$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa File: ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa (raw, json) Hash identifier: nWagbTwrP4f/Wf4rMfhd8MA2g6KXhFGyrPrZ0DoUxec= Subject key identifier: 2F:E5:53:5B:81:5B:50:96:3B:DF:2A:40:1F:25:27:42:A3:0B:1A:DF Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D6C0FAF473FCD3620A047CB00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 20454 IP address blocks: 66.85.128.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:af:47:3f:cd:36:20:a0:47:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=bdd2009d-d9c2-4667-98ed-e553d3865d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:70:31:f1:e4:5c:e4:59:11:b5:09:92:ab:5d: 23:e5:6d:3d:d5:e3:b6:b1:18:eb:7f:59:75:7c:d4: 36:cc:57:e1:f1:f9:01:9c:34:86:2e:7d:55:48:f0: c1:5b:94:b4:e7:9a:7c:6e:39:b0:fb:61:22:16:dd: 7a:0c:5d:5a:80:11:35:e8:70:49:3a:52:14:6b:a3: 89:c0:46:9f:e1:e6:a4:41:02:5d:0f:38:b0:29:1a: 8e:29:56:21:48:f7:d1:f7:ce:5b:38:c4:44:11:14: 1c:34:27:e7:95:e7:9b:38:9d:10:39:04:19:9a:9a: 39:4e:2b:36:14:ba:a8:b1:7a:09:81:4e:c4:b7:cf: 15:b8:6c:bd:b7:60:24:1e:92:bd:6c:f4:25:df:64: 03:42:87:47:d4:1c:b6:8c:63:f9:8f:59:87:f7:d1: fa:17:4d:65:3b:1e:8b:29:bd:83:e7:a7:10:9e:ad: 29:05:6e:f3:55:70:30:70:36:d5:75:bc:d2:d5:d9: c1:04:2f:f4:85:3d:da:a5:4b:65:82:93:69:68:b1: cc:dd:02:b3:47:f7:14:57:7e:9f:ab:21:1c:47:89: 3b:38:94:92:eb:bd:93:b1:d5:7c:37:09:e0:90:22: 1d:d8:b6:63:42:f0:2d:cc:a3:0c:40:0a:16:05:76: 07:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E5:53:5B:81:5B:50:96:3B:DF:2A:40:1F:25:27:42:A3:0B:1A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 66.85.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:02:0e:ef:e5:78:15:41:ec:66:3c:56:3c:27:0c:b1:09:54: 5e:09:a7:d6:4d:75:9d:0e:86:74:30:28:ed:2e:62:a5:68:1f: 01:b1:5a:51:a5:5f:7b:dd:a1:8f:fe:55:73:b7:01:36:12:2d: bb:c2:c5:48:f6:c2:40:0c:0a:71:79:c4:42:b2:ea:3f:a7:c9: ad:7c:78:5d:a1:dd:1c:9d:a5:7a:57:0c:6e:4c:a6:14:01:ac: 44:56:89:ed:18:93:5e:5f:ec:dc:b6:6f:9c:44:97:0a:7b:fd: 8d:e1:7d:29:b3:42:9b:be:20:c1:37:3c:0c:bf:15:f0:01:ba: 06:7c:ee:16:f6:14:6c:53:70:0f:4b:11:ce:65:97:ce:cd:a5: 00:33:60:bf:ad:d6:10:85:67:8b:3f:f6:e0:ff:0d:64:ce:1e: af:03:e4:ef:a7:14:43:4d:15:41:21:5c:49:0a:b5:10:71:97: b8:f5:7e:fb:5f:62:38:c1:75:21:5d:7d:4f:5b:5a:89:25:98: 8e:19:02:70:d2:31:1f:07:99:08:f8:75:3b:8a:2d:68:5c:71: ab:13:d6:65:6a:96:84:2c:13:fb:29:55:c3:ae:7f:fb:02:68: 4a:b6:b7:43:50:45:a9:68:64:04:44:df:9a:40:1e:1f:a0:1c: 00:22:92:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD69HP802IKBHywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YmRkMjAwOWQtZDljMi00NjY3LTk4ZWQtZTU1M2QzODY1ZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXAx8eRc5FkRtQmSq10j5W091eO2sRjrf1l1 fNQ2zFfh8fkBnDSGLn1VSPDBW5S055p8bjmw+2EiFt16DF1agBE16HBJOlIUa6OJ wEaf4eakQQJdDziwKRqOKVYhSPfR985bOMREERQcNCfnleebOJ0QOQQZmpo5Tis2 FLqosXoJgU7Et88VuGy9t2AkHpK9bPQl32QDQodH1By2jGP5j1mH99H6F01lOx6L Kb2D56cQnq0pBW7zVXAwcDbVdbzS1dnBBC/0hT3apUtlgpNpaLHM3QKzR/cUV36f qyEcR4k7OJSS672TsdV8NwngkCId2LZjQvAtzKMMQAoWBXYH+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/lU1uBW1CWO98qQB8lJ0KjCxrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZWMwN2YzMjYtNTJlYi0z NWJmLThjNzctY2FmZDFhMmU2YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQlWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADICDu/leBVB7GY8VjwnDLEJVF4Jp9ZNdZ0OhnQwKO0uYqVoHwGxWlGl X3vdoY/+VXO3ATYSLbvCxUj2wkAMCnF5xEKy6j+nya18eF2h3RydpXpXDG5MphQB rERWie0Yk15f7Ny2b5xElwp7/Y3hfSmzQpu+IME3PAy/FfABugZ87hb2FGxTcA9L Ec5ll87NpQAzYL+t1hCFZ4s/9uD/DWTOHq8D5O+nFENNFUEhXEkKtRBxl7j1fvtf YjjBdSFdfU9bWoklmI4ZAnDSMR8HmQj4dTuKLWhccasT1mVqloQsE/spVcOuf/sC aEq2t0NQRaloZARE35pAHh+gHAAikkU= -----END CERTIFICATE-----Generated at Fri Apr 17 12:04:09 2026 by rpki-client