$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/e5380eca-3a33-3f78-8a68-959ba62a5d27.roa File: e5380eca-3a33-3f78-8a68-959ba62a5d27.roa (raw, json) Hash identifier: 73txycGtLvGG3DtfWQs0wjZKuPp2H8cMS/j85VrRRZs= Subject key identifier: CD:DA:2D:A8:7D:08:EA:60:0B:4D:BA:D1:C0:E1:A9:27:91:BB:03:42 Certificate issuer: /CN=ec2240cc-d515-4cf6-9c7a-914117fee035 Certificate serial: 010D0C9F4328584D7F9A8D62A8AE8855E2F4DB00 Authority key identifier: 05:4C:1F:37:3D:4E:5C:1E:4A:67:7A:6F:F0:BB:95:55:B9:BF:49:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/e5380eca-3a33-3f78-8a68-959ba62a5d27.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 46346 IP address blocks: 66.163.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/ec2240cc-d515-4cf6-9c7a-914117fee035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/ec2240cc-d515-4cf6-9c7a-914117fee035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8d:62:a8:ae:88:55:e2:f4:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec2240cc-d515-4cf6-9c7a-914117fee035 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=64f14c7f-6fe2-44dd-aa45-cca249174217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f0:bc:1a:c6:51:1b:05:b0:18:00:24:27:f9: 49:2f:f0:42:d7:b8:5a:b7:12:2e:7c:85:2a:58:c3: ee:e4:d0:b4:80:a8:6b:0e:99:b6:2a:15:74:59:d2: dc:6b:53:27:39:8f:22:a5:46:37:e8:e2:76:aa:1a: d2:ac:08:55:e4:00:79:2e:be:5d:21:0d:5f:bd:e8: bb:84:fb:68:4a:76:f4:21:04:13:02:18:2b:a8:34: 45:c7:3d:3c:2d:98:9f:15:44:62:d0:d3:df:4d:12: b4:45:78:28:3c:20:fe:43:57:96:8b:d6:9f:fd:9a: bf:5c:9b:95:cc:9b:33:c1:3a:24:6a:88:dd:b8:40: 98:82:97:a4:38:7d:f3:08:1b:ba:ed:40:7c:08:66: 48:36:c3:50:57:4d:59:8d:67:f8:4d:ba:d6:4c:42: 16:83:7a:79:2f:eb:6d:a5:43:18:5f:d6:2b:22:e3: a1:fe:63:4d:d4:a0:09:09:ad:90:ac:64:14:60:d9: 9d:55:16:46:83:b1:ed:b4:dd:52:8c:1c:d7:e8:12: 8c:23:65:38:54:31:31:20:d3:20:e7:4f:95:6f:40: 64:0b:c1:53:9a:3f:52:ae:de:e9:23:c8:a1:8c:87: da:67:39:c5:3b:a2:49:10:04:d7:d7:db:a3:68:e3: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DA:2D:A8:7D:08:EA:60:0B:4D:BA:D1:C0:E1:A9:27:91:BB:03:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/e5380eca-3a33-3f78-8a68-959ba62a5d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035/ec2240cc-d515-4cf6-9c7a-914117fee035.crl X509v3 Authority Key Identifier: keyid:05:4C:1F:37:3D:4E:5C:1E:4A:67:7A:6F:F0:BB:95:55:B9:BF:49:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec2240cc-d515-4cf6-9c7a-914117fee035.cer sbgp-ipAddrBlock: critical IPv4: 66.163.