$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2ca5bc4d-9c2f-30ff-9b77-2ba68c4de12a.roa File: 2ca5bc4d-9c2f-30ff-9b77-2ba68c4de12a.roa (raw, json) Hash identifier: VTOYNIdGJcBWNDzKs+ljfUj8Pef9lyhDt2tbX8lp64s= Subject key identifier: F8:50:03:6A:21:CB:C4:97:CD:A7:D0:F4:0D:3B:EA:12:73:76:C2:2B Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E0006272BA1BF937FA094D1D0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2ca5bc4d-9c2f-30ff-9b77-2ba68c4de12a.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 18785 IP address blocks: 66.115.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:27:2b:a1:bf:93:7f:a0:94:d1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=3a4dacd1-f4e7-4a04-a9fb-9b0abe9530ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:a2:a8:36:3b:86:1d:74:68:ed:02:4e:0b: 7e:21:88:89:db:0f:ec:fc:b0:22:f1:f1:a1:1a:64: f2:0d:78:0f:f3:0d:6b:70:d2:bd:a0:39:ef:1c:cb: 5c:49:87:32:d5:8a:9e:a8:96:c7:57:b0:c6:b2:35: bc:c0:a5:c4:9c:0e:41:20:0e:a7:ff:78:cb:92:17: a7:59:4b:10:20:dc:bc:56:fc:9b:34:da:69:25:0c: c7:34:79:df:05:ca:b1:91:66:3a:95:34:01:34:c4: bf:36:ac:02:61:66:5d:93:94:bc:35:61:1c:7c:07: a9:2b:a8:48:73:75:26:99:32:14:02:fa:12:78:bf: 43:cf:e3:1a:7a:35:bf:c7:f9:fe:79:97:d9:1c:f8: 14:7f:2d:e4:63:8b:ca:c6:d4:1f:81:88:b4:78:0b: bf:d9:d0:26:12:4c:e9:a4:64:6c:25:6f:94:45:dc: fd:cd:8f:95:76:96:14:cb:ed:70:5a:62:b3:3d:b9: 5e:dd:6b:47:1b:41:ba:14:9b:df:e2:bd:a7:31:1b: b2:f2:90:c0:50:1d:94:7e:03:53:9d:9c:4f:9b:68: ab:0d:79:49:9a:3b:e5:52:f5:b0:8e:b4:88:12:0c: 18:0a:ea:14:52:70:17:25:0c:3b:13:66:7e:58:cc: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:50:03:6A:21:CB:C4:97:CD:A7:D0:F4:0D:3B:EA:12:73:76:C2:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2ca5bc4d-9c2f-30ff-9b77-2ba68c4de12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:06:4d:3c:7c:e7:77:d7:07:0b:32:3c:5f:15:6b:0a:69:ec: d0:14:01:ef:7d:09:3a:30:38:ea:30:4e:2e:75:39:84:43:f5: e4:51:1a:b1:5f:d8:21:58:4c:d4:12:10:1b:b7:bb:f4:27:b5: 86:58:41:0e:04:f1:87:99:39:b8:6f:63:d0:b1:18:e9:6e:3c: 59:e4:a6:8d:7c:12:cc:b0:86:84:c3:42:15:64:02:31:c5:c9: 8b:4d:a5:f3:bc:3d:12:b8:3a:04:7e:b7:08:54:09:1d:cb:75: 1d:d1:f1:48:48:61:22:9b:68:30:cc:42:b4:28:70:4a:68:6a: 30:6c:6a:e3:cd:94:29:d7:5b:0d:96:3b:8f:ca:d5:cc:6d:ba: 21:f9:15:6c:c2:61:11:1c:72:37:79:5e:cb:1c:f3:37:2d:49: 39:f4:e3:d7:8b:ad:90:f8:e2:78:40:79:08:62:93:cd:8b:c2: 59:ed:09:e2:e0:84:94:f5:98:87:f2:d5:10:33:5c:d6:4d:b8: 55:9f:f5:10:bf:fe:e3:3b:06:fc:32:97:92:9f:40:d5:6e:32: 3c:33:36:ff:46:39:1d:90:e7:2a:0c:41:0e:6f:4f:4e:ea:7b: b6:f1:53:a5:a8:d6:bd:24:4e:ba:9b:3a:c0:e9:fb:c7:1b:33: 0f:40:d5:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABicrob+Tf6CU0dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk M2E0ZGFjZDEtZjRlNy00YTA0LWE5ZmItOWIwYWJlOTUzMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUyiqDY7hh10aO0CTgt+IYiJ2w/s/LAi8fGh GmTyDXgP8w1rcNK9oDnvHMtcSYcy1YqeqJbHV7DGsjW8wKXEnA5BIA6n/3jLkhen WUsQINy8VvybNNppJQzHNHnfBcqxkWY6lTQBNMS/NqwCYWZdk5S8NWEcfAepK6hI c3UmmTIUAvoSeL9Dz+MaejW/x/n+eZfZHPgUfy3kY4vKxtQfgYi0eAu/2dAmEkzp pGRsJW+URdz9zY+VdpYUy+1wWmKzPble3WtHG0G6FJvf4r2nMRuy8pDAUB2UfgNT nZxPm2irDXlJmjvlUvWwjrSIEgwYCuoUUnAXJQw7E2Z+WMwaWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhQA2ohy8SXzafQ9A076hJzdsIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMmNhNWJjNGQtOWMyZi0z MGZmLTliNzctMmJhNjhjNGRlMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAGTTx853fXBwsyPF8Vawpp7NAUAe99CTowOOowTi51OYRD9eRRGrFf 2CFYTNQSEBu3u/QntYZYQQ4E8YeZObhvY9CxGOluPFnkpo18EsywhoTDQhVkAjHF yYtNpfO8PRK4OgR+twhUCR3LdR3R8UhIYSKbaDDMQrQocEpoajBsauPNlCnXWw2W O4/K1cxtuiH5FWzCYREccjd5Xssc8zctSTn049eLrZD44nhAeQhik82LwlntCeLg hJT1mIfy1RAzXNZNuFWf9RC//uM7Bvwyl5KfQNVuMjwzNv9GOR2Q5yoMQQ5vT07q e7bxU6Wo1r0kTrqbOsDp+8cbMw9A1ak= -----END CERTIFICATE-----Generated at Sat Jun 6 18:25:43 2026 by rpki-client