$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44362c3a-2e5b-3d1b-a389-8cdb9b2251f6.roa File: 44362c3a-2e5b-3d1b-a389-8cdb9b2251f6.roa (raw, json) Hash identifier: fV0RhmkNdN5fO3jjcWK56EttvyHJ+sAuHNg45HXrdbI= Subject key identifier: 85:8A:C6:C4:0D:FE:71:C4:46:A0:59:92:83:F5:CB:0E:FF:5E:70:63 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E447609AE591AFAC357CB7A68 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44362c3a-2e5b-3d1b-a389-8cdb9b2251f6.roa Signing time: Tue 23 Jun 2026 13:21:19 +0000 ROA not before: Tue 23 Jun 2026 13:21:19 +0000 ROA not after: Mon 21 Sep 2026 13:21:19 +0000 asID: 6079 IP address blocks: 66.95.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:44:76:09:ae:59:1a:fa:c3:57:cb:7a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 23 13:21:19 2026 GMT Not After : Sep 21 13:21:19 2026 GMT Subject: CN=7ceb7465-3213-4bd5-b5fd-1c3c0667ee3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:44:a2:d3:2e:6b:73:26:62:46:a0:c5:3b:00: 37:45:53:0a:bc:8f:00:6f:ed:ca:82:2e:6d:56:45: 91:0b:ef:03:7a:bd:c2:ba:ee:a2:36:34:4c:cd:02: f6:03:09:64:1d:1c:e5:73:38:38:14:12:2f:d8:73: 11:dd:e0:26:93:01:41:98:16:9d:da:e1:b2:4c:3d: ac:df:73:71:cd:eb:80:88:5a:67:1c:9a:6e:a9:c5: b0:88:56:65:b4:24:7a:9c:b8:73:95:51:22:d5:e1: 48:44:48:d4:d1:2b:5f:44:3c:0e:17:30:bf:d9:95: 9b:48:ef:1f:f3:4b:a1:ba:72:24:7e:65:47:c4:63: c7:50:d0:a0:f6:16:6e:25:c1:7e:7f:c6:1d:89:85: cc:d4:b4:e5:4e:c7:d4:52:8e:63:84:b2:99:ff:78: 3d:27:d9:3a:d0:fe:4d:da:98:b7:9b:6f:0e:72:fd: 07:9f:90:dc:65:c2:23:ba:86:24:a4:4e:47:3f:00: 47:48:3f:e5:63:c4:79:5c:01:1a:63:29:f4:8b:94: 9c:a2:af:9d:01:a0:3b:92:d3:37:c9:4e:75:ac:d4: cd:fc:f2:62:59:33:c7:bd:b0:b6:1e:45:ce:2a:74: 6e:1f:79:38:36:91:df:a3:c6:6e:12:5c:51:df:78: eb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8A:C6:C4:0D:FE:71:C4:46:A0:59:92:83:F5:CB:0E:FF:5E:70:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44362c3a-2e5b-3d1b-a389-8cdb9b2251f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.95.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:71:ad:b8:22:5c:2c:f2:96:98:b6:09:47:d4:c7:32:ee:c7: 79:a0:3f:73:7b:fe:0c:4b:90:a2:11:a7:16:0a:81:4b:b7:a5: a4:d1:88:13:dc:2a:e9:0e:b9:f6:1e:6c:6d:70:fc:60:21:b6: 27:53:f5:e6:0d:ce:2a:22:f8:3a:b0:33:bb:4b:7d:d3:d4:df: fc:2e:dd:ec:60:15:04:61:88:f4:3e:13:48:62:21:37:8b:61: b2:68:be:e0:66:75:1a:5e:16:ac:2d:43:1c:74:28:f9:05:b1: 8d:a0:cd:01:f5:cd:f7:92:0b:f2:fc:32:29:c4:9b:47:00:db: fc:04:48:9e:c7:23:64:2d:d5:b5:c6:90:34:09:b0:e2:04:3a: c9:7e:50:40:02:87:fe:23:b9:7a:26:5b:1e:fa:90:af:41:fb: d7:f2:b2:76:40:20:c8:cb:d8:9d:bc:d4:16:0f:10:89:7c:be: cc:dc:05:51:38:47:15:f9:5d:d9:ce:33:cf:ef:7e:1b:b4:16: 5a:df:8e:71:b2:ce:7c:3c:fc:24:fd:c1:e1:c1:c4:84:60:a8: 2e:f0:4f:b4:58:ae:11:67:14:38:39:b1:2c:17:f7:b8:c7:07: f6:07:d1:01:c9:13:0f:fa:25:c2:62:9e:66:d6:5c:f5:59:13: f0:c0:a7:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5EdgmuWRr6w1fLemgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYyMzEzMjExOVoXDTI2MDkyMTEzMjExOVowLzEtMCsGA1UEAxMk N2NlYjc0NjUtMzIxMy00YmQ1LWI1ZmQtMWMzYzA2NjdlZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUSi0y5rcyZiRqDFOwA3RVMKvI8Ab+3Kgi5t VkWRC+8Der3Cuu6iNjRMzQL2AwlkHRzlczg4FBIv2HMR3eAmkwFBmBad2uGyTD2s 33NxzeuAiFpnHJpuqcWwiFZltCR6nLhzlVEi1eFIREjU0StfRDwOFzC/2ZWbSO8f 80uhunIkfmVHxGPHUNCg9hZuJcF+f8YdiYXM1LTlTsfUUo5jhLKZ/3g9J9k60P5N 2pi3m28Ocv0Hn5DcZcIjuoYkpE5HPwBHSD/lY8R5XAEaYyn0i5Scoq+dAaA7ktM3 yU51rNTN/PJiWTPHvbC2HkXOKnRuH3k4NpHfo8ZuElxR33jr7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWKxsQN/nHERqBZkoP1yw7/XnBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDQzNjJjM2EtMmU1Yi0z ZDFiLWEzODktOGNkYjliMjI1MWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQl8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVxrbgiXCzylpi2CUfUxzLux3mgP3N7/gxLkKIRpxYKgUu3paTRiBPc KukOufYebG1w/GAhtidT9eYNzioi+DqwM7tLfdPU3/wu3exgFQRhiPQ+E0hiITeL YbJovuBmdRpeFqwtQxx0KPkFsY2gzQH1zfeSC/L8MinEm0cA2/wESJ7HI2Qt1bXG kDQJsOIEOsl+UEACh/4juXomWx76kK9B+9fysnZAIMjL2J281BYPEIl8vszcBVE4 RxX5XdnOM8/vfhu0FlrfjnGyznw8/CT9weHBxIRgqC7wT7RYrhFnFDg5sSwX97jH B/YH0QHJEw/6JcJinmbWXPVZE/DAp3w= -----END CERTIFICATE-----Generated at Fri Jul 10 13:47:49 2026 by rpki-client