$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/3dcb8ac7-5a30-3673-86fb-a1f5682b1253.roa File: 3dcb8ac7-5a30-3673-86fb-a1f5682b1253.roa (raw, json) Hash identifier: Kbo+7KB655IOw6i06OSG4sFR5fn4A0xPznBUgoapRTI= Subject key identifier: 85:C4:39:B7:B6:10:18:F6:D7:A0:C9:CD:14:8B:44:8D:24:C0:CB:34 Certificate issuer: /CN=8fc21c27-e8e6-433a-86da-315992f3e55a Certificate serial: 010D0C9F4328584DD8F076ECE389708E7E91BA80 Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/3dcb8ac7-5a30-3673-86fb-a1f5682b1253.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 14537 IP address blocks: 66.212.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:76:ec:e3:89:70:8e:7e:91:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=3de98433-8e85-4530-8d9e-46ed8d109cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f7:c5:c4:98:60:0d:b9:e5:e8:35:8b:4b:0f: 3a:00:15:af:70:96:af:0e:99:79:34:bb:1a:36:fa: 0f:6f:f1:4d:dd:20:8f:82:90:76:f7:21:ee:0a:83: 8e:35:98:8a:54:b1:9b:4a:68:21:61:bc:f9:ba:c0: 70:8b:a0:77:b8:8e:c5:50:d3:cf:9f:dc:d6:3f:b0: d8:6e:6b:74:6b:34:54:e2:59:3f:f5:37:0f:8e:ea: f1:3f:b1:7f:a3:60:da:ed:c8:6e:2d:7f:43:38:38: ed:14:2e:56:08:fa:22:56:21:d8:e8:a1:02:44:47: 7e:f1:f3:bf:a4:74:56:e9:32:ca:d8:4c:79:0d:fc: 1a:c5:79:9b:bd:be:09:e6:56:7b:bb:e1:28:ad:e6: e6:95:c8:c5:48:92:f0:2d:fe:4a:68:07:a1:bd:79: 25:3a:19:fd:f8:3f:5b:0f:54:0c:48:a6:cd:77:9d: 86:07:37:13:85:ec:a0:e7:69:5b:bf:87:35:41:6b: 7b:f7:74:25:3b:9d:2b:30:92:e6:9a:15:b6:38:1c: 11:e8:81:35:61:5d:96:5c:81:15:e5:38:d9:45:e1: 16:26:da:be:a2:c3:29:77:c2:ba:c3:3b:12:c9:01: cf:bd:94:57:9e:f3:f2:16:4b:41:b6:7f:e3:f1:df: ac:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C4:39:B7:B6:10:18:F6:D7:A0:C9:CD:14:8B:44:8D:24:C0:CB:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/3dcb8ac7-5a30-3673-86fb-a1f5682b1253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl X509v3 Authority Key Identifier: keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer sbgp-ipAddrBlock: critical IPv4: 66.212.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:02:30:17:29:10:e7:6a:5f:89:03:2b:13:eb:10:32:ab:ee: 9d:5c:80:27:22:55:74:95:01:ff:18:59:6f:0a:20:7e:00:dc: 0b:be:da:33:f0:cb:ac:f6:39:1d:1a:8a:64:03:5d:16:c1:b7: 03:01:31:2c:ab:cc:cd:ed:73:cd:01:43:a1:ef:60:d0:a9:96: 9b:49:76:2f:4a:6d:ba:f9:4c:16:6b:54:19:20:65:46:02:59: fa:e6:d2:57:55:71:0b:93:6f:3f:fd:bc:bb:6d:5d:59:4e:25: 7a:26:99:6f:13:7e:4e:81:55:b7:d9:ec:60:1c:31:59:ca:b1: ee:3b:69:31:9d:3d:ed:b6:45:7e:6f:51:a1:ee:18:2f:eb:3f: 77:ac:cd:f3:f8:33:a6:33:72:ef:8f:67:fa:ec:39:4e:e3:03: 0d:da:fc:11:0a:5b:90:fb:a2:40:a1:ae:7e:b4:41:04:47:52: 89:fe:ce:22:b3:2a:f5:d2:b1:d1:5a:22:04:49:1b:c1:df:1a: 08:88:f7:fd:04:ca:40:ee:f5:ef:01:fa:82:cb:3a:06:e1:0f: c9:f3:71:f9:99:c5:f4:47:6f:02:d3:00:85:a3:77:17:af:54: 6a:d5:1f:04:83:fd:df:49:44:ef:57:32:b3:ab:8f:12:78:27: 1b:23:f3:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8Hbs44lwjn6RuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZjMjFjMjctZThlNi00MzNhLTg2ZGEtMzE1OTkyZjNl NTVhMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk M2RlOTg0MzMtOGU4NS00NTMwLThkOWUtNDZlZDhkMTA5Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvfFxJhgDbnl6DWLSw86ABWvcJavDpl5NLsa NvoPb/FN3SCPgpB29yHuCoOONZiKVLGbSmghYbz5usBwi6B3uI7FUNPPn9zWP7DY bmt0azRU4lk/9TcPjurxP7F/o2Da7chuLX9DODjtFC5WCPoiViHY6KECREd+8fO/ pHRW6TLK2Ex5DfwaxXmbvb4J5lZ7u+EorebmlcjFSJLwLf5KaAehvXklOhn9+D9b D1QMSKbNd52GBzcTheyg52lbv4c1QWt793QlO50rMJLmmhW2OBwR6IE1YV2WXIEV 5TjZReEWJtq+osMpd8K6wzsSyQHPvZRXnvPyFktBtn/j8d+sowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXEObe2EBj216DJzRSLRI0kwMs0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMy MWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5OTJmM2U1NWEvM2RjYjhhYzctNWEzMC0z NjczLTg2ZmItYTFmNTY4MmIxMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZjMjFjMjctZThlNi00MzNhLTg2 ZGEtMzE1OTkyZjNlNTVhLzhmYzIxYzI3LWU4ZTYtNDMzYS04NmRhLTMxNTk5MmYz ZTU1YS5jcmwwHwYDVR0jBBgwFoAUlUhx7ra/NDrkjpxLXkLjOlgb9bUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMyMWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5 OTJmM2U1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQtTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQCMBcpEOdqX4kDKxPrEDKr7p1cgCciVXSVAf8YWW8KIH4A3Au+2jPw y6z2OR0aimQDXRbBtwMBMSyrzM3tc80BQ6HvYNCplptJdi9Kbbr5TBZrVBkgZUYC Wfrm0ldVcQuTbz/9vLttXVlOJXommW8Tfk6BVbfZ7GAcMVnKse47aTGdPe22RX5v UaHuGC/rP3eszfP4M6Yzcu+PZ/rsOU7jAw3a/BEKW5D7okChrn60QQRHUon+ziKz KvXSsdFaIgRJG8HfGgiI9/0EykDu9e8B+oLLOgbhD8nzcfmZxfRHbwLTAIWjdxev VGrVHwSD/d9JRO9XMrOrjxJ4Jxsj850= -----END CERTIFICATE-----Generated at Sat Jun 13 16:34:05 2026 by rpki-client