$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/4b305951-6de2-3ca0-ae4b-c4115faa6e20.roa File: 4b305951-6de2-3ca0-ae4b-c4115faa6e20.roa (raw, json) Hash identifier: +3iVCg1U8MBxreqiAjf+rpqCbsWFqlWcYxxO2Ioap3s= Subject key identifier: 87:D0:EF:06:C1:FA:2C:8A:39:04:DA:ED:49:23:80:64:58:F7:1B:09 Certificate issuer: /CN=7746dca1-2236-41ce-ab1a-952e06f4769c Certificate serial: 010D0C9F4328584D571FAF27FBB503CE5AF3E100 Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/4b305951-6de2-3ca0-ae4b-c4115faa6e20.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 27228 IP address blocks: 66.248.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:af:27:fb:b5:03:ce:5a:f3:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=6df49ad4-aab3-4d75-97e4-e5738120acc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3f:bd:0e:84:b0:82:2c:36:8c:21:67:a6:3a: 20:9f:43:b6:0b:13:8c:dd:6e:4d:a9:a0:95:99:d0: 05:bc:25:d8:04:f2:9b:7c:d5:ef:88:e7:2c:32:03: 15:e8:f6:24:40:4c:5f:1f:69:79:7e:7e:76:ef:50: 73:f1:a1:fa:3c:9d:a0:10:fb:ad:1c:b0:45:1a:36: 81:ab:c2:52:26:47:7c:f8:a9:1b:48:9f:71:4c:8f: 1d:b2:0b:d5:f1:e9:db:46:de:fe:a4:8b:93:a3:53: e8:bc:58:a9:be:45:d5:17:0b:f0:b2:9b:a7:0c:ab: 5a:da:2a:e2:04:cb:f6:df:49:b2:74:c9:6d:a3:33: 7a:28:fd:06:57:7d:3f:ab:1d:1f:8a:bf:fa:03:a6: 5e:82:3e:3d:44:90:87:f4:58:ed:56:13:40:cd:d0: b5:ad:51:0d:78:56:07:46:1b:8a:42:e2:2e:61:a3: 53:d4:a8:87:b6:44:d8:f7:a3:12:14:49:19:47:7f: 3c:06:98:75:3e:80:1c:e1:e5:3e:f1:e0:16:ce:04: ae:00:72:c6:09:2e:e8:8d:f6:55:d4:b4:d3:5c:c5: 1b:a9:47:7f:6f:70:ff:6b:ff:5b:9d:45:b4:52:7b: b6:32:85:e6:71:be:04:d0:24:9d:84:4c:b3:86:70: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D0:EF:06:C1:FA:2C:8A:39:04:DA:ED:49:23:80:64:58:F7:1B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/4b305951-6de2-3ca0-ae4b-c4115faa6e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl X509v3 Authority Key Identifier: keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer sbgp-ipAddrBlock: critical IPv4: 66.248.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a1:44:77:3d:b6:93:34:f1:77:c1:48:10:21:dd:3c:ac:d1: 68:48:83:e7:b9:aa:35:eb:5a:a7:0f:16:f4:36:b4:ae:62:c8: 0a:73:c2:97:c9:7b:6c:3e:a7:49:7e:79:cc:84:ab:9f:63:0e: 1d:20:7c:62:a7:be:0c:aa:7b:bf:b3:6a:65:64:ff:c5:3f:b8: d3:36:d6:29:0d:e9:0b:a7:de:c2:91:43:92:79:73:c9:29:04: 80:d0:45:30:fd:a2:ea:8e:00:ab:53:bc:d2:c2:57:ef:21:f4: 24:4f:0d:12:63:75:e0:67:5c:9c:9d:8e:d0:54:cf:91:69:e1: c2:34:b8:ba:84:c8:7c:57:37:fe:26:be:d0:ff:1b:92:0f:20: 13:e9:24:2d:63:41:20:e7:8b:0d:8b:c4:ee:26:5c:2a:81:12: 1e:da:92:61:47:ce:4e:72:74:3d:bd:5e:1d:9b:3e:44:88:c1: aa:4e:cb:68:df:13:b3:e7:36:f9:e9:2a:b3:af:39:77:21:72: 26:90:6b:dd:5f:8d:39:3f:97:ed:73:4f:32:af:5e:f7:62:4d: 15:77:86:cd:9d:10:9b:23:6e:6b:f0:99:86:44:0b:25:84:aa: 47:c0:85:89:13:cb:03:1c:2c:4f:da:e1:3f:4d:92:93:a1:5c: e1:f0:45:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH68n+7UDzlrz4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc0NmRjYTEtMjIzNi00MWNlLWFiMWEtOTUyZTA2ZjQ3 NjljMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NmRmNDlhZDQtYWFiMy00ZDc1LTk3ZTQtZTU3MzgxMjBhY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD+9DoSwgiw2jCFnpjogn0O2CxOM3W5NqaCV mdAFvCXYBPKbfNXviOcsMgMV6PYkQExfH2l5fn5271Bz8aH6PJ2gEPutHLBFGjaB q8JSJkd8+KkbSJ9xTI8dsgvV8enbRt7+pIuTo1PovFipvkXVFwvwspunDKta2iri BMv230mydMltozN6KP0GV30/qx0fir/6A6Zegj49RJCH9FjtVhNAzdC1rVENeFYH RhuKQuIuYaNT1KiHtkTY96MSFEkZR388Bph1PoAc4eU+8eAWzgSuAHLGCS7ojfZV 1LTTXMUbqUd/b3D/a/9bnUW0Unu2MoXmcb4E0CSdhEyzhnBcVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfQ7wbB+iyKOQTa7UkjgGRY9xsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NzQ2 ZGNhMS0yMjM2LTQxY2UtYWIxYS05NTJlMDZmNDc2OWMvNGIzMDU5NTEtNmRlMi0z Y2EwLWFlNGItYzQxMTVmYWE2ZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzc0NmRjYTEtMjIzNi00MWNlLWFi MWEtOTUyZTA2ZjQ3NjljLzc3NDZkY2ExLTIyMzYtNDFjZS1hYjFhLTk1MmUwNmY0 NzY5Yy5jcmwwHwYDVR0jBBgwFoAUCuaEgwBg1XZnPwE7g6N7RfHCG/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NzQ2ZGNhMS0yMjM2LTQxY2UtYWIxYS05NTJl MDZmNDc2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvj+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABShRHc9tpM08XfBSBAh3Tys0WhIg+e5qjXrWqcPFvQ2tK5iyApzwpfJ e2w+p0l+ecyEq59jDh0gfGKnvgyqe7+zamVk/8U/uNM21ikN6Qun3sKRQ5J5c8kp BIDQRTD9ouqOAKtTvNLCV+8h9CRPDRJjdeBnXJydjtBUz5Fp4cI0uLqEyHxXN/4m vtD/G5IPIBPpJC1jQSDniw2LxO4mXCqBEh7akmFHzk5ydD29Xh2bPkSIwapOy2jf E7PnNvnpKrOvOXchciaQa91fjTk/l+1zTzKvXvdiTRV3hs2dEJsjbmvwmYZECyWE qkfAhYkTywMcLE/a4T9NkpOhXOHwRdk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:37:29 2026 by rpki-client