$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d7217182-527f-350b-b775-82fc3555a489.roa File: d7217182-527f-350b-b775-82fc3555a489.roa (raw, json) Hash identifier: utkbI/9RAybAvK2S32rOG9WSczXRI+LYsl3yJ7va0Vo= Subject key identifier: 43:BC:15:ED:9A:96:2D:4E:D5:C1:51:FB:5F:FE:ED:76:A6:44:4D:7B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D59EAB337B4E2F479CF8EE600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d7217182-527f-350b-b775-82fc3555a489.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 401558 IP address blocks: 66.93.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b3:37:b4:e2:f4:79:cf:8e:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=75c1b988-afc8-4113-b2f4-3b173206e056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:02:fc:0a:94:be:bd:f0:72:49:5b:e7:dc: 86:c6:dd:ef:45:88:60:4a:eb:20:e1:3a:f9:93:8e: 9e:2d:1a:3f:fe:11:31:98:27:ec:6b:e6:ba:93:5f: bd:bd:84:a3:03:bc:99:45:98:3e:32:4e:6c:3f:4e: d4:d7:eb:2e:e8:f7:b1:b2:dd:57:c0:e0:6d:32:f6: 1b:41:3b:b7:f1:b6:fb:02:05:59:cf:34:4e:ab:b3: d7:3e:fa:7c:41:42:ac:1b:4a:09:af:dd:cb:c9:8b: 1b:05:ab:0f:44:e9:cb:50:80:01:79:76:b4:46:c8: dd:55:c9:89:b9:fe:fb:0e:86:cb:3d:18:18:35:a5: 5b:d4:10:f3:00:be:63:22:21:71:84:b2:37:02:6c: 97:61:9c:86:30:31:c4:85:25:a7:d6:99:ac:39:e0: aa:f8:24:9a:6f:75:60:f8:55:bb:fc:64:9a:59:53: c5:07:71:9b:b5:12:e8:fd:ed:99:fe:e8:81:74:7f: cf:cc:6e:91:9c:6e:7e:e1:fa:a1:a0:e2:b2:f6:24: dc:c4:2f:3e:61:d4:68:37:41:f9:5a:7c:06:f1:a1: 60:47:04:aa:1b:1f:14:4e:54:b2:8b:29:75:b3:5d: ff:d9:be:57:02:a6:37:f2:7a:3f:3c:b9:00:1c:90: 16:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BC:15:ED:9A:96:2D:4E:D5:C1:51:FB:5F:FE:ED:76:A6:44:4D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d7217182-527f-350b-b775-82fc3555a489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b7:2f:33:f7:58:01:1d:f1:79:25:52:eb:10:d4:e7:85:9f: 9b:dd:21:08:6e:8a:57:40:17:c1:9a:a0:42:b7:6e:4c:6f:dc: 9a:61:c9:ad:b1:0e:57:44:fa:a0:ea:88:1a:54:ea:d4:15:3d: c8:49:cb:1f:bc:ec:08:5b:88:42:44:2b:6f:00:0f:69:a7:38: 19:e0:65:53:5f:a9:f5:fe:ac:24:46:42:6b:c1:84:12:87:c9: 18:fb:63:0b:82:d9:ff:1f:e2:cb:4e:cc:ed:3c:c0:ee:7f:17: d1:f4:69:74:1f:8c:e5:75:17:fa:e4:1a:0e:4a:be:99:5a:2f: de:c7:5b:bb:c2:fd:fa:66:45:55:33:0d:04:13:3f:8f:a5:ec: 3b:2a:de:c9:ef:6e:b4:45:fb:f7:6e:f0:13:ba:b4:ce:af:b3: ed:54:1f:8b:d1:cb:56:c6:b8:b7:4a:41:d4:35:01:56:03:09: 1f:9d:45:f4:8e:c2:e7:7d:00:aa:fb:b9:06:fd:25:f5:a5:a9: 39:1f:bc:df:23:05:1d:d1:89:28:eb:af:ab:86:bc:a0:6f:cd: 6f:c3:c7:70:f3:fb:be:9a:02:35:a8:39:6b:65:b3:3d:17:ba: c2:56:f9:b7:d2:bc:eb:6d:28:2a:3f:c0:f7:a2:cf:be:df:80: b0:e9:39:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rM3tOL0ec+O5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NzVjMWI5ODgtYWZjOC00MTEzLWIyZjQtM2IxNzMyMDZlMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo0C/AqUvr3wcklb59yGxt3vRYhgSusg4Tr5 k46eLRo//hExmCfsa+a6k1+9vYSjA7yZRZg+Mk5sP07U1+su6Pexst1XwOBtMvYb QTu38bb7AgVZzzROq7PXPvp8QUKsG0oJr93LyYsbBasPROnLUIABeXa0RsjdVcmJ uf77DobLPRgYNaVb1BDzAL5jIiFxhLI3AmyXYZyGMDHEhSWn1pmsOeCq+CSab3Vg +FW7/GSaWVPFB3GbtRLo/e2Z/uiBdH/PzG6RnG5+4fqhoOKy9iTcxC8+YdRoN0H5 WnwG8aFgRwSqGx8UTlSyiyl1s13/2b5XAqY38no/PLkAHJAWWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO8Fe2ali1O1cFR+1/+7XamRE17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDcyMTcxODItNTI3Zi0z NTBiLWI3NzUtODJmYzM1NTVhNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQl2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC3LzP3WAEd8XklUusQ1OeFn5vdIQhuildAF8GaoEK3bkxv3Jphya2x DldE+qDqiBpU6tQVPchJyx+87AhbiEJEK28AD2mnOBngZVNfqfX+rCRGQmvBhBKH yRj7YwuC2f8f4stOzO08wO5/F9H0aXQfjOV1F/rkGg5KvplaL97HW7vC/fpmRVUz DQQTP4+l7Dsq3snvbrRF+/du8BO6tM6vs+1UH4vRy1bGuLdKQdQ1AVYDCR+dRfSO wud9AKr7uQb9JfWlqTkfvN8jBR3RiSjrr6uGvKBvzW/Dx3Dz+76aAjWoOWtlsz0X usJW+bfSvOttKCo/wPeiz77fgLDpOew= -----END CERTIFICATE-----Generated at Mon Apr 13 13:57:50 2026 by rpki-client