$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa File: a8735f80-d635-36e0-a042-89c554b7b169.roa (raw, json) Hash identifier: npZjt8c5/BFVDMLovRXkPwzDJBOlE2HR6Om/vVDk9Jo= Subject key identifier: 4A:06:7E:79:17:AF:46:20:0C:9F:0E:D7:D2:15:E4:CA:65:8A:2E:D6 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584DA6B0130889EA9AABF3B23B80 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 22808 IP address blocks: 66.112.128.16/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:13:08:89:ea:9a:ab:f3:b2:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=f8ca0e77-59b8-43a8-825b-ed887172a358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:00:44:13:d9:1f:67:1c:d6:81:7c:d4:e1: 26:94:6a:a1:14:90:af:56:0f:6e:b5:72:52:e8:4e: 93:b5:3b:37:d1:c8:92:b3:91:e5:d0:ab:82:89:2c: 09:62:e6:e1:94:50:80:83:c8:cb:b3:f3:07:75:21: b9:b6:75:c0:8d:a4:ee:56:40:ae:8f:79:8f:ea:16: c1:38:5b:fd:4a:f6:b2:12:95:14:d5:69:b1:d2:48: 9c:72:d3:39:d1:eb:0c:d9:e3:9a:4b:85:b2:5e:97: 54:f7:94:6f:3c:31:91:f6:2d:1e:5d:70:13:bb:d2: 2a:90:a3:a6:94:56:38:82:3a:9c:41:84:3b:5b:79: 05:85:9b:65:7a:32:cd:99:7a:15:7b:1d:23:9a:25: ae:18:61:82:34:cb:d6:8a:82:b0:8b:72:61:30:d0: 68:dd:60:5a:97:a3:66:03:75:55:a5:62:b7:49:c9: 17:2a:8e:72:08:66:bc:8c:30:2f:b1:36:57:9f:28: d1:65:bb:a5:51:4e:aa:42:6d:75:16:cc:b8:7a:d2: 50:60:71:b3:a7:ac:2c:0c:01:d9:01:eb:af:b3:5c: 57:85:90:47:43:f7:d3:3b:6f:0e:53:15:8d:99:32: 99:31:d6:15:2b:53:e0:d4:12:d4:0c:1c:60:75:b3: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:06:7E:79:17:AF:46:20:0C:9F:0E:D7:D2:15:E4:CA:65:8A:2E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.16/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:64:76:20:57:05:43:1a:d5:54:d3:79:c9:c3:0d:09:fb:c3: 17:b8:d7:5d:ea:89:e9:14:be:85:14:7e:d9:72:98:3b:2c:01: ee:30:0f:c5:08:bc:15:21:bb:ee:bc:fe:80:46:13:80:bc:50: 76:57:25:87:0e:f9:8e:81:b7:08:df:5e:12:69:ef:71:85:2b: 8e:78:92:9b:0d:de:e5:98:2a:a9:27:31:6d:78:2a:22:11:1c: 75:4e:fc:50:f4:57:24:f2:8c:13:5d:35:d4:38:9c:20:92:50: d4:78:75:64:7c:5b:5e:ce:3b:2a:11:f2:c9:24:eb:8c:ba:4c: 80:5b:b5:64:2e:20:fd:01:21:a2:89:a6:f2:f3:13:3b:c8:fa: 20:ae:ab:65:3d:c5:79:1f:14:07:bc:2c:16:24:b2:ad:03:31: 79:0b:cc:ca:97:fe:04:87:55:d9:63:be:25:1b:a7:24:d8:19: 7d:7e:e9:6a:50:8b:b8:5a:da:b8:d7:53:d8:c1:ab:bc:48:f1: 9d:28:9a:eb:39:40:2b:70:38:82:55:10:15:65:bc:6c:6d:47: 0c:48:4f:f6:10:96:41:60:b1:5f:2e:aa:3d:9b:3a:3c:37:08: a0:88:88:b2:0d:ea:93:f6:bd:33:96:94:07:91:87:4e:ee:b1: e0:f5:f3:8c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2msBMIieqaq/OyO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZjhjYTBlNzctNTliOC00M2E4LTgyNWItZWQ4ODcxNzJhMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9wARBPZH2cc1oF81OEmlGqhFJCvVg9utXJS 6E6TtTs30ciSs5Hl0KuCiSwJYubhlFCAg8jLs/MHdSG5tnXAjaTuVkCuj3mP6hbB OFv9SvayEpUU1Wmx0kicctM50esM2eOaS4WyXpdU95RvPDGR9i0eXXATu9IqkKOm lFY4gjqcQYQ7W3kFhZtlejLNmXoVex0jmiWuGGGCNMvWioKwi3JhMNBo3WBal6Nm A3VVpWK3SckXKo5yCGa8jDAvsTZXnyjRZbulUU6qQm11Fsy4etJQYHGzp6wsDAHZ Aeuvs1xXhZBHQ/fTO28OUxWNmTKZMdYVK1Pg1BLUDBxgdbMbXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEoGfnkXr0YgDJ8O19IV5Mplii7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvYTg3MzVmODAtZDYzNS0z NmUwLWEwNDItODljNTU0YjdiMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQnCAEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDXZHYgVwVDGtVU03nJww0J+8MXuNdd6onpFL6FFH7Zcpg7LAHuMA/F CLwVIbvuvP6ARhOAvFB2VyWHDvmOgbcI314Sae9xhSuOeJKbDd7lmCqpJzFteCoi ERx1TvxQ9Fck8owTXTXUOJwgklDUeHVkfFtezjsqEfLJJOuMukyAW7VkLiD9ASGi iaby8xM7yPogrqtlPcV5HxQHvCwWJLKtAzF5C8zKl/4Eh1XZY74lG6ck2Bl9fulq UIu4Wtq411PYwau8SPGdKJrrOUArcDiCVRAVZbxsbUcMSE/2EJZBYLFfLqo9mzo8 NwigiIiyDeqT9r0zlpQHkYdO7rHg9fOM -----END CERTIFICATE-----Generated at Wed May 13 11:37:23 2026 by rpki-client