$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf2a1e6b-9186-3a73-92b3-1ca2335a1050.roa File: cf2a1e6b-9186-3a73-92b3-1ca2335a1050.roa (raw, json) Hash identifier: ZT4V5dfKhhEIlo89Mhe63EMIeR1duEh9VoyQQbDIddA= Subject key identifier: 41:A0:FB:39:4C:86:87:4B:1E:2B:C3:4D:D0:65:E6:F3:09:D0:CB:52 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D879B1E0F1401EC4485306780 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf2a1e6b-9186-3a73-92b3-1ca2335a1050.roa Signing time: Thu 16 Apr 2026 21:48:15 +0000 ROA not before: Thu 16 Apr 2026 21:48:15 +0000 ROA not after: Wed 15 Jul 2026 21:48:15 +0000 asID: 0 IP address blocks: 66.189.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:9b:1e:0f:14:01:ec:44:85:30:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Apr 16 21:48:15 2026 GMT Not After : Jul 15 21:48:15 2026 GMT Subject: CN=26f8e0ee-5101-4e9d-8a77-0a137501f037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:df:8e:3a:fe:c6:6a:d9:24:ec:41:de:3d: 74:bc:e9:88:4a:e3:a0:ba:d2:d5:51:cc:d8:ba:e6: 9c:e0:6c:53:f2:bb:0a:94:75:64:6f:be:94:d7:69: 3a:39:b1:d1:b3:af:37:bf:79:bc:af:4c:d4:30:61: 32:22:de:e6:0b:5e:89:a1:ee:ca:05:a1:6c:1f:36: be:5d:9c:71:2d:3e:d4:7f:77:45:b0:fd:33:1a:a1: 18:e6:e0:b5:8a:a1:2e:8a:df:39:16:90:04:ba:0a: ff:d2:a3:39:2a:7e:03:44:3c:13:ca:8c:39:3f:79: 49:29:6e:f5:56:83:f0:cc:d5:80:48:a6:e2:29:25: 5d:f4:cc:0f:ff:55:a2:f3:50:16:ee:42:4c:15:93: 59:12:89:86:47:41:bc:08:43:85:40:e2:ec:05:35: aa:55:be:62:fd:ba:de:bf:b9:8b:af:5a:10:58:40: bb:8b:99:03:b4:87:cf:60:be:b8:b4:e8:e6:73:c0: 90:23:e8:9c:03:de:f1:e0:9f:6f:19:70:26:4c:40: 37:ab:67:ff:c8:30:ee:e1:80:92:a0:b6:17:fc:19: 70:e9:32:b1:1e:16:a2:bd:4b:d5:fd:26:51:97:fe: a5:3d:ad:ff:55:8a:6e:74:c9:cd:08:ea:60:b6:d9: a4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A0:FB:39:4C:86:87:4B:1E:2B:C3:4D:D0:65:E6:F3:09:D0:CB:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf2a1e6b-9186-3a73-92b3-1ca2335a1050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.189.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ab:d1:c9:c4:d4:e3:64:2a:18:4b:2b:19:5c:57:cb:72:1a: 05:77:69:03:69:cc:34:27:46:69:de:f7:7c:7d:a9:73:0a:4b: e9:f4:00:3d:96:e8:e4:f2:cf:81:88:13:5b:a9:68:42:f5:29: d7:c9:e4:a7:f4:5b:53:39:31:33:4e:00:48:29:55:a6:23:c5: ea:82:09:78:ca:cc:9c:86:c4:7b:3f:7e:60:60:6c:dc:c4:16: 7d:65:0f:75:51:ac:7a:c3:e6:fb:02:38:f3:ca:83:b6:42:33: 98:74:82:ef:c2:07:10:3a:80:7f:80:58:9e:7a:d9:aa:85:1f: b9:fc:c0:74:64:a8:ae:e8:6b:88:e1:ba:02:f3:08:fa:22:c4: db:ad:d7:e5:23:25:ab:b9:c4:c9:f9:27:66:75:35:91:e5:d7: 90:38:dd:24:17:71:2a:58:78:34:12:50:25:4f:82:fd:69:28: 13:74:bb:ae:8e:ab:7c:c4:9e:b5:a5:b0:16:a7:cf:bd:5c:02: b3:79:84:19:97:47:35:d3:25:fd:0d:2e:60:a3:2f:78:a6:7d: 1d:20:9c:19:7a:98:fa:97:71:46:7c:d2:2c:e4:73:85:ac:92: 55:c6:ae:e1:26:69:a9:b8:9b:c8:17:4b:9b:ae:70:13:a6:f9: 19:03:91:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Hmx4PFAHsRIUwZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDQxNjIxNDgxNVoXDTI2MDcxNTIxNDgxNVowLzEtMCsGA1UEAxMk MjZmOGUwZWUtNTEwMS00ZTlkLThhNzctMGExMzc1MDFmMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwnfjjr+xmrZJOxB3j10vOmISuOgutLVUczY uuac4GxT8rsKlHVkb76U12k6ObHRs683v3m8r0zUMGEyIt7mC16Joe7KBaFsHza+ XZxxLT7Uf3dFsP0zGqEY5uC1iqEuit85FpAEugr/0qM5Kn4DRDwTyow5P3lJKW71 VoPwzNWASKbiKSVd9MwP/1Wi81AW7kJMFZNZEomGR0G8CEOFQOLsBTWqVb5i/bre v7mLr1oQWEC7i5kDtIfPYL64tOjmc8CQI+icA97x4J9vGXAmTEA3q2f/yDDu4YCS oLYX/Blw6TKxHhaivUvV/SZRl/6lPa3/VYpudMnNCOpgttmkTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGg+zlMhodLHivDTdBl5vMJ0MtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2YyYTFlNmItOTE4Ni0z YTczLTkyYjMtMWNhMjMzNWExMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQr2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmr0cnE1ONkKhhLKxlcV8tyGgV3aQNpzDQnRmne93x9qXMKS+n0AD2W 6OTyz4GIE1upaEL1KdfJ5Kf0W1M5MTNOAEgpVaYjxeqCCXjKzJyGxHs/fmBgbNzE Fn1lD3VRrHrD5vsCOPPKg7ZCM5h0gu/CBxA6gH+AWJ562aqFH7n8wHRkqK7oa4jh ugLzCPoixNut1+UjJau5xMn5J2Z1NZHl15A43SQXcSpYeDQSUCVPgv1pKBN0u66O q3zEnrWlsBanz71cArN5hBmXRzXTJf0NLmCjL3imfR0gnBl6mPqXcUZ80izkc4Ws klXGruEmaam4m8gXS5uucBOm+RkDkTk= -----END CERTIFICATE-----Generated at Fri Apr 17 12:43:06 2026 by rpki-client