$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66ba2098-88fc-32cf-97d4-feff4704a1a9.roa File: 66ba2098-88fc-32cf-97d4-feff4704a1a9.roa (raw, json) Hash identifier: /UIJ8ZEBipGgSa2sHfxsm0jywgYR3FEWUmp5M1byURQ= Subject key identifier: 34:0A:B6:0C:8C:2F:1A:2D:0F:BD:29:A0:91:4E:71:B7:2B:F3:EF:58 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D20AF7B9BB986209254F6A6A0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66ba2098-88fc-32cf-97d4-feff4704a1a9.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 61290 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:7b:9b:b9:86:20:92:54:f6:a6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=84e792ef-b675-45ce-a121-cf801da8903b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:20:9a:34:34:f6:e6:f1:c9:1d:69:50:43: e6:7a:a8:5c:6d:f1:e5:6c:9b:a6:a7:f3:30:98:7b: cb:30:7c:5a:34:6f:49:44:f5:f0:6b:8e:ae:47:b3: 3f:11:62:9b:83:08:03:7b:21:f0:77:9d:88:b3:29: b5:1e:5a:79:6e:01:61:41:d2:7d:71:8a:ca:de:e7: 43:c6:f9:39:23:0b:48:af:d8:12:e8:76:86:3f:22: ec:28:f7:dc:23:df:b8:9f:69:92:84:63:8a:aa:09: c9:71:8a:a0:69:12:d9:d2:b0:d8:d0:1a:4f:32:d4: e1:c0:67:5b:41:0c:25:9e:03:d7:c3:1d:c2:cd:be: bc:de:ec:a6:19:b8:2f:90:27:77:f6:3c:e0:20:7c: 44:f2:91:37:1e:f8:8d:6f:31:41:15:db:bb:57:a3: 46:46:ec:4d:89:12:7a:90:13:86:2e:ee:dd:59:38: d6:53:cb:53:38:3b:d9:a7:1d:47:09:a0:c8:81:6f: 66:d5:7b:64:5d:1e:37:83:17:b4:a1:27:4d:fb:dd: 36:4b:f5:ef:cf:9d:b2:b7:31:ed:69:20:83:04:fb: 90:97:7c:36:8b:ba:d9:51:e8:0e:1a:6f:8b:00:e9: 7e:36:f8:8d:51:78:3c:c6:66:ec:ab:14:07:a5:f5: ef:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0A:B6:0C:8C:2F:1A:2D:0F:BD:29:A0:91:4E:71:B7:2B:F3:EF:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66ba2098-88fc-32cf-97d4-feff4704a1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:36:15:6a:e1:b9:8e:b1:1d:d7:71:f6:e4:e1:68:32:4e:11: 01:51:2e:ca:c7:a1:7d:46:43:da:a4:a9:0c:3f:21:fd:63:6a: 6f:3c:b9:4c:fb:76:2c:28:5f:4a:e8:20:90:7b:00:f9:46:7a: 4f:bf:7f:18:75:ef:bf:14:46:fa:58:a7:4e:97:02:3f:c9:9a: 89:51:6d:f1:ce:b1:44:9c:d0:22:3c:5d:94:c0:69:f0:50:50: 6f:d2:b9:e8:20:64:b3:30:22:ce:64:9a:82:79:1c:ed:0b:b7: 42:c3:1e:80:b0:07:61:d7:02:df:40:d3:04:f0:43:f1:3f:a9: c4:44:65:07:df:73:93:1a:01:14:0c:30:c1:7d:39:d3:12:4f: 68:81:02:4b:8c:c1:a3:fd:cf:1a:aa:78:34:e0:7a:64:2a:53: 67:f1:d5:31:db:71:65:67:01:b5:74:62:59:a3:65:d9:ec:57: fd:31:be:13:8b:53:3b:1a:a4:9d:d3:c6:28:8a:c7:e3:9f:18: 82:02:fb:ab:1d:df:d2:39:bb:e3:c6:fe:fe:75:15:5f:40:dd: 06:72:a9:ab:f4:eb:1b:75:02:7b:04:f8:ed:70:71:d5:66:f5: 55:a8:07:de:b2:dc:dd:35:1b:e8:b4:a3:5a:01:43:0b:88:98: f4:fb:59:2f -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE0gr3ubuYYgklT2pqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ODRlNzkyZWYtYjY3NS00NWNlLWExMjEtY2Y4MDFkYTg5MDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphkgmjQ09ubxyR1pUEPmeqhcbfHlbJump/Mw mHvLMHxaNG9JRPXwa46uR7M/EWKbgwgDeyHwd52Isym1Hlp5bgFhQdJ9cYrK3udD xvk5IwtIr9gS6HaGPyLsKPfcI9+4n2mShGOKqgnJcYqgaRLZ0rDY0BpPMtThwGdb QQwlngPXwx3Czb683uymGbgvkCd39jzgIHxE8pE3HviNbzFBFdu7V6NGRuxNiRJ6 kBOGLu7dWTjWU8tTODvZpx1HCaDIgW9m1XtkXR43gxe0oSdN+902S/Xvz52ytzHt aSCDBPuQl3w2i7rZUegOGm+LAOl+NviNUXg8xmbsqxQHpfXvkQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFDQKtgyMLxotD70poJFOcbcr8+9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjZiYTIwOTgtODhmYy0z MmNmLTk3ZDQtZmVmZjQ3MDRhMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAMk2FWrhuY6xHddx9uThaDJOEQFRLsrHoX1GQ9qk qQw/If1jam88uUz7diwoX0roIJB7APlGek+/fxh1778URvpYp06XAj/JmolRbfHO sUSc0CI8XZTAafBQUG/SueggZLMwIs5kmoJ5HO0Lt0LDHoCwB2HXAt9A0wTwQ/E/ qcREZQffc5MaARQMMMF9OdMST2iBAkuMwaP9zxqqeDTgemQqU2fx1THbcWVnAbV0 YlmjZdnsV/0xvhOLUzsapJ3TxiiKx+OfGIIC+6sd39I5u+PG/v51FV9A3QZyqav0 6xt1AnsE+O1wcdVm9VWoB96y3N01G+i0o1oBQwuImPT7WS8= -----END CERTIFICATE-----Generated at Wed Mar 25 21:29:43 2026 by rpki-client