$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0420903-eb97-3d88-88d6-2e18ebfd1155.roa File: a0420903-eb97-3d88-88d6-2e18ebfd1155.roa (raw, json) Hash identifier: Erw3PoqaztYYyKMiSYtiGLqUs0xy0DPA9GY+OE6Bam8= Subject key identifier: 74:F5:EF:EC:5E:C7:0F:6F:C2:41:95:39:6E:14:80:76:CC:50:FE:DC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D8C2AB0D9FD12EE2033684A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0420903-eb97-3d88-88d6-2e18ebfd1155.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 174 IP address blocks: 66.253.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:b0:d9:fd:12:ee:20:33:68:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=b75b43c8-cafd-4762-bc11-d4521f05b887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c8:64:26:13:79:9f:03:fe:6f:19:95:e7:4a: bd:01:9f:1e:ac:da:2f:7e:5f:b2:67:2b:d2:b5:dd: e9:13:03:71:6d:8b:25:51:34:bc:10:3d:7b:29:2f: 8e:e1:99:5b:13:70:b1:c6:fd:17:12:ac:9e:46:4b: 86:7d:07:3d:cb:ba:26:1f:1f:76:27:8e:f0:b1:26: 14:b9:c6:1d:7f:c2:0f:98:96:13:48:99:e8:8c:0a: b7:75:c2:78:d7:44:eb:b5:36:91:e8:7a:53:32:28: c5:4e:a3:5a:80:e2:e0:53:48:ed:08:20:d8:5d:99: e3:5c:6f:50:70:6e:3a:73:90:ee:bf:8d:11:1f:5b: fc:3c:04:f1:28:5e:46:93:b6:e4:2f:bf:5a:10:5a: be:c3:c6:23:d1:55:73:f7:a1:4d:03:2d:7e:5b:d1: 56:ee:15:e2:a5:39:f5:f3:85:e0:fd:56:6a:65:36: 8e:fe:d0:e7:07:41:c9:f0:aa:2d:5b:61:7e:28:e5: 74:37:f5:51:73:3b:24:df:c7:af:55:e9:d6:65:ac: e7:02:86:66:bb:34:15:8b:97:9d:23:37:b8:d8:86: 08:07:64:47:6a:79:ef:7a:a9:cc:d6:c2:32:df:96: f8:86:ef:bf:7f:a2:f9:4a:3b:91:53:b7:49:83:ba: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F5:EF:EC:5E:C7:0F:6F:C2:41:95:39:6E:14:80:76:CC:50:FE:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0420903-eb97-3d88-88d6-2e18ebfd1155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:5c:fa:e9:32:d1:ad:8a:ae:98:6d:f4:06:92:9e:4d:22:0a: 1b:70:62:8a:1b:e8:81:bc:08:cf:66:60:69:3c:a8:81:0a:63: c3:ab:36:15:cd:b3:30:54:27:d3:60:58:65:e0:92:8c:a9:99: 75:bd:ca:62:65:55:2a:b7:55:94:39:21:c1:f5:91:a6:c1:8c: 96:d9:da:9e:61:43:07:a7:21:d9:1a:76:98:7b:32:04:c3:04: 15:1f:5b:fa:09:f5:9b:5e:8b:31:d5:0d:a8:ed:0b:cf:b0:b2: 2f:05:e8:cd:76:91:47:35:5e:f6:d3:19:23:ca:70:2c:5a:9c: a6:00:9f:43:e3:5a:ce:8d:48:64:2f:eb:0e:17:85:ce:77:bc: b5:f4:7e:04:08:31:95:fc:86:f8:30:a7:d8:e4:9d:5c:61:af: 2e:03:e4:a8:a8:b5:6a:22:49:78:b7:87:91:d3:7d:be:b8:30: 2f:8b:b5:11:57:16:f4:bf:6f:71:32:be:1e:99:a2:32:da:43: 3d:ae:f5:55:fd:df:79:1a:14:e5:10:db:f8:22:a6:91:8e:5b: 7d:b4:13:8b:80:fb:d3:b6:d6:29:b6:d3:df:61:9d:67:54:3d: b1:a5:14:b5:94:66:91:fa:80:75:a9:0e:68:c0:71:1e:0b:dc: 8d:de:b8:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKrDZ/RLuIDNoSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk Yjc1YjQzYzgtY2FmZC00NzYyLWJjMTEtZDQ1MjFmMDViODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjshkJhN5nwP+bxmV50q9AZ8erNovfl+yZyvS td3pEwNxbYslUTS8ED17KS+O4ZlbE3Cxxv0XEqyeRkuGfQc9y7omHx92J47wsSYU ucYdf8IPmJYTSJnojAq3dcJ410TrtTaR6HpTMijFTqNagOLgU0jtCCDYXZnjXG9Q cG46c5Duv40RH1v8PATxKF5Gk7bkL79aEFq+w8Yj0VVz96FNAy1+W9FW7hXipTn1 84Xg/VZqZTaO/tDnB0HJ8KotW2F+KOV0N/VRczsk38evVenWZaznAoZmuzQVi5ed Ize42IYIB2RHannveqnM1sIy35b4hu+/f6L5SjuRU7dJg7q9fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHT17+xexw9vwkGVOW4UgHbMUP7cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTA0MjA5MDMtZWI5Ny0z ZDg4LTg4ZDYtMmUxOGViZmQxMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtc+uky0a2Krpht9AaSnk0iChtwYoob6IG8CM9mYGk8qIEKY8OrNhXN szBUJ9NgWGXgkoypmXW9ymJlVSq3VZQ5IcH1kabBjJbZ2p5hQwenIdkadph7MgTD BBUfW/oJ9ZteizHVDajtC8+wsi8F6M12kUc1XvbTGSPKcCxanKYAn0PjWs6NSGQv 6w4Xhc53vLX0fgQIMZX8hvgwp9jknVxhry4D5KiotWoiSXi3h5HTfb64MC+LtRFX FvS/b3Eyvh6ZojLaQz2u9VX933kaFOUQ2/gippGOW320E4uA+9O21im2099hnWdU PbGlFLWUZpH6gHWpDmjAcR4L3I3euOs= -----END CERTIFICATE-----Generated at Wed May 13 13:18:23 2026 by rpki-client