$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa File: 3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa (raw, json) Hash identifier: mTMfVe9SKAcisvfQOh8GE5Ylx450R8fD06L1MxeMSVg= Subject key identifier: A9:12:F8:A7:3D:BE:4E:63:F3:1D:90:B9:92:DC:8A:58:4E:BB:92:EF Certificate issuer: /CN=3cfc6d7b-a1e6-4d32-803d-0e5060c00725 Certificate serial: 010D0C9F4328584D948AAE1B90C98935D5661080 Authority key identifier: 04:25:0A:C7:4E:4D:D3:95:46:55:BB:39:96:37:F5:FE:A3:71:5B:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa Signing time: Tue 21 Apr 2026 13:00:31 +0000 ROA not before: Tue 21 Apr 2026 13:00:31 +0000 ROA not after: Mon 20 Jul 2026 13:00:31 +0000 asID: 19211 IP address blocks: 66.235.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:8a:ae:1b:90:c9:89:35:d5:66:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cfc6d7b-a1e6-4d32-803d-0e5060c00725 Validity Not Before: Apr 21 13:00:31 2026 GMT Not After : Jul 20 13:00:31 2026 GMT Subject: CN=294944a9-0cf3-4954-bd31-16d664929112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:33:b4:ca:14:0a:84:8d:67:5e:7f:d9:7f:f2: a3:8e:70:90:aa:bf:46:0d:9b:56:a3:87:02:e9:fe: 34:05:5a:0b:f0:9f:0b:78:95:87:aa:f7:83:65:0e: 9e:9d:d3:44:77:5b:61:be:4a:a2:15:55:b0:02:cb: 6d:07:8d:c2:07:f3:3e:61:b5:46:52:b2:8a:8e:47: 2e:09:21:ff:72:cf:34:c5:36:b9:b2:2c:34:c1:61: 89:ad:4a:0b:c7:8c:96:33:86:ed:b8:91:f8:17:73: 33:75:82:07:ea:ae:69:e3:5e:bd:aa:99:c7:19:56: ef:42:74:5a:3c:34:0b:86:f5:5a:a0:8f:9a:54:a3: 7f:7b:c3:bb:b6:eb:53:e5:03:55:d9:1f:12:4d:dc: 73:51:e8:7e:43:f8:74:80:27:3e:79:d0:05:bd:50: a9:11:9a:a9:d5:6f:69:ab:bc:63:d3:b9:2c:e9:a0: 46:c9:24:54:7c:d0:e2:04:62:20:78:b3:a3:80:7c: 97:a3:3c:e8:65:49:d4:7e:6e:2f:e5:55:d9:37:c9: c5:af:46:55:95:47:39:7e:91:ca:1e:80:22:e3:d2: c9:58:b1:a8:29:e7:77:b7:39:c4:44:07:54:76:cb: 0f:90:c3:85:12:49:c8:fa:2e:a6:5b:2f:83:ca:2c: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:12:F8:A7:3D:BE:4E:63:F3:1D:90:B9:92:DC:8A:58:4E:BB:92:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.crl X509v3 Authority Key Identifier: keyid:04:25:0A:C7:4E:4D:D3:95:46:55:BB:39:96:37:F5:FE:A3:71:5B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer sbgp-ipAddrBlock: critical IPv4: 66.235.