$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/3950370e-8c40-395e-afe3-17d64fefd85e.roa File: 3950370e-8c40-395e-afe3-17d64fefd85e.roa (raw, json) Hash identifier: l+71gFX+apA5bfdk21/mVTCcr0cyVhGoSeeWIiwkXp0= Subject key identifier: E2:86:3E:5D:77:E1:A0:E9:13:F9:28:72:4D:D6:52:D9:00:76:C1:DF Certificate issuer: /CN=d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb Certificate serial: 010D0C9F4328584D9B8558B9888FE8F96FCA4B00 Authority key identifier: D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/3950370e-8c40-395e-afe3-17d64fefd85e.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 54262 IP address blocks: 66.51.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:58:b9:88:8f:e8:f9:6f:ca:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=a54592da-1cbb-474c-b21b-6cf6cfa68977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e5:ec:ef:7d:ba:e0:50:dc:6c:e6:47:a4:0a: 36:f8:a7:d2:3e:3a:65:cf:53:b4:69:67:90:c3:ac: a1:bc:59:f5:ec:88:c4:80:38:14:c5:35:e7:9b:1a: 76:ca:a4:6b:a4:a5:1d:62:04:38:a9:43:93:9d:39: b2:f4:38:3c:5d:dd:d9:26:2d:bb:1f:dd:e2:11:c4: e7:06:e3:cf:ae:bc:bd:94:c1:09:c1:d8:d5:14:d3: 21:a5:52:d1:d5:a4:8b:ec:82:5b:84:43:b7:2e:af: 51:29:21:71:7b:42:58:73:a2:34:c7:54:b3:24:32: 86:0c:0a:5e:1b:cd:e9:4b:d4:50:f5:b4:49:f9:df: 65:37:97:eb:b7:de:03:78:8e:5e:bb:1e:52:f7:e3: 06:92:74:4f:cd:da:f2:19:f8:4c:dc:0f:9a:18:69: af:11:78:5f:f7:4a:ca:eb:96:43:45:d8:f0:fb:63: 7b:b4:c5:3d:9c:65:d4:90:49:8f:22:d4:3d:04:ed: ee:6f:ce:0a:ea:42:f2:76:3a:2b:ae:76:db:29:80: 73:13:13:80:15:1b:aa:89:16:4b:d3:56:c5:80:90: ab:2d:d7:f5:15:55:c4:26:42:0c:01:e8:53:a6:27: 7c:08:a3:17:93:ac:c6:4e:ff:48:74:fd:9f:0a:8a: 51:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:86:3E:5D:77:E1:A0:E9:13:F9:28:72:4D:D6:52:D9:00:76:C1:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/3950370e-8c40-395e-afe3-17d64fefd85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.crl X509v3 Authority Key Identifier: keyid:D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer sbgp-ipAddrBlock: critical IPv4: 66.51.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e6:60:5c:02:65:53:6d:ec:e7:d6:5d:0e:46:2b:44:58:2d: 10:b3:5b:e6:16:88:7f:19:60:4d:7b:95:1a:6f:93:a4:6e:59: 3e:d7:4f:5d:00:9a:73:44:eb:fb:41:b2:36:ee:1c:7d:0d:08: ef:f7:74:04:32:15:a3:59:99:c5:c5:d1:60:8a:46:f4:c0:60: 1c:da:74:d2:ca:05:c4:de:2e:76:a6:de:55:e3:84:d3:8a:6b: 5f:aa:db:ec:c7:95:70:90:f8:68:ae:e6:07:6d:dc:18:a1:de: 8e:f9:19:9d:0f:94:4c:6d:e1:e0:e8:7e:07:06:66:6e:e5:63: 8e:39:6e:28:d8:3c:cb:bb:4a:f5:1a:97:56:28:55:55:0b:4b: 7c:b2:69:a4:7d:3e:3b:7d:28:49:f0:a1:ac:62:32:00:47:78: e1:da:45:28:e4:09:06:3a:50:5d:ae:00:39:99:29:67:0a:e4: 1a:8a:20:95:19:93:98:db:c4:87:ab:4e:77:17:f4:f4:39:11: d7:c3:9c:3c:fb:64:91:b3:11:4f:c7:33:56:46:9b:f7:d5:f4: e6:ec:13:d2:f7:6c:d2:a5:51:6b:29:77:ab:2a:cf:ec:ce:ec: 61:a0:ee:8f:63:df:8d:18:64:3c:57:61:57:6b:ac:03:51:86: d7:fd:bc:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVi5iI/o+W/KSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDllYzIzMDItYzllNy00OWQ4LThmYzgtZGEyNzIxZmZl MmJiMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk YTU0NTkyZGEtMWNiYi00NzRjLWIyMWItNmNmNmNmYTY4OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuXs73264FDcbOZHpAo2+KfSPjplz1O0aWeQ w6yhvFn17IjEgDgUxTXnmxp2yqRrpKUdYgQ4qUOTnTmy9Dg8Xd3ZJi27H93iEcTn BuPPrry9lMEJwdjVFNMhpVLR1aSL7IJbhEO3Lq9RKSFxe0JYc6I0x1SzJDKGDApe G83pS9RQ9bRJ+d9lN5frt94DeI5eux5S9+MGknRPzdryGfhM3A+aGGmvEXhf90rK 65ZDRdjw+2N7tMU9nGXUkEmPItQ9BO3ub84K6kLydjorrnbbKYBzExOAFRuqiRZL 01bFgJCrLdf1FVXEJkIMAehTpid8CKMXk6zGTv9IdP2fCopRJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKGPl134aDpE/kock3WUtkAdsHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWVj MjMwMi1jOWU3LTQ5ZDgtOGZjOC1kYTI3MjFmZmUyYmIvMzk1MDM3MGUtOGM0MC0z OTVlLWFmZTMtMTdkNjRmZWZkODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDllYzIzMDItYzllNy00OWQ4LThm YzgtZGEyNzIxZmZlMmJiL2Q5ZWMyMzAyLWM5ZTctNDlkOC04ZmM4LWRhMjcyMWZm ZTJiYi5jcmwwHwYDVR0jBBgwFoAU0/PWhM+bD52imKEdmJlh/rvtXRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOWVjMjMwMi1jOWU3LTQ5ZDgtOGZjOC1kYTI3 MjFmZmUyYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjNqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnmYFwCZVNt7OfWXQ5GK0RYLRCzW+YWiH8ZYE17lRpvk6RuWT7XT10A mnNE6/tBsjbuHH0NCO/3dAQyFaNZmcXF0WCKRvTAYBzadNLKBcTeLnam3lXjhNOK a1+q2+zHlXCQ+Giu5gdt3Bih3o75GZ0PlExt4eDofgcGZm7lY445bijYPMu7SvUa l1YoVVULS3yyaaR9Pjt9KEnwoaxiMgBHeOHaRSjkCQY6UF2uADmZKWcK5BqKIJUZ k5jbxIerTncX9PQ5EdfDnDz7ZJGzEU/HM1ZGm/fV9ObsE9L3bNKlUWspd6sqz+zO 7GGg7o9j340YZDxXYVdrrANRhtf9vCE= -----END CERTIFICATE-----Generated at Wed May 13 01:19:43 2026 by rpki-client