$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa File: a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa (raw, json) Hash identifier: wVZ1mv+DENEKy/NdRM+AQmt4Q/sjYFZSIyxiYn5nwKc= Subject key identifier: 72:7F:D0:25:42:D0:08:8A:E7:7D:F5:B8:6A:C1:5E:D4:A7:03:C4:E2 Certificate issuer: /CN=2cf622f9-718a-4280-a116-72e2088c51e3 Certificate serial: 010D0C9F4328584E6F3A44BC53D815EED9AC1A00 Authority key identifier: 30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 394490 IP address blocks: 66.45.13.0/24 maxlen: 24 2620:dd:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:44:bc:53:d8:15:ee:d9:ac:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cf622f9-718a-4280-a116-72e2088c51e3 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=f87c0287-85a0-4972-bcb1-12054cb089bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:25:85:8f:5b:f7:66:ef:48:70:a7:42:13:7e: 95:a1:47:14:fa:ba:6a:d2:bf:dd:10:97:7b:d1:c3: 0f:fc:c5:52:c0:78:9c:9e:0b:48:a2:06:95:7c:bc: 52:71:62:93:0e:e6:b6:6d:ba:07:78:9b:49:e4:0c: 2a:0a:cd:f6:d0:74:17:d7:67:8f:38:fd:a2:a0:af: 8a:9c:26:c6:ef:5a:ca:40:14:60:24:2b:7c:c9:15: 74:21:32:89:f2:99:be:c6:03:fd:61:c8:72:36:62: e9:23:35:f0:44:f3:05:f1:9c:8f:f5:64:c6:3f:82: 67:2a:42:09:cd:8d:ab:71:cd:4e:8a:fe:b0:1b:ea: 09:0c:d8:41:61:50:d9:d0:f8:e6:be:39:1b:5c:3c: 34:4a:de:b4:e2:cf:a5:a9:09:a1:75:61:8e:27:cb: 9c:c7:28:09:40:cb:64:e0:ec:f9:75:72:03:63:43: 8e:a1:06:45:95:2f:f2:28:19:45:54:e3:a5:6f:ee: f9:47:e5:66:d4:9f:fb:5e:80:7e:6b:89:59:9c:11: 91:fa:08:cd:c8:c8:5f:1f:cc:c3:a1:f0:2d:e4:72: df:30:95:a1:d5:a7:7d:9b:1d:0d:f4:f6:28:f5:56: a1:54:8d:33:d3:eb:52:ee:a9:64:65:2a:c1:8d:28: 98:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7F:D0:25:42:D0:08:8A:E7:7D:F5:B8:6A:C1:5E:D4:A7:03:C4:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl X509v3 Authority Key Identifier: keyid:30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer sbgp-ipAddrBlock: critical IPv4: 66.45.13.0/24 IPv6: 2620:dd:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:fc:b8:90:ca:3e:95:10:4d:8e:bf:18:9d:6f:ba:9e:b5:f1: 3e:8f:80:49:90:aa:28:7f:0a:27:fa:85:47:c4:80:2b:88:44: 10:1b:e5:90:10:7a:0c:2c:13:a8:19:1b:79:a0:ac:da:ae:2d: 3b:b9:3f:7b:38:44:72:06:63:c7:03:78:7e:88:5e:22:94:83: 8b:78:74:a4:28:5f:53:be:19:79:7a:63:01:65:c8:64:49:a5: fa:b4:9e:51:4a:52:e8:e3:7f:0e:97:3f:10:5d:cb:62:92:37: ce:d8:2a:b2:87:79:79:86:22:f6:2b:1d:8c:2c:0d:34:b0:54: fb:55:ce:60:59:55:17:f3:6c:22:34:f3:7d:07:1c:94:2e:c9: c6:b6:d5:b9:2e:31:9c:de:88:1b:9c:bc:f6:a7:99:05:66:2f: 8e:7f:69:d7:d3:87:12:08:a5:27:a8:6f:ce:86:91:9e:bb:db: 32:21:90:89:d4:78:de:7f:7f:49:29:ed:87:71:46:e8:00:f6: 58:3d:9a:71:6e:bf:d7:3e:35:b5:fd:64:da:66:65:54:93:ed: 85:52:90:2f:83:52:18:b1:04:68:6e:b7:1f:31:bd:6a:eb:55: 0e:20:f2:91:07:2c:0f:a6:8a:76:0b:30:dc:c7:8e:45:cc:9e: a0:19:18:5f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE5vOkS8U9gV7tmsGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNmNjIyZjktNzE4YS00MjgwLWExMTYtNzJlMjA4OGM1 MWUzMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk Zjg3YzAyODctODVhMC00OTcyLWJjYjEtMTIwNTRjYjA4OWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSWFj1v3Zu9IcKdCE36VoUcU+rpq0r/dEJd7 0cMP/MVSwHicngtIogaVfLxScWKTDua2bboHeJtJ5AwqCs320HQX12ePOP2ioK+K nCbG71rKQBRgJCt8yRV0ITKJ8pm+xgP9YchyNmLpIzXwRPMF8ZyP9WTGP4JnKkIJ zY2rcc1Oiv6wG+oJDNhBYVDZ0PjmvjkbXDw0St604s+lqQmhdWGOJ8ucxygJQMtk 4Oz5dXIDY0OOoQZFlS/yKBlFVOOlb+75R+Vm1J/7XoB+a4lZnBGR+gjNyMhfH8zD ofAt5HLfMJWh1ad9mx0N9PYo9VahVI0z0+tS7qlkZSrBjSiYKwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHJ/0CVC0AiK5331uGrBXtSnA8TiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yY2Y2 MjJmOS03MThhLTQyODAtYTExNi03MmUyMDg4YzUxZTMvYTFlYmY0NGEtODIzYi0z NzdlLWJmMzYtNWE2MWMzMTZiMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmNmNjIyZjktNzE4YS00MjgwLWEx MTYtNzJlMjA4OGM1MWUzLzJjZjYyMmY5LTcxOGEtNDI4MC1hMTE2LTcyZTIwODhj NTFlMy5jcmwwHwYDVR0jBBgwFoAUMGLaWKnwufvsj2/Mg0mYz+O0DGowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yY2Y2MjJmOS03MThhLTQyODAtYTExNi03MmUy MDg4YzUxZTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQi0NMA8E AgACMAkDBwAmIADdwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg/y4kMo+lRBNjr8YnW+6nrXxPo+ASZCq KH8KJ/qFR8SAK4hEEBvlkBB6DCwTqBkbeaCs2q4tO7k/ezhEcgZjxwN4foheIpSD i3h0pChfU74ZeXpjAWXIZEml+rSeUUpS6ON/Dpc/EF3LYpI3ztgqsod5eYYi9isd jCwNNLBU+1XOYFlVF/NsIjTzfQcclC7JxrbVuS4xnN6IG5y89qeZBWYvjn9p19OH EgilJ6hvzoaRnrvbMiGQidR43n9/SSnth3FG6AD2WD2acW6/1z41tf1k2mZlVJPt hVKQL4NSGLEEaG63HzG9autVDiDykQcsD6aKdgsw3MeORcyeoBkYXw== -----END CERTIFICATE-----Generated at Fri Jul 24 14:40:32 2026 by rpki-client