$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c2358fd-ac56-388c-8980-ffff1a2241fd.roa File: 5c2358fd-ac56-388c-8980-ffff1a2241fd.roa (raw, json) Hash identifier: e1vajcg8K7sgi62MaCz7FqLktaKPLGUm/p5ZaxfIt+M= Subject key identifier: 3C:E7:B8:0A:13:D6:3A:4C:5E:13:7E:B7:EB:31:5F:4D:14:CA:75:EC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA9AFF0E24E13AA2E58000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c2358fd-ac56-388c-8980-ffff1a2241fd.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 66.30.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:9a:ff:0e:24:e1:3a:a2:e5:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=9bfa60a1-dd96-4ba3-a0f8-5e271fc03e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:33:5b:68:1b:ae:14:bc:91:c9:b8:98:4c: 42:fe:f9:58:ab:83:ed:56:03:de:d8:80:a3:e4:fe: af:97:bb:8a:2b:1a:8f:fb:4e:cc:9b:22:34:0e:d4: 1b:e1:76:d4:45:af:64:7d:cf:8a:38:26:1a:8f:e3: 9d:b5:ba:a2:af:82:ab:e4:19:96:14:8a:fc:3f:60: 31:c0:7f:17:87:96:75:27:c3:a3:57:ad:5e:e1:43: 10:95:b2:7d:b0:b2:63:23:0c:22:c9:f1:f4:70:d9: d5:74:80:2d:b9:b7:36:01:58:da:dc:46:19:f1:74: e0:c9:46:eb:29:d6:17:a8:3c:d7:e2:f3:12:09:58: 67:65:45:a9:c4:43:d5:75:28:46:63:a6:63:b6:37: 83:d1:39:2f:ad:12:85:98:e1:60:e3:82:96:90:71: e7:36:d4:27:dc:97:07:94:30:ee:da:6a:bb:2d:00: 89:cd:94:c1:7d:83:f8:8a:5b:c8:c3:a7:48:cc:dc: c6:c6:d2:fc:f2:d2:15:34:00:3d:27:4a:18:a9:cf: 87:31:27:40:79:37:6a:28:4e:c4:86:0b:ef:4d:fd: 50:bb:d1:ac:8e:f7:86:cc:c0:f1:3a:b3:49:40:cd: bb:0c:c8:0d:c9:47:a9:55:50:df:68:05:ee:13:5d: 84:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E7:B8:0A:13:D6:3A:4C:5E:13:7E:B7:EB:31:5F:4D:14:CA:75:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c2358fd-ac56-388c-8980-ffff1a2241fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.30.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:53:18:29:1c:1f:d1:42:18:00:1b:66:4a:62:a6:4d:b3:90: bd:39:dd:73:99:51:f1:ac:a9:30:0e:cb:45:be:51:21:7b:92: dc:9b:c2:0e:5a:d3:b4:e3:60:b4:cc:8c:cf:e2:06:fa:8a:1a: a9:62:b3:f5:31:a0:93:b0:89:b9:f1:11:20:64:39:af:5d:b5: 41:9b:51:1e:d1:06:42:24:8d:bf:65:89:22:40:df:58:0c:32: d5:13:92:dd:f1:d3:70:dc:bb:9d:3f:b8:81:04:68:5b:9f:32: e3:fa:44:ac:a4:b1:46:cf:20:a5:7d:f5:47:4a:f4:c4:3e:d4: cf:02:2f:2a:d1:42:0f:7c:8b:b5:3f:80:d3:15:5f:13:aa:a6: db:e7:56:92:d4:41:65:aa:f8:51:8d:e2:12:62:8b:e0:c6:0d: 03:ec:87:15:25:a9:d1:f1:11:08:aa:8e:a0:a1:7d:c7:af:d2: aa:8c:3f:4b:3c:a6:b4:6a:b5:39:5a:c4:37:b2:28:ea:0d:60: 97:91:b9:0f:cc:26:fe:1a:fb:38:43:31:e4:55:4e:c4:01:1f: 62:76:0b:72:e4:e5:0c:37:24:b1:e0:b5:d3:9b:60:b8:bb:58: 24:b5:32:1d:55:b2:0b:fb:22:29:84:d4:38:80:81:4d:72:eb: c9:00:b5:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vupr/DiThOqLlgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OWJmYTYwYTEtZGQ5Ni00YmEzLWEwZjgtNWUyNzFmYzAzZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAAzW2gbrhS8kcm4mExC/vlYq4PtVgPe2ICj 5P6vl7uKKxqP+07MmyI0DtQb4XbURa9kfc+KOCYaj+Odtbqir4Kr5BmWFIr8P2Ax wH8Xh5Z1J8OjV61e4UMQlbJ9sLJjIwwiyfH0cNnVdIAtubc2AVja3EYZ8XTgyUbr KdYXqDzX4vMSCVhnZUWpxEPVdShGY6ZjtjeD0TkvrRKFmOFg44KWkHHnNtQn3JcH lDDu2mq7LQCJzZTBfYP4ilvIw6dIzNzGxtL88tIVNAA9J0oYqc+HMSdAeTdqKE7E hgvvTf1Qu9GsjveGzMDxOrNJQM27DMgNyUepVVDfaAXuE12ECwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDznuAoT1jpMXhN+t+sxX00UynXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWMyMzU4ZmQtYWM1Ni0z ODhjLTg5ODAtZmZmZjFhMjI0MWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQh4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApTGCkcH9FCGAAbZkpipk2zkL053XOZUfGsqTAOy0W+USF7ktybwg5a 07TjYLTMjM/iBvqKGqlis/UxoJOwibnxESBkOa9dtUGbUR7RBkIkjb9liSJA31gM MtUTkt3x03Dcu50/uIEEaFufMuP6RKyksUbPIKV99UdK9MQ+1M8CLyrRQg98i7U/ gNMVXxOqptvnVpLUQWWq+FGN4hJii+DGDQPshxUlqdHxEQiqjqChfcev0qqMP0s8 prRqtTlaxDeyKOoNYJeRuQ/MJv4a+zhDMeRVTsQBH2J2C3Lk5Qw3JLHgtdObYLi7 WCS1Mh1Vsgv7IimE1DiAgU1y68kAtWE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:08:21 2026 by rpki-client