee:8f:7e:85:c4: 6b:8e:b6:75:ff:9d:f7:12:41:b3:5a:48:1d:ff:61:e4:48:26: 42:b8:4d:bc:48:e6:e0:20:69:b3:27:94:27:18:ae:89:c2:38: 17:c7:21:8e:35:b8:00:30:d6:24:5f:51:4e:ec:75:c9:be:39: ae:1d:6e:e2:82:a5:e7:e9:eb:d3:d3:7f:9a:27:b6:49:c4:9e: 80:c7:3f:43:70:b3:2d:33:b1:ae:9f:f1:56:5c:60:00:b7:22: 0c:e6:68:15:20:0a:eb:32:cc:01:7b:78:88:07:53:11:5d:df: ef:26:38:3d:3b:c7:2f:14:b1:88:96:e0:78:27:ab:d7:5b:c2: 25:e8:75:33:78:a7:4a:c6:f1:05:cc:46:50:af:f6:34:ce:f5: d1:83:e7:0d:1e:d3:9c:b9:27:59:6b:95:5d:67:f1:5e:5b:46: b4:a6:18:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE113pK2rYcP6LZFh2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDQxMDEzMTkzN1oXDTI2MDcwOTEzMTkzN1owLzEtMCsGA1UEAxMk ZWZlZDBlNDUtZjk5Yi00NTdkLWE1MTItYjY5OGU1MzBjMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLskZ42kKx2JhgzR71eWW2eCDYnJGlIrNH7c krz8H5sePb/SBR7dOTaqbZvBjyrU+CMeeJnKlGxnz8ApbTZKXE32/1M44ZJPtVMZ SqkfZ0eE/LWjOKtuUNVTHwFXTCudB/1COkGViYl/gXddMWQyCZEVxsGiYWrAIyA+ J78UgusEnDP9FM6rrTw6dNjt5m+Gri8liqLcJomzlnVSRb1cMKNnENeCqT9WJ2+r 76mAHXsMERPpwHPxeQiK2/pHnvyDYFx+x/UGBVxjp+Fn90BFFnCPHCVXol5O9x8M O7MrT6SEBukgrp6oddKRNlARNK8whOgoxuzMiwQUwQWn6gF/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtxAOvG7pkvTRrljJVYx2uO1vk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvNjFhNzg3YzYtMDMwYi0z NDAyLWE0Y2QtYmY1N2U1NDY0NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQp6DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFd8Oin6KTx6O20pjwtl/2RroTwrfzPkknofamNF5SuHZn6Nvcw2Raq NwHzpRmkKIQoTYI0rXzPGu0yAEwJGq0c55uhFu6QuUfjB+BlMjEr2GZ0PITuj36F xGuOtnX/nfcSQbNaSB3/YeRIJkK4TbxI5uAgabMnlCcYronCOBfHIY41uAAw1iRf UU7sdcm+Oa4dbuKCpefp69PTf5ontknEnoDHP0Nwsy0zsa6f8VZcYAC3IgzmaBUg CusyzAF7eIgHUxFd3+8mOD07xy8UsYiW4Hgnq9dbwiXodTN4p0rG8QXMRlCv9jTO 9dGD5w0e05y5J1lrlV1n8V5bRrSmGKQ= -----END CERTIFICATE-----Generated at Fri Apr 17 11:38:01 2026 by rpki-client