$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa File: d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa (raw, json) Hash identifier: fcU9UJQhkBvKoWt1X14pNmBZcIrTJ/3+W08kMXIz0II= Subject key identifier: 66:3B:F5:53:37:47:6C:EA:E9:70:FE:1B:D1:16:F7:6B:E6:C0:AB:AC Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584D4D5A53C4C68BFB413DEEF688 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7782 IP address blocks: 66.230.80.0/20 maxlen: 20 66.230.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:53:c4:c6:8b:fb:41:3d:ee:f6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=eb2472b2-bdde-438d-b61b-7f97a22fd880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:3a:20:58:2d:97:a9:1b:19:c8:0b:05:00: c1:6c:55:f5:5f:b3:4e:18:17:92:e7:cf:21:3a:9c: e3:51:22:0d:b3:cc:b5:d4:a9:f3:13:17:13:76:26: 77:db:c4:5b:90:3e:a5:b0:f4:3a:10:4f:60:ac:b2: 78:38:6b:98:24:4b:8e:bb:d6:7c:80:67:73:7c:c0: b4:8b:c7:b6:ce:0e:2b:9d:6c:de:fa:54:3e:de:bd: a0:98:2a:e4:44:7e:84:99:5e:89:d1:f9:c7:5f:53: ac:bf:2e:d5:bd:05:86:57:4f:cf:aa:dd:6f:68:16: c6:75:f7:e2:a7:d5:6f:68:92:cb:bc:0c:9e:48:62: ae:75:21:81:9c:20:08:c1:16:fa:f1:fa:ef:b3:9f: e3:67:38:28:0e:a7:2a:22:74:e7:e2:72:29:44:11: c7:f6:d7:a9:df:72:1f:12:66:02:4e:e2:c3:56:4e: a9:c8:54:8b:40:d2:65:7f:78:a9:52:b2:23:3a:0c: 48:5b:94:e3:6c:be:79:13:f4:3d:87:5f:c7:71:8b: 47:9f:32:2a:71:28:85:7a:24:57:71:9e:7d:4c:7c: 31:c1:6c:36:0f:96:ad:e8:05:b7:0d:eb:42:0f:58: 48:c2:6e:13:4d:c7:31:78:db:b7:aa:8f:bd:6b:2b: 66:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3B:F5:53:37:47:6C:EA:E9:70:FE:1B:D1:16:F7:6B:E6:C0:AB:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 66.230.80.0-66.230.127.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f5:ed:4f:67:ce:ea:5a:dc:fc:66:18:5c:9e:e2:fe:e5:1b: 89:e7:f2:f5:ea:25:9f:96:46:97:49:d7:1f:7f:f4:60:55:9b: 56:5a:67:e4:72:93:3c:cc:6d:47:a7:b7:0e:d3:10:d2:2e:9a: be:5e:e5:90:a9:77:99:c7:fd:03:ed:f0:90:f7:0f:97:9f:6d: 32:7f:18:c5:7f:6a:5a:bf:04:d4:fe:f8:a8:4c:a2:dd:87:d6: 57:85:11:2b:ef:9a:bc:71:2a:e1:33:a6:b4:b6:e2:82:c1:f9: 0e:bd:0b:5c:83:f2:31:2c:dd:ae:30:c3:ec:f3:01:0f:d8:c5: 32:d6:70:3c:36:18:18:62:05:4e:00:d1:7c:f7:56:87:ee:e0: 78:24:8f:b5:3c:e6:6f:ae:8a:d3:de:f6:5b:bc:c7:ba:3f:c3: 07:7b:15:af:72:e3:5e:b2:ee:3c:0a:7b:a3:57:14:de:d1:7d: 8c:10:f0:79:41:22:0c:5d:93:47:89:1d:02:94:93:27:84:fd: 56:b2:57:88:55:bd:d4:1b:4b:f6:70:17:b8:c0:00:e8:a9:2e: f2:ae:99:41:34:08:ee:da:ee:ea:25:d3:74:7e:60:cb:4c:96: 0c:3f:d1:04:ce:8f:9a:cf:1d:5f:7a:34:2b:38:56:58:55:89: 51:50:05:42 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1NWlPExov7QT3u9ogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZWIyNDcyYjItYmRkZS00MzhkLWI2MWItN2Y5N2EyMmZkODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5w6IFgtl6kbGcgLBQDBbFX1X7NOGBeS588h OpzjUSINs8y11KnzExcTdiZ328RbkD6lsPQ6EE9grLJ4OGuYJEuOu9Z8gGdzfMC0 i8e2zg4rnWze+lQ+3r2gmCrkRH6EmV6J0fnHX1Osvy7VvQWGV0/Pqt1vaBbGdffi p9VvaJLLvAyeSGKudSGBnCAIwRb68frvs5/jZzgoDqcqInTn4nIpRBHH9tep33If EmYCTuLDVk6pyFSLQNJlf3ipUrIjOgxIW5TjbL55E/Q9h1/HcYtHnzIqcSiFeiRX cZ59THwxwWw2D5at6AW3DetCD1hIwm4TTccxeNu3qo+9aytmhQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGY79VM3R2zq6XD+G9EW92vmwKusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvZDVjZjc1MGQtYmI2YS0z NGViLWE0ZDgtNWQwOTQ4NTY3NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARC5lAD BAdC5gAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAgPXtT2fO6lrc/GYYXJ7i/uUbiefy9eoln5ZGl0nXH3/0 YFWbVlpn5HKTPMxtR6e3DtMQ0i6avl7lkKl3mcf9A+3wkPcPl59tMn8YxX9qWr8E 1P74qEyi3YfWV4URK++avHEq4TOmtLbigsH5Dr0LXIPyMSzdrjDD7PMBD9jFMtZw PDYYGGIFTgDRfPdWh+7geCSPtTzmb66K0972W7zHuj/DB3sVr3LjXrLuPAp7o1cU 3tF9jBDweUEiDF2TR4kdApSTJ4T9VrJXiFW91BtL9nAXuMAA6Kku8q6ZQTQI7tru 6iXTdH5gy0yWDD/RBM6Pms8dX3o0KzhWWFWJUVAFQg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:53:42 2026 by rpki-client