$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa File: 8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa (raw, json) Hash identifier: A3rgFdiu96tZMGCT3cAuGQnMJ11b68u22JAhYY4vveU= Subject key identifier: 47:13:24:C1:BE:70:84:A3:21:A7:D6:BA:A9:80:47:96:2E:19:73:BF Certificate issuer: /CN=903ec3cf-858a-457b-844f-8c6283f5e5d9 Certificate serial: 010D0C9F4328584DAAE033E8BDEE28292D36FC80 Authority key identifier: 3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 30255 IP address blocks: 66.205.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:33:e8:bd:ee:28:29:2d:36:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903ec3cf-858a-457b-844f-8c6283f5e5d9 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=f9d1e9db-c770-4df0-b182-d0fa53f1f6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:42:07:2b:33:60:d7:c4:58:8e:b4:d3:5b: b6:2c:38:e5:e3:3a:6b:e9:74:be:cb:b9:36:9b:e3: 20:4b:9c:be:7c:fa:21:89:0b:93:f6:e5:55:3e:c5: bf:22:ec:16:c2:c9:d5:2b:af:82:d3:19:3a:05:11: 66:e6:98:6a:cb:2a:00:84:b2:b9:9e:4b:34:39:bb: 18:8d:af:bc:1a:c4:9d:0e:01:0c:0c:05:04:fb:28: 87:1f:25:fb:b9:71:10:c1:dd:d8:c3:8c:25:0d:89: aa:6d:cc:fb:52:a6:b9:74:25:c0:e0:af:de:86:84: 73:2d:65:ca:dd:e0:7c:f4:6a:4e:eb:94:bc:39:3c: d2:2a:7a:79:95:33:58:ee:11:e4:fc:82:d8:06:9b: b2:3b:d7:30:35:d5:f5:de:c8:00:9d:00:32:dd:12: 12:46:a2:7c:ab:b4:ad:7b:0e:10:f8:76:4c:dd:28: 94:ff:e3:66:4b:cb:4e:a1:2e:55:b1:67:82:98:99: 69:8d:45:30:62:a4:8c:4c:e3:98:b1:a1:58:69:da: 12:ad:92:a8:7c:81:93:9d:c2:44:57:f0:60:2d:bc: b2:84:a5:cc:4b:60:b4:f2:a2:e6:dd:cd:75:7c:6d: 14:b9:77:ea:a8:6a:a3:b1:af:43:2a:aa:ec:d0:92: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:13:24:C1:BE:70:84:A3:21:A7:D6:BA:A9:80:47:96:2E:19:73:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl X509v3 Authority Key Identifier: keyid:3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer sbgp-ipAddrBlock: critical IPv4: 66.205.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d7:f6:85:52:03:07:49:f5:e0:e0:91:29:41:ee:76:4b:5e: 41:5c:68:1c:10:15:cd:6d:b3:50:1b:1b:b5:a7:10:66:bd:da: 33:85:5f:ed:86:ac:6d:53:67:3a:04:cf:f7:c4:b0:6b:76:3f: 8d:db:9c:fb:49:9e:ca:5d:bf:70:ba:0a:24:f6:2d:29:ac:98: a9:66:b4:51:9b:8f:21:a2:e4:98:31:f0:5c:24:de:b0:ba:ef: 46:5d:05:f4:b8:c7:e6:91:b7:9d:b0:b4:44:e5:3b:36:b0:93: 9d:ee:05:ab:ba:a3:02:10:52:b7:b7:bf:32:5c:84:ce:12:52: e3:08:1d:78:e9:e1:29:03:36:9c:42:2e:cf:91:13:ea:30:ef: 6d:0e:21:25:96:77:98:93:c5:00:e6:de:75:ae:57:24:4f:d1: d7:91:1d:ac:8c:a7:3e:d9:6c:d2:ad:42:b9:6f:46:e6:a9:27: 61:73:d9:11:ae:1b:f4:4f:f2:01:e0:7a:c5:4d:4a:da:fe:7b: 36:04:59:20:b8:78:e2:99:c4:ca:b3:cd:d9:d6:c1:3b:7c:d2: 9e:1f:ae:2d:48:ed:41:36:c9:12:5c:ee:d3:1e:01:36:74:ff: 38:96:ba:9a:ae:5f:9f:b3:3e:6a:b8:c9:d7:dc:bd:90:71:a1: 6f:42:47:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DPove4oKS02/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAzZWMzY2YtODU4YS00NTdiLTg0NGYtOGM2MjgzZjVl NWQ5MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk ZjlkMWU5ZGItYzc3MC00ZGYwLWIxODItZDBmYTUzZjFmNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdJCByszYNfEWI6001u2LDjl4zpr6XS+y7k2 m+MgS5y+fPohiQuT9uVVPsW/IuwWwsnVK6+C0xk6BRFm5phqyyoAhLK5nks0ObsY ja+8GsSdDgEMDAUE+yiHHyX7uXEQwd3Yw4wlDYmqbcz7Uqa5dCXA4K/ehoRzLWXK 3eB89GpO65S8OTzSKnp5lTNY7hHk/ILYBpuyO9cwNdX13sgAnQAy3RISRqJ8q7St ew4Q+HZM3SiU/+NmS8tOoS5VsWeCmJlpjUUwYqSMTOOYsaFYadoSrZKofIGTncJE V/BgLbyyhKXMS2C08qLm3c11fG0UuXfqqGqjsa9DKqrs0JLnqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcTJMG+cISjIafWuqmAR5YuGXO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDNl YzNjZi04NThhLTQ1N2ItODQ0Zi04YzYyODNmNWU1ZDkvOGQ5MDc2OTQtZjA4NC0z NjYxLWI5ZDctMmU0ZWU5YTVkZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAzZWMzY2YtODU4YS00NTdiLTg0 NGYtOGM2MjgzZjVlNWQ5LzkwM2VjM2NmLTg1OGEtNDU3Yi04NDRmLThjNjI4M2Y1 ZTVkOS5jcmwwHwYDVR0jBBgwFoAUPVYhXxO4CO7AZA1SjS1VdeJwyO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDNlYzNjZi04NThhLTQ1N2ItODQ0Zi04YzYy ODNmNWU1ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzX9oVSAwdJ9eDgkSlB7nZLXkFcaBwQFc1ts1AbG7WnEGa92jOFX+2G rG1TZzoEz/fEsGt2P43bnPtJnspdv3C6CiT2LSmsmKlmtFGbjyGi5Jgx8Fwk3rC6 70ZdBfS4x+aRt52wtETlOzawk53uBau6owIQUre3vzJchM4SUuMIHXjp4SkDNpxC Ls+RE+ow720OISWWd5iTxQDm3nWuVyRP0deRHayMpz7ZbNKtQrlvRuapJ2Fz2RGu G/RP8gHgesVNStr+ezYEWSC4eOKZxMqzzdnWwTt80p4fri1I7UE2yRJc7tMeATZ0 /ziWupquX5+zPmq4ydfcvZBxoW9CR1s= -----END CERTIFICATE-----Generated at Wed May 13 12:27:07 2026 by rpki-client