$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8c112e0-86b5-3ad9-a4db-e308068c6474.roa File: a8c112e0-86b5-3ad9-a4db-e308068c6474.roa (raw, json) Hash identifier: SxaZvVMG+WyUwzyJkk9Ca+kUwyaq6DVbcFmhWhapteY= Subject key identifier: CA:A8:AE:EE:89:62:6C:90:2D:2B:B0:5D:41:F9:AC:43:1B:09:DD:3C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E2D9EFBE97C577D3CAA174100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8c112e0-86b5-3ad9-a4db-e308068c6474.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 22773 IP address blocks: 66.92.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9e:fb:e9:7c:57:7d:3c:aa:17:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=36878d49-d0be-42a3-9d39-18c4c3518659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:13:e9:bc:76:17:d9:45:49:e0:c6:0e:9f: fa:a0:90:34:98:a8:ca:7f:a4:48:92:c0:39:3e:c5: 21:c2:6c:73:15:5f:bc:bd:e5:0c:0b:6c:6a:6b:88: 55:72:57:7b:6f:df:e3:af:6e:10:1c:84:ca:cd:7a: ac:d1:fe:56:ad:af:26:b0:a1:66:b9:7a:d1:a0:80: a0:6d:73:76:4c:4a:11:4a:5a:57:96:03:28:1c:9f: fb:34:fa:e8:18:81:78:b0:cf:10:9d:a3:f0:e6:52: b9:cf:1d:ce:4a:1c:d8:10:04:44:27:6b:4e:3d:d5: 89:7e:18:2f:1b:6d:22:b1:a9:e9:f8:a5:5a:d0:dc: 51:31:21:b6:5e:91:56:b3:0d:26:85:5a:de:50:d5: 32:1e:97:52:df:7b:5e:9b:5f:9e:09:8c:4c:9d:1c: 0b:36:8b:e5:fe:6e:32:7e:ac:26:37:b9:f2:2f:a7: 30:80:ee:47:55:ee:d8:e7:ea:6c:a8:a8:53:75:08: 08:ae:56:e3:cb:d8:ef:c6:86:77:27:b4:97:65:0a: 2b:57:d7:16:f9:e4:e5:40:5c:d4:f9:9f:37:99:15: 18:e2:15:15:f7:37:a6:e5:b8:8c:d8:88:73:30:e9: 4f:c6:d3:9b:19:1e:a3:85:49:1a:e9:e2:43:71:96: ab:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A8:AE:EE:89:62:6C:90:2D:2B:B0:5D:41:F9:AC:43:1B:09:DD:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8c112e0-86b5-3ad9-a4db-e308068c6474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:46:69:90:a5:91:cc:06:25:25:de:64:02:c4:27:2c:08:9c: f3:d4:89:1b:c4:5e:2a:43:34:e5:4b:2a:56:77:d1:3b:90:b5: 05:ae:c1:b1:14:34:e0:05:73:18:68:c6:50:4a:0b:7f:a2:e7: 79:50:ce:40:5e:d8:32:4e:5c:2a:2e:79:be:91:85:ea:a7:95: 63:43:ed:c7:4d:7b:ff:6c:49:fa:01:5f:39:36:18:23:fe:e4: 17:d6:18:a8:21:75:fe:2a:44:78:17:30:0b:74:fa:d8:5b:05: 26:ef:e6:4e:fd:6f:4a:19:ee:db:3b:e2:07:f5:9e:f5:70:75: 55:04:5d:d8:99:dd:51:66:9d:55:3d:39:5c:2b:8b:8b:5e:a7: 5f:e7:76:1a:f0:d4:af:24:c9:67:c8:04:36:56:71:cb:2f:a0: 08:5e:33:6f:9b:e6:52:d5:0a:83:eb:5f:c4:1a:5a:19:26:af: a2:0c:a9:a3:91:a4:67:ca:66:ae:8d:e2:9e:72:a9:75:40:c7: b6:19:ac:4b:5a:15:8f:04:01:88:e8:97:a3:58:68:03:90:a0: 4d:4c:05:92:db:04:d4:90:ec:0e:ff:97:28:de:64:5a:f5:15: e2:75:a7:a2:d6:1a:f9:6d:34:22:d9:4a:bc:8f:f8:28:58:83: 39:9e:fc:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnvvpfFd9PKoXQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MzY4NzhkNDktZDBiZS00MmEzLTlkMzktMThjNGMzNTE4NjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv24T6bx2F9lFSeDGDp/6oJA0mKjKf6RIksA5 PsUhwmxzFV+8veUMC2xqa4hVcld7b9/jr24QHITKzXqs0f5Wra8msKFmuXrRoICg bXN2TEoRSlpXlgMoHJ/7NProGIF4sM8QnaPw5lK5zx3OShzYEAREJ2tOPdWJfhgv G20isanp+KVa0NxRMSG2XpFWsw0mhVreUNUyHpdS33tem1+eCYxMnRwLNovl/m4y fqwmN7nyL6cwgO5HVe7Y5+psqKhTdQgIrlbjy9jvxoZ3J7SXZQorV9cW+eTlQFzU +Z83mRUY4hUV9zem5biM2IhzMOlPxtObGR6jhUka6eJDcZarDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqoru6JYmyQLSuwXUH5rEMbCd08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYThjMTEyZTAtODZiNS0z YWQ5LWE0ZGItZTMwODA2OGM2NDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFGaZClkcwGJSXeZALEJywInPPUiRvEXipDNOVLKlZ30TuQtQWuwbEU NOAFcxhoxlBKC3+i53lQzkBe2DJOXCoueb6RheqnlWND7cdNe/9sSfoBXzk2GCP+ 5BfWGKghdf4qRHgXMAt0+thbBSbv5k79b0oZ7ts74gf1nvVwdVUEXdiZ3VFmnVU9 OVwri4tep1/ndhrw1K8kyWfIBDZWccsvoAheM2+b5lLVCoPrX8QaWhkmr6IMqaOR pGfKZq6N4p5yqXVAx7YZrEtaFY8EAYjol6NYaAOQoE1MBZLbBNSQ7A7/lyjeZFr1 FeJ1p6LWGvltNCLZSryP+ChYgzme/FM= -----END CERTIFICATE-----Generated at Fri Jul 10 13:49:15 2026 by rpki-client