$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498ae72d-730e-3075-b632-778512aa8180.roa File: 498ae72d-730e-3075-b632-778512aa8180.roa (raw, json) Hash identifier: FRDPl7iwekW+it88+T5yhuxpTm34vbdsL/YV/NqM3wE= Subject key identifier: 67:5C:56:52:8D:34:DF:39:6D:42:53:EC:56:CB:AA:CB:67:A8:61:C5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DCC6069F5DF581ED760E682C2 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498ae72d-730e-3075-b632-778512aa8180.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 5065 IP address blocks: 66.253.8.0/24 maxlen: 24 69.17.3.0/24 maxlen: 24 69.17.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:69:f5:df:58:1e:d7:60:e6:82:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=0468d90a-c475-4d87-93a0-ad7e5d865320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:77:8f:93:84:30:5a:27:0b:4d:f3:1f:0e: 8b:81:8f:10:12:d0:05:d4:fb:c3:6f:1c:bc:01:86: 68:56:17:e2:24:97:e2:1b:50:9e:6b:3f:20:3a:8a: ca:35:e6:ba:d9:2f:41:f0:6b:c5:44:59:86:7d:16: 51:1b:2b:21:46:a3:cf:d2:2a:27:44:81:7b:0f:9f: b1:2d:c9:88:e3:87:b8:b1:4d:ce:42:4a:91:87:1a: 4d:ce:05:14:82:83:80:87:d9:28:c2:1a:8f:9b:76: d5:ea:75:d5:f9:81:0c:2f:b3:e0:12:a9:22:6b:b4: ff:59:b3:70:67:66:8b:01:39:6f:03:ed:7c:61:7e: cd:97:e3:da:73:92:7c:c2:0c:a3:3f:93:42:38:28: 2a:6d:64:3f:d6:23:01:86:d3:a1:23:fd:e3:e6:1c: 79:a1:11:4d:79:06:99:a5:81:60:5d:d8:62:13:83: ae:73:bd:56:6f:96:04:b2:a9:90:d4:fd:f3:7b:b2: e4:fd:e7:a4:7a:06:87:e2:54:80:02:97:0c:e0:ba: 23:c7:9e:a0:43:a1:b9:ac:60:a3:36:9a:a5:2b:37: d0:26:a3:2f:4f:9a:c1:5e:3a:1f:48:ae:7d:f9:19: 1a:f7:d4:c6:b3:06:df:2d:80:64:66:e6:48:4d:87: fe:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5C:56:52:8D:34:DF:39:6D:42:53:EC:56:CB:AA:CB:67:A8:61:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498ae72d-730e-3075-b632-778512aa8180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.8.0/24 69.17.3.0-69.17.4.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:6d:19:81:47:51:b6:93:ed:fe:87:24:53:71:f9:51:fb:ed: 6d:cd:43:a2:30:2a:f6:75:79:20:48:c7:6d:53:34:12:b1:30: 07:6e:84:af:79:db:3b:f8:20:92:6e:b6:9f:23:99:93:e1:0c: 5c:14:24:59:57:84:ff:72:b1:e0:86:f2:c4:29:67:b4:4e:52: ea:33:67:b5:93:83:9f:6e:c6:b6:14:43:eb:75:44:2e:e8:05: 09:50:cf:37:b0:d6:f8:d7:d1:0a:72:ce:06:fb:89:91:75:40: f9:1a:d3:e3:2d:e8:bc:03:c2:7d:c7:5d:d3:c1:98:f4:06:c7: b4:0f:62:93:50:33:11:2f:d0:70:77:58:75:a1:b3:65:b5:a7: 14:37:7e:7c:64:f4:15:fc:55:96:f5:d0:24:04:ec:9b:8e:80: 37:29:99:95:a2:3e:70:95:8d:4c:f2:bc:c8:d3:36:f5:07:d0: 27:9a:2e:0c:ef:86:39:ae:66:ae:16:50:2b:12:a5:ad:7b:46: 3c:ab:36:7b:eb:aa:3d:52:cd:78:c6:09:9c:44:8b:b9:06:12: 9b:d0:51:bd:e8:a4:2b:90:67:2b:6e:89:d0:67:98:80:8f:1d: 91:37:0d:4f:a2:29:7a:66:e9:b6:44:60:74:09:7f:1f:cc:77: 8f:75:e4:8f -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE3MYGn131ge12DmgsIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk MDQ2OGQ5MGEtYzQ3NS00ZDg3LTkzYTAtYWQ3ZTVkODY1MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J53j5OEMFonC03zHw6LgY8QEtAF1PvDbxy8 AYZoVhfiJJfiG1Ceaz8gOorKNea62S9B8GvFRFmGfRZRGyshRqPP0ionRIF7D5+x LcmI44e4sU3OQkqRhxpNzgUUgoOAh9kowhqPm3bV6nXV+YEML7PgEqkia7T/WbNw Z2aLATlvA+18YX7Nl+Pac5J8wgyjP5NCOCgqbWQ/1iMBhtOhI/3j5hx5oRFNeQaZ pYFgXdhiE4Ouc71Wb5YEsqmQ1P3ze7Lk/eekegaH4lSAApcM4Lojx56gQ6G5rGCj NpqlKzfQJqMvT5rBXjofSK59+Rka99TGswbfLYBkZuZITYf+nwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFGdcVlKNNN85bUJT7FbLqstnqGHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDk4YWU3MmQtNzMwZS0z MDc1LWI2MzItNzc4NTEyYWE4MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAQv0IMAwD BABFEQMDBABFEQQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAmm0ZgUdRtpPt/ockU3H5Ufvtbc1DojAq9nV5 IEjHbVM0ErEwB26Er3nbO/ggkm62nyOZk+EMXBQkWVeE/3Kx4IbyxClntE5S6jNn tZODn27GthRD63VELugFCVDPN7DW+NfRCnLOBvuJkXVA+RrT4y3ovAPCfcdd08GY 9AbHtA9ik1AzES/QcHdYdaGzZbWnFDd+fGT0FfxVlvXQJATsm46ANymZlaI+cJWN TPK8yNM29QfQJ5ouDO+GOa5mrhZQKxKlrXtGPKs2e+uqPVLNeMYJnESLuQYSm9BR veikK5BnK26J0GeYgI8dkTcNT6IpembptkRgdAl/H8x3j3Xkjw== -----END CERTIFICATE-----Generated at Wed May 13 13:39:49 2026 by rpki-client