$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2717142-873a-380f-9204-0e0e4cb66b37.roa File: c2717142-873a-380f-9204-0e0e4cb66b37.roa (raw, json) Hash identifier: 9MQwpLvQxQ8uMBwgtEAAiqb8sDcOEFxT8v7UBFezAbE= Subject key identifier: F2:A3:79:9F:0C:99:12:23:46:87:58:3B:D7:1C:49:10:C5:F4:A2:69 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D86955BB5870735B598718380 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2717142-873a-380f-9204-0e0e4cb66b37.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 393417 IP address blocks: 66.231.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:5b:b5:87:07:35:b5:98:71:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=8f592e17-5465-4827-8b04-c83dc03ec366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:73:76:c7:ce:7e:a4:85:03:c3:4b:9f:ea: 0a:ee:2a:47:3e:dd:20:17:0d:03:54:dc:16:7d:a6: 7d:48:79:f3:92:e2:c4:01:69:ec:78:5a:1c:ab:0d: 72:6d:d8:7b:28:a1:6b:9c:d9:0e:7c:b9:c3:fa:69: 79:32:53:ad:fe:95:a9:92:3b:39:e9:b0:9e:49:04: 64:a2:d8:5b:28:93:53:69:86:05:da:c9:57:80:9c: ea:3b:bd:4f:d0:d1:c8:43:1a:73:de:a0:d6:0a:a7: 38:fe:ee:c9:52:9f:94:c4:d2:14:3b:9c:e2:c3:1b: dc:cc:d1:ab:d1:f1:85:00:2e:25:c9:7a:3f:5b:ca: b7:ff:41:da:71:a6:99:aa:0b:ef:c9:e0:c7:f4:5a: ba:ff:17:bc:17:29:8f:04:5c:e1:03:ab:0c:cf:47: 62:5f:f1:f9:4c:0a:b5:a7:7f:f2:23:77:07:61:a9: e0:ef:ce:fb:48:26:3e:ca:bc:54:0b:f6:ed:d5:2b: 45:03:54:13:36:b3:da:0a:85:be:72:02:05:be:a6: 45:54:be:69:96:95:c7:eb:07:cc:39:4c:a2:d5:01: 08:fd:d3:b0:9d:3d:c0:73:fb:4d:f8:8c:48:63:fd: bb:7d:b3:af:51:a6:9c:ed:0b:ed:dd:b6:ea:4d:cf: b8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A3:79:9F:0C:99:12:23:46:87:58:3B:D7:1C:49:10:C5:F4:A2:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2717142-873a-380f-9204-0e0e4cb66b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:86:fc:f6:74:09:7b:36:e8:a0:6f:9e:e0:10:76:0f:3e:cc: f7:d0:c0:cd:ce:5a:68:83:73:94:02:5d:ab:75:d0:f4:ad:7a: be:04:2a:a8:33:f4:7d:19:81:b5:c1:e5:4b:d6:24:f6:2b:a2: 1c:6b:6a:14:47:9f:0a:8e:cb:be:71:d8:f9:19:30:6a:db:d3: 78:86:06:60:0a:a1:66:4d:a0:6d:41:04:39:7c:86:16:40:ae: 0e:da:73:4a:33:93:6d:a6:02:ba:ba:7a:bc:22:3d:75:ee:0e: 65:13:18:35:dd:4c:97:cc:fe:76:3c:29:ac:29:6a:0f:58:a8: a4:9f:9e:d5:12:f2:64:53:09:b9:88:c0:9b:94:5a:56:5b:c9: 56:32:54:c7:65:42:52:91:f0:5d:df:19:6b:98:ed:97:70:0a: 48:de:cd:b7:4a:2e:90:db:65:fc:c6:ef:36:44:b8:23:28:ec: ea:5a:46:47:d4:5e:2a:ed:17:b6:45:2a:27:e4:76:20:1c:7a: 57:09:23:e1:21:dc:25:ea:c9:89:86:a5:68:47:70:83:3c:f9: 2a:57:ad:0d:f2:37:9d:99:7e:10:0c:9f:d9:76:22:3c:11:11: 65:a4:e9:eb:d8:cc:67:31:17:23:d4:09:a4:56:17:73:41:f1: ba:17:92:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVu1hwc1tZhxg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk OGY1OTJlMTctNTQ2NS00ODI3LThiMDQtYzgzZGMwM2VjMzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnFzdsfOfqSFA8NLn+oK7ipHPt0gFw0DVNwW faZ9SHnzkuLEAWnseFocqw1ybdh7KKFrnNkOfLnD+ml5MlOt/pWpkjs56bCeSQRk othbKJNTaYYF2slXgJzqO71P0NHIQxpz3qDWCqc4/u7JUp+UxNIUO5ziwxvczNGr 0fGFAC4lyXo/W8q3/0HacaaZqgvvyeDH9Fq6/xe8FymPBFzhA6sMz0diX/H5TAq1 p3/yI3cHYang7877SCY+yrxUC/bt1StFA1QTNrPaCoW+cgIFvqZFVL5plpXH6wfM OUyi1QEI/dOwnT3Ac/tN+IxIY/27fbOvUaac7Qvt3bbqTc+4uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKjeZ8MmRIjRodYO9ccSRDF9KJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzI3MTcxNDItODczYS0z ODBmLTkyMDQtMGUwZTRjYjY2YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiG/PZ0CXs26KBvnuAQdg8+zPfQwM3OWmiDc5QCXat10PSter4EKqgz 9H0ZgbXB5UvWJPYrohxrahRHnwqOy75x2PkZMGrb03iGBmAKoWZNoG1BBDl8hhZA rg7ac0ozk22mArq6erwiPXXuDmUTGDXdTJfM/nY8Kawpag9YqKSfntUS8mRTCbmI wJuUWlZbyVYyVMdlQlKR8F3fGWuY7ZdwCkjezbdKLpDbZfzG7zZEuCMo7OpaRkfU XirtF7ZFKifkdiAcelcJI+Eh3CXqyYmGpWhHcIM8+SpXrQ3yN52ZfhAMn9l2IjwR EWWk6evYzGcxFyPUCaRWF3NB8boXklI= -----END CERTIFICATE-----Generated at Fri Apr 17 19:45:33 2026 by rpki-client