$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/af4f8634-9a80-3bc0-97ff-b9289cd6af8d.roa File: af4f8634-9a80-3bc0-97ff-b9289cd6af8d.roa (raw, json) Hash identifier: zr5em051k85dyygrOn9akcwaYEj8OpGxfwKDqttRf4s= Subject key identifier: 67:33:C0:C9:C7:F6:5D:92:15:D1:43:67:AD:E6:A4:65:9E:C0:A7:57 Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584D98132F91F198AFE878C2C1C0 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/af4f8634-9a80-3bc0-97ff-b9289cd6af8d.roa Signing time: Wed 22 Apr 2026 19:23:06 +0000 ROA not before: Wed 22 Apr 2026 19:23:06 +0000 ROA not after: Tue 21 Jul 2026 19:23:06 +0000 asID: 54989 IP address blocks: 64.17.97.0/24 maxlen: 24 64.17.119.0/24 maxlen: 24 207.136.204.0/24 maxlen: 24 209.198.81.0/24 maxlen: 24 216.114.149.0/24 maxlen: 24 216.114.178.0/24 maxlen: 24 216.114.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:13:2f:91:f1:98:af:e8:78:c2:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Apr 22 19:23:06 2026 GMT Not After : Jul 21 19:23:06 2026 GMT Subject: CN=72e4fd89-8a4c-4f5b-af40-09e1fa7b3d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:aa:e4:64:a0:4c:18:03:e7:f3:15:35:ca:a0: 55:48:72:e6:b6:50:85:1c:4c:76:8f:ed:90:97:8b: f8:25:67:46:56:cf:b2:4f:f4:d2:ee:84:55:18:d0: 32:ef:05:7d:f4:ff:e2:25:07:e0:28:d5:7d:81:52: 0a:74:3e:1d:16:24:e1:b9:25:b3:71:26:8d:a4:58: 18:71:31:61:58:4e:17:e0:8b:ad:4c:d6:be:0d:5a: 65:f9:73:ae:a3:cc:64:2e:f6:5d:d8:37:32:8e:ca: d2:4b:6f:eb:77:a3:72:47:33:59:c5:1a:fa:38:2b: a8:4b:ef:4a:5f:12:5c:ce:b1:1a:85:79:e1:9f:88: c2:32:3f:0e:cf:ec:43:80:95:81:48:95:2b:ab:4c: e3:b2:6b:db:a7:86:c5:e1:81:c8:78:b4:d7:28:62: f4:a2:df:0d:8d:32:e2:37:ee:0d:5a:8d:a9:1e:98: 29:e8:72:34:73:42:fc:af:ee:e0:ed:eb:df:1c:50: fa:98:48:83:e9:3f:d7:29:e9:48:0e:66:0f:53:66: f6:6e:f5:e4:f8:c0:8a:24:4e:96:16:af:0a:3d:d6: b7:ee:cf:b7:8a:12:b7:c7:ee:aa:11:d5:88:04:92: 7b:80:50:b5:fb:cb:f5:60:2b:62:06:f2:64:5c:f1: 4c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:33:C0:C9:C7:F6:5D:92:15:D1:43:67:AD:E6:A4:65:9E:C0:A7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/af4f8634-9a80-3bc0-97ff-b9289cd6af8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 64.17.97.0/24 64.17.119.0/24 207.136.204.0/24 209.198.81.0/24 216.114.149.0/24 216.114.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:89:fa:07:54:df:1c:bd:87:08:34:96:a1:d3:b9:25:bc:60: 9e:5c:c7:c7:50:bb:c9:2c:75:7e:37:79:f0:02:a4:55:fc:59: f5:dd:43:a7:f6:98:77:08:89:3b:2e:21:15:f1:4c:48:b9:f0: 73:e6:11:10:a2:9b:42:c1:1d:fb:9e:d4:8f:8e:84:84:4b:4a: 71:de:8b:2c:79:b2:a5:f0:61:ec:ff:89:9d:a6:46:a5:12:08: 6a:72:c3:87:1f:ba:b0:e2:e7:cd:20:e5:6c:dc:33:30:a0:e6: 4b:22:0f:78:21:bf:9c:ca:2a:94:11:6a:bb:02:ee:74:f4:a1: f4:28:8d:5f:56:cd:4f:01:17:f1:5b:68:6e:7e:e2:8a:fe:91: 71:19:32:52:ee:8d:c7:20:55:21:e9:68:f0:e2:f6:61:99:5f: b8:d5:a6:92:7f:f0:7d:38:c3:92:31:96:d7:57:3c:26:55:6c: 71:51:dc:8c:fd:00:ba:0f:6d:ae:6c:40:b9:eb:03:08:92:7a: b4:3b:df:de:7c:08:23:78:19:3b:8f:78:af:f1:ca:da:47:c5: e7:f5:b2:61:7a:07:74:5f:c2:02:77:30:45:ce:77:31:a1:e2: 25:e3:f2:35:b0:7c:a3:b0:df:aa:89:5e:24:b6:13:6c:a8:33: 9c:16:1d:76 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE2YEy+R8Ziv6HjCwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDQyMjE5MjMwNloXDTI2MDcyMTE5MjMwNlowLzEtMCsGA1UEAxMk NzJlNGZkODktOGE0Yy00ZjViLWFmNDAtMDllMWZhN2IzZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6rkZKBMGAPn8xU1yqBVSHLmtlCFHEx2j+2Q l4v4JWdGVs+yT/TS7oRVGNAy7wV99P/iJQfgKNV9gVIKdD4dFiThuSWzcSaNpFgY cTFhWE4X4IutTNa+DVpl+XOuo8xkLvZd2DcyjsrSS2/rd6NyRzNZxRr6OCuoS+9K XxJczrEahXnhn4jCMj8Oz+xDgJWBSJUrq0zjsmvbp4bF4YHIeLTXKGL0ot8NjTLi N+4NWo2pHpgp6HI0c0L8r+7g7evfHFD6mEiD6T/XKelIDmYPU2b2bvXk+MCKJE6W Fq8KPda37s+3ihK3x+6qEdWIBJJ7gFC1+8v1YCtiBvJkXPFMywIDAQABo4IDczCC A28wHQYDVR0OBBYEFGczwMnH9l2SFdFDZ63mpGWewKdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvYWY0Zjg2MzQtOWE4MC0z YmMwLTk3ZmYtYjkyODljZDZhZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAQBFhAwQA QBF3AwQAz4jMAwQA0cZRAwQA2HKVAwQB2HKyMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAICJ+gdU3xy9hwg0 lqHTuSW8YJ5cx8dQu8ksdX43efACpFX8WfXdQ6f2mHcIiTsuIRXxTEi58HPmERCi m0LBHfue1I+OhIRLSnHeiyx5sqXwYez/iZ2mRqUSCGpyw4cfurDi580g5WzcMzCg 5ksiD3ghv5zKKpQRarsC7nT0ofQojV9WzU8BF/FbaG5+4or+kXEZMlLujccgVSHp aPDi9mGZX7jVppJ/8H04w5IxltdXPCZVbHFR3Iz9ALoPba5sQLnrAwiSerQ73958 CCN4GTuPeK/xytpHxef1smF6B3RfwgJ3MEXOdzGh4iXj8jWwfKOw36qJXiS2E2yo M5wWHXY= -----END CERTIFICATE-----Generated at Wed May 13 14:09:21 2026 by rpki-client