$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/fc6a0523-b89c-3c3c-bcfc-8c1cf303fa3c.roa File: fc6a0523-b89c-3c3c-bcfc-8c1cf303fa3c.roa (raw, json) Hash identifier: q6t5mi7IfkL7rxH0WqHORS5KmLjcPKPvuF9ZzBRPcZE= Subject key identifier: 43:68:D7:00:C1:28:05:F2:AA:7C:4E:06:BC:9E:BF:9B:89:EA:20:B0 Certificate issuer: /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Certificate serial: 010D0C9F4328584D40CA4F8267259D8EF7768400 Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/fc6a0523-b89c-3c3c-bcfc-8c1cf303fa3c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 9505 IP address blocks: 66.171.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4f:82:67:25:9d:8e:f7:76:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=36d5d9a5-1028-4d9a-abe2-9e0ec267abfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:16:6c:e6:48:58:db:e0:75:29:43:db:2c: 22:29:81:21:db:bd:60:f9:83:76:07:d5:8b:ed:f6: 82:1d:c9:8e:d5:48:5e:5d:f0:ef:ea:91:1b:0d:69: 86:1b:8f:8a:a4:8b:a7:45:54:ad:de:39:ee:19:cd: 22:64:f5:52:64:02:01:1e:7b:c2:5a:49:ff:34:c0: 87:72:f5:cc:d8:47:06:cc:5c:a0:bd:09:1c:7b:d3: 73:c0:1f:d2:15:9f:45:44:aa:a4:f5:99:f2:1f:49: 20:98:9f:0e:2d:46:84:a6:d1:6b:b2:1c:17:5c:ed: 89:97:23:7a:52:18:85:5f:48:43:08:ea:18:75:9e: c4:f3:bc:59:b2:1d:bf:15:bd:a2:85:79:fc:c8:aa: 18:0d:30:4b:2f:0f:c7:b9:d2:56:00:a6:da:db:93: 0f:68:7c:ef:5e:54:7a:e1:70:56:81:ed:25:24:ac: 15:0b:56:71:e7:15:90:b7:29:70:30:2d:43:8a:ba: 0f:cc:1a:16:d8:84:3c:26:c3:aa:67:35:41:97:7d: 7f:d0:6c:cf:8f:2b:2d:0a:03:af:28:e1:b0:2c:c6: 49:71:15:c4:ef:e2:b2:a5:e7:d5:1d:1c:19:32:a5: 41:02:e1:45:d2:46:12:61:c8:8d:e5:4c:e0:15:d7: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:68:D7:00:C1:28:05:F2:AA:7C:4E:06:BC:9E:BF:9B:89:EA:20:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/fc6a0523-b89c-3c3c-bcfc-8c1cf303fa3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl X509v3 Authority Key Identifier: keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer sbgp-ipAddrBlock: critical IPv4: 66.171.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:95:1c:92:02:75:72:9a:bb:8f:05:9d:a6:3c:b3:1e:b1:2c: 3f:7b:f1:9d:ad:0b:66:7a:90:b5:b5:fa:7f:46:51:4c:64:b4: c4:98:03:3c:02:50:65:71:3b:e6:76:d6:c3:1b:17:3e:fb:37: 72:2b:81:e7:96:29:ff:73:55:2b:7d:4a:4b:eb:cc:ea:09:52: 1f:ce:f4:6e:8b:2c:a3:96:f0:17:52:19:8d:a6:f0:3e:af:2c: e6:3c:6f:5c:9d:f7:95:65:76:27:61:cb:a4:f6:50:5e:4d:8f: 36:36:a5:66:75:a9:cd:7a:c3:fb:63:00:57:f2:dc:94:81:7c: a9:56:dd:e3:67:3a:f7:3a:78:cc:0d:b7:53:1b:2c:c5:73:98: 7d:1e:c7:d2:08:52:f4:37:69:29:5e:e1:a2:9e:d0:6f:2c:86: 7e:c7:72:c1:0a:84:bd:03:4f:90:42:79:0c:cc:32:28:2b:a5: de:fd:b3:10:11:70:5a:6e:58:b8:89:85:80:e9:1e:5f:00:10: ef:a2:5b:7b:a1:e8:d0:7c:54:aa:07:e3:20:02:d6:65:b4:81: 4e:f0:9f:81:d3:9a:a2:1c:6f:71:5b:1d:5a:d4:09:0d:9d:af: ff:57:c9:80:52:26:1a:5b:62:cd:2a:af:ad:9d:f8:99:27:29: 8f:d1:6b:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayk+CZyWdjvd2hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi ZmQ2MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MzZkNWQ5YTUtMTAyOC00ZDlhLWFiZTItOWUwZWMyNjdhYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE8WbOZIWNvgdSlD2ywiKYEh271g+YN2B9WL 7faCHcmO1UheXfDv6pEbDWmGG4+KpIunRVSt3jnuGc0iZPVSZAIBHnvCWkn/NMCH cvXM2EcGzFygvQkce9NzwB/SFZ9FRKqk9ZnyH0kgmJ8OLUaEptFrshwXXO2JlyN6 UhiFX0hDCOoYdZ7E87xZsh2/Fb2ihXn8yKoYDTBLLw/HudJWAKba25MPaHzvXlR6 4XBWge0lJKwVC1Zx5xWQtylwMC1DiroPzBoW2IQ8JsOqZzVBl31/0GzPjystCgOv KOGwLMZJcRXE7+KypefVHRwZMqVBAuFF0kYSYciN5UzgFdei2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENo1wDBKAXyqnxOBryev5uJ6iCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0 YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvZmM2YTA1MjMtYjg5Yy0z YzNjLWJjZmMtOGMxY2YzMDNmYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2 MjQ2Y2JmZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQqtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeVHJICdXKau48FnaY8sx6xLD978Z2tC2Z6kLW1+n9GUUxktMSYAzwC UGVxO+Z21sMbFz77N3IrgeeWKf9zVSt9SkvrzOoJUh/O9G6LLKOW8BdSGY2m8D6v LOY8b1yd95Vldidhy6T2UF5NjzY2pWZ1qc16w/tjAFfy3JSBfKlW3eNnOvc6eMwN t1MbLMVzmH0ex9IIUvQ3aSle4aKe0G8shn7HcsEKhL0DT5BCeQzMMigrpd79sxAR cFpuWLiJhYDpHl8AEO+iW3uh6NB8VKoH4yAC1mW0gU7wn4HTmqIcb3FbHVrUCQ2d r/9XyYBSJhpbYs0qr62d+JknKY/RazY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:47 2026 by rpki-client