$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/36872929-4860-33a1-ae87-19f6bebe7ad4.roa File: 36872929-4860-33a1-ae87-19f6bebe7ad4.roa (raw, json) Hash identifier: U6ZHVKMs9YPyDiLa7iBaSOUeAaSUVNpeYlSfylAelc0= Subject key identifier: 91:74:65:C3:8E:14:95:76:71:B0:D3:3C:48:47:4E:E1:A3:15:30:4A Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584D981C88ED68E8C571CB7AAB00 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/36872929-4860-33a1-ae87-19f6bebe7ad4.roa Signing time: Wed 22 Apr 2026 19:41:56 +0000 ROA not before: Wed 22 Apr 2026 19:41:56 +0000 ROA not after: Tue 21 Jul 2026 19:41:56 +0000 asID: 13536 IP address blocks: 66.152.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:1c:88:ed:68:e8:c5:71:cb:7a:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Apr 22 19:41:56 2026 GMT Not After : Jul 21 19:41:56 2026 GMT Subject: CN=3befe03e-6d48-4cab-baf8-895be7b1d043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d8:79:4c:c6:ea:1c:4f:d6:13:d1:e7:be:21: 4d:4d:c0:41:e6:64:d9:b4:77:a8:d9:40:af:a7:d9: 09:7e:32:e4:ee:71:22:fb:68:47:1b:de:26:4a:aa: a3:1b:2f:d6:09:55:21:2b:51:32:6b:e5:08:80:ab: b1:9d:c6:4d:47:c5:e2:11:b8:d8:a9:10:96:06:a0: 68:16:d2:84:8d:ec:3b:31:3d:61:97:94:14:f5:b0: 3b:a7:b0:f9:f1:48:bf:63:bb:a7:7f:f1:63:dd:3f: c3:c4:ac:0f:4f:73:c6:2e:92:87:18:01:d1:2c:c7: 02:14:c0:3c:2a:28:f9:33:2a:79:76:75:a9:40:c3: 8d:ff:2e:a0:a7:1e:99:b1:85:56:30:a7:03:f0:5b: 51:73:91:3c:2f:1b:7c:6b:ce:01:06:1f:53:e7:80: 75:10:9e:96:20:cc:b4:40:92:4b:1a:3a:07:09:77: 73:2b:e5:e3:7f:0f:ca:ac:cd:60:ab:48:04:3c:b6: cf:4e:32:2a:50:3c:fb:65:cd:06:91:0e:a4:87:a1: 6f:88:d7:4a:cd:0b:db:aa:b7:be:b2:f8:00:d4:aa: 98:41:6f:e3:ad:c5:ba:3d:70:05:ca:1d:cd:32:fd: 66:57:11:94:63:2c:f4:c0:c0:68:ab:33:85:ee:d8: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:74:65:C3:8E:14:95:76:71:B0:D3:3C:48:47:4E:E1:A3:15:30:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/36872929-4860-33a1-ae87-19f6bebe7ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 66.152.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:24:f0:6b:ff:bc:09:68:17:79:9d:69:77:ce:cb:a4:1a:86: 2c:39:a4:23:56:6f:9f:3a:49:69:12:09:15:f0:bf:b5:61:b2: cf:1b:51:1f:e3:b8:8d:c2:24:47:08:5b:8e:62:cd:0c:73:fa: 3b:65:4d:b8:35:ed:45:fd:d0:01:85:33:56:11:ee:c8:5d:7c: c5:1d:1d:75:bc:9b:ef:2a:7a:ce:2b:e3:7a:47:4d:14:a3:58: 92:bf:08:93:a7:c2:30:90:b0:0a:dc:e4:a3:ec:17:8f:2e:db: 9f:f8:98:7e:6b:a1:02:5b:79:fe:59:55:49:c0:cb:82:57:f6: 37:e7:56:6b:ab:4f:28:30:2e:53:eb:ba:95:55:72:a4:dd:85: 98:d3:86:10:9a:85:08:f6:7b:f1:3e:70:99:5b:6a:df:9f:a0: 9a:85:af:79:ef:68:19:9e:a4:3b:eb:4d:ec:e2:61:c7:ac:41: a0:8e:6b:6d:a6:22:e1:ba:e8:28:09:4c:69:0d:26:5d:e1:ba: 00:72:11:27:11:21:73:ec:8a:e7:68:0a:91:0f:c4:10:28:51: 05:43:3d:b8:b7:e1:d4:56:7c:2c:9f:e0:c6:0a:b2:4e:54:84: c4:6a:ee:6d:51:68:56:d7:65:b0:aa:d6:74:7a:05:01:e0:76: 00:8a:d2:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YHIjtaOjFcct6qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDQyMjE5NDE1NloXDTI2MDcyMTE5NDE1NlowLzEtMCsGA1UEAxMk M2JlZmUwM2UtNmQ0OC00Y2FiLWJhZjgtODk1YmU3YjFkMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNh5TMbqHE/WE9HnviFNTcBB5mTZtHeo2UCv p9kJfjLk7nEi+2hHG94mSqqjGy/WCVUhK1Eya+UIgKuxncZNR8XiEbjYqRCWBqBo FtKEjew7MT1hl5QU9bA7p7D58Ui/Y7unf/Fj3T/DxKwPT3PGLpKHGAHRLMcCFMA8 Kij5Myp5dnWpQMON/y6gpx6ZsYVWMKcD8FtRc5E8Lxt8a84BBh9T54B1EJ6WIMy0 QJJLGjoHCXdzK+Xjfw/KrM1gq0gEPLbPTjIqUDz7Zc0GkQ6kh6FviNdKzQvbqre+ svgA1KqYQW/jrcW6PXAFyh3NMv1mVxGUYyz0wMBoqzOF7tgcBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF0ZcOOFJV2cbDTPEhHTuGjFTBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvMzY4NzI5MjktNDg2MC0z M2ExLWFlODctMTlmNmJlYmU3YWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQph/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIk8Gv/vAloF3mdaXfOy6Qahiw5pCNWb586SWkSCRXwv7Vhss8bUR/j uI3CJEcIW45izQxz+jtlTbg17UX90AGFM1YR7shdfMUdHXW8m+8qes4r43pHTRSj WJK/CJOnwjCQsArc5KPsF48u25/4mH5roQJbef5ZVUnAy4JX9jfnVmurTygwLlPr upVVcqTdhZjThhCahQj2e/E+cJlbat+foJqFr3nvaBmepDvrTeziYcesQaCOa22m IuG66CgJTGkNJl3hugByEScRIXPsiudoCpEPxBAoUQVDPbi34dRWfCyf4MYKsk5U hMRq7m1RaFbXZbCq1nR6BQHgdgCK0kI= -----END CERTIFICATE-----Generated at Wed May 13 14:47:39 2026 by rpki-client