$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/25b0bc86-342f-3f5f-bf91-6beccd112f46.roa File: 25b0bc86-342f-3f5f-bf91-6beccd112f46.roa (raw, json) Hash identifier: b1y5hVW0vgkcbrU8fk0dv7hiTmX++vSS6CiTHDK3OOQ= Subject key identifier: 02:DF:3C:FB:E5:4A:54:96:DF:96:EA:FC:3B:BA:2E:D8:9C:E6:0D:01 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DAD9230C505B806878C48D540 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/25b0bc86-342f-3f5f-bf91-6beccd112f46.roa Signing time: Thu 30 Apr 2026 12:10:59 +0000 ROA not before: Thu 30 Apr 2026 12:10:59 +0000 ROA not after: Wed 29 Jul 2026 12:10:59 +0000 asID: 399955 IP address blocks: 66.253.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:92:30:c5:05:b8:06:87:8c:48:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 30 12:10:59 2026 GMT Not After : Jul 29 12:10:59 2026 GMT Subject: CN=5a201abd-4e25-4451-a741-ee34436acea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:a9:28:d2:fe:56:9c:35:6b:b7:85:53:af: 6a:f5:ea:d2:43:53:38:f8:a8:b4:7c:3f:88:e5:63: db:27:ee:a0:86:28:1f:ef:cb:e1:b7:54:29:91:d7: ef:bb:fe:2d:84:89:6f:cb:8e:94:24:83:f0:42:5a: ea:54:1d:57:3a:97:47:ab:4e:1c:78:aa:3e:ef:b2: d5:cc:2f:d5:e9:d9:cb:27:03:f8:3b:07:ec:30:f8: 3a:58:a2:47:c7:7b:f8:9b:ea:12:08:2a:50:ca:c8: 3e:c8:e1:cb:12:25:94:04:31:9a:54:40:fc:cd:cc: af:d0:f8:5d:4f:1e:e7:0b:e7:9c:3a:58:b5:d6:76: f7:80:61:9c:75:80:14:6e:d4:c7:86:6c:87:9b:93: 32:7c:38:81:a1:cf:9a:9a:41:b2:cb:28:62:2d:5d: 2f:fe:d4:60:73:1d:91:67:cd:24:9b:4c:ef:92:9a: 80:85:2f:33:f6:03:d1:24:18:0c:ac:49:c2:84:a5: 76:35:4e:a3:c5:c9:35:12:aa:de:ae:76:82:68:5a: 27:41:59:8c:0b:e8:b7:01:c4:b1:b2:4a:2b:5b:25: 27:25:cd:a0:6f:68:31:e7:0f:2f:8f:1f:c0:a1:12: 1a:0c:67:fc:e0:83:bd:64:22:5c:9c:93:6c:a9:74: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DF:3C:FB:E5:4A:54:96:DF:96:EA:FC:3B:BA:2E:D8:9C:E6:0D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/25b0bc86-342f-3f5f-bf91-6beccd112f46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f9:9a:fc:21:1f:68:95:cb:11:ed:a5:77:27:f7:56:1c:82: da:23:8f:35:7b:a2:41:e2:f0:fd:82:56:21:06:6c:d7:4f:c3: 25:a1:d3:22:72:9c:ac:3c:2d:ae:2c:0a:c1:86:8c:9c:40:93: a9:39:86:77:60:a0:d1:c7:35:2a:4f:34:5d:70:89:98:ff:a3: e3:cf:b9:20:96:4e:b2:8a:4e:0c:d4:02:dc:7a:e6:96:a1:97: e3:45:0f:25:0c:66:9d:2e:d8:be:e2:95:e8:5d:87:8e:9e:6d: 7f:91:f7:76:7c:30:a9:b2:1b:bf:f9:12:e9:2b:fb:eb:fb:c0: 50:97:34:91:b7:14:92:b2:26:6e:8e:08:2d:20:6f:1d:7f:74: 22:d2:37:70:98:21:f9:87:c5:03:e3:ac:f7:7c:36:6d:c3:b3: 4b:89:61:96:31:2f:57:20:ae:4c:32:de:7c:36:16:11:08:c5: c9:0f:25:6f:ae:c2:eb:ea:90:60:ab:52:81:56:ee:a9:ed:c3: a6:84:fa:e8:a9:1c:a2:cd:cb:09:c8:63:c1:99:7b:bd:a4:c8: 95:37:fd:2f:30:13:64:8e:5f:7c:88:d0:69:41:22:ec:2f:08: 1d:92:25:23:91:4d:3e:66:77:d4:9f:ab:77:68:62:92:ba:9c: 70:45:99:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tkjDFBbgGh4xI1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQzMDEyMTA1OVoXDTI2MDcyOTEyMTA1OVowLzEtMCsGA1UEAxMk NWEyMDFhYmQtNGUyNS00NDUxLWE3NDEtZWUzNDQzNmFjZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG+pKNL+Vpw1a7eFU69q9erSQ1M4+Ki0fD+I 5WPbJ+6ghigf78vht1Qpkdfvu/4thIlvy46UJIPwQlrqVB1XOpdHq04ceKo+77LV zC/V6dnLJwP4OwfsMPg6WKJHx3v4m+oSCCpQysg+yOHLEiWUBDGaVED8zcyv0Phd Tx7nC+ecOli11nb3gGGcdYAUbtTHhmyHm5MyfDiBoc+amkGyyyhiLV0v/tRgcx2R Z80km0zvkpqAhS8z9gPRJBgMrEnChKV2NU6jxck1EqrernaCaFonQVmMC+i3AcSx skorWyUnJc2gb2gx5w8vjx/AoRIaDGf84IO9ZCJcnJNsqXT9kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALfPPvlSlSW35bq/Du6Ltic5g0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjViMGJjODYtMzQyZi0z ZjVmLWJmOTEtNmJlY2NkMTEyZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr5mvwhH2iVyxHtpXcn91YcgtojjzV7okHi8P2CViEGbNdPwyWh0yJy nKw8La4sCsGGjJxAk6k5hndgoNHHNSpPNF1wiZj/o+PPuSCWTrKKTgzUAtx65pah l+NFDyUMZp0u2L7ilehdh46ebX+R93Z8MKmyG7/5Eukr++v7wFCXNJG3FJKyJm6O CC0gbx1/dCLSN3CYIfmHxQPjrPd8Nm3Ds0uJYZYxL1cgrkwy3nw2FhEIxckPJW+u wuvqkGCrUoFW7qntw6aE+uipHKLNywnIY8GZe72kyJU3/S8wE2SOX3yI0GlBIuwv CB2SJSORTT5md9Sfq3doYpK6nHBFmTk= -----END CERTIFICATE-----Generated at Tue May 12 21:41:48 2026 by rpki-client