$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa File: 8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa (raw, json) Hash identifier: yJrzLDY2bIXSCaZq+/59vsYjOn7kFjI9DDnPBz+n5q8= Subject key identifier: 6D:DC:6D:D9:3E:03:AF:AB:82:43:57:7E:A1:AA:B8:54:FC:21:CB:6A Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584E016B2FAE7AE5FE2B5FDCE880 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa Signing time: Sat 30 May 2026 13:00:10 +0000 ROA not before: Sat 30 May 2026 13:00:10 +0000 ROA not after: Fri 28 Aug 2026 13:00:10 +0000 asID: 931 IP address blocks: 66.118.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:6b:2f:ae:7a:e5:fe:2b:5f:dc:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: May 30 13:00:10 2026 GMT Not After : Aug 28 13:00:10 2026 GMT Subject: CN=fc1f3b6d-ccd7-4be5-aea7-c7e3acc73525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:fd:3c:44:11:28:70:e2:dd:3b:b6:d2:56: 8b:5e:69:e8:a2:d4:6e:af:7d:81:cd:2f:28:40:d4: 9b:8c:ba:b6:cc:bd:63:ec:fb:88:ac:af:da:20:29: 86:9c:62:f4:3e:6d:ca:64:e9:b8:30:fb:9d:cf:84: b6:ab:27:1b:38:37:04:ba:42:53:97:ca:66:2c:b6: 09:70:50:d8:1a:a1:db:f0:2f:ac:30:66:e1:31:c7: 53:09:79:26:c7:ec:8d:15:8a:bd:24:57:f3:3a:5c: f8:65:6b:ec:78:11:2f:e6:48:79:fe:49:3c:7f:56: 4d:b6:73:6f:b2:6a:da:d5:9d:7a:c2:88:09:f4:b3: 30:9d:28:3b:95:bc:9a:77:dd:46:e8:13:09:0a:76: 33:ff:c5:50:ba:24:d9:aa:8b:ae:13:71:10:a6:88: 32:a4:52:b6:f2:d9:b5:b6:ab:8e:8d:34:3d:28:34: ac:45:81:23:29:5c:a7:9e:73:8b:e1:28:cc:ea:b1: c7:fc:68:1d:d5:86:07:f2:e8:32:3d:90:27:5c:59: 11:dc:f6:a9:36:43:67:42:03:f2:e9:bc:c8:f1:de: 6d:7e:ed:a6:a1:ed:02:28:14:91:45:71:2c:85:fc: b2:03:7a:20:1c:66:90:59:5f:38:7b:94:43:a8:04: e4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DC:6D:D9:3E:03:AF:AB:82:43:57:7E:A1:AA:B8:54:FC:21:CB:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b9:23:6f:4e:d2:e3:59:76:77:fd:ae:ec:37:7b:0e:1f:ef: 42:16:5b:4c:3e:4c:6e:e4:26:aa:1f:03:0f:76:d3:9b:60:e9: d8:1e:82:9f:4e:4d:75:3c:c6:60:3d:3d:91:b4:73:63:f8:6f: 4c:90:f8:8d:9a:eb:60:6f:fd:e6:cf:15:fd:cc:6b:d8:2e:62: 27:25:33:d5:e9:c6:15:6d:ab:16:80:c1:8b:06:47:0a:c0:7e: e3:fe:13:14:88:ec:20:0f:17:9c:37:9f:68:36:44:8e:36:0d: db:d5:be:81:3d:cb:cb:70:a6:0a:1a:90:fc:1b:0e:a9:3b:50: fe:56:32:17:04:9a:3a:35:fb:4c:48:73:f8:5b:61:88:ed:f0: 5d:53:54:85:be:cc:4b:5e:9e:9d:b5:7d:81:55:ad:cf:0a:f5: 88:d1:f4:1a:ca:ff:e8:ae:62:47:b7:a6:70:79:44:68:37:14: 8f:85:fc:3c:fc:9f:b7:39:33:e5:04:e3:92:77:b4:06:93:4b: b2:a9:7b:7b:1d:c7:73:db:26:09:12:92:32:74:af:aa:57:c7: c0:68:0b:ab:91:99:16:3e:ae:1e:fd:29:63:0d:8e:46:a6:00: 86:94:3b:8c:c3:92:b7:c6:92:ac:10:81:58:80:a2:55:be:49: c8:e8:f3:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Bay+ueuX+K1/c6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk ZmMxZjNiNmQtY2NkNy00YmU1LWFlYTctYzdlM2FjYzczNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrj9PEQRKHDi3Tu20laLXmnootRur32BzS8o QNSbjLq2zL1j7PuIrK/aICmGnGL0Pm3KZOm4MPudz4S2qycbODcEukJTl8pmLLYJ cFDYGqHb8C+sMGbhMcdTCXkmx+yNFYq9JFfzOlz4ZWvseBEv5kh5/kk8f1ZNtnNv smra1Z16wogJ9LMwnSg7lbyad91G6BMJCnYz/8VQuiTZqouuE3EQpogypFK28tm1 tquOjTQ9KDSsRYEjKVynnnOL4SjM6rHH/Ggd1YYH8ugyPZAnXFkR3PapNkNnQgPy 6bzI8d5tfu2moe0CKBSRRXEshfyyA3ogHGaQWV84e5RDqATk2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3cbdk+A6+rgkNXfqGquFT8IctqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODQyMGY1NzAtMDRiYy0z ODdkLTliYjYtZDVmN2E0M2U3NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK5I29O0uNZdnf9ruw3ew4f70IWW0w+TG7kJqofAw9205tg6dgegp9O TXU8xmA9PZG0c2P4b0yQ+I2a62Bv/ebPFf3Ma9guYiclM9XpxhVtqxaAwYsGRwrA fuP+ExSI7CAPF5w3n2g2RI42DdvVvoE9y8twpgoakPwbDqk7UP5WMhcEmjo1+0xI c/hbYYjt8F1TVIW+zEtenp21fYFVrc8K9YjR9BrK/+iuYke3pnB5RGg3FI+F/Dz8 n7c5M+UE45J3tAaTS7Kpe3sdx3PbJgkSkjJ0r6pXx8BoC6uRmRY+rh79KWMNjkam AIaUO4zDkrfGkqwQgViAolW+Scjo81E= -----END CERTIFICATE-----Generated at Sat Jun 13 19:01:01 2026 by rpki-client