$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dfd7e73a-4121-3249-8bfe-b9f1d8ba284e.roa File: dfd7e73a-4121-3249-8bfe-b9f1d8ba284e.roa (raw, json) Hash identifier: r4S42jvQ4v/pTOlQ9g7JXKl8Mn6pcfjfqsw2hB7jJpI= Subject key identifier: FF:4F:D6:F0:2D:54:B4:06:FD:2D:2C:4B:8C:6F:E2:6E:A7:6D:A9:69 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584DAC457DD85309D23DD9B4C180 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dfd7e73a-4121-3249-8bfe-b9f1d8ba284e.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 13576 IP address blocks: 66.115.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:7d:d8:53:09:d2:3d:d9:b4:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=48330962-a8cd-4f5f-be26-c78bbeb1c6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a8:bb:28:58:26:67:d8:1e:8e:48:6d:47:27: 72:3f:d3:df:d1:43:87:77:9f:cf:e0:69:af:83:b2: 9d:32:ec:cf:6d:81:99:b6:f8:e9:69:8e:1f:1a:d9: 79:22:bd:fe:67:17:81:ab:c7:83:98:1f:34:5f:47: 26:d2:8b:8f:1e:12:80:99:1d:46:7e:c3:0c:72:de: 54:6c:d7:9c:78:a9:29:c6:70:a2:f1:22:6f:b6:33: 64:23:41:9d:57:65:8e:de:67:f8:0c:23:e6:9e:53: 60:01:08:c4:7c:67:d0:de:a7:0f:56:87:83:9a:a7: 33:57:25:56:8d:54:1d:bc:8d:b5:10:1b:aa:0a:79: ed:ef:10:97:5d:dd:90:95:7c:04:01:da:22:bf:f6: f8:96:7d:76:17:ac:1f:cb:a5:10:75:87:6d:2f:67: 8e:74:e4:4b:31:c8:30:a2:b0:49:fd:2e:03:c3:68: d9:51:76:45:d3:dd:36:92:1c:b0:d2:33:5e:cd:3e: 1c:8e:ae:a5:88:6d:6a:b4:e3:48:f8:05:68:c2:c2: 78:aa:7f:01:67:40:03:ce:54:3d:a5:8e:ee:5f:ad: ce:44:36:60:c1:0e:fa:0c:45:7d:ca:5d:52:fb:f4: 34:ab:80:a1:b0:7c:6e:38:94:f0:1b:4a:7c:00:ce: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4F:D6:F0:2D:54:B4:06:FD:2D:2C:4B:8C:6F:E2:6E:A7:6D:A9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dfd7e73a-4121-3249-8bfe-b9f1d8ba284e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:bb:70:cb:1c:47:5b:a5:91:8e:21:5f:9b:1a:ca:84:e4:4e: 5a:55:f2:e1:3b:36:06:64:ca:a2:74:c1:ac:8b:5c:12:25:2e: f2:89:3d:53:ca:67:ff:9d:84:fc:ac:ff:c2:47:98:7d:f3:64: cb:54:1e:2c:7e:8b:dd:b6:a1:f2:84:ec:a7:c8:1a:e2:b8:a2: 6f:3e:7e:fa:6d:cb:c1:c8:f3:fb:73:9d:15:e6:4f:fe:0a:1c: 34:c6:8b:b7:0c:0a:bf:af:64:db:ad:20:4d:5f:09:99:dd:5e: d6:ef:09:95:42:00:dd:f5:d6:d1:39:27:fd:28:4b:33:3d:c1: 1a:c0:0b:41:e9:4e:87:00:c7:24:8f:d7:cc:59:6e:fb:8b:d8: 87:bd:a9:87:99:52:01:8d:33:20:0e:70:ee:da:01:b7:29:ae: e8:a7:dc:5a:96:18:a4:28:4d:21:a2:95:80:ad:62:98:96:87: 63:73:f0:20:24:16:29:50:81:c9:2b:89:9d:d0:60:55:45:05: e6:af:6f:c1:49:e6:94:b0:62:f2:4b:86:e1:08:d2:74:6b:c4: 42:e7:de:c1:c9:12:0f:4a:6b:8a:6a:79:fe:e3:c1:48:af:ec: 58:9a:4d:fa:0f:57:f2:35:ff:f3:cb:2b:43:23:7c:03:d7:4b: 9e:48:40:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRX3YUwnSPdm0wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NDgzMzA5NjItYThjZC00ZjVmLWJlMjYtYzc4YmJlYjFjNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46i7KFgmZ9gejkhtRydyP9Pf0UOHd5/P4Gmv g7KdMuzPbYGZtvjpaY4fGtl5Ir3+ZxeBq8eDmB80X0cm0ouPHhKAmR1GfsMMct5U bNeceKkpxnCi8SJvtjNkI0GdV2WO3mf4DCPmnlNgAQjEfGfQ3qcPVoeDmqczVyVW jVQdvI21EBuqCnnt7xCXXd2QlXwEAdoiv/b4ln12F6wfy6UQdYdtL2eOdORLMcgw orBJ/S4Dw2jZUXZF0902khyw0jNezT4cjq6liG1qtONI+AVowsJ4qn8BZ0ADzlQ9 pY7uX63ORDZgwQ76DEV9yl1S+/Q0q4ChsHxuOJTwG0p8AM5rxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9P1vAtVLQG/S0sS4xv4m6nbalpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZGZkN2U3M2EtNDEyMS0z MjQ5LThiZmUtYjlmMWQ4YmEyODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm7cMscR1ulkY4hX5sayoTkTlpV8uE7NgZkyqJ0wayLXBIlLvKJPVPK Z/+dhPys/8JHmH3zZMtUHix+i922ofKE7KfIGuK4om8+fvpty8HI8/tznRXmT/4K HDTGi7cMCr+vZNutIE1fCZndXtbvCZVCAN311tE5J/0oSzM9wRrAC0HpTocAxySP 18xZbvuL2Ie9qYeZUgGNMyAOcO7aAbcpruin3FqWGKQoTSGilYCtYpiWh2Nz8CAk FilQgckriZ3QYFVFBeavb8FJ5pSwYvJLhuEI0nRrxELn3sHJEg9Ka4pqef7jwUiv 7FiaTfoPV/I1//PLK0MjfAPXS55IQPQ= -----END CERTIFICATE-----Generated at Wed May 13 05:21:49 2026 by rpki-client