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:96:b4:c6:cc:97:66:ce:9e:b5:bc:72:64:ec:22:cf:f3:b3: 88:bd:e6:7b:f5:a4:e0:cb:b0:b1:97:92:37:83:83:1d:bf:c6: 67:e1:c0:dc:f6:05:32:b7:8a:03:01:c5:b6:a4:e0:94:c3:8e: 24:e2:c7:0a:7c:ec:9e:75:f5:4c:11:97:df:c6:28:80:13:aa: 36:8e:33:d9:87:d9:62:06:12:8a:6c:b5:99:d6:09:33:d8:39: 49:1d:44:ce:1d:57:13:d7:76:a7:ac:9c:83:2a:42:51:95:bf: bc:72:f4:42:28:4b:c4:78:45:7e:a5:f3:3e:91:b6:7e:67:c6: c6:52:57:30:3a:a1:2e:ce:52:d5:46:c7:ff:d0:0c:7e:92:36: 2b:9b:d2:17:a8:27:2f:58:e4:ec:1f:1a:ae:a3:31:99:e1:b4: 68:04:a3:ad:dc:77:a6:23:d9:d7:e4:65:af:7a:7d:2d:2d:3f: cc:c1:ab:e1:12:8b:1a:61:42:cc:ae:76:ab:e6:8f:e9:45:29: aa:bb:d2:08:31:e9:f9:ee:d4:e6:ed:26:8a:48:ea:49:93:65: a2:ae:80:27:99:79:06:2c:f9:31:e5:73:db:b7:d0:a1:ec:ba: ce:d0:c5:d4:25:bf:4c:5f:62:39:10:b2:5c:e7:96:35:c6:25: 70:0b:0f:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Uiq4bkMmJNdVmEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NmYzZkN2ItYTFlNi00ZDMyLTgwM2QtMGU1MDYwYzAw NzI1MB4XDTI2MDQyMTEzMDAzMVoXDTI2MDcyMDEzMDAzMVowLzEtMCsGA1UEAxMk Mjk0OTQ0YTktMGNmMy00OTU0LWJkMzEtMTZkNjY0OTI5MTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjO0yhQKhI1nXn/Zf/KjjnCQqr9GDZtWo4cC 6f40BVoL8J8LeJWHqveDZQ6endNEd1thvkqiFVWwAsttB43CB/M+YbVGUrKKjkcu CSH/cs80xTa5siw0wWGJrUoLx4yWM4btuJH4F3MzdYIH6q5p4169qpnHGVbvQnRa PDQLhvVaoI+aVKN/e8O7tutT5QNV2R8STdxzUeh+Q/h0gCc+edAFvVCpEZqp1W9p q7xj07ks6aBGySRUfNDiBGIgeLOjgHyXozzoZUnUfm4v5VXZN8nFr0ZVlUc5fpHK HoAi49LJWLGoKed3tznERAdUdssPkMOFEknI+i6mWy+DyiwezQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkS+Kc9vk5j8x2QuZLcilhOu5LvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zY2Zj NmQ3Yi1hMWU2LTRkMzItODAzZC0wZTUwNjBjMDA3MjUvM2Y1MWY5MTctMTVjNi0z NjBmLTlkZjItYjFkMDYyZWE2YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvM2NmYzZkN2ItYTFlNi00ZDMyLTgw M2QtMGU1MDYwYzAwNzI1LzNjZmM2ZDdiLWExZTYtNGQzMi04MDNkLTBlNTA2MGMw MDcyNS5jcmwwHwYDVR0jBBgwFoAUBCUKx05N05VGVbs5ljf1/qNxW2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zY2ZjNmQ3Yi1hMWU2LTRkMzItODAzZC0wZTUw NjBjMDA3MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQutgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCWtMbMl2bOnrW8cmTsIs/zs4i95nv1pODLsLGXkjeDgx2/xmfhwNz2 BTK3igMBxbak4JTDjiTixwp87J519UwRl9/GKIATqjaOM9mH2WIGEopstZnWCTPY OUkdRM4dVxPXdqesnIMqQlGVv7xy9EIoS8R4RX6l8z6Rtn5nxsZSVzA6oS7OUtVG x//QDH6SNiub0heoJy9Y5OwfGq6jMZnhtGgEo63cd6Yj2dfkZa96fS0tP8zBq+ES ixphQsyudqvmj+lFKaq70ggx6fnu1ObtJopI6kmTZaKugCeZeQYs+THlc9u30KHs us7QxdQlv0xfYjkQslznljXGJXALD7M= -----END CERTIFICATE-----Generated at Wed May 13 04:07:09 2026 by rpki-client