$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa File: 0de08070-992e-334f-8090-a4c3a88677f1.roa (raw, json) Hash identifier: F6LwM4HaolZLDwMmjAsrRv8HYA65CxzbURfZvbtx8d4= Subject key identifier: 41:38:7E:30:20:63:F1:77:30:F7:73:E7:F5:83:06:9A:6F:2A:E4:4D Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584D4D5A5A40BCECD685B9181680 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 30148 IP address blocks: 66.248.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:5a:40:bc:ec:d6:85:b9:18:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=474cac7c-d17f-42f1-a801-2bb44cc71c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:79:1d:3f:c7:75:5a:7e:e8:e2:1b:d4:45:ec: 94:82:44:49:01:9f:78:90:6d:24:1f:75:37:a7:21: 03:74:50:11:9f:ac:ee:60:06:90:a3:3d:93:5d:23: 2d:b1:ce:83:0d:34:2c:1e:a2:3d:94:a8:09:82:14: f0:a5:50:39:5c:31:64:9c:5d:e4:9c:d2:6b:14:3e: 4c:16:f3:82:57:d5:26:0b:d6:42:b2:59:f4:b5:fe: a9:69:ca:f0:08:b3:14:47:6e:a8:1d:91:1c:34:e0: 94:cc:b8:fb:39:52:d1:bd:11:a0:ad:3e:e5:c9:53: 2d:48:2c:f8:75:4d:7b:15:30:77:82:2d:30:40:24: 61:2c:34:2e:bb:17:e7:87:01:ff:e3:13:69:b5:46: be:6e:fa:10:fb:d2:ed:f5:bb:80:1f:2f:cb:30:fd: 91:b3:9c:4c:d8:d5:bf:31:62:30:6e:12:3c:7c:99: 0c:83:2d:c1:9b:56:11:b4:45:16:94:8c:44:7e:64: 87:b5:7c:41:da:47:99:ae:f7:77:39:76:45:15:b0: 74:af:69:27:43:b8:75:f5:44:09:99:60:95:13:49: be:15:22:c4:ce:b4:cc:93:5f:0f:a4:dd:aa:3e:70: 48:09:b4:90:1f:e0:2a:ff:26:14:e1:04:66:ae:71: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:38:7E:30:20:63:F1:77:30:F7:73:E7:F5:83:06:9A:6F:2A:E4:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 66.248.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:f6:e4:45:c5:ec:de:74:9e:3d:29:5b:4c:ca:59:f1:4a:c2: a2:53:10:58:d8:79:9f:3f:fa:cf:e3:41:9a:02:87:1e:63:1a: 49:d0:1c:ae:06:3c:b6:fb:4f:d5:f5:0e:c0:98:3c:d4:d6:f5: ae:27:04:eb:2f:4c:97:5d:ef:0a:9d:ef:0b:8b:85:91:4f:8e: d5:12:60:d5:47:9c:13:c8:e2:57:0f:02:e5:f7:46:f4:eb:0c: 20:3a:7d:4b:77:e9:51:08:34:d1:21:d0:c6:2b:45:59:31:32: 36:4f:ac:09:b0:91:9f:b6:da:51:70:7a:31:d9:08:5c:66:da: a9:ce:bb:85:4a:aa:49:58:b8:6d:86:12:9d:cf:d6:61:ce:43: 8e:ad:95:f5:b9:c7:69:1b:1f:2e:93:ff:5d:ae:d6:f9:1e:cd: 9f:1c:af:26:86:be:b8:83:db:42:41:40:28:0b:01:00:18:9f: 67:87:ef:04:f3:dc:df:0e:53:30:6f:47:43:fc:5b:08:5f:0e: 47:83:42:70:26:c5:ad:83:9e:a7:a5:2d:e9:6e:bc:0d:c3:74: 2c:69:9d:26:89:e2:bf:d1:20:95:db:01:0e:52:fe:2d:a6:e0: 1b:fe:e3:40:b3:53:b7:5c:9a:e1:ca:74:43:62:6d:c8:2d:93: c4:ce:e8:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlpAvOzWhbkYFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NDc0Y2FjN2MtZDE3Zi00MmYxLWE4MDEtMmJiNDRjYzcxYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnkdP8d1Wn7o4hvUReyUgkRJAZ94kG0kH3U3 pyEDdFARn6zuYAaQoz2TXSMtsc6DDTQsHqI9lKgJghTwpVA5XDFknF3knNJrFD5M FvOCV9UmC9ZCsln0tf6pacrwCLMUR26oHZEcNOCUzLj7OVLRvRGgrT7lyVMtSCz4 dU17FTB3gi0wQCRhLDQuuxfnhwH/4xNptUa+bvoQ+9Lt9buAHy/LMP2Rs5xM2NW/ MWIwbhI8fJkMgy3Bm1YRtEUWlIxEfmSHtXxB2keZrvd3OXZFFbB0r2knQ7h19UQJ mWCVE0m+FSLEzrTMk18PpN2qPnBICbSQH+Aq/yYU4QRmrnGZSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE4fjAgY/F3MPdz5/WDBppvKuRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvMGRlMDgwNzAtOTkyZS0z MzRmLTgwOTAtYTRjM2E4ODY3N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMb25EXF7N50nj0pW0zKWfFKwqJTEFjYeZ8/+s/jQZoChx5jGknQHK4G PLb7T9X1DsCYPNTW9a4nBOsvTJdd7wqd7wuLhZFPjtUSYNVHnBPI4lcPAuX3RvTr DCA6fUt36VEINNEh0MYrRVkxMjZPrAmwkZ+22lFwejHZCFxm2qnOu4VKqklYuG2G Ep3P1mHOQ46tlfW5x2kbHy6T/12u1vkezZ8cryaGvriD20JBQCgLAQAYn2eH7wTz 3N8OUzBvR0P8WwhfDkeDQnAmxa2DnqelLeluvA3DdCxpnSaJ4r/RIJXbAQ5S/i2m 4Bv+40CzU7dcmuHKdENibcgtk8TO6NY= -----END CERTIFICATE-----Generated at Fri Apr 17 18:47:05 2026 by rpki-client