$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b455a09c-e731-3b2e-aae7-6dacd3a79251.roa File: b455a09c-e731-3b2e-aae7-6dacd3a79251.roa (raw, json) Hash identifier: BP3QnxFLX1AJ5ZRVhEa9azFQ2gc3zJcTuzEa11wAPtI= Subject key identifier: 6A:75:B9:AB:40:BC:53:C6:55:D0:FA:7F:B2:C8:9C:5E:F7:03:A2:63 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D6AAA66BE06CFB0DAA68DBF00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b455a09c-e731-3b2e-aae7-6dacd3a79251.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 142111 IP address blocks: 66.253.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:66:be:06:cf:b0:da:a6:8d:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=aefb8567-8421-4761-a24e-096913cf70ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e9:a2:fe:3e:43:f3:c9:4b:39:b6:c1:1c:4c: 19:f4:96:34:ff:6a:fb:cc:13:8c:43:5b:a9:22:01: 4b:15:be:0c:db:a4:f6:8f:3f:81:5e:55:8a:82:a5: 17:52:14:05:15:ae:14:b0:33:3c:5d:5e:17:e0:65: a6:3c:98:61:5d:42:63:1b:8c:8e:c5:28:c5:6a:d6: 80:e4:ce:00:c6:c0:60:7e:90:fe:bc:4c:b4:22:ad: 08:e4:18:a7:5c:80:4b:e8:59:ca:66:ea:65:27:e7: e3:9d:be:bd:5c:e4:82:3d:90:65:14:5b:d2:22:46: 16:fb:b7:36:4f:f9:46:0a:d9:7e:10:43:ed:aa:44: f6:ab:d7:f3:3d:65:4b:e3:65:14:e5:5e:94:82:0d: ed:d9:79:6a:8a:98:72:18:40:5e:4c:b3:4b:77:a1: 8b:18:77:d1:64:17:3c:8f:08:58:c2:aa:9b:d1:1a: b7:8a:53:1b:e6:ec:37:07:37:56:30:5e:88:8b:e2: d8:cd:50:7e:41:2f:31:3b:51:f7:ab:f2:fc:88:48: 5c:dc:d6:9c:80:db:f0:fc:c3:3d:8c:67:c2:39:9d: 55:ba:d3:90:fb:1e:ee:3d:91:44:db:fa:5c:79:6b: 8d:a9:0e:87:bd:c6:f9:48:95:a5:73:87:e2:78:d2: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:75:B9:AB:40:BC:53:C6:55:D0:FA:7F:B2:C8:9C:5E:F7:03:A2:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b455a09c-e731-3b2e-aae7-6dacd3a79251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:9e:85:ca:d7:9f:ee:d5:5f:7b:84:02:44:a8:f2:d4:39:b5: ba:82:06:fa:48:0d:16:9c:20:eb:1e:ed:64:3a:08:9e:14:09: 76:ca:b5:98:56:d9:8f:33:36:6f:5c:97:77:21:20:37:b1:e2: bd:21:11:28:53:99:ba:69:cd:86:09:2b:06:6e:2d:a9:ff:4e: a6:9a:0e:09:d5:7b:9f:6a:5d:90:a9:57:17:4f:e8:26:a0:a3: b6:d5:c3:1c:53:6c:bd:7e:4f:e1:e0:80:96:84:ef:37:ca:de: d8:f3:b3:3b:3e:f3:2e:df:b3:04:76:2a:31:7d:fd:9e:99:0c: 4e:bf:05:2b:21:74:62:b2:4e:28:4f:f2:91:cc:56:06:53:65: 6c:d3:05:d3:7c:dd:b8:a6:7b:8c:d4:d9:10:5e:f1:c8:61:14: c3:90:b1:0a:79:0d:35:23:17:97:80:fa:54:7c:63:b3:79:ac: 79:78:75:e2:de:23:da:2c:72:a3:12:fa:94:8e:e1:be:7b:14: fc:91:6b:4b:ef:61:29:d8:21:3f:24:3b:bc:dd:bd:83:32:a5: 66:b8:74:89:30:49:1d:74:f4:96:68:70:87:af:5e:30:8b:88: 54:68:bc:4e:20:06:45:35:a6:8f:f5:28:a1:1e:ed:bb:0e:e9: 8f:88:7c:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqma+Bs+w2qaNvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YWVmYjg1NjctODQyMS00NzYxLWEyNGUtMDk2OTEzY2Y3MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOmi/j5D88lLObbBHEwZ9JY0/2r7zBOMQ1up IgFLFb4M26T2jz+BXlWKgqUXUhQFFa4UsDM8XV4X4GWmPJhhXUJjG4yOxSjFataA 5M4AxsBgfpD+vEy0Iq0I5BinXIBL6FnKZuplJ+fjnb69XOSCPZBlFFvSIkYW+7c2 T/lGCtl+EEPtqkT2q9fzPWVL42UU5V6Ugg3t2XlqiphyGEBeTLNLd6GLGHfRZBc8 jwhYwqqb0Rq3ilMb5uw3BzdWMF6Ii+LYzVB+QS8xO1H3q/L8iEhc3NacgNvw/MM9 jGfCOZ1VutOQ+x7uPZFE2/pceWuNqQ6Hvcb5SJWlc4fieNKNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGp1uatAvFPGVdD6f7LInF73A6JjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjQ1NWEwOWMtZTczMS0z YjJlLWFhZTctNmRhY2QzYTc5MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaehcrXn+7VX3uEAkSo8tQ5tbqCBvpIDRacIOse7WQ6CJ4UCXbKtZhW 2Y8zNm9cl3chIDex4r0hEShTmbppzYYJKwZuLan/TqaaDgnVe59qXZCpVxdP6Cag o7bVwxxTbL1+T+HggJaE7zfK3tjzszs+8y7fswR2KjF9/Z6ZDE6/BSshdGKyTihP 8pHMVgZTZWzTBdN83bime4zU2RBe8chhFMOQsQp5DTUjF5eA+lR8Y7N5rHl4deLe I9oscqMS+pSO4b57FPyRa0vvYSnYIT8kO7zdvYMypWa4dIkwSR109JZocIevXjCL iFRovE4gBkU1po/1KKEe7bsO6Y+IfOo= -----END CERTIFICATE-----Generated at Fri Apr 17 10:45:30 2026 by rpki-client