$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/b649d6f8-f1ca-3138-b38f-579d69a6c479.roa File: b649d6f8-f1ca-3138-b38f-579d69a6c479.roa (raw, json) Hash identifier: VOMyUnben6jZbjrcCvZFhwlJ3xhKV5hAAJwvyljuDxU= Subject key identifier: 78:5F:96:94:44:13:C2:DA:CE:CE:31:2C:B8:83:74:8D:AD:A3:3B:56 Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584D981BC18BD72D49DCBFA5DAC0 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/b649d6f8-f1ca-3138-b38f-579d69a6c479.roa Signing time: Wed 22 Apr 2026 19:40:22 +0000 ROA not before: Wed 22 Apr 2026 19:40:22 +0000 ROA not after: Tue 21 Jul 2026 19:40:22 +0000 asID: 13536 IP address blocks: 66.231.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:1b:c1:8b:d7:2d:49:dc:bf:a5:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Apr 22 19:40:22 2026 GMT Not After : Jul 21 19:40:22 2026 GMT Subject: CN=73d55f31-ce3b-4909-aef2-382ced211350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:5d:84:c9:48:24:09:11:ed:e1:26:e2:52: dd:f2:42:4e:fc:ef:7d:cd:8a:f7:38:56:ec:c3:00: 2a:75:90:e3:6a:f7:54:84:c4:62:0d:b7:3a:ca:39: 69:44:73:b4:0e:87:60:1d:68:d9:ee:e5:77:9d:8a: e6:97:9b:b7:cc:14:aa:05:90:a1:94:f9:b4:24:cb: 61:e0:49:57:b0:ca:2c:5a:e8:77:a3:60:8d:94:dd: 62:e1:0f:e9:92:ba:ab:f6:55:c7:df:2b:21:0e:e0: e6:1b:13:c1:52:27:a9:a5:aa:f4:7d:69:a7:0e:cc: b7:64:a9:07:5d:b6:47:af:64:9f:f5:db:88:e8:62: 46:d3:b5:0d:ef:2e:bc:09:e8:99:38:6e:85:7f:e2: 01:c0:b1:2c:9c:14:c1:77:0b:c3:76:96:70:d1:80: 7e:ba:71:40:c3:f7:84:22:bb:f0:b1:9b:e6:36:18: dd:84:63:57:d4:31:2d:15:13:33:63:38:2e:1a:a1: 91:00:20:ef:bc:9b:d3:13:d3:2b:08:06:6a:17:d6: df:a9:ed:75:e0:c0:fc:38:c4:f7:af:44:a9:74:ac: 54:6e:75:1e:6d:82:3f:1f:6d:7e:ce:51:f2:fa:45: da:a3:af:39:7e:22:31:a2:32:e4:e6:a9:75:42:90: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5F:96:94:44:13:C2:DA:CE:CE:31:2C:B8:83:74:8D:AD:A3:3B:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/b649d6f8-f1ca-3138-b38f-579d69a6c479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 66.231.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5a:23:91:cf:52:6a:5b:c6:17:08:df:d5:6a:62:7a:ca:9b: 8c:5d:d5:f2:e1:be:10:19:d5:26:e8:c9:96:3a:bc:ae:41:37: 72:18:8b:0f:e8:b4:a7:15:2f:a1:de:ba:01:d9:2f:be:38:d5: bb:7f:c2:80:6a:ca:8b:8d:8d:4c:d2:08:59:4c:88:ba:34:c2: 5d:dd:1e:c6:f7:f7:b4:45:27:af:c7:ad:ba:8d:43:06:1e:79: 69:47:57:28:e8:a4:a1:8f:23:43:e1:76:b1:10:f9:f1:c6:26: cd:0e:b7:d1:f3:95:b4:34:d0:42:e3:51:93:6c:77:a4:a7:2b: d4:9c:7b:53:3b:ac:7b:e3:24:16:29:5e:63:7b:90:a5:18:61: b4:31:1d:0e:5e:20:38:50:93:86:a7:1b:ad:da:74:63:8f:63: 1a:92:a1:df:56:e0:fa:6e:66:49:2d:0f:e4:48:87:8f:2e:fe: 2e:ff:af:70:1f:77:73:47:77:e1:a4:d5:81:bc:e2:2d:ae:ff: 92:15:53:56:3f:9f:f0:c3:ae:31:9f:a3:d3:1d:ea:05:1d:3f: 5f:cb:58:d5:0c:23:1e:f1:a6:09:19:2a:f1:77:bd:01:c0:eb: b4:1e:ef:00:35:55:09:5e:b4:bf:0f:d2:dc:d9:9c:b1:16:bd: 6b:c1:11:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YG8GL1y1J3L+l2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDQyMjE5NDAyMloXDTI2MDcyMTE5NDAyMlowLzEtMCsGA1UEAxMk NzNkNTVmMzEtY2UzYi00OTA5LWFlZjItMzgyY2VkMjExMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW9dhMlIJAkR7eEm4lLd8kJO/O99zYr3OFbs wwAqdZDjavdUhMRiDbc6yjlpRHO0DodgHWjZ7uV3nYrml5u3zBSqBZChlPm0JMth 4ElXsMosWuh3o2CNlN1i4Q/pkrqr9lXH3yshDuDmGxPBUieppar0fWmnDsy3ZKkH XbZHr2Sf9duI6GJG07UN7y68CeiZOG6Ff+IBwLEsnBTBdwvDdpZw0YB+unFAw/eE IrvwsZvmNhjdhGNX1DEtFRMzYzguGqGRACDvvJvTE9MrCAZqF9bfqe114MD8OMT3 r0SpdKxUbnUebYI/H21+zlHy+kXao685fiIxojLk5ql1QpAX9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhflpREE8Lazs4xLLiDdI2toztWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvYjY0OWQ2ZjgtZjFjYS0z MTM4LWIzOGYtNTc5ZDY5YTZjNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQufYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1aI5HPUmpbxhcI39VqYnrKm4xd1fLhvhAZ1SboyZY6vK5BN3IYiw/o tKcVL6HeugHZL7441bt/woBqyouNjUzSCFlMiLo0wl3dHsb397RFJ6/HrbqNQwYe eWlHVyjopKGPI0PhdrEQ+fHGJs0Ot9HzlbQ00ELjUZNsd6SnK9Sce1M7rHvjJBYp XmN7kKUYYbQxHQ5eIDhQk4anG63adGOPYxqSod9W4PpuZkktD+RIh48u/i7/r3Af d3NHd+Gk1YG84i2u/5IVU1Y/n/DDrjGfo9Md6gUdP1/LWNUMIx7xpgkZKvF3vQHA 67Qe7wA1VQletL8P0tzZnLEWvWvBEdw= -----END CERTIFICATE-----Generated at Wed May 13 14:58:52 2026 by rpki-client