$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c8eae9ca-69ee-3e6b-b9be-cd60a8dc8644.roa File: c8eae9ca-69ee-3e6b-b9be-cd60a8dc8644.roa (raw, json) Hash identifier: ilYtivTHttNg3WbpxOCDBbgzscZI+nOzMS5l57eMHxM= Subject key identifier: 0B:76:4D:FA:98:DC:61:47:67:BB:8D:2A:E3:C4:39:C4:DF:C3:C9:B2 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584DC995B3F2729C344E645C1E80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c8eae9ca-69ee-3e6b-b9be-cd60a8dc8644.roa Signing time: Sun 10 May 2026 13:00:31 +0000 ROA not before: Sun 10 May 2026 13:00:31 +0000 ROA not after: Sat 08 Aug 2026 13:00:31 +0000 asID: 395037 IP address blocks: 66.128.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:95:b3:f2:72:9c:34:4e:64:5c:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 10 13:00:31 2026 GMT Not After : Aug 8 13:00:31 2026 GMT Subject: CN=b7347465-2c12-47b0-9315-30cabb8ee8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:41:cf:17:10:9e:7a:92:99:05:06:ee:7a: a9:f6:9e:cb:c1:e4:9f:67:7b:ce:7f:bc:38:2f:f1: 28:d6:d9:cd:f9:a5:a4:c4:7e:bd:6a:81:97:b2:b0: 1c:84:8b:ac:0e:71:8a:0b:ff:eb:07:4e:bd:5c:7f: db:2c:6b:7d:bd:f5:a5:fb:17:01:c3:86:c9:30:01: 70:78:51:ea:ce:79:1f:68:9e:82:38:4a:c2:99:d9: ce:bd:81:e1:99:2f:c1:0d:1a:1b:7b:e9:f4:bc:fc: 20:b0:6e:64:e2:22:3b:10:6e:13:07:9c:db:7f:cc: d3:1e:e6:fc:b4:eb:c5:e6:7f:7a:8d:52:e8:d7:82: c4:f6:1a:64:fd:15:fc:f0:8b:e8:39:73:47:89:a0: 26:1f:00:58:99:4e:ea:a1:60:12:94:dd:b5:be:16: d4:02:5b:ff:61:20:c5:c9:ab:42:15:4f:c0:66:1e: 35:78:2c:32:9d:42:3a:e2:ba:1c:97:bf:f9:41:5e: bd:81:2a:9c:e1:98:15:50:52:85:bd:c0:95:f9:82: 34:f2:9a:6a:b5:a1:9f:a5:8d:c9:e1:dc:18:ea:11: 62:e6:b4:ed:2c:f6:d0:54:19:b5:c0:45:27:54:32: 3a:7b:fa:93:45:f6:52:ed:3a:4d:c3:c9:ea:27:3c: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:76:4D:FA:98:DC:61:47:67:BB:8D:2A:E3:C4:39:C4:DF:C3:C9:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c8eae9ca-69ee-3e6b-b9be-cd60a8dc8644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:43:1b:a7:b7:42:79:7f:92:44:b3:6e:81:bd:13:65:c0:d5: a1:08:a4:48:8c:c1:9a:99:a3:2d:13:86:74:37:17:32:16:83: 0a:ff:f0:f8:24:e2:27:41:65:ee:a9:cd:e7:93:9b:9e:f4:d2: 63:9c:6a:b8:fd:c4:be:43:4a:7d:3b:86:6b:86:f8:56:c3:76: 14:70:3a:11:4a:10:3e:9a:62:89:cd:70:5a:f5:48:72:db:95: 98:29:59:dd:86:f0:73:96:a0:3a:24:e3:50:f4:f1:7c:f9:e8: 51:6d:8f:06:3f:33:20:d8:af:18:d7:a2:11:8d:46:d3:01:8d: 94:1a:c0:f4:6c:b6:12:e0:d7:05:20:45:b4:ab:13:64:ec:81: 24:01:2d:32:1c:8a:e0:b1:ae:15:9c:22:aa:61:17:68:5a:7a: 34:08:a4:0d:aa:fd:fd:55:fa:ae:20:3f:98:1c:c6:13:5c:f1: 02:09:93:a7:6d:97:08:a6:2e:f2:66:5c:c3:d6:bc:16:83:22: 0d:ee:43:de:8e:e3:10:66:ef:2e:d5:74:25:ee:d0:6f:68:f2: 2c:63:cb:8e:1b:f2:94:ab:09:59:b8:70:8e:9e:7c:85:04:80: 93:a8:18:a2:c4:24:9d:1a:ae:e6:61:5a:a7:32:39:b0:f9:56: dc:01:88:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3JlbPycpw0TmRcHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk YjczNDc0NjUtMmMxMi00N2IwLTkzMTUtMzBjYWJiOGVlOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx25BzxcQnnqSmQUG7nqp9p7LweSfZ3vOf7w4 L/Eo1tnN+aWkxH69aoGXsrAchIusDnGKC//rB069XH/bLGt9vfWl+xcBw4bJMAFw eFHqznkfaJ6COErCmdnOvYHhmS/BDRobe+n0vPwgsG5k4iI7EG4TB5zbf8zTHub8 tOvF5n96jVLo14LE9hpk/RX88IvoOXNHiaAmHwBYmU7qoWASlN21vhbUAlv/YSDF yatCFU/AZh41eCwynUI64rocl7/5QV69gSqc4ZgVUFKFvcCV+YI08ppqtaGfpY3J 4dwY6hFi5rTtLPbQVBm1wEUnVDI6e/qTRfZS7TpNw8nqJzwWBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAt2TfqY3GFHZ7uNKuPEOcTfw8myMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzhlYWU5Y2EtNjllZS0z ZTZiLWI5YmUtY2Q2MGE4ZGM4NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdDG6e3Qnl/kkSzboG9E2XA1aEIpEiMwZqZoy0ThnQ3FzIWgwr/8Pgk 4idBZe6pzeeTm5700mOcarj9xL5DSn07hmuG+FbDdhRwOhFKED6aYonNcFr1SHLb lZgpWd2G8HOWoDok41D08Xz56FFtjwY/MyDYrxjXohGNRtMBjZQawPRsthLg1wUg RbSrE2TsgSQBLTIciuCxrhWcIqphF2haejQIpA2q/f1V+q4gP5gcxhNc8QIJk6dt lwimLvJmXMPWvBaDIg3uQ96O4xBm7y7VdCXu0G9o8ixjy44b8pSrCVm4cI6efIUE gJOoGKLEJJ0aruZhWqcyObD5VtwBiCg= -----END CERTIFICATE-----Generated at Wed May 13 13:52:09 2026 by rpki-client