$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/cbead79d-ff0d-37f3-afad-826ece0735f0.roa File: cbead79d-ff0d-37f3-afad-826ece0735f0.roa (raw, json) Hash identifier: 64zdZ0eOCljxnXk7IY6poixVVjGOdAwAdfsguOvK1vg= Subject key identifier: 57:C6:1A:12:0F:9F:E6:C6:CA:BF:92:F6:C3:18:75:75:AC:99:EC:BE Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584D9A20311DF03BDA3C798C5D80 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/cbead79d-ff0d-37f3-afad-826ece0735f0.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 1403 IP address blocks: 66.158.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:31:1d:f0:3b:da:3c:79:8c:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=30a9a496-ebe8-4134-80e5-f06a06ce1000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:be:b0:99:09:bc:f2:39:c2:32:4f:16:fc: a9:5f:cd:5f:a6:4f:37:36:e6:19:94:02:d5:a0:a2: 30:d3:0d:dd:31:5f:0b:a4:ec:61:8c:62:8f:ea:b6: ae:5b:30:9e:46:18:18:5c:d8:56:14:f8:20:50:5b: eb:4e:75:03:e1:aa:23:1a:90:78:7d:ac:31:36:3e: 59:90:a1:9e:51:51:21:c3:19:3c:d9:0f:6d:80:d4: 44:d7:12:8d:f6:23:c8:7a:fe:49:07:ef:2d:58:88: 91:8e:03:21:6f:01:c5:c7:7b:1b:41:f0:3b:a8:86: 63:7d:fd:1d:4f:71:08:51:ef:e1:7f:e7:5f:f5:5b: 96:53:dc:20:6e:3c:08:b8:bc:27:d5:5e:6a:fd:af: b1:87:9a:de:9d:8a:12:b7:72:de:d9:d7:af:5c:37: fc:0a:b6:d5:bb:14:1e:aa:ea:cf:38:28:58:12:32: 44:c6:15:8b:34:6d:b3:25:02:6f:eb:bb:f4:9f:91: 5c:4d:ec:40:96:40:d4:ab:e5:80:02:db:1d:db:12: 55:e4:00:1b:d0:43:8d:37:01:30:87:9e:76:94:5f: 59:63:35:cd:e1:be:e7:29:fa:0e:2c:ea:f7:ab:e5: 80:fc:d7:06:32:e2:11:5a:e9:d7:e1:d1:82:56:aa: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C6:1A:12:0F:9F:E6:C6:CA:BF:92:F6:C3:18:75:75:AC:99:EC:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/cbead79d-ff0d-37f3-afad-826ece0735f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.158.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e2:20:82:5a:ae:59:44:40:5e:fb:10:93:ab:71:26:00:83: 36:48:1a:ec:43:ab:57:65:bc:24:9f:76:23:72:c1:0a:a8:b7: 3e:5e:0d:0d:2d:be:5c:5e:3d:51:86:d2:f4:ad:15:1f:ac:84: ba:4b:11:35:2c:e4:29:81:2b:5c:9c:7a:e8:27:75:b4:8b:78: 87:67:f8:0f:4b:51:0a:d5:d4:e1:19:40:9e:6e:00:a7:88:1e: 19:75:05:d7:29:de:82:97:94:cf:42:fc:eb:bc:4c:ef:00:30: cb:79:f7:13:cf:f8:16:94:de:56:70:96:5c:6b:82:be:67:c7: ef:73:a0:42:46:1c:12:97:59:77:d1:b7:b2:bf:f6:44:e0:f6: 12:a4:4b:73:d7:91:f5:bf:21:bc:cf:ec:e7:6c:be:df:b5:1d: 8b:ec:64:35:ef:70:7c:0a:c8:53:ee:0c:01:b5:7b:e1:d0:87: 86:18:97:a2:75:82:51:0d:3d:dd:b4:55:0f:a9:fb:24:f0:f4: 3f:3f:1d:a2:bb:55:07:75:45:55:c4:a3:93:68:0a:4a:89:61: a1:be:3f:6f:c2:b4:c6:af:fc:5f:f1:51:eb:67:16:79:4c:ab: d7:3a:f1:31:aa:f2:7f:73:64:b2:32:44:77:93:9e:97:0d:7a: 8d:69:8b:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDEd8DvaPHmMXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MzBhOWE0OTYtZWJlOC00MTM0LTgwZTUtZjA2YTA2Y2UxMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLW+sJkJvPI5wjJPFvypX81fpk83NuYZlALV oKIw0w3dMV8LpOxhjGKP6rauWzCeRhgYXNhWFPggUFvrTnUD4aojGpB4fawxNj5Z kKGeUVEhwxk82Q9tgNRE1xKN9iPIev5JB+8tWIiRjgMhbwHFx3sbQfA7qIZjff0d T3EIUe/hf+df9VuWU9wgbjwIuLwn1V5q/a+xh5renYoSt3Le2devXDf8CrbVuxQe qurPOChYEjJExhWLNG2zJQJv67v0n5FcTexAlkDUq+WAAtsd2xJV5AAb0EONNwEw h552lF9ZYzXN4b7nKfoOLOr3q+WA/NcGMuIRWunX4dGCVqr6XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfGGhIPn+bGyr+S9sMYdXWsmey+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvY2JlYWQ3OWQtZmYwZC0z N2YzLWFmYWQtODI2ZWNlMDczNWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQp6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIviIIJarllEQF77EJOrcSYAgzZIGuxDq1dlvCSfdiNywQqotz5eDQ0t vlxePVGG0vStFR+shLpLETUs5CmBK1yceugndbSLeIdn+A9LUQrV1OEZQJ5uAKeI Hhl1Bdcp3oKXlM9C/Ou8TO8AMMt59xPP+BaU3lZwllxrgr5nx+9zoEJGHBKXWXfR t7K/9kTg9hKkS3PXkfW/IbzP7Odsvt+1HYvsZDXvcHwKyFPuDAG1e+HQh4YYl6J1 glENPd20VQ+p+yTw9D8/HaK7VQd1RVXEo5NoCkqJYaG+P2/CtMav/F/xUetnFnlM q9c68TGq8n9zZLIyRHeTnpcNeo1pixU= -----END CERTIFICATE-----Generated at Wed May 13 10:31:10 2026 by rpki-client