$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/9736c1e8-7a78-3641-9fb8-34462a2e800d.roa File: 9736c1e8-7a78-3641-9fb8-34462a2e800d.roa (raw, json) Hash identifier: DAS+wZn1pQjxeC08oCPSf3S8ym6zXjHhGKeYVZHDEe8= Subject key identifier: 87:EB:81:D1:44:5A:FE:4B:DF:DA:3E:72:D0:B5:F9:B4:72:C3:A5:24 Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584D98253A7BACCA03C49625D580 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/9736c1e8-7a78-3641-9fb8-34462a2e800d.roa Signing time: Wed 22 Apr 2026 19:59:27 +0000 ROA not before: Wed 22 Apr 2026 19:59:27 +0000 ROA not after: Tue 21 Jul 2026 19:59:27 +0000 asID: 5738 IP address blocks: 64.17.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:25:3a:7b:ac:ca:03:c4:96:25:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Apr 22 19:59:27 2026 GMT Not After : Jul 21 19:59:27 2026 GMT Subject: CN=528fe6a0-a755-4e38-a679-eb40bd701d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:76:63:33:1e:27:fd:f1:d7:9b:c9:87:8d: aa:f8:8a:aa:c9:7c:c2:72:ec:98:a6:a6:31:03:28: 8e:80:8b:29:0e:c5:b6:35:e2:f0:fe:d5:f8:90:88: 33:e0:98:e8:c3:41:76:02:c0:fc:b4:1e:e9:14:05: a3:f9:41:93:fc:4a:d0:36:d7:a1:84:03:c2:81:c7: 68:5f:2b:03:fd:47:f5:78:15:7b:24:15:cb:45:0f: 12:ae:49:7a:7a:41:82:18:8c:55:9f:14:47:44:ee: ae:83:ce:83:11:7e:33:4b:ce:f7:d8:33:ca:04:a6: 96:88:c6:ec:7b:a1:58:78:da:97:1e:cf:16:fb:7a: cf:cb:0f:53:4f:55:9a:30:d3:ea:4d:cd:01:83:e5: 63:15:70:04:0e:68:fe:14:f6:d0:f2:b6:41:54:6b: 95:9c:23:1f:e4:b0:55:22:9e:76:b1:aa:07:1d:bb: 72:c9:64:bc:c9:5c:57:c3:cb:65:ad:12:66:fb:53: 00:07:a0:bf:c5:5e:41:cc:dd:69:7f:c7:b9:e3:80: 8c:79:d4:e6:93:10:44:3f:60:97:fc:a5:d0:25:54: b7:62:53:0b:03:6b:84:2e:fa:26:52:f3:84:b6:38: 69:c4:6f:c2:83:eb:dc:bd:db:fa:89:9a:4e:fc:ca: 39:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EB:81:D1:44:5A:FE:4B:DF:DA:3E:72:D0:B5:F9:B4:72:C3:A5:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/9736c1e8-7a78-3641-9fb8-34462a2e800d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 64.17.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:13:c3:ee:4b:f8:dc:dc:de:8d:ad:de:de:37:86:72:19:2d: a2:bd:39:5c:76:b8:e1:bd:2d:28:cc:e0:ca:0a:1b:3f:bd:b5: b3:1c:7c:97:3e:a1:fc:68:73:2f:1b:8c:3b:36:4e:c0:93:86: 3c:15:f9:bc:13:9c:dc:7e:1e:6d:5c:4f:b7:f0:43:2b:31:95: be:cc:d6:b9:19:f9:b8:5b:c7:59:39:b8:ac:e5:b3:d4:bf:a9: 47:70:c7:cc:c6:b1:b9:2b:73:43:57:f2:53:f4:08:bc:67:b0: b5:66:70:24:a0:60:39:20:22:23:c8:c6:d7:79:e9:3c:68:3e: a5:18:dd:cb:bf:e3:23:8d:95:d8:8a:0b:5b:84:4b:d0:29:ad: 22:e5:a5:f6:8f:b4:12:b4:01:51:ee:47:89:a6:a2:fe:a7:18: b3:dc:2d:67:3c:4e:68:87:77:cc:76:98:67:99:54:19:e6:17: 6a:14:d3:ad:a0:07:a2:89:d9:b6:1e:a3:0d:55:30:4f:81:c7: d0:16:64:4f:8d:76:08:67:ec:db:df:c9:ea:d2:4b:7f:be:3b: 81:24:3f:77:1c:f9:94:ff:e8:23:b6:47:b1:c7:b9:b2:14:c6: 90:64:99:a2:05:19:44:04:67:bf:b2:bf:35:92:e5:5c:c4:1a: 20:17:e4:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YJTp7rMoDxJYl1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDQyMjE5NTkyN1oXDTI2MDcyMTE5NTkyN1owLzEtMCsGA1UEAxMk NTI4ZmU2YTAtYTc1NS00ZTM4LWE2NzktZWI0MGJkNzAxZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtJ2YzMeJ/3x15vJh42q+IqqyXzCcuyYpqYx AyiOgIspDsW2NeLw/tX4kIgz4Jjow0F2AsD8tB7pFAWj+UGT/ErQNtehhAPCgcdo XysD/Uf1eBV7JBXLRQ8Srkl6ekGCGIxVnxRHRO6ug86DEX4zS8732DPKBKaWiMbs e6FYeNqXHs8W+3rPyw9TT1WaMNPqTc0Bg+VjFXAEDmj+FPbQ8rZBVGuVnCMf5LBV Ip52saoHHbtyyWS8yVxXw8tlrRJm+1MAB6C/xV5BzN1pf8e544CMedTmkxBEP2CX /KXQJVS3YlMLA2uELvomUvOEtjhpxG/Cg+vcvdv6iZpO/Mo5gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfrgdFEWv5L39o+ctC1+bRyw6UkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvOTczNmMxZTgtN2E3OC0z NjQxLTlmYjgtMzQ0NjJhMmU4MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQBFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwTw+5L+Nzc3o2t3t43hnIZLaK9OVx2uOG9LSjM4MoKGz+9tbMcfJc+ ofxocy8bjDs2TsCThjwV+bwTnNx+Hm1cT7fwQysxlb7M1rkZ+bhbx1k5uKzls9S/ qUdwx8zGsbkrc0NX8lP0CLxnsLVmcCSgYDkgIiPIxtd56TxoPqUY3cu/4yONldiK C1uES9AprSLlpfaPtBK0AVHuR4mmov6nGLPcLWc8TmiHd8x2mGeZVBnmF2oU062g B6KJ2bYeow1VME+Bx9AWZE+Ndghn7NvfyerSS3++O4EkP3cc+ZT/6CO2R7HHubIU xpBkmaIFGUQEZ7+yvzWS5VzEGiAX5LQ= -----END CERTIFICATE-----Generated at Wed May 13 14:16:48 2026 by rpki-client