$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/926421ae-e3c9-33e3-b126-2494b465342e.roa File: 926421ae-e3c9-33e3-b126-2494b465342e.roa (raw, json) Hash identifier: nvKzKLc5fhGNfSr9KlFVeGWqfdR8xJJlrxf3g4eaLto= Subject key identifier: E2:EA:DD:3F:0A:32:00:27:82:E4:29:92:1C:79:B2:5B:1E:3F:64:5C Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584E561A13294864484248A2C0C0 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/926421ae-e3c9-33e3-b126-2494b465342e.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 1403 IP address blocks: 66.129.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:1a:13:29:48:64:48:42:48:a2:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=c1864b5c-e011-4ab7-b0bc-3c5f30c3cf75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:c4:35:7e:de:b7:35:46:ed:dc:6d:c7:56: 92:25:8c:49:fe:51:2e:69:3d:34:af:f0:6a:30:37: b1:0b:0d:42:6a:38:65:ff:c4:2a:16:05:90:ba:29: 87:86:05:76:aa:a1:a5:1f:7e:86:41:4f:9c:c2:ef: 47:89:1c:5d:0d:75:7f:83:2d:39:88:3e:e2:ca:de: e6:2f:d8:32:ab:e7:fd:b5:ff:9e:9c:d5:b4:85:fa: b3:f4:1f:47:fa:81:3c:2e:45:10:44:56:64:7f:49: 5e:70:bc:48:ef:97:62:82:51:99:41:5d:34:b2:89: 72:d0:23:8a:d5:d5:35:3f:e0:a0:41:6e:05:16:16: 77:b4:43:75:41:1e:5c:e3:87:d9:5f:d5:50:ce:bb: 7b:40:77:2a:f4:93:9d:45:d6:f5:28:c8:6b:4c:fb: 67:e9:38:8e:95:83:a4:f5:8d:81:1d:9f:8a:89:7d: ae:32:2c:25:5d:49:11:25:6f:cb:55:1b:f7:19:eb: fb:23:a6:2c:e5:d4:1b:e2:3b:24:9d:bd:30:71:d4: 78:82:01:5b:16:ad:62:1f:02:de:bb:a8:df:d5:55: b7:93:5a:f5:21:39:95:61:99:21:f6:a2:77:4e:5b: 8d:6f:6e:69:84:39:92:92:ab:de:bd:05:fa:d7:d9: 00:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EA:DD:3F:0A:32:00:27:82:E4:29:92:1C:79:B2:5B:1E:3F:64:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/926421ae-e3c9-33e3-b126-2494b465342e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.129.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a4:5b:1b:89:4b:01:8d:42:5a:6f:19:5f:3b:de:3c:f1:7d: 0b:67:79:ae:c1:aa:31:0e:54:1f:34:cd:06:0e:24:0e:b7:55: 50:e3:13:4f:9a:13:ac:f0:db:da:b7:fe:75:ff:35:89:97:e3: 71:e7:28:b9:7b:c4:e8:b9:6e:29:21:c4:0b:67:3a:9c:0c:1e: 8e:93:04:3c:46:cb:b6:c9:f3:8c:ff:15:07:c4:6d:e5:f9:21: 2b:f5:64:83:be:94:29:f3:ce:c7:23:1c:ab:b2:42:c6:d6:f2: a3:02:7e:e5:0d:80:13:03:e6:66:f5:f5:bb:01:ae:18:b3:01: 33:ce:fa:24:ad:e3:ab:8d:91:30:e8:90:0b:f5:a2:74:1f:3e: de:f5:9a:9a:dc:3e:38:f7:c3:30:d5:60:80:50:09:78:70:6e: cb:75:cd:b6:d3:e4:36:71:28:4d:72:1e:84:1e:71:f5:a0:43: 88:b1:e1:f2:66:66:4d:40:76:32:98:5c:16:91:2d:aa:b6:28: 4c:b5:56:87:59:3e:43:90:89:75:69:64:55:30:89:00:d5:44: 7d:71:b2:34:46:8f:86:19:b6:d9:36:be:18:4d:13:de:f1:bf: a0:c7:4f:8b:35:76:9b:7f:0d:c7:0c:6f:f2:3e:cc:1c:fb:af: 95:77:08:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGhMpSGRIQkiiwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk YzE4NjRiNWMtZTAxMS00YWI3LWIwYmMtM2M1ZjMwYzNjZjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlfENX7etzVG7dxtx1aSJYxJ/lEuaT00r/Bq MDexCw1Cajhl/8QqFgWQuimHhgV2qqGlH36GQU+cwu9HiRxdDXV/gy05iD7iyt7m L9gyq+f9tf+enNW0hfqz9B9H+oE8LkUQRFZkf0lecLxI75diglGZQV00soly0COK 1dU1P+CgQW4FFhZ3tEN1QR5c44fZX9VQzrt7QHcq9JOdRdb1KMhrTPtn6TiOlYOk 9Y2BHZ+KiX2uMiwlXUkRJW/LVRv3Gev7I6Ys5dQb4jsknb0wcdR4ggFbFq1iHwLe u6jf1VW3k1r1ITmVYZkh9qJ3TluNb25phDmSkqvevQX619kAwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLq3T8KMgAnguQpkhx5slseP2RcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvOTI2NDIxYWUtZTNjOS0z M2UzLWIxMjYtMjQ5NGI0NjUzNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoGJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJekWxuJSwGNQlpvGV873jzxfQtnea7BqjEOVB80zQYOJA63VVDjE0+a E6zw29q3/nX/NYmX43HnKLl7xOi5bikhxAtnOpwMHo6TBDxGy7bJ84z/FQfEbeX5 ISv1ZIO+lCnzzscjHKuyQsbW8qMCfuUNgBMD5mb19bsBrhizATPO+iSt46uNkTDo kAv1onQfPt71mprcPjj3wzDVYIBQCXhwbst1zbbT5DZxKE1yHoQecfWgQ4ix4fJm Zk1AdjKYXBaRLaq2KEy1VodZPkOQiXVpZFUwiQDVRH1xsjRGj4YZttk2vhhNE97x v6DHT4s1dpt/DccMb/I+zBz7r5V3CEs= -----END CERTIFICATE-----Generated at Thu Jul 23 21:54:09 2026 by rpki-client