$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa File: ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa (raw, json) Hash identifier: icC+r8TlUxmtfE+dxfJhfsVdWr2X0RHOm9oRqqRhGp4= Subject key identifier: BC:AE:3F:EA:BF:01:43:D0:3B:03:45:A2:EE:31:41:CE:6D:86:23:81 Certificate issuer: /CN=654e0ef8-ac77-456b-9a63-98fdb228488b Certificate serial: 010D0C9F4328584D8695556EBAB9E3B8D1BC5800 Authority key identifier: 20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 400404 IP address blocks: 66.71.208.0/21 maxlen: 24 96.45.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:55:6e:ba:b9:e3:b8:d1:bc:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654e0ef8-ac77-456b-9a63-98fdb228488b Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=4856d1ba-5ab0-4627-a009-b7a1aae7c944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:ba:ec:b5:e1:54:9a:ce:53:39:f4:c8:7c: 69:8b:55:9f:ec:38:ac:49:70:b7:79:0c:69:57:e2: b1:6f:95:66:d7:53:6e:30:ef:72:c5:18:92:3d:ea: b4:ed:21:45:02:33:40:30:50:cc:3b:37:04:4e:6d: fa:72:55:fc:69:bd:0f:30:36:76:1f:69:94:7d:fa: f9:3d:04:a9:8d:3f:51:e2:ac:4d:a2:9c:a8:5c:ec: ac:b2:0a:ea:63:0a:8f:d4:45:05:38:aa:39:11:1f: 0f:7e:c2:05:d5:2c:69:a9:1d:ce:f0:3e:f9:5b:43: 62:ea:47:2a:9c:4a:97:3f:9b:b7:03:6b:b4:3c:c7: 68:8d:a9:d5:b6:fc:cc:a1:bf:f5:2d:e5:b5:2b:3b: 46:24:24:8c:1c:11:62:6e:18:4f:f6:9c:ef:6c:bd: 13:bb:d8:39:21:b6:66:3a:79:7a:7f:c5:3f:a6:0b: 48:c0:ad:41:35:96:65:83:b8:d3:94:65:f6:3a:47: e3:4c:ba:15:c1:94:67:97:b4:ac:6a:21:b5:0a:b4: 26:74:e5:ef:a7:a6:ce:85:e6:f5:4f:d4:e1:d6:ec: 5c:d2:4c:54:a5:a8:55:2d:0c:ab:5a:4c:7f:8a:95: d4:b5:92:e5:18:c8:07:85:70:d2:7a:ff:fe:c3:ec: 5a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AE:3F:EA:BF:01:43:D0:3B:03:45:A2:EE:31:41:CE:6D:86:23:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl X509v3 Authority Key Identifier: keyid:20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer sbgp-ipAddrBlock: critical IPv4: 66.71.208.0/21 96.45.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f6:a9:7b:0a:30:cd:a6:5d:fe:bf:3a:c6:21:ee:af:44:e1: 84:5a:9e:84:eb:f5:2e:f7:43:da:22:f9:3a:88:78:f7:8f:9b: d5:bf:30:9a:20:fd:49:2a:7c:a6:c9:29:7a:f1:81:f7:bf:62: d3:df:26:ed:ce:bc:e8:c0:57:75:09:72:53:aa:35:fc:3b:de: 72:40:52:82:19:a7:6f:a7:39:8b:8e:ee:c3:b7:c8:eb:6f:16: 7d:a8:f6:b8:7c:13:a7:2d:04:14:28:d5:ed:22:44:9d:bc:a6: f7:55:62:74:b1:09:38:16:aa:2c:8e:61:b0:c7:12:70:eb:45: 07:76:80:23:4d:c6:82:4f:8d:e9:c0:fd:54:39:03:e3:ed:60: 2f:73:16:13:22:7f:05:0d:27:2c:a2:7e:c6:e9:7e:e4:d2:27: c9:a5:a4:18:52:ee:2d:0e:c4:2e:a2:13:9d:42:16:dc:3e:f3: 55:bc:b4:04:c6:ca:1e:8f:83:e2:0b:f2:1d:de:ec:99:d6:c5: cb:bb:df:d6:80:e1:a5:6c:f6:bd:ed:3d:c5:76:09:6b:3b:e0: 8b:3e:ff:d3:48:68:10:d6:1f:4a:e4:32:7d:c8:ad:c7:fc:b6: 77:d3:fa:97:73:f1:8e:b1:be:9e:32:a5:e4:20:5e:3a:98:68: 2f:c5:29:e4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2GlVVuurnjuNG8WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU0ZTBlZjgtYWM3Ny00NTZiLTlhNjMtOThmZGIyMjg0 ODhiMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NDg1NmQxYmEtNWFiMC00NjI3LWEwMDktYjdhMWFhZTdjOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNO67LXhVJrOUzn0yHxpi1Wf7DisSXC3eQxp V+Kxb5Vm11NuMO9yxRiSPeq07SFFAjNAMFDMOzcETm36clX8ab0PMDZ2H2mUffr5 PQSpjT9R4qxNopyoXOyssgrqYwqP1EUFOKo5ER8PfsIF1SxpqR3O8D75W0Ni6kcq nEqXP5u3A2u0PMdojanVtvzMob/1LeW1KztGJCSMHBFibhhP9pzvbL0Tu9g5IbZm Onl6f8U/pgtIwK1BNZZlg7jTlGX2OkfjTLoVwZRnl7SsaiG1CrQmdOXvp6bOheb1 T9Th1uxc0kxUpahVLQyrWkx/ipXUtZLlGMgHhXDSev/+w+xaZQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLyuP+q/AUPQOwNFou4xQc5thiOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRl MGVmOC1hYzc3LTQ1NmItOWE2My05OGZkYjIyODQ4OGIvZmZhMzRlMTUtNGVjYS0z NDFiLWE1ZDEtOTZkNTE0M2IwNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjU0ZTBlZjgtYWM3Ny00NTZiLTlh NjMtOThmZGIyMjg0ODhiLzY1NGUwZWY4LWFjNzctNDU2Yi05YTYzLTk4ZmRiMjI4 NDg4Yi5jcmwwHwYDVR0jBBgwFoAUIIAKlrpCPOd9vFC7tCAnZ+KIXMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRlMGVmOC1hYzc3LTQ1NmItOWE2My05OGZk YjIyODQ4OGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQkfQAwQE YC2QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADr2qXsKMM2mXf6/OsYh7q9E4YRanoTr9S73Q9oi+TqIePeP m9W/MJog/UkqfKbJKXrxgfe/YtPfJu3OvOjAV3UJclOqNfw73nJAUoIZp2+nOYuO 7sO3yOtvFn2o9rh8E6ctBBQo1e0iRJ28pvdVYnSxCTgWqiyOYbDHEnDrRQd2gCNN xoJPjenA/VQ5A+PtYC9zFhMifwUNJyyifsbpfuTSJ8mlpBhS7i0OxC6iE51CFtw+ 81W8tATGyh6Pg+IL8h3e7JnWxcu739aA4aVs9r3tPcV2CWs74Is+/9NIaBDWH0rk Mn3Ircf8tnfT+pdz8Y6xvp4ypeQgXjqYaC/FKeQ= -----END CERTIFICATE-----Generated at Sat Apr 18 04:40:40 2026 by rpki-client