$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/1e25a7f6-eabd-3b5e-b3c3-4c12f832117a.roa File: 1e25a7f6-eabd-3b5e-b3c3-4c12f832117a.roa (raw, json) Hash identifier: 8aPLy+XNT9LsGxhzaRBoJHyOWX68tk00aCDwwcMe90k= Subject key identifier: F8:4A:F3:D0:1D:E4:59:13:8C:FE:2F:A9:A2:E8:EC:DF:74:31:6A:40 Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584D98278255141218522A189800 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/1e25a7f6-eabd-3b5e-b3c3-4c12f832117a.roa Signing time: Wed 22 Apr 2026 20:04:03 +0000 ROA not before: Wed 22 Apr 2026 20:04:03 +0000 ROA not after: Tue 21 Jul 2026 20:04:03 +0000 asID: 21547 IP address blocks: 64.140.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:27:82:55:14:12:18:52:2a:18:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Apr 22 20:04:03 2026 GMT Not After : Jul 21 20:04:03 2026 GMT Subject: CN=55294947-38b8-4930-b337-4464e4400418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5a:3d:e7:0d:01:00:9b:42:45:b9:51:1d:da: 72:42:8e:aa:08:41:ba:d5:03:7c:8d:bd:37:63:ed: a5:a0:88:1d:ea:25:cf:a9:39:e4:2c:8c:18:d0:b0: c3:41:f7:a0:90:74:4f:5a:d0:1a:70:d8:6a:80:dc: 60:9a:32:b4:5b:e5:e2:40:88:ec:a8:a0:be:87:4b: 74:72:ed:26:4d:65:77:4a:75:11:da:40:d1:ff:d4: fc:65:b1:e0:75:16:f0:6d:6d:4c:f4:f7:ba:b9:c1: 4c:a2:fe:8a:d4:19:a9:41:29:29:3a:50:33:b6:fc: 70:87:ed:a3:cd:f7:52:13:43:8f:c5:cd:a7:89:77: 86:01:47:89:6f:cd:96:cc:80:fd:08:7e:d8:ac:a2: 7c:13:cb:dd:5c:4c:2f:71:72:38:b7:ad:48:9c:2c: b2:18:02:99:ee:50:9a:9e:73:09:04:8c:dc:5e:1a: 02:b0:1b:79:03:1f:ea:5b:42:29:f8:49:59:a7:eb: 15:b7:e3:cf:95:e1:af:c1:35:56:c5:15:fb:d6:c8: 9e:94:37:c0:2a:1f:fc:46:52:a2:98:a0:b3:7f:f6: ab:ef:a8:20:16:e1:f1:1c:4d:0c:c9:ed:d3:74:ca: 19:52:33:98:95:de:28:fb:57:ba:49:d7:90:f5:5f: e2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4A:F3:D0:1D:E4:59:13:8C:FE:2F:A9:A2:E8:EC:DF:74:31:6A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/1e25a7f6-eabd-3b5e-b3c3-4c12f832117a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 64.140.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c7:a4:79:52:92:ed:63:f7:8b:80:a1:44:f8:02:fa:99:ed: 72:b8:38:47:e8:e0:36:d7:59:03:c8:3f:fa:3f:b9:a0:dd:1f: 30:d5:b9:4c:67:8d:67:e2:d6:28:a4:c5:60:e3:0f:2e:f3:67: f5:23:c9:db:9c:7c:1a:05:35:3e:21:5c:85:c3:42:3a:1b:f1: cc:57:64:ce:e0:03:6f:54:24:1c:7a:67:99:06:af:9c:93:0b: 70:1f:69:73:2c:cb:c2:c6:51:68:81:e5:52:24:78:34:9d:65: a1:4a:5e:b3:94:40:09:2f:08:70:cf:f3:09:df:84:2a:34:17: ff:78:eb:da:17:c2:f8:b4:b0:ba:a7:e8:c1:1a:a3:77:01:17: 87:cb:1e:7c:5c:0d:bf:80:63:34:1a:73:8a:90:e1:bb:46:f2: 64:a9:c4:97:04:83:2f:e4:bf:0b:b9:d8:1f:8d:72:92:b1:92: 17:45:4d:65:8e:7f:4b:bb:c9:6b:a7:86:4b:89:99:a3:1b:2a: 4b:14:c4:22:e5:cb:33:fa:f4:6a:4f:af:9b:21:aa:da:6f:ca: 73:53:8b:97:08:af:9a:9e:36:51:d7:38:a2:0a:5a:9b:2c:3b: e6:f1:5e:f3:13:1d:c8:e3:89:c4:b6:5b:69:3b:56:9d:c0:8e: 90:62:0f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YJ4JVFBIYUioYmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDQyMjIwMDQwM1oXDTI2MDcyMTIwMDQwM1owLzEtMCsGA1UEAxMk NTUyOTQ5NDctMzhiOC00OTMwLWIzMzctNDQ2NGU0NDAwNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklo95w0BAJtCRblRHdpyQo6qCEG61QN8jb03 Y+2loIgd6iXPqTnkLIwY0LDDQfegkHRPWtAacNhqgNxgmjK0W+XiQIjsqKC+h0t0 cu0mTWV3SnUR2kDR/9T8ZbHgdRbwbW1M9Pe6ucFMov6K1BmpQSkpOlAztvxwh+2j zfdSE0OPxc2niXeGAUeJb82WzID9CH7YrKJ8E8vdXEwvcXI4t61InCyyGAKZ7lCa nnMJBIzcXhoCsBt5Ax/qW0Ip+ElZp+sVt+PPleGvwTVWxRX71sielDfAKh/8RlKi mKCzf/ar76ggFuHxHE0Mye3TdMoZUjOYld4o+1e6SdeQ9V/iVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhK89Ad5FkTjP4vqaLo7N90MWpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvMWUyNWE3ZjYtZWFiZC0z YjVlLWIzYzMtNGMxMmY4MzIxMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQIzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPHpHlSku1j94uAoUT4AvqZ7XK4OEfo4DbXWQPIP/o/uaDdHzDVuUxn jWfi1iikxWDjDy7zZ/UjyducfBoFNT4hXIXDQjob8cxXZM7gA29UJBx6Z5kGr5yT C3AfaXMsy8LGUWiB5VIkeDSdZaFKXrOUQAkvCHDP8wnfhCo0F/9469oXwvi0sLqn 6MEao3cBF4fLHnxcDb+AYzQac4qQ4btG8mSpxJcEgy/kvwu52B+NcpKxkhdFTWWO f0u7yWunhkuJmaMbKksUxCLlyzP69GpPr5shqtpvynNTi5cIr5qeNlHXOKIKWpss O+bxXvMTHcjjicS2W2k7Vp3AjpBiD9E= -----END CERTIFICATE-----Generated at Wed May 13 14:09:23 2026 by rpki-client