$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa File: c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa (raw, json) Hash identifier: I8hcmpn8Pz5h2tlTHzdFCTNDDuJQqHYlX7yyV3Xzf20= Subject key identifier: F7:67:40:9B:61:EC:AF:C7:49:FD:B3:86:69:C9:B1:E1:D7:DA:8E:EC Certificate issuer: /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c Certificate serial: 010D0C9F4328584E1FA9AADDDD464FFDE9698F80 Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 21723 IP address blocks: 66.163.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:aa:dd:dd:46:4f:fd:e9:69:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=303101af-d78e-4e99-902e-9e98f5998ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:9d:99:b9:fa:4d:9d:6e:da:83:7c:c4:ee: bd:62:38:47:86:11:90:de:71:6e:b7:b8:48:c5:be: 80:44:d4:99:7a:6e:b7:74:a8:25:e2:b8:e7:64:46: e0:49:15:01:d2:19:f8:38:f2:35:b2:19:43:34:8a: 2b:e3:35:c7:cd:4a:f6:25:eb:df:b0:c1:8d:b1:0c: 41:c0:dc:50:52:dd:d5:e9:f6:04:22:f6:5d:27:96: c9:9f:71:3b:36:03:ab:a8:85:08:d7:a6:f3:3c:f2: f9:32:ed:8b:cb:bf:07:f0:5c:eb:16:d7:54:6f:50: 56:e9:47:3c:68:b4:2b:01:19:79:e9:ec:5c:28:60: df:2c:d4:48:19:c8:91:95:4e:36:61:f3:c5:49:26: 69:e0:43:6a:61:94:00:12:f4:e3:62:9a:2f:34:40: f9:73:2c:1d:fe:79:e7:8b:5a:1a:30:41:e1:9a:57: 21:4f:2f:40:0b:84:cb:08:0b:7f:2c:f5:e6:16:81: f4:65:32:dc:97:bb:70:aa:b4:81:a7:42:9e:0c:46: b4:8c:ef:a3:cb:c3:96:72:0e:2f:48:8e:41:c2:33: 97:82:65:c4:4c:3f:b7:2f:a6:8f:fc:be:ae:8f:f2: 00:7a:b7:6c:b6:1f:41:aa:a8:bf:eb:1c:bb:45:00: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:67:40:9B:61:EC:AF:C7:49:FD:B3:86:69:C9:B1:E1:D7:DA:8E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/c29535c0-35f9-3cbd-8390-0f4f3e712f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl X509v3 Authority Key Identifier: keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer sbgp-ipAddrBlock: critical IPv4: 66.163.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f1:51:28:ff:8d:1c:a6:d3:7a:0a:d4:43:f1:b4:28:c7:1d: a6:30:58:08:f6:85:a3:ad:c8:61:4b:a1:e6:8d:91:99:3e:46: b2:34:34:ff:93:12:70:1d:30:db:c6:cb:0d:f0:ca:02:ee:45: 04:6c:8f:12:50:f4:61:ca:16:a9:6a:77:48:97:52:79:0e:25: 56:6b:a5:0f:2d:af:f9:4d:0c:bf:85:77:4d:75:47:28:e7:3a: 85:c6:c5:5c:c0:5d:87:0f:8b:b8:c4:7c:57:ac:82:ed:4a:d5: 7f:1a:50:0c:44:3c:4f:10:1b:c0:61:ed:39:5a:8e:a5:ba:88: 22:06:c5:b4:52:c3:b0:75:dd:74:9b:7f:c0:ca:16:e1:9b:1d: ba:62:91:89:27:aa:2f:b6:a6:0e:1e:ab:d9:1a:bb:fc:03:ab: df:85:c8:f6:66:5b:09:44:44:be:b7:9a:4f:db:86:1d:f4:fe: d9:08:41:55:f7:da:6d:3c:3a:a1:33:bb:40:4e:d6:7c:ce:db: 75:b2:c4:f2:7a:d4:9e:dc:ce:af:84:a5:89:24:fc:88:86:62: 6f:6f:a0:74:df:bd:2c:b3:ac:c4:a7:d8:0b:a7:43:7b:f6:be: af:c8:9e:9a:ff:50:17:5c:8d:5e:ea:0e:34:18:2b:f3:ae:d1: d8:fa:d3:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqard3UZP/elpj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzOGUyZWQtOTBlNC00ODk2LThhNWItMmRiNDMzNzZh MzJjMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk MzAzMTAxYWYtZDc4ZS00ZTk5LTkwMmUtOWU5OGY1OTk4YmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAOdmbn6TZ1u2oN8xO69YjhHhhGQ3nFut7hI xb6ARNSZem63dKgl4rjnZEbgSRUB0hn4OPI1shlDNIor4zXHzUr2JevfsMGNsQxB wNxQUt3V6fYEIvZdJ5bJn3E7NgOrqIUI16bzPPL5Mu2Ly78H8FzrFtdUb1BW6Uc8 aLQrARl56excKGDfLNRIGciRlU42YfPFSSZp4ENqYZQAEvTjYpovNED5cywd/nnn i1oaMEHhmlchTy9AC4TLCAt/LPXmFoH0ZTLcl7twqrSBp0KeDEa0jO+jy8OWcg4v SI5BwjOXgmXETD+3L6aP/L6uj/IAerdsth9Bqqi/6xy7RQAVWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdnQJth7K/HSf2zhmnJseHX2o7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4 ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0MzM3NmEzMmMvYzI5NTM1YzAtMzVmOS0z Y2JkLTgzOTAtMGY0ZjNlNzEyZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAzOGUyZWQtOTBlNC00ODk2LThh NWItMmRiNDMzNzZhMzJjLzYwMzhlMmVkLTkwZTQtNDg5Ni04YTViLTJkYjQzMzc2 YTMyYy5jcmwwHwYDVR0jBBgwFoAUKQXSFcuRrCTkVNF0V9vyB3VzTUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0 MzM3NmEzMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnxUSj/jRym03oK1EPxtCjHHaYwWAj2haOtyGFLoeaNkZk+RrI0NP+T EnAdMNvGyw3wygLuRQRsjxJQ9GHKFqlqd0iXUnkOJVZrpQ8tr/lNDL+Fd011Ryjn OoXGxVzAXYcPi7jEfFesgu1K1X8aUAxEPE8QG8Bh7TlajqW6iCIGxbRSw7B13XSb f8DKFuGbHbpikYknqi+2pg4eq9kau/wDq9+FyPZmWwlERL63mk/bhh30/tkIQVX3 2m08OqEzu0BO1nzO23WyxPJ61J7czq+EpYkk/IiGYm9voHTfvSyzrMSn2AunQ3v2 vq/Inpr/UBdcjV7qDjQYK/Ou0dj600Q= -----END CERTIFICATE-----Generated at Sat Jun 13 14:32:36 2026 by rpki-client