$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b21f8c59-b5ba-3d72-b3d1-977492bda21e.roa File: b21f8c59-b5ba-3d72-b3d1-977492bda21e.roa (raw, json) Hash identifier: f7H/drZXoFyrLpdt0YPTG378CSHdj75DU5Iu8EEm4OU= Subject key identifier: F4:1F:64:E0:28:68:C6:9E:86:FD:B9:D4:FE:8E:40:12:85:74:E9:0D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DAD96B0F1A80D82CF772781B8 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b21f8c59-b5ba-3d72-b3d1-977492bda21e.roa Signing time: Thu 30 Apr 2026 12:20:03 +0000 ROA not before: Thu 30 Apr 2026 12:20:03 +0000 ROA not after: Wed 29 Jul 2026 12:20:03 +0000 asID: 6079 IP address blocks: 66.253.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:96:b0:f1:a8:0d:82:cf:77:27:81:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 30 12:20:03 2026 GMT Not After : Jul 29 12:20:03 2026 GMT Subject: CN=541cf5cd-301f-41bc-8457-4c4e5f1d46f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:39:b3:77:6d:fc:fb:d1:4e:02:72:b2:b7:5e: 7e:be:10:34:6e:6b:8d:ff:7d:93:2e:22:05:95:10: c5:45:d0:cf:63:a8:ca:5e:07:ba:cc:90:45:37:e0: 9e:02:c8:0c:57:1b:4b:f6:dd:b6:3f:5b:b3:2c:77: b3:91:a4:05:79:53:8e:c3:c4:e8:74:ae:35:f3:81: cc:b2:08:63:a7:6a:92:84:ab:4f:1c:ee:03:ee:c6: bb:b3:bd:7e:b3:b7:c5:3a:51:8e:60:cf:cd:50:9a: 09:85:ba:47:d9:54:41:e6:64:60:a0:ca:f4:68:e2: 5a:ee:48:6d:89:53:8b:c8:89:43:47:01:bd:b0:f8: 3b:b5:bf:c6:67:49:90:5e:14:19:fb:4d:1c:54:56: ac:41:a1:8f:41:93:11:c5:28:28:48:39:ff:25:17: 5f:4c:27:9c:da:72:0d:f2:61:6f:83:57:25:65:3d: a4:84:49:43:dc:9f:3b:59:12:cf:e4:30:85:71:bc: 2b:bf:e1:7a:46:aa:6f:89:d4:4b:ed:9b:08:78:92: 54:34:e3:6c:40:6a:1f:43:e2:1c:63:3d:e1:07:eb: 67:d2:4e:1e:59:c1:d5:f2:66:69:a0:b2:70:72:43: e0:df:45:3e:62:fd:9c:ae:f4:42:0f:fc:3e:31:5c: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:64:E0:28:68:C6:9E:86:FD:B9:D4:FE:8E:40:12:85:74:E9:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b21f8c59-b5ba-3d72-b3d1-977492bda21e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:54:13:a7:24:c6:62:bb:8a:14:8f:d6:0d:5e:1e:95:33:4d: 70:59:c2:dc:d1:89:15:f4:26:fa:e8:1d:13:8f:0e:7e:5f:a4: 34:e2:9a:e6:7b:5d:24:3f:97:f2:64:db:d9:b8:cc:d7:a5:11: 85:2c:9a:9c:bd:17:10:bc:8d:a2:6b:60:65:96:af:03:49:2d: a8:7c:23:f6:d9:04:9a:69:36:ca:1a:72:b9:44:08:f4:1d:5b: e6:cb:3a:fb:28:99:48:60:87:98:4f:6c:ea:5d:f0:a6:96:27: 93:6e:29:e3:89:39:60:95:25:0b:b2:89:88:31:6e:f5:2b:a0: ad:28:15:41:e7:b0:f7:9d:f1:72:8f:08:87:17:47:82:3c:da: f5:f1:60:a5:6d:9f:c6:f1:59:90:2a:56:f6:64:3f:66:e5:90: 30:32:63:91:ad:fa:5c:e2:3b:64:4c:13:cb:69:78:e5:c3:4f: a6:2e:29:be:32:a0:98:da:cc:ce:63:01:95:49:f2:19:88:ec: 09:76:77:40:7b:38:03:d8:eb:95:2d:71:4a:6f:6a:08:65:81: 77:17:b0:01:d4:be:d6:72:48:4f:28:b3:f1:99:f9:c6:27:8b: d5:1d:3c:8f:78:be:d4:be:6c:f2:4f:ea:92:ca:86:57:87:ae: 46:b1:13:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tlrDxqA2Cz3cngbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQzMDEyMjAwM1oXDTI2MDcyOTEyMjAwM1owLzEtMCsGA1UEAxMk NTQxY2Y1Y2QtMzAxZi00MWJjLTg0NTctNGM0ZTVmMWQ0NmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzmzd238+9FOAnKyt15+vhA0bmuN/32TLiIF lRDFRdDPY6jKXge6zJBFN+CeAsgMVxtL9t22P1uzLHezkaQFeVOOw8TodK4184HM sghjp2qShKtPHO4D7sa7s71+s7fFOlGOYM/NUJoJhbpH2VRB5mRgoMr0aOJa7kht iVOLyIlDRwG9sPg7tb/GZ0mQXhQZ+00cVFasQaGPQZMRxSgoSDn/JRdfTCec2nIN 8mFvg1clZT2khElD3J87WRLP5DCFcbwrv+F6RqpvidRL7ZsIeJJUNONsQGofQ+Ic Yz3hB+tn0k4eWcHV8mZpoLJwckPg30U+Yv2crvRCD/w+MVwdjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQfZOAoaMaehv251P6OQBKFdOkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjIxZjhjNTktYjViYS0z ZDcyLWIzZDEtOTc3NDkyYmRhMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1UE6ckxmK7ihSP1g1eHpUzTXBZwtzRiRX0JvroHROPDn5fpDTimuZ7 XSQ/l/Jk29m4zNelEYUsmpy9FxC8jaJrYGWWrwNJLah8I/bZBJppNsoacrlECPQd W+bLOvsomUhgh5hPbOpd8KaWJ5NuKeOJOWCVJQuyiYgxbvUroK0oFUHnsPed8XKP CIcXR4I82vXxYKVtn8bxWZAqVvZkP2blkDAyY5Gt+lziO2RME8tpeOXDT6YuKb4y oJjazM5jAZVJ8hmI7Al2d0B7OAPY65UtcUpvaghlgXcXsAHUvtZySE8os/GZ+cYn i9UdPI94vtS+bPJP6pLKhleHrkaxE4I= -----END CERTIFICATE-----Generated at Wed May 13 11:53:04 2026 by rpki-client