$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa File: 8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa (raw, json) Hash identifier: Fst6Q0cLnuPJ55b1MCLozO2NI9ZdMwimdk//Fb+75FU= Subject key identifier: B0:44:DB:89:EC:AC:0A:7A:66:8B:A4:97:A8:4D:B3:A3:A2:2F:C3:C6 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D65152DE37D2EE311F6657380 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 13576 IP address blocks: 66.128.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:2d:e3:7d:2e:e3:11:f6:65:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=f39e6c45-3446-44f1-a8e8-2186cea0de28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:6c:50:8a:1e:f6:01:df:2e:73:67:9e:c0: 6a:0a:cb:f6:18:0f:16:a5:a9:a0:21:cf:59:be:90: cc:2f:b8:0c:47:e6:b5:67:a6:3b:dd:5b:da:02:49: ad:00:f1:76:cd:76:2d:56:65:d8:4f:22:95:61:58: 20:7b:df:b4:36:0e:c9:55:b4:56:4a:3e:8d:19:5c: bd:8b:c0:50:7f:4b:eb:b3:1e:1f:3d:75:bb:60:42: a5:12:c1:66:d3:72:a8:09:e2:3f:e0:b3:44:b3:ea: ec:10:bb:4e:a3:af:ba:8e:1f:2d:72:1f:86:f3:84: 78:1b:12:26:6f:6b:ad:ab:02:d3:c5:17:f0:73:d2: e7:6e:df:ff:67:c1:bc:75:22:f7:3d:5d:02:79:da: 59:53:50:6d:88:c1:ba:c0:cf:15:ab:9c:6e:ea:93: b4:f4:a6:f1:1b:ae:f8:6d:c9:ab:33:75:f8:2f:26: 96:37:3e:b5:40:c8:2b:db:e2:54:4f:62:ab:3c:e7: 47:ad:f5:c4:d7:2a:8e:99:e2:04:5f:09:24:6d:23: f9:57:b2:77:18:14:34:d3:27:d8:e4:8b:b9:8c:49: dc:41:d4:43:fb:94:1e:eb:73:9e:b5:22:8c:08:d6: 67:e8:33:dd:49:6a:5e:2b:fc:b9:39:69:55:92:e4: 1e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:44:DB:89:EC:AC:0A:7A:66:8B:A4:97:A8:4D:B3:A3:A2:2F:C3:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f7:59:a1:9a:82:57:54:e7:00:62:99:7d:ed:0c:e8:58:0c: 92:94:f8:91:b0:2a:02:d1:f5:59:85:21:27:df:79:9e:98:91: 6e:13:80:f1:8a:0a:77:10:ee:c4:24:26:db:22:9b:52:cd:be: 25:32:d5:00:09:10:40:cb:7f:ec:88:98:6d:53:d2:4e:34:77: 35:33:fc:6a:df:1a:0f:c1:34:8d:fb:41:74:31:e7:84:e4:12: 11:1f:d3:2c:56:72:1c:fd:24:82:89:a2:78:96:3f:19:3c:25: 5d:01:e9:ae:e8:f3:25:04:ae:7e:03:83:b4:d9:eb:a9:88:96: 38:62:ea:7f:e4:87:1f:1f:fb:dc:75:ce:2b:6a:4f:ff:ad:fe: 16:35:75:a8:d3:cb:c5:20:f3:c3:40:02:87:65:7c:86:16:b8: 09:86:f8:9f:f9:4f:1c:ba:80:61:c7:cc:e8:34:ce:5f:55:10: 87:c1:55:3e:38:b3:0e:3d:30:c3:31:25:a7:15:67:2e:e2:7a: 18:32:60:e2:41:79:92:5b:e1:d6:6a:85:04:48:a2:37:8e:fd: e8:c4:f2:a1:1d:41:3b:37:84:28:14:63:2d:85:1c:44:21:46: 01:7f:b2:7a:c5:3c:9a:8e:ff:8e:81:f8:2b:78:08:77:a2:58: 5e:17:60:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFS3jfS7jEfZlc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZjM5ZTZjNDUtMzQ0Ni00NGYxLWE4ZTgtMjE4NmNlYTBkZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuJsUIoe9gHfLnNnnsBqCsv2GA8WpamgIc9Z vpDML7gMR+a1Z6Y73VvaAkmtAPF2zXYtVmXYTyKVYVgge9+0Ng7JVbRWSj6NGVy9 i8BQf0vrsx4fPXW7YEKlEsFm03KoCeI/4LNEs+rsELtOo6+6jh8tch+G84R4GxIm b2utqwLTxRfwc9Lnbt//Z8G8dSL3PV0CedpZU1BtiMG6wM8Vq5xu6pO09KbxG674 bcmrM3X4LyaWNz61QMgr2+JUT2KrPOdHrfXE1yqOmeIEXwkkbSP5V7J3GBQ00yfY 5Iu5jEncQdRD+5Qe63OetSKMCNZn6DPdSWpeK/y5OWlVkuQeyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBE24nsrAp6Zoukl6hNs6OiL8PGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvOGQ5OTdhZTQtYThiZi0z MjQ5LWE4MjctZThkODc4NWRhN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL3WaGagldU5wBimX3tDOhYDJKU+JGwKgLR9VmFISffeZ6YkW4TgPGK CncQ7sQkJtsim1LNviUy1QAJEEDLf+yImG1T0k40dzUz/GrfGg/BNI37QXQx54Tk EhEf0yxWchz9JIKJoniWPxk8JV0B6a7o8yUErn4Dg7TZ66mIljhi6n/khx8f+9x1 zitqT/+t/hY1dajTy8Ug88NAAodlfIYWuAmG+J/5Txy6gGHHzOg0zl9VEIfBVT44 sw49MMMxJacVZy7iehgyYOJBeZJb4dZqhQRIojeO/ejE8qEdQTs3hCgUYy2FHEQh RgF/snrFPJqO/46B+Ct4CHeiWF4XYOU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:34:26 2026 by rpki-client