$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa File: db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa (raw, json) Hash identifier: PPoYbO6dq+VEGJPvYAcETcyP//z7G38OgzR+cGO0chk= Subject key identifier: 5B:BE:5A:66:8F:55:10:BB:1D:5E:31:9C:6B:10:AB:29:F8:BC:EE:56 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584DA6B00E4B509AC424631B7C80 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 22808 IP address blocks: 66.112.128.8/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0e:4b:50:9a:c4:24:63:1b:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=9f284104-55bf-43d9-8e06-997913526ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:13:84:1d:c4:42:8f:e0:ee:d1:2d:7f:46:8a: 15:75:f4:c2:f6:ef:d4:04:b2:7a:96:39:6d:74:f6: 7d:ac:df:f5:58:78:94:e8:ef:a3:c1:dc:cd:1b:b4: 7c:ab:98:23:40:56:a8:a1:dd:91:d3:72:20:3c:3a: ea:21:b0:9c:c1:b0:25:07:97:02:18:d3:54:45:09: a5:b8:5b:35:57:f3:3e:93:39:9d:56:fc:87:d4:fd: b0:5d:d4:5d:57:cb:55:2f:75:63:cd:f0:c7:d5:b7: 44:85:c7:80:ef:d8:e0:5c:cb:e0:73:79:99:ea:b6: 17:37:94:a2:d3:6e:30:63:dc:05:57:4f:c4:f9:98: fb:80:04:73:63:7f:49:32:1a:af:3e:b3:d5:d0:51: a1:ac:b8:4c:04:88:49:ec:15:69:fe:3e:b4:96:57: b4:36:c6:f4:bd:59:33:5b:d8:9f:e8:b5:98:f5:7c: 2b:7a:0e:a2:12:86:a3:46:fd:db:41:13:d8:51:ca: dd:52:2d:f6:4f:ca:00:69:2e:d6:0e:ac:62:e8:16: a3:28:ec:84:6d:7f:04:60:d9:15:bb:cf:e3:db:75: 2a:43:ad:7b:72:e7:b0:12:1e:cc:7d:a1:73:75:c9: 1b:0f:ab:4d:40:49:00:1d:13:4e:35:c1:39:24:44: 26:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BE:5A:66:8F:55:10:BB:1D:5E:31:9C:6B:10:AB:29:F8:BC:EE:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.8/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ec:ca:80:fb:f9:c7:ed:8b:d7:01:ee:97:24:11:05:c2:ce: 47:5c:89:20:85:78:d3:43:df:92:1a:9f:fc:5c:c2:de:bd:b0: d8:14:c0:5e:e0:3f:ab:22:47:70:ac:49:eb:06:69:f6:9d:d2: a1:63:97:d9:f1:57:d4:8f:de:65:15:a3:9c:ea:67:90:08:a6: 5a:52:ed:90:a5:a2:a3:d8:cc:bc:27:30:77:3e:cf:d5:ce:f5: 3e:7a:61:d4:c5:af:4b:de:d8:78:f3:06:84:ef:6a:e3:ef:f1: e3:6c:21:0c:da:9e:cf:c7:44:85:80:07:fd:77:77:64:81:9a: 1a:9d:9b:6b:29:d9:5d:85:7f:21:da:60:36:95:28:b6:db:bd: 3a:2c:92:25:f6:e9:b1:bf:95:28:ff:85:18:ab:9e:5c:29:3e: 18:2c:72:7d:57:59:14:fa:a6:5b:8f:71:13:b8:89:f1:58:f1: b6:c9:bb:84:fb:3e:20:f7:7b:95:34:99:b2:e5:ee:cf:b3:3c: 1a:01:26:55:8b:43:54:97:c1:22:47:bb:79:64:1a:3a:69:40: c4:5d:44:c3:93:84:4e:37:a6:f1:af:3c:56:c1:24:6a:40:3c: 24:bf:a1:b8:f9:0e:d4:8e:a6:bf:cd:fe:ce:91:ae:e6:ee:7b: c5:a2:bc:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2msA5LUJrEJGMbfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk OWYyODQxMDQtNTViZi00M2Q5LThlMDYtOTk3OTEzNTI2ZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhOEHcRCj+Du0S1/RooVdfTC9u/UBLJ6ljlt dPZ9rN/1WHiU6O+jwdzNG7R8q5gjQFaood2R03IgPDrqIbCcwbAlB5cCGNNURQml uFs1V/M+kzmdVvyH1P2wXdRdV8tVL3VjzfDH1bdEhceA79jgXMvgc3mZ6rYXN5Si 024wY9wFV0/E+Zj7gARzY39JMhqvPrPV0FGhrLhMBIhJ7BVp/j60lle0Nsb0vVkz W9if6LWY9Xwreg6iEoajRv3bQRPYUcrdUi32T8oAaS7WDqxi6BajKOyEbX8EYNkV u8/j23UqQ617cuewEh7MfaFzdckbD6tNQEkAHRNONcE5JEQm2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFu+WmaPVRC7HV4xnGsQqyn4vO5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZGIwYmUzNmMtZGJiYi0z NWIyLWFhODEtZTg0MjE2M2EyYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQnCACDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBS7MqA+/nH7YvXAe6XJBEFws5HXIkghXjTQ9+SGp/8XMLevbDYFMBe 4D+rIkdwrEnrBmn2ndKhY5fZ8VfUj95lFaOc6meQCKZaUu2QpaKj2My8JzB3Ps/V zvU+emHUxa9L3th48waE72rj7/HjbCEM2p7Px0SFgAf9d3dkgZoanZtrKdldhX8h 2mA2lSi22706LJIl9umxv5Uo/4UYq55cKT4YLHJ9V1kU+qZbj3ETuInxWPG2ybuE +z4g93uVNJmy5e7PszwaASZVi0NUl8EiR7t5ZBo6aUDEXUTDk4RON6bxrzxWwSRq QDwkv6G4+Q7Ujqa/zf7Oka7m7nvForx8 -----END CERTIFICATE-----Generated at Wed May 13 09:10:49 2026 by rpki-client