$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa File: 5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa (raw, json) Hash identifier: g/42dXIqJIxSc/GTbP6qTebIZtgNKvTlwlVfCfkIHz0= Subject key identifier: 26:FB:0E:7D:0F:78:CB:39:E3:56:8A:A8:B5:26:A5:85:09:18:DD:E9 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584D651510AC20A96E01BDB90180 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 23522 IP address blocks: 66.252.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:10:ac:20:a9:6e:01:bd:b9:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=fa71884a-3df7-4e65-bbc9-6c3cbfb78b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:95:97:b3:f9:0f:1a:e8:18:71:57:54:d9: e0:e6:ea:fc:ef:fd:87:d5:4a:71:5b:ea:46:1d:3e: 8e:76:39:7f:9a:90:66:d2:78:de:3c:17:37:e7:e0: 7f:29:06:a3:d2:0e:e2:df:b6:53:eb:8f:d6:ad:d2: 49:32:ad:db:1a:a2:06:3e:7a:62:6a:f6:55:bd:b1: 2b:c7:ae:ea:b9:9f:56:37:30:eb:8b:90:2d:80:8b: 9a:0c:87:7e:5f:2c:bc:fd:f2:22:f6:8e:d2:38:2d: 94:88:ec:98:8f:d3:02:e5:0a:75:60:98:51:e9:7b: 86:c8:5c:88:bb:d4:71:6d:07:0a:7c:55:d2:27:46: 89:9e:0c:5b:0a:65:96:5d:7d:76:d4:e0:e6:6e:1a: e5:fb:d9:05:05:ac:c9:b9:a7:e0:fb:67:85:0e:08: 1c:81:89:b6:7d:74:6f:30:9f:9b:85:35:c9:81:be: 5c:e9:20:2f:29:4d:88:ac:50:57:17:9c:0f:ee:35: da:48:c0:fd:0c:58:96:fd:8f:98:1a:25:b7:3a:11: ad:2b:fb:d5:5c:3c:41:c1:0b:3c:4b:71:8b:8a:8b: 3a:d9:57:1b:38:15:7e:f7:e4:d6:a1:5b:b3:76:27: fa:db:85:d1:1d:86:7b:7a:2c:74:11:d4:c0:c4:df: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FB:0E:7D:0F:78:CB:39:E3:56:8A:A8:B5:26:A5:85:09:18:DD:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:03:dd:06:dd:7e:c0:64:3e:67:b2:e4:d0:08:97:c1:d6:47: 00:f0:ef:28:fb:54:c3:b5:82:f2:ce:34:2f:4e:fd:73:2a:c2: 2d:b6:41:0c:0c:b7:45:39:ab:68:45:fe:87:e9:66:1c:15:33: 90:72:84:7b:83:73:29:9e:1c:7e:e9:a2:31:85:5a:4b:36:27: 79:6d:72:34:37:28:9d:2f:21:51:64:4d:85:56:53:ee:29:e9: 65:df:e9:5b:1d:c0:22:49:11:80:46:59:3e:32:f9:60:fa:e5: d2:4c:d1:c0:65:9b:f3:02:19:fa:40:49:94:b7:c4:f9:a8:75: bc:16:1d:a2:54:50:80:75:b9:e4:7e:c1:30:d7:53:17:e7:b6: ff:d7:8f:f5:33:15:27:f1:42:8a:20:80:8f:03:10:14:63:32: 29:d7:d9:a5:b8:fe:9f:94:88:0d:56:26:d1:06:d2:8b:44:62: 39:40:6f:fb:8a:e2:89:13:28:fe:7e:26:ae:24:72:92:22:03: 3d:be:21:c7:92:39:5e:17:5c:7e:0d:bb:f1:af:9e:a8:c9:fc: 5c:43:99:83:7a:f0:28:38:9e:de:af:54:62:d3:7a:1f:59:24: 80:ac:d8:8c:df:00:18:fc:eb:2c:7c:01:bd:ac:a7:ef:c7:33: 35:63:7f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRCsIKluAb25AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZmE3MTg4NGEtM2RmNy00ZTY1LWJiYzktNmMzY2JmYjc4YjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeyVl7P5DxroGHFXVNng5ur87/2H1UpxW+pG HT6Odjl/mpBm0njePBc35+B/KQaj0g7i37ZT64/WrdJJMq3bGqIGPnpiavZVvbEr x67quZ9WNzDri5AtgIuaDId+Xyy8/fIi9o7SOC2UiOyYj9MC5Qp1YJhR6XuGyFyI u9RxbQcKfFXSJ0aJngxbCmWWXX121ODmbhrl+9kFBazJuafg+2eFDggcgYm2fXRv MJ+bhTXJgb5c6SAvKU2IrFBXF5wP7jXaSMD9DFiW/Y+YGiW3OhGtK/vVXDxBwQs8 S3GLios62VcbOBV+9+TWoVuzdif624XRHYZ7eix0EdTAxN8fDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCb7Dn0PeMs541aKqLUmpYUJGN3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNWQ3MDhlYjItYjdiYy0z ZWExLWE3ZDUtMmUxOGYwZjY2ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkD3QbdfsBkPmey5NAIl8HWRwDw7yj7VMO1gvLONC9O/XMqwi22QQwM t0U5q2hF/ofpZhwVM5ByhHuDcymeHH7pojGFWks2J3ltcjQ3KJ0vIVFkTYVWU+4p 6WXf6VsdwCJJEYBGWT4y+WD65dJM0cBlm/MCGfpASZS3xPmodbwWHaJUUIB1ueR+ wTDXUxfntv/Xj/UzFSfxQooggI8DEBRjMinX2aW4/p+UiA1WJtEG0otEYjlAb/uK 4okTKP5+Jq4kcpIiAz2+IceSOV4XXH4Nu/GvnqjJ/FxDmYN68Cg4nt6vVGLTeh9Z JICs2IzfABj86yx8Ab2sp+/HMzVjf3c= -----END CERTIFICATE-----Generated at Fri Apr 17 18:01:49 2026 by rpki-client