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:1c:7e:4b:23:a6:9d:15:27:d8:f3:38:e8:33:b0:96:de:45: a8:f9:d9:32:68:ec:38:64:86:c4:6e:be:17:7e:3b:ef:7c:94: 43:24:03:e2:a2:91:23:e7:3a:3f:6f:a3:95:2e:45:aa:88:e9: ae:2f:ee:2d:f7:c1:87:c7:b6:2d:f4:6c:16:f5:e7:15:18:97: d9:59:99:54:ae:9c:b5:b7:44:53:4b:bb:e3:84:6e:42:e1:d7: 39:27:2a:12:52:62:2e:6a:d2:c2:d6:d8:28:4e:db:c0:ab:7c: eb:79:3e:f1:3e:8d:ae:b1:14:ac:f0:10:aa:10:fe:6c:28:6b: 97:63:d2:bb:b0:9f:23:c6:52:92:f8:f0:34:07:52:5f:63:fb: 85:34:c9:89:eb:98:d6:ff:13:bd:1b:3a:ca:ca:f2:e3:4b:37: b9:ff:b0:99:24:7f:3a:cd:52:ce:04:56:53:93:1c:48:76:fd: d8:1f:63:05:56:27:b6:59:a5:bd:3a:b2:43:f8:ac:a8:f7:2f: 52:6b:4f:e7:38:6a:cb:ac:eb:4e:48:3c:d9:9b:3c:23:0a:08: d5:a0:40:b3:e9:f0:98:c2:04:28:9a:b9:76:78:92:c2:d5:4b: bf:22:92:1c:96:c9:c5:c3:79:4b:51:d2:e1:45:64:68:3a:aa: 23:d3:6e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mo1iqK6IVeL02wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMyMjQwY2MtZDUxNS00Y2Y2LTljN2EtOTE0MTE3ZmVl MDM1MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NjRmMTRjN2YtNmZlMi00NGRkLWFhNDUtY2NhMjQ5MTc0MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvC8GsZRGwWwGAAkJ/lJL/BC17hatxIufIUq WMPu5NC0gKhrDpm2KhV0WdLca1MnOY8ipUY36OJ2qhrSrAhV5AB5Lr5dIQ1fvei7 hPtoSnb0IQQTAhgrqDRFxz08LZifFURi0NPfTRK0RXgoPCD+Q1eWi9af/Zq/XJuV zJszwTokaojduECYgpekOH3zCBu67UB8CGZINsNQV01ZjWf4TbrWTEIWg3p5L+tt pUMYX9YrIuOh/mNN1KAJCa2QrGQUYNmdVRZGg7HttN1SjBzX6BKMI2U4VDExINMg 50+Vb0BkC8FTmj9Srt7pI8ihjIfaZznFO6JJEATX19ujaOPrlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3aLah9COpgC0260cDhqSeRuwNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYzIy NDBjYy1kNTE1LTRjZjYtOWM3YS05MTQxMTdmZWUwMzUvZTUzODBlY2EtM2EzMy0z Zjc4LThhNjgtOTU5YmE2MmE1ZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWMyMjQwY2MtZDUxNS00Y2Y2LTlj N2EtOTE0MTE3ZmVlMDM1L2VjMjI0MGNjLWQ1MTUtNGNmNi05YzdhLTkxNDExN2Zl ZTAzNS5jcmwwHwYDVR0jBBgwFoAUBUwfNz1OXB5KZ3pv8LuVVbm/SRswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYzIyNDBjYy1kNTE1LTRjZjYtOWM3YS05MTQx MTdmZWUwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqPRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0cfksjpp0VJ9jzOOgzsJbeRaj52TJo7DhkhsRuvhd+O+98lEMkA+Ki kSPnOj9vo5UuRaqI6a4v7i33wYfHti30bBb15xUYl9lZmVSunLW3RFNLu+OEbkLh 1zknKhJSYi5q0sLW2ChO28CrfOt5PvE+ja6xFKzwEKoQ/mwoa5dj0ruwnyPGUpL4 8DQHUl9j+4U0yYnrmNb/E70bOsrK8uNLN7n/sJkkfzrNUs4EVlOTHEh2/dgfYwVW J7ZZpb06skP4rKj3L1JrT+c4asus605IPNmbPCMKCNWgQLPp8JjCBCiauXZ4ksLV S78ikhyWycXDeUtR0uFFZGg6qiPTboA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:31 2026 by rpki-client