$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fea99b1-9010-3bfb-9a15-e2a6d2c0e9a1.roa File: 3fea99b1-9010-3bfb-9a15-e2a6d2c0e9a1.roa (raw, json) Hash identifier: ViecTo//k2wP704uivcbATIFTD6JJuSYuXmpAE3iSB0= Subject key identifier: B6:C8:D4:93:08:1C:AD:5C:0F:3B:D9:4C:5F:06:35:2E:47:AA:0D:EF Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584D9FB571CE3908EADD253E8240 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fea99b1-9010-3bfb-9a15-e2a6d2c0e9a1.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 66.178.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:71:ce:39:08:ea:dd:25:3e:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=a407e648-71e0-4ea5-9e3e-eb89c9b40e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:47:47:94:af:ef:39:5f:20:93:50:52:07: ff:36:88:69:23:7d:fe:85:c1:00:db:b0:68:ce:61: cc:43:a3:56:71:19:9a:58:a1:a7:12:e4:68:5a:eb: 53:18:84:70:28:07:09:d3:c4:cb:fb:c6:b6:2e:2a: bd:11:7a:08:ef:56:67:e4:82:c2:65:4d:f9:d8:32: c3:be:54:c4:29:84:0c:54:76:16:ac:9f:e1:51:00: db:5f:18:83:5c:7b:06:a9:54:6d:6e:e7:20:93:29: 73:fa:c7:c8:58:03:24:0f:52:b6:55:ec:d0:c3:09: 86:c7:85:be:49:7a:ee:d1:d0:ab:48:82:de:e5:4d: cc:79:f6:08:e5:ce:dd:d7:5b:6d:c4:5b:fb:79:cd: 7e:60:c1:80:45:d0:c8:0b:10:da:a3:53:42:b8:8c: 44:c4:da:2c:55:e5:a8:0b:3b:e2:67:01:e4:b0:87: b1:cb:2d:96:8f:be:01:2a:86:1f:1a:1c:e1:de:64: cb:22:45:fa:64:38:6d:96:de:8b:33:9c:a7:0f:4f: de:2d:d8:ff:c6:02:62:40:4f:c8:bd:3e:61:fa:d3: c7:05:7d:7a:70:62:47:6c:30:1d:5e:f9:07:12:de: ca:e6:fb:75:d6:69:13:ee:9c:70:ad:a5:2b:0b:29: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C8:D4:93:08:1C:AD:5C:0F:3B:D9:4C:5F:06:35:2E:47:AA:0D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fea99b1-9010-3bfb-9a15-e2a6d2c0e9a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 66.178.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:d6:13:85:34:08:b9:be:6f:08:8f:9d:72:ce:ea:75:41:f9: 0d:dc:2d:f9:c8:94:f4:23:b7:d6:83:49:60:27:8b:c6:ac:aa: 9a:cb:41:7d:f7:13:78:f9:a5:e5:b7:8c:05:fa:fc:f3:16:fe: 31:5b:88:e5:a8:e8:33:d6:04:a1:b3:c0:82:78:cd:64:13:56: b7:fe:b9:32:25:6b:84:3b:5f:b0:98:d5:a0:18:10:a6:b7:e1: ae:53:fe:13:96:bd:c9:a9:ea:d7:70:01:c7:10:78:3f:67:68: 6f:bc:95:b0:9e:41:02:c7:93:9a:2f:a8:03:e0:25:46:dd:ae: 7f:b2:a2:4f:d3:c2:b9:82:d4:a8:0c:76:98:c2:ba:64:c9:9b: 9d:ef:d8:ca:a9:44:3c:3b:b9:30:11:c7:c7:dc:0e:e1:28:a9: c5:ce:5c:d2:67:77:82:19:c7:ac:77:a7:19:5e:b4:3b:9b:c4: 59:2f:59:31:25:c2:5e:4f:49:9f:1d:dc:f0:6a:86:3c:90:43: ec:07:b0:68:3a:86:dd:ae:dc:23:4e:6a:38:71:4e:08:56:67: a1:5d:fe:8a:fb:ff:15:c1:54:98:a6:7c:54:a2:6c:e2:8f:bd: 5f:b7:99:88:6f:70:52:50:28:8f:87:48:2a:d1:0f:62:29:be: ce:35:d6:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXHOOQjq3SU+gkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk YTQwN2U2NDgtNzFlMC00ZWE1LTllM2UtZWI4OWM5YjQwZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvNHR5Sv7zlfIJNQUgf/NohpI33+hcEA27Bo zmHMQ6NWcRmaWKGnEuRoWutTGIRwKAcJ08TL+8a2Liq9EXoI71Zn5ILCZU352DLD vlTEKYQMVHYWrJ/hUQDbXxiDXHsGqVRtbucgkylz+sfIWAMkD1K2VezQwwmGx4W+ SXru0dCrSILe5U3MefYI5c7d11ttxFv7ec1+YMGARdDICxDao1NCuIxExNosVeWo CzviZwHksIexyy2Wj74BKoYfGhzh3mTLIkX6ZDhtlt6LM5ynD0/eLdj/xgJiQE/I vT5h+tPHBX16cGJHbDAdXvkHEt7K5vt11mkT7pxwraUrCymAewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbI1JMIHK1cDzvZTF8GNS5Hqg3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvM2ZlYTk5YjEtOTAxMC0z YmZiLTlhMTUtZTJhNmQyYzBlOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrKOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrWE4U0CLm+bwiPnXLO6nVB+Q3cLfnIlPQjt9aDSWAni8asqprLQX33 E3j5peW3jAX6/PMW/jFbiOWo6DPWBKGzwIJ4zWQTVrf+uTIla4Q7X7CY1aAYEKa3 4a5T/hOWvcmp6tdwAccQeD9naG+8lbCeQQLHk5ovqAPgJUbdrn+yok/TwrmC1KgM dpjCumTJm53v2MqpRDw7uTARx8fcDuEoqcXOXNJnd4IZx6x3pxletDubxFkvWTEl wl5PSZ8d3PBqhjyQQ+wHsGg6ht2u3CNOajhxTghWZ6Fd/or7/xXBVJimfFSibOKP vV+3mYhvcFJQKI+HSCrRD2Ipvs411po= -----END CERTIFICATE-----Generated at Wed May 13 13:51:36 2026 by rpki-client