$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/41f7e607-4964-3cbf-a181-8113622981e9.roa File: 41f7e607-4964-3cbf-a181-8113622981e9.roa (raw, json) Hash identifier: 6ouuqpzxm9uuL9W4im1rkUtL3dov7Ch9LJiYZy36RCE= Subject key identifier: E7:34:24:61:52:BA:F3:71:91:6B:C9:BB:48:23:CB:3C:AB:0D:C9:15 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584DA6B012F8C970ED2C5F9D8960 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/41f7e607-4964-3cbf-a181-8113622981e9.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 22808 IP address blocks: 66.112.128.0/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:12:f8:c9:70:ed:2c:5f:9d:89:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=50ba8131-209b-406d-a165-fc353ea8e44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:86:b0:53:7a:3e:f6:b4:21:5c:1e:a2:c1: 1e:ea:72:5f:e8:16:93:f1:97:01:d8:d1:74:3b:0c: a3:4b:1b:56:89:dd:48:39:c2:5d:9d:22:c3:8c:ce: 74:2a:02:99:f0:96:19:f1:e4:17:24:00:5f:01:5a: 58:d5:07:d8:3f:cd:b4:0d:ae:ba:6a:19:e2:0a:18: 06:7e:e7:80:33:e3:7d:06:b2:39:e5:16:2a:0b:d5: b0:90:ae:e2:4c:2e:21:9a:21:37:ca:04:ee:00:76: be:ca:fe:fd:46:9c:47:79:20:27:2c:17:41:c6:c8: d2:f8:cf:0f:2d:ff:98:5c:c7:7d:31:4b:c8:b8:4a: aa:93:ca:67:f8:9d:35:f0:f1:6c:f4:b4:de:6a:b0: 5e:58:83:cc:40:45:20:81:97:0e:60:fe:83:bb:58: 2e:06:ba:15:63:df:3a:a1:65:18:91:1b:cc:65:4d: d9:91:8f:e6:aa:d0:c2:05:5a:cd:4a:b0:db:3b:eb: 79:7e:c9:54:21:36:24:fa:4b:88:0d:a9:be:e7:02: 88:2c:fc:e7:2e:b9:47:17:6d:39:86:b8:d7:2e:a9: f7:ca:81:29:e4:6b:37:0f:b8:19:2c:4e:7c:02:fa: 5e:63:10:8f:e6:34:28:67:f1:a8:3a:40:51:01:75: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:34:24:61:52:BA:F3:71:91:6B:C9:BB:48:23:CB:3C:AB:0D:C9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/41f7e607-4964-3cbf-a181-8113622981e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:d8:b3:ec:c2:ef:d2:39:2a:a4:58:ce:5a:22:bd:f7:5f:aa: ba:36:fd:58:93:06:1c:cb:e5:a7:5e:6a:ce:09:56:cb:73:e0: a1:c7:4e:0c:7d:e0:13:0d:34:f9:30:2f:31:65:0f:dd:71:28: 4a:66:8a:35:39:97:16:63:0c:4d:85:fa:1f:3c:1d:7d:52:dc: e1:18:09:2b:97:a1:c9:5f:95:1e:a0:76:59:31:cb:e6:ab:8e: 0a:e5:66:6c:45:6a:30:91:b5:60:c5:69:07:66:e9:6b:bb:4c: 2a:01:85:38:50:53:ea:7a:af:10:7d:4d:ca:0d:98:8f:dc:a8: d1:be:31:59:bd:86:11:85:a4:d5:04:7c:a6:12:ba:13:4e:57: 5d:8b:c4:e2:98:7d:3c:aa:0e:d2:6f:e0:79:b1:9d:3c:68:79: 2c:1e:25:36:da:0e:fa:43:ad:b0:17:40:c5:67:97:d4:30:15: 19:ba:f6:1e:e6:c6:b2:04:76:7e:80:b9:26:29:99:a6:f2:3f: 61:15:04:92:f3:7b:ae:b5:cd:e0:c6:98:8c:f1:4b:c5:66:27: 23:9c:0f:4a:75:83:14:73:5c:3c:47:44:58:7f:4d:d4:ca:27: 60:85:63:fd:0e:b0:99:cb:8d:f2:4b:dc:60:72:94:be:28:39: 1f:33:5f:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2msBL4yXDtLF+diWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NTBiYTgxMzEtMjA5Yi00MDZkLWExNjUtZmMzNTNlYThlNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmiGsFN6Pva0IVweosEe6nJf6BaT8ZcB2NF0 OwyjSxtWid1IOcJdnSLDjM50KgKZ8JYZ8eQXJABfAVpY1QfYP820Da66ahniChgG fueAM+N9BrI55RYqC9WwkK7iTC4hmiE3ygTuAHa+yv79RpxHeSAnLBdBxsjS+M8P Lf+YXMd9MUvIuEqqk8pn+J018PFs9LTearBeWIPMQEUggZcOYP6Du1guBroVY986 oWUYkRvMZU3ZkY/mqtDCBVrNSrDbO+t5fslUITYk+kuIDam+5wKILPznLrlHF205 hrjXLqn3yoEp5Gs3D7gZLE58AvpeYxCP5jQoZ/GoOkBRAXXyYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOc0JGFSuvNxkWvJu0gjyzyrDckVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvNDFmN2U2MDctNDk2NC0z Y2JmLWExODEtODExMzYyMjk4MWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQnCAADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCj2LPswu/SOSqkWM5aIr33X6q6Nv1YkwYcy+WnXmrOCVbLc+Chx04M feATDTT5MC8xZQ/dcShKZoo1OZcWYwxNhfofPB19UtzhGAkrl6HJX5UeoHZZMcvm q44K5WZsRWowkbVgxWkHZulru0wqAYU4UFPqeq8QfU3KDZiP3KjRvjFZvYYRhaTV BHymEroTTlddi8TimH08qg7Sb+B5sZ08aHksHiU22g76Q62wF0DFZ5fUMBUZuvYe 5sayBHZ+gLkmKZmm8j9hFQSS83uutc3gxpiM8UvFZicjnA9KdYMUc1w8R0RYf03U yidghWP9DrCZy43yS9xgcpS+KDkfM19D -----END CERTIFICATE-----Generated at Wed May 13 13:16:20 2026 by rpki-client