$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa File: 3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa (raw, json) Hash identifier: Yfcaawf/SjWvF+cQCuXSfgqCquxkw8GGbaPiO6JKRlE= Subject key identifier: 43:76:8B:BE:21:8A:E9:F9:BE:B0:A0:26:C4:A4:E7:9D:C2:82:F6:3A Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F4328584D9E5007860FC089A9398E6000 Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 64236 IP address blocks: 66.181.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:07:86:0f:c0:89:a9:39:8e:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=704ea4ad-7f34-45ac-80b6-0226fd1767bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ea:00:d7:79:86:dc:7e:0e:dc:59:04:5d:d3: ec:b2:ed:d9:cf:25:33:17:27:e7:a8:e0:a0:3e:c9: bd:fa:f4:72:f6:60:20:c6:c9:ee:25:23:d4:3f:4b: c0:2f:ef:b5:bf:4b:7f:db:1a:e8:b3:f9:95:68:ad: 02:fb:00:1b:e6:09:0a:30:a9:a8:16:89:83:51:c6: f1:f0:ea:94:08:46:28:7b:df:6d:04:10:72:1a:8c: f0:ce:14:85:ca:e7:69:42:b7:db:b8:49:a2:4c:77: 3e:bf:a3:22:0f:b3:8e:bd:ca:72:e7:fa:b2:29:c4: ea:e8:44:b3:05:99:02:f4:83:b4:28:9e:61:24:7d: ae:84:34:d6:0e:97:0a:c2:ee:cb:3c:92:62:c2:5a: 66:e9:7b:49:67:5f:5e:20:6c:ce:26:46:e6:11:0a: 00:c2:23:41:14:00:37:a0:71:71:79:b4:d9:2d:ca: 24:c1:1a:70:7c:f8:8a:4f:0f:a9:6e:98:11:35:4b: 94:96:66:24:8c:c5:4f:b2:a5:ec:01:20:eb:e0:c1: 52:67:64:d9:9d:26:b6:24:6e:60:f7:01:63:b4:e6: 56:7b:28:b6:5a:cf:88:9c:cc:fa:4a:a8:e6:67:08: f5:d9:b9:41:6b:f8:47:10:83:31:f6:3c:64:50:b0: 9a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:76:8B:BE:21:8A:E9:F9:BE:B0:A0:26:C4:A4:E7:9D:C2:82:F6:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv4: 66.181.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8d:a8:8a:c0:28:8e:41:91:f1:ee:21:a8:c4:4d:e9:eb:52: 1e:1f:ad:ca:e3:45:af:bb:8d:ff:46:a8:00:00:2b:5c:41:9a: 3b:ee:3b:43:22:55:4e:3f:e6:5c:22:22:10:3b:0e:95:2b:2e: dc:dd:d6:71:4b:2f:0c:a1:f7:41:df:4f:4c:14:7c:5a:c7:a4: c4:bf:98:0d:3b:2d:f4:ea:fe:ea:3c:6b:ee:02:d8:33:a5:6c: 73:9e:6c:83:84:9b:1a:70:7d:94:49:a4:72:e8:8b:9a:5b:96: bc:59:cc:0d:7d:dc:5b:7c:f1:7e:d9:8e:76:b1:64:75:6a:35: 9f:81:a4:5b:53:4f:6d:da:b7:9b:47:ee:39:1f:d0:1e:10:22: f7:cd:d8:1b:5c:db:97:8c:d5:49:48:f1:6e:02:6b:9e:3d:b5: 89:64:cf:cb:48:41:2b:da:d4:e1:00:ec:5a:19:be:a3:71:d9: 40:58:56:2a:06:13:12:26:13:68:8e:c9:52:54:76:9a:84:34: 89:8c:77:3b:57:e1:b7:ce:54:52:9f:9e:8b:bc:26:99:79:cb: 89:b6:03:68:43:cf:01:2f:9c:9a:b9:e8:58:bd:35:f4:57:ce: a1:fb:3e:a0:ee:ac:c1:7e:d2:79:bd:76:f3:f9:0b:44:b0:43: 7f:bd:f9:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAeGD8CJqTmOYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NzA0ZWE0YWQtN2YzNC00NWFjLTgwYjYtMDIyNmZkMTc2N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieoA13mG3H4O3FkEXdPssu3ZzyUzFyfnqOCg Psm9+vRy9mAgxsnuJSPUP0vAL++1v0t/2xros/mVaK0C+wAb5gkKMKmoFomDUcbx 8OqUCEYoe99tBBByGozwzhSFyudpQrfbuEmiTHc+v6MiD7OOvcpy5/qyKcTq6ESz BZkC9IO0KJ5hJH2uhDTWDpcKwu7LPJJiwlpm6XtJZ19eIGzOJkbmEQoAwiNBFAA3 oHFxebTZLcokwRpwfPiKTw+pbpgRNUuUlmYkjMVPsqXsASDr4MFSZ2TZnSa2JG5g 9wFjtOZWeyi2Ws+InMz6SqjmZwj12blBa/hHEIMx9jxkULCatwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN2i74hiun5vrCgJsSk553CgvY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvM2JkMjNhNjctNmI0YS0z ZDY4LTgyNTMtZmQ0ODVjOWY2ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQrUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiNqIrAKI5BkfHuIajETenrUh4frcrjRa+7jf9GqAAAK1xBmjvuO0Mi VU4/5lwiIhA7DpUrLtzd1nFLLwyh90HfT0wUfFrHpMS/mA07LfTq/uo8a+4C2DOl bHOebIOEmxpwfZRJpHLoi5pblrxZzA193Ft88X7ZjnaxZHVqNZ+BpFtTT23at5tH 7jkf0B4QIvfN2Btc25eM1UlI8W4Ca549tYlkz8tIQSva1OEA7FoZvqNx2UBYVioG ExImE2iOyVJUdpqENImMdztX4bfOVFKfnou8Jpl5y4m2A2hDzwEvnJq56Fi9NfRX zqH7PqDurMF+0nm9dvP5C0SwQ3+9+W0= -----END CERTIFICATE-----Generated at Mon Apr 27 13:54:14 2026 by rpki-client