$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1ca6ac34-65b2-3c13-a3ab-976681c0b920.roa File: 1ca6ac34-65b2-3c13-a3ab-976681c0b920.roa (raw, json) Hash identifier: Rb54nH4DeFvVxev2R68aqQWsFlnd5IVFXj62bfsZsRQ= Subject key identifier: 18:4C:9B:FB:B4:EA:B6:FC:0C:EC:BF:F3:28:FA:E7:59:83:CD:97:7D Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D746FCD6307867386A8C56C80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1ca6ac34-65b2-3c13-a3ab-976681c0b920.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 13576 IP address blocks: 66.128.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:cd:63:07:86:73:86:a8:c5:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=198fda69-8548-4f28-8a2c-1f114440f2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:b6:bf:6c:38:89:06:4e:c1:ae:29:aa:20: 09:61:0c:2c:d4:47:3d:7d:8c:6d:14:51:82:20:14: f0:a0:04:ec:a5:87:eb:95:5e:fc:1b:b0:6b:1f:ba: 21:d1:4d:a3:48:3f:e5:20:b2:60:15:fc:a6:bb:cd: 88:6e:4d:f0:ee:c1:e9:cc:9b:d6:4e:4e:3a:0f:8e: a8:d0:a7:94:9b:8a:50:cf:f9:8d:2e:be:93:fb:d6: 68:ab:13:87:b0:5c:3e:5e:89:e2:92:83:d6:fe:4b: 78:c7:26:61:ac:c6:c7:e2:ec:b6:ee:cc:6a:5b:39: e7:8c:32:46:bc:1b:27:00:94:38:5b:17:53:d8:f9: bc:04:a7:79:47:38:0e:64:b1:5e:24:d6:ac:7b:e4: 1c:e0:cf:27:98:d2:38:32:81:74:df:e0:4c:4f:ed: b5:41:42:14:18:78:2b:a5:c1:88:28:4d:29:55:83: 27:d5:03:75:52:dc:a3:39:3a:24:a5:b7:ea:15:d4: 06:30:6a:a6:e6:0e:ea:05:36:ea:77:3d:12:ed:22: 08:dc:ec:82:54:a4:9b:cc:43:72:ad:81:94:24:b5: 4a:72:30:de:60:69:8b:a4:98:5c:ee:34:db:b7:bf: d7:d9:64:07:41:63:cd:70:dd:2c:57:3c:b7:a5:11: e6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4C:9B:FB:B4:EA:B6:FC:0C:EC:BF:F3:28:FA:E7:59:83:CD:97:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1ca6ac34-65b2-3c13-a3ab-976681c0b920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:d6:a6:a8:f6:40:3e:6c:b8:17:65:44:50:16:c1:f9:60:f2: 78:42:67:7f:90:95:f0:93:fa:eb:51:7f:b6:13:02:9a:d6:67: 58:ef:50:d5:36:c2:75:22:54:0a:2c:00:61:ab:29:49:99:df: 22:83:06:72:b8:5e:b4:9f:0a:06:9d:12:44:d6:1d:16:a0:c0: 18:da:9d:a4:b5:f8:48:ad:93:7b:e3:df:cb:66:c1:ae:3b:21: 76:4b:c8:d5:76:7a:7b:68:cd:ff:c3:52:e2:52:9c:a7:29:f8: e1:3e:a9:07:9a:6b:1a:0e:a7:bf:09:42:39:62:12:0d:b0:a2: 41:0f:23:38:ba:61:69:63:02:b4:87:a0:3b:3b:12:d3:72:46: 82:f7:f7:39:ef:b0:cc:81:43:de:01:ea:0c:a9:78:85:ea:97: bf:64:41:57:24:db:8b:25:f8:b6:b4:93:3a:25:9b:ea:81:4d: 7c:d2:0d:85:d7:ae:3a:9f:4c:0f:29:6b:3d:00:00:25:57:65: d0:4f:b8:35:51:00:0e:ef:32:da:77:30:03:77:f8:33:9f:d3: 37:63:c2:57:b4:d4:a9:4a:fb:4d:ce:c8:22:b0:d6:9e:85:3d: 19:e2:ec:ee:ca:34:2a:4d:27:57:06:36:04:a5:6b:36:4c:ca: e2:12:9e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b81jB4ZzhqjFbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MTk4ZmRhNjktODU0OC00ZjI4LThhMmMtMWYxMTQ0NDBmMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY22v2w4iQZOwa4pqiAJYQws1Ec9fYxtFFGC IBTwoATspYfrlV78G7BrH7oh0U2jSD/lILJgFfymu82Ibk3w7sHpzJvWTk46D46o 0KeUm4pQz/mNLr6T+9ZoqxOHsFw+XonikoPW/kt4xyZhrMbH4uy27sxqWznnjDJG vBsnAJQ4WxdT2Pm8BKd5RzgOZLFeJNase+Qc4M8nmNI4MoF03+BMT+21QUIUGHgr pcGIKE0pVYMn1QN1UtyjOTokpbfqFdQGMGqm5g7qBTbqdz0S7SII3OyCVKSbzENy rYGUJLVKcjDeYGmLpJhc7jTbt7/X2WQHQWPNcN0sVzy3pRHmKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhMm/u06rb8DOy/8yj651mDzZd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMWNhNmFjMzQtNjViMi0z YzEzLWEzYWItOTc2NjgxYzBiOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANnWpqj2QD5suBdlRFAWwflg8nhCZ3+QlfCT+utRf7YTAprWZ1jvUNU2 wnUiVAosAGGrKUmZ3yKDBnK4XrSfCgadEkTWHRagwBjanaS1+Eitk3vj38tmwa47 IXZLyNV2entozf/DUuJSnKcp+OE+qQeaaxoOp78JQjliEg2wokEPIzi6YWljArSH oDs7EtNyRoL39znvsMyBQ94B6gypeIXql79kQVck24sl+La0kzolm+qBTXzSDYXX rjqfTA8paz0AACVXZdBPuDVRAA7vMtp3MAN3+DOf0zdjwle01KlK+03OyCKw1p6F PRni7O7KNCpNJ1cGNgSlazZMyuISnvw= -----END CERTIFICATE-----Generated at Fri Apr 17 22:46:49 2026 by rpki-client