$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa File: aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa (raw, json) Hash identifier: y4Nc2L4BI5WA9cqDcS0BaJYydAiC8tvs8LeGeeo+Z0w= Subject key identifier: 5E:74:B9:0D:4D:B4:B5:AB:55:99:94:ED:FC:CD:14:CB:E2:60:5C:A2 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584D8EF572F7000A87157491D280 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 15092 IP address blocks: 66.43.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:72:f7:00:0a:87:15:74:91:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=3422de63-9edd-4d51-a8d5-53593d791825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5d:9b:93:44:00:6b:9e:f9:98:bb:4f:be:2d: 82:5c:30:25:45:10:38:39:ee:d2:a4:40:dc:3c:5b: 25:39:21:ec:5e:a6:52:22:e5:d6:d8:81:b9:5a:1f: 58:07:f1:ec:80:c0:bb:cb:b2:03:dd:22:36:3c:82: 58:93:b4:10:10:94:71:05:dd:94:93:59:06:46:b3: 05:64:57:8d:36:98:77:eb:24:73:1e:85:76:7d:a4: 70:59:0e:74:7a:3e:f4:5f:c1:1f:57:d9:e6:2f:4b: da:5f:28:ff:0f:20:73:3a:4d:cf:8d:a3:dc:56:2c: 1d:19:34:57:0f:23:d0:7e:32:3e:f5:ea:ba:cf:bb: 68:de:a4:25:be:2f:9f:81:29:2b:51:07:14:51:21: 00:c1:e5:ca:60:1f:69:95:5f:76:a5:d0:17:0d:07: 3d:78:00:86:57:8e:fa:cd:0e:0f:40:b1:11:e1:49: 3c:61:4a:ec:39:75:98:c2:cd:1e:d8:57:89:19:65: 31:aa:aa:cd:19:66:8b:ac:48:53:07:e8:7c:52:66: d3:9b:ad:a8:64:5b:fd:d6:80:d0:25:af:52:55:de: 4f:b0:52:0c:78:c6:d5:80:3e:95:15:f9:dd:f3:40: 96:d1:75:ff:c0:f2:ee:e0:52:cd:ab:2b:e3:c5:1b: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:74:B9:0D:4D:B4:B5:AB:55:99:94:ED:FC:CD:14:CB:E2:60:5C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 66.43.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a6:a4:dd:8f:42:d1:c2:b4:dd:a8:bc:5d:5f:1c:bb:f2:a8: 20:7c:41:28:34:78:a4:be:c9:18:71:7c:cc:52:12:03:fd:b4: 56:9f:aa:cc:d8:62:00:ee:c5:fb:da:68:69:95:cf:04:1b:6f: b6:1e:46:04:99:17:77:e1:f1:66:a1:8e:0d:6a:64:60:1a:b2: 49:ea:e6:7e:66:47:44:69:69:75:bc:80:73:15:f5:f0:f6:10: 54:e8:be:96:01:a6:7a:66:f2:0f:2c:8a:4a:c8:9f:46:2e:49: b5:b8:73:a8:1b:da:f8:18:f8:d8:c1:0c:66:46:65:b8:e3:4d: ef:10:56:34:79:a0:eb:e8:34:bc:7c:d0:56:56:af:cc:5e:57: 4e:5a:1c:9e:d1:92:0b:bc:d3:97:fd:51:c9:bc:d4:81:a1:04: 8d:2d:43:1b:0c:24:78:74:d1:b5:8a:74:55:a6:f5:30:0e:ba: 9a:a2:12:e1:70:4b:a1:17:62:6a:b8:dc:99:33:4c:1b:d3:ec: 87:2e:72:57:35:86:b8:0c:e2:ea:82:b9:25:73:64:80:a3:f1: 4e:de:a6:c6:50:02:65:8b:21:a5:05:4d:ef:4a:a0:2f:5e:91: 2b:29:0c:61:f7:fe:39:81:61:be:9c:52:96:61:4b:d0:e6:f6: 6c:84:94:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XL3AAqHFXSR0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzQyMmRlNjMtOWVkZC00ZDUxLWE4ZDUtNTM1OTNkNzkxODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F2bk0QAa575mLtPvi2CXDAlRRA4Oe7SpEDc PFslOSHsXqZSIuXW2IG5Wh9YB/HsgMC7y7ID3SI2PIJYk7QQEJRxBd2Uk1kGRrMF ZFeNNph36yRzHoV2faRwWQ50ej70X8EfV9nmL0vaXyj/DyBzOk3PjaPcViwdGTRX DyPQfjI+9eq6z7to3qQlvi+fgSkrUQcUUSEAweXKYB9plV92pdAXDQc9eACGV476 zQ4PQLER4Uk8YUrsOXWYws0e2FeJGWUxqqrNGWaLrEhTB+h8UmbTm62oZFv91oDQ Ja9SVd5PsFIMeMbVgD6VFfnd80CW0XX/wPLu4FLNqyvjxRsX9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF50uQ1NtLWrVZmU7fzNFMviYFyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvYWExN2Q4MjAtN2IxMi0z MWY0LTllMmMtNjhiYWQ2ZjlkMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQitpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqmpN2PQtHCtN2ovF1fHLvyqCB8QSg0eKS+yRhxfMxSEgP9tFafqszY YgDuxfvaaGmVzwQbb7YeRgSZF3fh8Wahjg1qZGAasknq5n5mR0RpaXW8gHMV9fD2 EFTovpYBpnpm8g8sikrIn0YuSbW4c6gb2vgY+NjBDGZGZbjjTe8QVjR5oOvoNLx8 0FZWr8xeV05aHJ7Rkgu805f9Ucm81IGhBI0tQxsMJHh00bWKdFWm9TAOupqiEuFw S6EXYmq43JkzTBvT7Icuclc1hrgM4uqCuSVzZICj8U7epsZQAmWLIaUFTe9KoC9e kSspDGH3/jmBYb6cUpZhS9Dm9myElBQ= -----END CERTIFICATE-----Generated at Wed May 13 16:17:33 2026 by rpki-client