$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa File: 3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa (raw, json) Hash identifier: j6uwxTq8W81/HYye2g8ulqwC+svHcKVwt4OYEbqJp+s= Subject key identifier: F7:B6:45:53:44:A8:75:DC:87:2B:A9:CD:01:05:EA:D9:04:9E:A7:E2 Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Certificate serial: 010D0C9F4328584D905A9F8FC6EC020CF3CEFF00 Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 22351 IP address blocks: 66.205.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9f:8f:c6:ec:02:0c:f3:ce:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=ed6ca9ec-2126-4b60-a0dd-7bba32ddd83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c4:2f:21:f5:eb:9d:78:ce:bd:89:78:17:ff: 59:4f:1e:8b:72:83:ca:f7:5e:b7:9b:fd:a0:4c:f2: fc:1c:48:15:fb:3e:94:ad:d7:37:d4:03:31:40:a8: 52:3f:51:85:7a:09:0f:ce:86:28:0e:65:c8:1d:bf: 23:2e:a4:9d:56:af:44:4b:49:7e:06:63:65:6c:ac: 67:85:11:be:39:76:0f:d7:1e:26:0c:ab:c9:ae:c3: 67:c4:88:f1:aa:b3:ca:4e:49:f2:b4:01:4d:26:5e: 8d:63:b4:a1:cb:f0:99:3b:08:6c:01:45:19:af:d0: e4:9e:1e:41:9e:68:bb:d6:a2:fa:8a:6e:60:43:c6: 48:60:68:40:d3:01:29:ee:45:9d:99:0e:cc:4d:2a: 3b:bd:ef:42:86:29:25:8e:6b:99:63:37:a0:e5:c3: 91:b8:51:6d:a3:bc:a3:ab:6d:9a:4a:fd:30:2b:c5: a6:c8:83:7d:b8:c1:b4:c1:f9:49:06:51:24:8a:97: ac:44:e9:52:84:07:6f:46:2a:f2:27:8f:1c:a3:4a: 5a:4b:da:c4:59:b9:1e:e8:99:6c:b2:01:bf:44:e4: ef:46:22:b1:8b:a0:d5:c6:bc:a2:46:f4:a5:28:f5: 0e:32:ec:6f:68:3f:23:56:12:c4:14:d7:0d:09:75: b4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B6:45:53:44:A8:75:DC:87:2B:A9:CD:01:05:EA:D9:04:9E:A7:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl X509v3 Authority Key Identifier: keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer sbgp-ipAddrBlock: critical IPv4: 66.205.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:2f:c9:c8:76:35:6b:8e:43:4c:fb:3d:e2:a7:3e:51:94:5c: 43:8d:93:61:fc:c3:af:0b:52:60:e9:4e:07:35:af:90:01:b9: 9d:4d:37:37:f3:7a:f5:c1:d7:e1:2c:4f:3c:9c:f0:61:a9:b5: d4:59:dc:b8:21:44:85:45:ca:4f:05:af:30:08:4f:7a:ce:72: a7:2f:1b:0d:35:77:c7:3c:2a:70:ca:90:ef:ef:98:b6:ba:c8: 5e:6f:cc:dd:dd:da:71:9d:a5:cd:4a:58:86:04:9c:8b:4f:be: d5:72:30:76:93:6c:73:89:d6:bb:1d:40:77:3a:2f:32:dc:e3: 4f:92:c1:7b:47:b4:7e:ea:2f:f9:99:dd:55:5d:8a:f0:5d:b6: 3c:6d:fd:e1:69:bb:0d:85:33:ce:67:27:77:79:e4:fb:91:1b: 0c:b8:0c:1b:e9:1c:02:f4:58:6b:c6:1e:fd:5f:22:67:8d:1e: da:c7:ef:d4:f4:71:ca:97:19:d2:ca:8f:cc:fa:d6:16:f0:b3: 4a:aa:b1:ba:7a:d1:00:ec:33:47:9e:f9:67:98:c4:24:aa:b7: 61:06:51:af:8f:14:2c:40:82:86:34:ba:3b:7f:23:bf:43:40: b7:0e:1f:20:3c:71:7f:17:6f:83:5c:4e:b9:d0:3a:1f:99:c5: da:0c:6d:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWp+PxuwCDPPO/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm YTUzMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZWQ2Y2E5ZWMtMjEyNi00YjYwLWEwZGQtN2JiYTMyZGRkODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMQvIfXrnXjOvYl4F/9ZTx6LcoPK9163m/2g TPL8HEgV+z6Urdc31AMxQKhSP1GFegkPzoYoDmXIHb8jLqSdVq9ES0l+BmNlbKxn hRG+OXYP1x4mDKvJrsNnxIjxqrPKTknytAFNJl6NY7Shy/CZOwhsAUUZr9Dknh5B nmi71qL6im5gQ8ZIYGhA0wEp7kWdmQ7MTSo7ve9ChikljmuZYzeg5cORuFFto7yj q22aSv0wK8WmyIN9uMG0wflJBlEkipesROlShAdvRiryJ48co0paS9rEWbke6Jls sgG/ROTvRiKxi6DVxryiRvSlKPUOMuxvaD8jVhLEFNcNCXW0kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe2RVNEqHXchyupzQEF6tkEnqfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0 YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvM2QzYTA3MmEtMjFkZS0z ZTVhLThlMmYtODIxM2U0ODkwM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3 NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5 ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQs0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKovych2NWuOQ0z7PeKnPlGUXEONk2H8w68LUmDpTgc1r5ABuZ1NNzfz evXB1+EsTzyc8GGptdRZ3LghRIVFyk8FrzAIT3rOcqcvGw01d8c8KnDKkO/vmLa6 yF5vzN3d2nGdpc1KWIYEnItPvtVyMHaTbHOJ1rsdQHc6LzLc40+SwXtHtH7qL/mZ 3VVdivBdtjxt/eFpuw2FM85nJ3d55PuRGwy4DBvpHAL0WGvGHv1fImeNHtrH79T0 ccqXGdLKj8z61hbws0qqsbp60QDsM0ee+WeYxCSqt2EGUa+PFCxAgoY0ujt/I79D QLcOHyA8cX8Xb4NcTrnQOh+ZxdoMbXE= -----END CERTIFICATE-----Generated at Wed May 13 06:42:31 2026 by rpki-client