$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/690f8cb9-c532-3704-8bbd-77a9f7e796f0.roa File: 690f8cb9-c532-3704-8bbd-77a9f7e796f0.roa (raw, json) Hash identifier: /YIthO4IDBvNA8FLth5mKtrwunPCNGZS9JJKmNAJWnM= Subject key identifier: 51:51:70:E8:1C:E6:D9:B2:6C:E1:72:A7:A0:50:AC:35:B8:53:0C:E2 Certificate issuer: /CN=0a2d75f1-8f4b-49d3-9661-209643086151 Certificate serial: 010D0C9F4328584D3C9A15FC2F98F4537A6C5000 Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/690f8cb9-c532-3704-8bbd-77a9f7e796f0.roa Signing time: Sat 21 Mar 2026 01:00:30 +0000 ROA not before: Sat 21 Mar 2026 01:00:30 +0000 ROA not after: Fri 19 Jun 2026 01:00:30 +0000 asID: 395559 IP address blocks: 66.187.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:9a:15:fc:2f:98:f4:53:7a:6c:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151 Validity Not Before: Mar 21 01:00:30 2026 GMT Not After : Jun 19 01:00:30 2026 GMT Subject: CN=9afbb389-96e1-4e45-ad63-65d1f1f27e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ec:68:0d:44:b6:e6:51:03:0a:50:e3:34:97: 79:cd:b0:00:d1:9d:10:51:0d:85:72:24:cf:2b:a9: 83:87:0f:88:86:bc:47:5b:4e:70:0a:31:f2:3c:f0: 53:36:06:6e:28:ce:fe:5d:ed:70:d2:e0:08:11:02: 0b:16:20:d4:60:94:58:cf:52:21:da:c0:66:89:49: e2:42:8c:a0:aa:31:4e:59:8b:b7:01:48:50:bb:2a: f7:4a:55:54:50:df:59:83:8c:ce:0b:42:50:4a:ba: 77:e0:f8:98:48:19:b1:8b:87:98:25:ef:06:ec:89: 29:dc:c3:16:65:82:41:bf:be:51:08:00:0d:f0:a3: 33:d9:c1:4b:58:64:28:f2:fb:35:9b:10:a6:95:5c: d1:2b:24:e5:e2:bc:7d:5a:2f:0a:f2:82:9b:8c:80: 01:bd:7b:94:93:15:44:d7:ec:84:0e:9c:de:4a:d7: 46:b0:41:a5:5f:44:da:29:73:a2:9a:a3:67:1f:33: 20:6b:0d:19:72:11:e5:cd:f7:16:9b:de:a9:16:05: 22:47:60:27:e5:32:11:f4:bc:ad:60:99:80:05:ed: 11:a9:45:82:10:5b:cd:f2:dc:67:11:b9:99:87:6b: 2b:92:db:81:3e:20:ef:98:69:a9:8e:b5:81:f0:6d: d9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:51:70:E8:1C:E6:D9:B2:6C:E1:72:A7:A0:50:AC:35:B8:53:0C:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/690f8cb9-c532-3704-8bbd-77a9f7e796f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl X509v3 Authority Key Identifier: keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer sbgp-ipAddrBlock: critical IPv4: 66.187.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1f:22:68:9f:1f:0d:76:53:40:b8:bc:0a:71:75:9d:d1:4a: 07:2e:ee:36:d5:0c:88:12:f0:0b:aa:27:dd:65:92:6b:50:66: 7c:09:74:1d:2f:9a:5a:26:57:c9:c5:1f:ed:da:51:89:71:4d: bf:70:c8:53:79:b5:b9:78:01:e3:89:57:d1:4a:ff:1c:45:e9: 03:ae:38:27:6a:6c:2e:2f:68:60:a7:56:d5:23:67:7f:b4:09: 4d:ee:75:2a:67:79:ec:b0:ef:f6:5d:50:21:52:06:73:36:48: a2:c3:4b:13:e8:e2:77:80:58:9e:9a:2d:4f:72:5b:00:23:9b: 85:ef:46:42:4f:32:bb:27:9d:8c:e3:c6:61:53:8d:4b:81:6f: e9:29:79:74:17:93:ac:2b:b0:32:86:e3:2d:c1:dd:3f:41:c6: 48:48:b1:a2:5a:f1:56:e6:13:45:98:ba:00:11:95:16:99:24: 50:53:86:83:b8:26:8b:1f:f5:34:47:f7:6d:64:0e:85:a6:36: ed:e6:f3:89:bf:66:4b:07:e4:ff:6d:9e:98:7d:68:7f:bc:85: 9e:14:e3:96:03:0c:60:4c:a7:81:fc:01:5d:8d:b0:0a:78:7c: 30:cb:1c:01:69:29:b6:1e:b3:d5:07:d9:fd:a2:a4:8e:2e:1e: 22:1a:4d:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE08mhX8L5j0U3psUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEyZDc1ZjEtOGY0Yi00OWQzLTk2NjEtMjA5NjQzMDg2 MTUxMB4XDTI2MDMyMTAxMDAzMFoXDTI2MDYxOTAxMDAzMFowLzEtMCsGA1UEAxMk OWFmYmIzODktOTZlMS00ZTQ1LWFkNjMtNjVkMWYxZjI3ZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+xoDUS25lEDClDjNJd5zbAA0Z0QUQ2FciTP K6mDhw+IhrxHW05wCjHyPPBTNgZuKM7+Xe1w0uAIEQILFiDUYJRYz1Ih2sBmiUni QoygqjFOWYu3AUhQuyr3SlVUUN9Zg4zOC0JQSrp34PiYSBmxi4eYJe8G7Ikp3MMW ZYJBv75RCAAN8KMz2cFLWGQo8vs1mxCmlVzRKyTl4rx9Wi8K8oKbjIABvXuUkxVE 1+yEDpzeStdGsEGlX0TaKXOimqNnHzMgaw0ZchHlzfcWm96pFgUiR2An5TIR9Lyt YJmABe0RqUWCEFvN8txnEbmZh2srktuBPiDvmGmpjrWB8G3ZAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFRcOgc5tmybOFyp6BQrDW4UwziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJk NzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2NDMwODYxNTEvNjkwZjhjYjktYzUzMi0z NzA0LThiYmQtNzdhOWY3ZTc5NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGEyZDc1ZjEtOGY0Yi00OWQzLTk2 NjEtMjA5NjQzMDg2MTUxLzBhMmQ3NWYxLThmNGItNDlkMy05NjYxLTIwOTY0MzA4 NjE1MS5jcmwwHwYDVR0jBBgwFoAUDbM8/J5AXR7QSu6z+vGosBd4TH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJkNzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2 NDMwODYxNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYfImifHw12U0C4vApxdZ3RSgcu7jbVDIgS8AuqJ91lkmtQZnwJdB0v mlomV8nFH+3aUYlxTb9wyFN5tbl4AeOJV9FK/xxF6QOuOCdqbC4vaGCnVtUjZ3+0 CU3udSpneeyw7/ZdUCFSBnM2SKLDSxPo4neAWJ6aLU9yWwAjm4XvRkJPMrsnnYzj xmFTjUuBb+kpeXQXk6wrsDKG4y3B3T9BxkhIsaJa8VbmE0WYugARlRaZJFBThoO4 Josf9TRH921kDoWmNu3m84m/ZksH5P9tnph9aH+8hZ4U45YDDGBMp4H8AV2NsAp4 fDDLHAFpKbYes9UH2f2ipI4uHiIaTVI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:24 2026 by rpki-client