$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa File: 4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa (raw, json) Hash identifier: D1ZTnxUtuE9wVlf+U5zHJWq/SJPqmxqanKr0p5R7uxM= Subject key identifier: 0E:97:4F:4F:DC:E8:E9:3D:2B:EB:06:04:1A:4A:96:38:29:BD:5C:3D Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584D83CAB4BA66922775BFDCEE40 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 6597 IP address blocks: 66.163.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:b4:ba:66:92:27:75:bf:dc:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=7179ae65-f160-45fc-994c-d47847a01815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3e:aa:44:68:a1:8d:cd:24:09:ba:0c:b3:d2: 69:3f:57:37:26:83:91:bf:a0:d1:51:d2:1e:31:08: 07:a9:69:e0:8f:3d:63:cd:21:fd:36:bb:05:c3:fe: a7:f9:b6:e1:fa:72:13:8d:31:41:c5:e4:06:4f:e4: 93:d3:3b:68:9b:9b:04:9a:4d:99:d6:17:84:d7:13: d8:82:36:f0:9c:c0:93:97:97:3a:66:6c:cb:ef:b6: c6:f4:0d:1c:c6:a2:51:78:f4:d2:7f:1f:c5:3c:7d: 50:c6:4b:a0:b9:93:b8:d0:94:01:6b:b4:df:27:4e: 6e:12:8c:ee:b6:b2:91:96:f1:81:23:61:30:7b:13: ad:06:c9:8b:6d:4f:21:53:f6:84:69:5f:49:17:7d: e0:da:13:27:38:44:33:90:c1:9f:44:6b:f3:4d:c6: 62:cd:96:01:74:89:b5:3c:d1:de:f2:15:34:84:6b: 36:26:47:2d:54:63:e5:ba:fe:ca:5a:e2:0c:72:33: 63:e4:2c:7b:17:ca:1a:79:e8:1a:d3:eb:8a:26:a5: 46:d3:f6:f0:e5:b9:fe:41:91:5e:e0:2f:06:53:42: 35:36:9d:83:db:58:2c:5c:fd:a2:02:6a:f5:27:7f: 7b:58:e4:48:79:6b:56:6a:a4:50:d2:a2:4b:81:92: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:97:4F:4F:DC:E8:E9:3D:2B:EB:06:04:1A:4A:96:38:29:BD:5C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 66.163.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8c:8f:84:f9:d1:1e:85:f6:ea:8f:1a:0c:fa:45:ad:6d:59: c5:a5:a8:a7:b2:a2:07:b2:11:71:21:d9:eb:fa:d4:51:e6:d2: 09:21:3d:da:04:b2:49:7b:35:93:f4:d1:ba:cd:06:a8:6c:33: 6b:a2:a8:87:31:9e:dd:83:6e:c9:3a:34:41:29:df:a0:d0:80: 4d:07:d3:af:83:c1:41:12:35:83:69:10:54:9f:ca:3a:6a:ba: 6f:9e:69:f0:7e:76:94:f0:92:af:df:9f:36:9e:18:bd:f9:7d: 51:30:f3:d3:c1:b3:d3:58:dd:cd:6c:76:a5:b8:e1:81:67:e6: 9f:fb:dc:63:0e:7c:cd:5c:f6:34:e7:3f:91:5e:d8:ee:87:fe: e9:69:c0:1f:5d:58:7d:83:b9:9b:1c:13:1f:46:80:c9:df:08: 37:f9:6a:be:5a:54:05:4e:34:01:7d:ee:fc:02:be:ba:02:f2: 66:af:aa:61:34:0c:ed:16:f0:1d:e2:fa:a5:9e:eb:d7:f2:75: f1:ad:04:a6:0e:ad:15:57:08:4e:44:12:46:0c:d3:68:f9:84: 5b:89:ec:ac:c3:7e:a3:36:3b:a9:f6:ca:1e:a1:c6:95:99:d2: 9b:60:46:ad:37:38:21:49:65:b5:37:19:6d:13:48:07:49:7a: 91:ed:b4:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DyrS6ZpIndb/c7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk NzE3OWFlNjUtZjE2MC00NWZjLTk5NGMtZDQ3ODQ3YTAxODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz6qRGihjc0kCboMs9JpP1c3JoORv6DRUdIe MQgHqWngjz1jzSH9NrsFw/6n+bbh+nITjTFBxeQGT+ST0ztom5sEmk2Z1heE1xPY gjbwnMCTl5c6ZmzL77bG9A0cxqJRePTSfx/FPH1QxkuguZO40JQBa7TfJ05uEozu trKRlvGBI2EwexOtBsmLbU8hU/aEaV9JF33g2hMnOEQzkMGfRGvzTcZizZYBdIm1 PNHe8hU0hGs2JkctVGPluv7KWuIMcjNj5Cx7F8oaeega0+uKJqVG0/bw5bn+QZFe 4C8GU0I1Np2D21gsXP2iAmr1J397WORIeWtWaqRQ0qJLgZJvJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6XT0/c6Ok9K+sGBBpKljgpvVw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvNGUxNWYwNDctYzBhZS0z ZmU3LWEyNGItN2EyNjExNmFmMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImMj4T50R6F9uqPGgz6Ra1tWcWlqKeyogeyEXEh2ev61FHm0gkhPdoE skl7NZP00brNBqhsM2uiqIcxnt2Dbsk6NEEp36DQgE0H06+DwUESNYNpEFSfyjpq um+eafB+dpTwkq/fnzaeGL35fVEw89PBs9NY3c1sdqW44YFn5p/73GMOfM1c9jTn P5Fe2O6H/ulpwB9dWH2DuZscEx9GgMnfCDf5ar5aVAVONAF97vwCvroC8mavqmE0 DO0W8B3i+qWe69fydfGtBKYOrRVXCE5EEkYM02j5hFuJ7KzDfqM2O6n2yh6hxpWZ 0ptgRq03OCFJZbU3GW0TSAdJepHttCk= -----END CERTIFICATE-----Generated at Fri Apr 17 17:06:47 2026 by rpki-client