$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa File: 58025c98-ad3f-3b15-8090-1fa374b27453.roa (raw, json) Hash identifier: UCLw4qmEkFkjByb1Kf3akU3UruUIK2ku7/iCKmaAvMw= Subject key identifier: 3B:11:5C:B7:99:79:9C:FF:48:D3:D1:F2:1D:7F:DE:CB:C1:70:F0:73 Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F4328584E1B798F296F11580163223C00 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa Signing time: Mon 08 Jun 2026 21:00:12 +0000 ROA not before: Mon 08 Jun 2026 21:00:12 +0000 ROA not after: Sun 06 Sep 2026 21:00:12 +0000 asID: 400610 IP address blocks: 66.219.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1b:79:8f:29:6f:11:58:01:63:22:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Jun 8 21:00:12 2026 GMT Not After : Sep 6 21:00:12 2026 GMT Subject: CN=9748f88a-1a73-4fe1-95d7-d28707576a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6b:ac:cc:ba:2a:30:80:28:4a:f1:12:b2:36: 02:28:b7:0a:af:1b:cd:c3:4a:83:5a:fa:d6:69:03: 0f:f6:81:ba:60:e4:f4:4e:1c:35:6e:97:fc:b2:0c: 3c:a8:39:3d:05:18:16:6b:8c:21:cc:ce:d2:b8:92: 1f:49:e8:d5:e9:e5:bf:e9:2c:38:9a:11:f1:90:bf: 7e:16:1c:ac:e6:69:b2:17:81:fd:53:e9:82:91:6a: cc:1d:99:02:26:d0:55:e4:53:43:4b:07:a2:d7:fc: 51:10:b7:5c:c1:b8:de:33:9c:1b:d9:f3:0c:9d:fd: 8d:02:36:db:14:29:aa:db:db:91:13:6b:7f:9b:25: 15:5c:e2:38:83:d9:12:9e:a6:89:22:f6:ce:a4:aa: 34:29:e7:88:9d:25:44:af:0b:71:9d:63:f2:27:fc: 99:b6:55:25:68:a3:b1:b1:3d:b5:b5:9d:b0:f0:1e: 1b:ba:83:d4:a9:7c:3c:54:89:18:8c:84:43:e9:28: 9d:6a:b5:cf:bb:fa:ce:40:da:f4:37:61:2d:ca:b1: 47:8e:ef:50:00:f6:bb:a5:62:b3:bc:72:05:7a:21: cc:80:83:69:ac:04:d2:62:d7:57:fd:d0:30:39:e3: df:49:3c:1d:a3:14:53:ec:cc:71:2a:5f:2a:bc:8c: e2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:11:5C:B7:99:79:9C:FF:48:D3:D1:F2:1D:7F:DE:CB:C1:70:F0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:93:d4:6d:9a:c2:7c:fd:52:56:74:b0:78:21:6e:5b:60:b1: 09:64:f3:b7:85:68:d4:de:63:d7:91:03:5d:1e:09:74:fb:d2: 07:0e:4f:95:01:c4:76:85:b8:32:94:3e:8e:e9:4c:e4:e0:49: 5c:f0:3c:a8:9d:52:bb:4d:61:78:15:4c:b2:53:3e:7f:9e:89: d7:4b:c6:6c:fb:a7:03:fb:97:c3:06:11:8e:fc:10:a9:9c:20: 6d:a5:4e:cb:50:87:de:b3:35:9e:ae:3f:26:30:58:3c:84:d7: 16:4b:3c:5f:8b:4a:6e:91:69:fb:db:61:11:1e:84:8f:e7:17: b0:a3:c3:96:28:29:f1:5c:6a:43:55:31:78:7a:35:e4:b7:b4: 68:44:36:e2:40:d3:cf:29:d1:bb:1d:cb:4d:77:cf:a8:3c:c1: 88:44:71:15:42:8a:17:e4:f3:33:d7:b2:6d:50:65:53:f7:7e: 35:af:87:8a:be:a2:86:8d:b3:56:5f:b8:29:7a:77:7d:1e:17: 19:d2:23:06:7b:8b:27:fe:66:14:d8:8f:9b:38:56:a1:0d:6f: 11:bf:58:a3:fc:f2:1e:68:d3:19:f0:92:f3:c8:ab:b1:f2:53: 7d:35:c8:60:0c:f3:9e:74:9c:ad:15:f6:83:9a:02:15:ab:89: 39:bd:48:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4beY8pbxFYAWMiPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI2MDYwODIxMDAxMloXDTI2MDkwNjIxMDAxMlowLzEtMCsGA1UEAxMk OTc0OGY4OGEtMWE3My00ZmUxLTk1ZDctZDI4NzA3NTc2YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGuszLoqMIAoSvESsjYCKLcKrxvNw0qDWvrW aQMP9oG6YOT0Thw1bpf8sgw8qDk9BRgWa4whzM7SuJIfSejV6eW/6Sw4mhHxkL9+ Fhys5mmyF4H9U+mCkWrMHZkCJtBV5FNDSwei1/xRELdcwbjeM5wb2fMMnf2NAjbb FCmq29uRE2t/myUVXOI4g9kSnqaJIvbOpKo0KeeInSVErwtxnWPyJ/yZtlUlaKOx sT21tZ2w8B4buoPUqXw8VIkYjIRD6SidarXPu/rOQNr0N2EtyrFHju9QAPa7pWKz vHIFeiHMgINprATSYtdX/dAwOePfSTwdoxRT7MxxKl8qvIziLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsRXLeZeZz/SNPR8h1/3svBcPBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvNTgwMjVjOTgtYWQzZi0z YjE1LTgwOTAtMWZhMzc0YjI3NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKT1G2awnz9UlZ0sHghbltgsQlk87eFaNTeY9eRA10eCXT70gcOT5UB xHaFuDKUPo7pTOTgSVzwPKidUrtNYXgVTLJTPn+eiddLxmz7pwP7l8MGEY78EKmc IG2lTstQh96zNZ6uPyYwWDyE1xZLPF+LSm6RafvbYREehI/nF7Cjw5YoKfFcakNV MXh6NeS3tGhENuJA088p0bsdy013z6g8wYhEcRVCihfk8zPXsm1QZVP3fjWvh4q+ ooaNs1ZfuCl6d30eFxnSIwZ7iyf+ZhTYj5s4VqENbxG/WKP88h5o0xnwkvPIq7Hy U301yGAM8550nK0V9oOaAhWriTm9SIE= -----END CERTIFICATE-----Generated at Sat Jun 13 22:49:16 2026 by rpki-client