$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa File: 60adbf7d-4503-31a4-a156-6bae4b601738.roa (raw, json) Hash identifier: y4Qx1IKe514WhyFdqG8fXLWFZgnMTPesQkUBZb6zALs= Subject key identifier: 86:CF:30:B2:EE:48:45:40:6C:A9:5F:28:BE:E5:0A:F1:78:D8:4E:28 Certificate issuer: /CN=c66b7cab-031d-4c4c-8595-19848efd3058 Certificate serial: 010D0C9F4328584D91C003B46D09E1ABDF844380 Authority key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 400339 IP address blocks: 147.136.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:03:b4:6d:09:e1:ab:df:84:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66b7cab-031d-4c4c-8595-19848efd3058 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=4d9a3b76-c509-41a8-aa79-ef5b3accb42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:cc:02:af:74:bf:9e:29:bc:4b:01:4d:4e: d2:2c:b2:e0:20:16:9b:41:3c:d7:0b:e6:44:18:bb: 57:51:db:8e:49:e6:21:4e:80:61:d6:86:65:71:33: 3e:f2:7a:d7:d5:50:25:97:ff:38:a3:f4:7b:e9:8d: 0a:57:40:a8:8e:16:6e:67:70:28:82:03:4b:4a:d1: d1:cc:bf:0c:59:59:06:bd:bd:75:fb:ad:7e:84:1c: af:54:6e:1d:1b:37:09:cb:ee:36:43:56:cd:35:e5: 62:53:bd:88:52:7e:fc:34:22:ef:dc:47:89:69:0c: c5:63:92:3e:27:a1:b9:61:d5:6c:e3:a4:c4:a6:2a: c4:51:dd:88:cb:0d:de:f8:a7:68:10:a6:f7:06:3d: ad:d7:cf:17:17:73:08:d8:8b:c1:92:c3:fe:54:af: 54:f8:07:77:78:7e:62:3c:ff:6d:3d:eb:52:0c:03: 7c:a8:b6:c2:b7:93:cc:08:84:8f:1e:83:76:3c:50: e1:b2:fd:54:92:7e:0f:c8:aa:a6:f3:aa:05:4d:e4: 34:1e:fe:d6:36:2f:72:19:40:a2:93:2c:3d:6f:4a: 9a:0e:6c:64:59:31:d2:93:fc:b6:be:5d:ee:18:2b: 67:a3:3a:15:62:5b:a1:75:14:d0:a9:58:ac:65:ea: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CF:30:B2:EE:48:45:40:6C:A9:5F:28:BE:E5:0A:F1:78:D8:4E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl X509v3 Authority Key Identifier: keyid:B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer sbgp-ipAddrBlock: critical IPv4: 147.136.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:28:33:a9:5a:b1:5c:ee:22:3e:73:03:d1:b4:3a:ff:5f:fb: a2:46:6b:fd:85:53:84:33:56:4c:81:ac:c9:63:ac:9b:e2:16: 5f:50:d4:ff:3a:f3:9f:62:70:eb:bd:77:f1:cd:18:2a:e8:9e: d3:7d:ff:ff:d5:75:a2:73:c8:2f:b1:ac:99:5c:64:16:e3:c9: f9:d6:c1:75:69:e7:0e:f2:ed:78:9c:de:4e:f5:06:04:22:c7: 07:56:b8:c0:0b:7c:54:05:26:58:b1:63:c7:a4:ac:78:4c:fd: e4:25:37:62:5a:6d:57:4c:9f:bf:81:15:d2:3e:bf:00:82:62: 98:3d:55:f0:a7:bc:7a:9d:ca:06:4c:9e:9d:9a:ba:4d:33:f6: 37:25:86:f9:99:1b:62:3d:e7:82:4c:a7:87:a8:1f:36:96:29: bf:7a:b1:c3:bf:a9:df:fb:c7:7d:69:3b:b0:0a:4c:e5:a5:b8: 64:eb:5f:5f:f5:33:7c:44:cf:51:f0:2b:49:4d:ea:58:e6:b9: 95:d0:9d:e1:ab:00:7b:0f:42:fa:52:f1:32:ce:cb:40:72:fd: e7:5e:b9:ad:3e:81:49:8b:65:7c:ea:e1:17:22:ee:74:55:f3: 2a:63:bc:a6:6f:42:47:0e:49:1b:c9:61:5d:61:c7:c0:10:83: 95:31:16:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAO0bQnhq9+EQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY2YjdjYWItMDMxZC00YzRjLTg1OTUtMTk4NDhlZmQz MDU4MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NGQ5YTNiNzYtYzUwOS00MWE4LWFhNzktZWY1YjNhY2NiNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKLMAq90v54pvEsBTU7SLLLgIBabQTzXC+ZE GLtXUduOSeYhToBh1oZlcTM+8nrX1VAll/84o/R76Y0KV0CojhZuZ3AoggNLStHR zL8MWVkGvb11+61+hByvVG4dGzcJy+42Q1bNNeViU72IUn78NCLv3EeJaQzFY5I+ J6G5YdVs46TEpirEUd2Iyw3e+KdoEKb3Bj2t188XF3MI2IvBksP+VK9U+Ad3eH5i PP9tPetSDAN8qLbCt5PMCISPHoN2PFDhsv1Ukn4PyKqm86oFTeQ0Hv7WNi9yGUCi kyw9b0qaDmxkWTHSk/y2vl3uGCtnozoVYluhdRTQqVisZernGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbPMLLuSEVAbKlfKL7lCvF42E4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZi N2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0OGVmZDMwNTgvNjBhZGJmN2QtNDUwMy0z MWE0LWExNTYtNmJhZTRiNjAxNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzY2YjdjYWItMDMxZC00YzRjLTg1 OTUtMTk4NDhlZmQzMDU4L2M2NmI3Y2FiLTAzMWQtNGM0Yy04NTk1LTE5ODQ4ZWZk MzA1OC5jcmwwHwYDVR0jBBgwFoAUt8UCrE3muMdpydX2BPcapRRIdkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZiN2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0 OGVmZDMwNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk4jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABooM6lasVzuIj5zA9G0Ov9f+6JGa/2FU4QzVkyBrMljrJviFl9Q1P86 859icOu9d/HNGCrontN9///VdaJzyC+xrJlcZBbjyfnWwXVp5w7y7Xic3k71BgQi xwdWuMALfFQFJlixY8ekrHhM/eQlN2JabVdMn7+BFdI+vwCCYpg9VfCnvHqdygZM np2auk0z9jclhvmZG2I954JMp4eoHzaWKb96scO/qd/7x31pO7AKTOWluGTrX1/1 M3xEz1HwK0lN6ljmuZXQneGrAHsPQvpS8TLOy0By/edeua0+gUmLZXzq4Rci7nRV 8ypjvKZvQkcOSRvJYV1hx8AQg5UxFoA= -----END CERTIFICATE-----Generated at Wed May 13 14:48:18 2026 by rpki-client