$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa File: afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa (raw, json) Hash identifier: 1fDe4gWMeZqBo7/OB+FmFtpx5suByKgViP/HJcrynHs= Subject key identifier: F0:C1:58:8E:73:54:6B:D4:C5:15:4A:7E:D1:8F:0E:48:05:A7:71:A0 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584D8EF559E374B6607276367980 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 398351 IP address blocks: 66.51.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:59:e3:74:b6:60:72:76:36:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=bfa00f83-8fff-430e-a008-edd1fe451fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:da:b8:c6:f5:46:67:18:28:fd:00:7d:39: 48:7a:4e:1a:df:1c:f4:02:b8:ab:99:8b:cc:74:e4: d4:e9:48:cb:2d:85:a2:dc:66:e3:e4:fd:8d:33:42: 3b:92:af:59:a6:b6:15:1a:37:ca:07:1e:50:11:12: 33:e6:18:7b:03:24:4e:f6:dd:08:0a:80:f7:9f:a2: 73:c7:a9:08:26:41:f3:09:76:43:7e:fc:8e:1b:ea: e0:ab:74:88:1e:9f:60:e8:de:e0:af:d4:99:03:c0: 13:8d:f6:b9:5b:60:a0:78:11:30:0d:89:59:1a:cb: e8:44:d8:81:e0:6e:61:d4:ea:98:fc:50:9c:9a:b9: c8:13:a3:77:34:85:8e:f0:95:d6:e7:df:58:78:7f: 71:13:3f:d0:d9:a9:2c:c8:94:03:9f:8a:a2:df:d1: a5:08:7c:5b:01:9f:1a:db:a1:ab:50:db:fb:26:5b: e9:3b:5d:8e:3b:6d:79:9d:44:e5:f2:f2:02:89:c7: 85:fd:4b:4e:b6:04:fe:bf:e8:eb:44:5f:26:15:d2: 94:42:af:70:0c:fa:7d:ad:88:1a:bb:ac:03:84:f6: 9e:d9:dc:31:2a:1f:d6:07:d4:85:9c:ca:d8:10:69: bf:f1:2e:31:d1:80:3e:2b:98:ba:32:6e:59:9f:53: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C1:58:8E:73:54:6B:D4:C5:15:4A:7E:D1:8F:0E:48:05:A7:71:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 66.51.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:52:c2:0c:7c:f2:51:d4:aa:bc:6d:15:31:aa:6a:1a:9e:d4: f8:b5:b2:6d:1b:36:aa:ce:91:83:ce:be:06:f1:60:d0:ba:d8: 64:55:aa:56:86:53:13:98:dd:da:ba:d1:fe:08:d0:42:3f:69: 70:a4:88:25:10:f8:08:22:3e:07:fc:c4:5f:68:0c:27:d1:90: 84:b0:00:6b:da:1e:d1:df:f3:ad:98:0a:7d:2a:02:64:d4:a8: bb:48:0d:29:23:a3:9b:56:96:20:46:35:4e:66:3e:65:e9:9d: e6:5b:f6:07:58:c1:47:7e:26:35:26:76:27:af:e6:e4:ad:17: 4d:8c:55:da:73:93:37:82:69:af:cf:16:9b:fa:40:ed:92:ec: 7e:b8:30:d4:18:31:35:67:48:de:12:6f:49:38:c0:05:40:51: 2c:94:09:07:3f:3f:98:fb:06:9a:fe:f0:97:47:c7:b1:cd:a8: 88:c0:94:bb:fc:22:90:22:09:f9:51:18:98:82:12:65:1d:5f: 5c:33:df:cc:4e:72:d8:d9:2e:77:cf:77:fc:04:59:98:a8:33: ef:c5:a5:8e:f9:fe:f9:4b:e8:20:52:43:a8:da:69:32:45:03: 7a:6c:0b:3f:cc:c2:bb:46:f1:a4:f5:7f:51:25:3d:8c:84:31: 8e:cf:b1:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9VnjdLZgcnY2eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YmZhMDBmODMtOGZmZi00MzBlLWEwMDgtZWRkMWZlNDUxZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc7auMb1RmcYKP0AfTlIek4a3xz0ArirmYvM dOTU6UjLLYWi3Gbj5P2NM0I7kq9ZprYVGjfKBx5QERIz5hh7AyRO9t0ICoD3n6Jz x6kIJkHzCXZDfvyOG+rgq3SIHp9g6N7gr9SZA8ATjfa5W2CgeBEwDYlZGsvoRNiB 4G5h1OqY/FCcmrnIE6N3NIWO8JXW599YeH9xEz/Q2aksyJQDn4qi39GlCHxbAZ8a 26GrUNv7JlvpO12OO215nUTl8vICiceF/UtOtgT+v+jrRF8mFdKUQq9wDPp9rYga u6wDhPae2dwxKh/WB9SFnMrYEGm/8S4x0YA+K5i6Mm5Zn1PRXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDBWI5zVGvUxRVKftGPDkgFp3GgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvYWZjYzE5NjMtMGI1Yi0z NjY5LThkNWQtNDg1Yjc3YWEzYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZSwgx88lHUqrxtFTGqahqe1Pi1sm0bNqrOkYPOvgbxYNC62GRVqlaG UxOY3dq60f4I0EI/aXCkiCUQ+AgiPgf8xF9oDCfRkISwAGvaHtHf862YCn0qAmTU qLtIDSkjo5tWliBGNU5mPmXpneZb9gdYwUd+JjUmdiev5uStF02MVdpzkzeCaa/P Fpv6QO2S7H64MNQYMTVnSN4Sb0k4wAVAUSyUCQc/P5j7Bpr+8JdHx7HNqIjAlLv8 IpAiCflRGJiCEmUdX1wz38xOctjZLnfPd/wEWZioM+/FpY75/vlL6CBSQ6jaaTJF A3psCz/MwrtG8aT1f1ElPYyEMY7Psc4= -----END CERTIFICATE-----Generated at Thu Apr 23 02:46:51 2026 by rpki-client