$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/fdc5e12f-e50e-3a64-893c-ead544e920ce.roa File: fdc5e12f-e50e-3a64-893c-ead544e920ce.roa (raw, json) Hash identifier: 4pJvmSvFCk0plvI4UYq4OnqJc5glGRejXmbU3oSlWTY= Subject key identifier: C3:47:A7:6B:32:95:0B:BC:A0:E6:E3:D0:A2:98:20:CD:63:30:A7:76 Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F4328584D7EBAFFF1F666D2CF7BD5D740 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/fdc5e12f-e50e-3a64-893c-ead544e920ce.roa Signing time: Mon 13 Apr 2026 17:30:12 +0000 ROA not before: Mon 13 Apr 2026 17:30:12 +0000 ROA not after: Sun 12 Jul 2026 17:30:12 +0000 asID: 13518 IP address blocks: 66.252.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:ba:ff:f1:f6:66:d2:cf:7b:d5:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: Apr 13 17:30:12 2026 GMT Not After : Jul 12 17:30:12 2026 GMT Subject: CN=a7136c2d-c452-44c2-b636-cc4b39ae994d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:8e:1a:af:3f:ef:36:c3:6f:bc:aa:a4:79: 99:02:07:00:dc:60:fb:a9:4d:da:44:a2:2e:0a:e5: 4c:4c:76:a4:f6:45:28:05:09:e8:90:00:35:8b:b4: 98:e3:5a:6d:4f:a5:cd:d7:d0:8a:e2:8a:aa:3d:56: 5b:53:94:39:55:51:b4:c2:33:be:93:89:8c:ec:d3: b6:72:6d:b8:6c:b3:c0:58:5c:fb:f5:82:96:f1:5f: 90:b6:e7:56:fe:bb:47:43:95:8f:40:94:4a:7f:42: 4e:e3:0e:01:c6:b7:2c:01:48:1d:43:f8:8d:64:43: c3:e5:b9:18:95:ef:51:4d:7a:03:05:87:3d:71:f0: 72:f2:fd:51:49:ff:63:d0:10:e4:36:c8:6a:9c:2e: e5:62:27:8e:d8:8d:57:cd:31:6c:63:9a:33:30:9a: 77:ac:95:cc:5d:5c:61:85:f1:29:b4:9d:a5:b3:5e: a9:3d:05:d0:05:34:b2:0b:dd:ba:5c:42:78:f6:5f: 0f:a9:12:4d:6f:ac:29:68:dd:14:5f:82:2f:ce:68: f0:a0:f8:66:0e:97:e4:b5:69:7d:07:ec:95:c0:a2: 4c:5e:b5:26:5f:79:8f:d5:d4:38:14:41:c0:cb:b7: 70:a1:eb:19:fc:b2:9c:08:a2:ec:04:fa:fc:06:51: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:47:A7:6B:32:95:0B:BC:A0:E6:E3:D0:A2:98:20:CD:63:30:A7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/fdc5e12f-e50e-3a64-893c-ead544e920ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: 66.252.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1f:9c:12:2a:c8:be:79:3a:bb:54:ec:a1:19:04:c9:e1:76: ec:4b:32:bc:4a:56:cb:13:e3:20:2c:99:b6:25:e4:84:4c:85: 6d:8d:a8:47:c1:86:03:88:fc:02:db:f1:fc:1e:af:cc:5a:cb: 7a:68:a4:ef:a0:b5:89:1e:aa:89:eb:ba:7f:7f:c0:65:97:65: 50:2b:62:0a:d1:2b:7b:e9:34:bc:c9:85:3a:ba:ff:89:bc:e0: 93:80:5b:1f:39:ca:44:e9:53:6d:70:a4:ff:6c:57:c7:4a:de: 38:6e:d6:fc:6b:3c:1f:ee:1e:51:32:6c:3b:a4:44:2e:5b:7d: 52:da:21:6a:fd:d9:b2:c9:04:e1:79:ad:9d:ed:ff:ac:77:34: cf:6c:7c:eb:b2:93:b1:fb:40:11:82:59:d2:4a:b6:e0:2c:a3: a3:92:93:44:d8:54:b6:4c:aa:15:15:8c:35:5a:36:d6:8a:e6: 4c:21:d5:5c:7c:6d:b6:26:82:d0:64:72:1f:e3:51:3a:76:cb: fa:80:71:57:de:b7:f3:44:ea:e3:5a:9d:3b:c7:ad:7e:ee:e9: f0:77:d4:3b:61:23:e9:53:b9:a3:88:39:34:f2:bf:f1:cf:1e: 30:87:5f:bf:5e:c5:03:3a:90:c8:b4:86:89:6d:1e:e7:03:b3: 28:47:50:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+uv/x9mbSz3vV10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI2MDQxMzE3MzAxMloXDTI2MDcxMjE3MzAxMlowLzEtMCsGA1UEAxMk YTcxMzZjMmQtYzQ1Mi00NGMyLWI2MzYtY2M0YjM5YWU5OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsOOGq8/7zbDb7yqpHmZAgcA3GD7qU3aRKIu CuVMTHak9kUoBQnokAA1i7SY41ptT6XN19CK4oqqPVZbU5Q5VVG0wjO+k4mM7NO2 cm24bLPAWFz79YKW8V+QtudW/rtHQ5WPQJRKf0JO4w4BxrcsAUgdQ/iNZEPD5bkY le9RTXoDBYc9cfBy8v1RSf9j0BDkNshqnC7lYieO2I1XzTFsY5ozMJp3rJXMXVxh hfEptJ2ls16pPQXQBTSyC926XEJ49l8PqRJNb6wpaN0UX4IvzmjwoPhmDpfktWl9 B+yVwKJMXrUmX3mP1dQ4FEHAy7dwoesZ/LKcCKLsBPr8BlG0PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNHp2sylQu8oObj0KKYIM1jMKd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvZmRjNWUxMmYtZTUwZS0z YTY0LTg5M2MtZWFkNTQ0ZTkyMGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQfnBIqyL55OrtU7KEZBMnhduxLMrxKVssT4yAsmbYl5IRMhW2NqEfB hgOI/ALb8fwer8xay3popO+gtYkeqonrun9/wGWXZVArYgrRK3vpNLzJhTq6/4m8 4JOAWx85ykTpU21wpP9sV8dK3jhu1vxrPB/uHlEybDukRC5bfVLaIWr92bLJBOF5 rZ3t/6x3NM9sfOuyk7H7QBGCWdJKtuAso6OSk0TYVLZMqhUVjDVaNtaK5kwh1Vx8 bbYmgtBkch/jUTp2y/qAcVfet/NE6uNanTvHrX7u6fB31DthI+lTuaOIOTTyv/HP HjCHX79exQM6kMi0holtHucDsyhHUB8= -----END CERTIFICATE-----Generated at Sun Apr 19 12:54:51 2026 by rpki-client