$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89778e30-c349-3b18-9acd-afbd166ccab4.roa File: 89778e30-c349-3b18-9acd-afbd166ccab4.roa (raw, json) Hash identifier: jYdlIB6iGOjsoDCZl48lGqoUUC1FVpc3znQ20Cb1CFM= Subject key identifier: 5F:7F:14:77:0A:33:66:C3:FC:66:74:73:E9:04:4F:7D:A7:3C:15:3D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D9FB58AA149B6D37AA8FF5280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89778e30-c349-3b18-9acd-afbd166ccab4.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 211192 IP address blocks: 66.92.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:8a:a1:49:b6:d3:7a:a8:ff:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=c679c6c8-0af6-4dc1-8f10-a674ea2907b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:9b:dd:14:2a:de:a9:1f:36:21:87:86:40: eb:3b:60:e7:9b:4a:c7:ae:e9:a4:65:1e:17:a7:50: 6a:26:21:95:28:e9:62:0d:a3:89:56:b9:85:c8:73: 30:f4:50:76:73:0c:60:ef:88:a5:82:16:16:6b:19: f2:93:f4:6d:39:4d:5a:2b:7a:c0:65:17:55:9b:21: b7:ca:21:29:e1:81:14:a8:65:c4:ff:fe:9a:cf:e3: 00:8c:82:12:d0:05:6b:c5:40:c4:06:23:8e:2e:ae: 66:9b:56:1b:66:f3:85:af:ce:e9:00:8a:b3:5f:5a: 1d:3a:21:e0:f2:86:77:30:59:c6:a6:a7:b7:0b:45: b5:34:58:05:6a:3f:99:0a:b7:61:1c:d5:d5:54:51: 6c:89:84:31:4f:e2:4f:17:2d:c1:60:c2:e2:33:bf: ed:8e:4a:af:f3:30:78:bc:c7:61:28:bc:b6:28:c8: fd:34:30:9e:c8:4d:f5:93:3f:0f:6b:9b:4d:d8:3f: 8b:a2:29:24:66:3b:ed:76:2d:e9:d4:e5:dc:c0:f7: d0:34:f5:86:4d:f5:65:42:eb:2f:4e:5d:33:11:40: 2d:35:aa:3f:ce:bd:e0:74:e6:1d:ac:75:94:c0:15: 10:50:83:14:d6:82:e5:43:aa:e9:2c:53:8f:a9:fe: 6c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7F:14:77:0A:33:66:C3:FC:66:74:73:E9:04:4F:7D:A7:3C:15:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89778e30-c349-3b18-9acd-afbd166ccab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b5:2d:13:9d:8b:e4:54:3e:28:b9:4b:7d:13:0a:d2:44:b2: 47:35:37:92:08:71:11:cf:32:2f:e3:99:64:33:fa:d4:d9:d4: ef:ec:8e:f8:44:1a:60:89:7a:d2:34:44:fc:b6:62:57:4c:6c: 96:10:6e:dc:3f:e7:7c:67:9f:b2:af:62:49:f5:81:74:34:4c: 5d:fb:bc:72:48:3d:80:50:2f:eb:2b:fa:b8:28:0d:f4:e9:eb: 3e:b5:5f:bd:54:1c:f8:a2:04:07:ed:c3:a6:89:ab:92:8c:77: 9a:42:38:4d:59:e5:1c:21:25:e5:1f:1e:51:e5:0b:50:9a:10: 50:48:e3:b4:7d:c1:f8:cb:20:1c:fe:ad:ad:03:69:27:cd:12: ff:70:d8:13:2c:0f:0a:fd:49:a5:4d:a2:fb:37:e2:76:52:28: d3:bd:dc:9b:d4:15:ad:4a:25:39:56:d2:60:28:64:d6:99:9c: 23:97:3c:7f:fe:ad:6e:a5:8e:75:a2:71:4f:d8:3d:55:3b:27: c0:95:52:b9:e0:d5:f0:cd:36:ad:99:ca:05:3b:04:b8:b9:88: 0a:be:f9:e5:9b:fe:97:42:d5:60:9a:4d:78:d0:98:7a:ae:ab: 00:28:47:11:ce:15:8e:d7:71:df:66:c6:97:b2:73:77:e0:cc: bd:84:88:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftYqhSbbTeqj/UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk YzY3OWM2YzgtMGFmNi00ZGMxLThmMTAtYTY3NGVhMjkwN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPeb3RQq3qkfNiGHhkDrO2Dnm0rHrumkZR4X p1BqJiGVKOliDaOJVrmFyHMw9FB2cwxg74ilghYWaxnyk/RtOU1aK3rAZRdVmyG3 yiEp4YEUqGXE//6az+MAjIIS0AVrxUDEBiOOLq5mm1YbZvOFr87pAIqzX1odOiHg 8oZ3MFnGpqe3C0W1NFgFaj+ZCrdhHNXVVFFsiYQxT+JPFy3BYMLiM7/tjkqv8zB4 vMdhKLy2KMj9NDCeyE31kz8Pa5tN2D+LoikkZjvtdi3p1OXcwPfQNPWGTfVlQusv Tl0zEUAtNao/zr3gdOYdrHWUwBUQUIMU1oLlQ6rpLFOPqf5suQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9/FHcKM2bD/GZ0c+kET32nPBU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODk3NzhlMzAtYzM0OS0z YjE4LTlhY2QtYWZiZDE2NmNjYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlyFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS1LROdi+RUPii5S30TCtJEskc1N5IIcRHPMi/jmWQz+tTZ1O/sjvhE GmCJetI0RPy2YldMbJYQbtw/53xnn7KvYkn1gXQ0TF37vHJIPYBQL+sr+rgoDfTp 6z61X71UHPiiBAftw6aJq5KMd5pCOE1Z5RwhJeUfHlHlC1CaEFBI47R9wfjLIBz+ ra0DaSfNEv9w2BMsDwr9SaVNovs34nZSKNO93JvUFa1KJTlW0mAoZNaZnCOXPH/+ rW6ljnWicU/YPVU7J8CVUrng1fDNNq2ZygU7BLi5iAq++eWb/pdC1WCaTXjQmHqu qwAoRxHOFY7Xcd9mxpeyc3fgzL2EiCQ= -----END CERTIFICATE-----Generated at Fri May 8 07:05:55 2026 by rpki-client