$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa File: d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa (raw, json) Hash identifier: 7WNrs+qDnOaHRrpctqTqOlzUe+jhJ+jjOMGFRICmy+Q= Subject key identifier: C2:22:59:A8:C3:6B:83:F9:16:7A:60:63:27:B1:CF:87:5A:16:A2:35 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584D3F64DC8FF0857CFD420FF780 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 51964 IP address blocks: 66.112.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:dc:8f:f0:85:7c:fd:42:0f:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=7e887dc9-e21b-4d56-9e54-3b1df4e1f803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:85:02:73:69:60:88:da:b0:12:d3:a1:25: 5d:58:28:b7:d5:22:94:a3:18:91:dd:cb:67:02:7d: 69:03:a5:ed:85:1b:cb:80:15:a7:0f:bc:07:f0:ec: d4:31:14:71:22:8a:b0:9c:62:a3:18:6b:74:77:62: a3:b2:cc:f1:5a:ec:f5:07:91:98:e8:cc:68:4a:23: eb:d9:0c:f5:4b:a6:4f:17:b3:6d:a3:9c:03:44:6c: d6:e1:ab:8f:88:31:22:9b:78:90:ba:70:19:b6:c2: 00:b9:f9:34:79:aa:d3:2d:82:43:3b:44:ba:ba:d5: 98:4d:0a:b3:39:a6:a6:b4:6d:aa:b2:68:b8:90:87: e4:95:b0:79:c2:22:af:7b:e3:cb:62:72:08:e0:c6: da:d2:8f:4d:cd:23:28:5e:41:42:98:d5:83:e2:c9: 5c:f7:a3:54:76:cb:62:f7:2b:28:8d:4c:47:b3:ae: f6:8f:c4:ef:53:ee:0d:db:c3:28:2b:45:e0:ca:1a: 0a:dd:ba:4d:b6:fe:e3:0b:fc:5b:25:cf:67:41:90: 66:f2:f9:06:b9:23:77:50:b8:3f:d4:1d:0d:65:40: 18:2a:92:a1:db:8c:e4:1f:fc:58:01:1f:45:fe:16: 2d:15:fa:43:e8:d0:37:9a:45:32:42:4a:ab:94:d9: a2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:22:59:A8:C3:6B:83:F9:16:7A:60:63:27:B1:CF:87:5A:16:A2:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:fe:68:42:81:d8:01:56:8b:6d:c1:82:4c:49:f8:d5:b3:d2: 56:93:e4:d8:4d:39:8c:02:71:bb:f9:e3:c0:90:da:33:e7:14: de:ea:b6:1c:52:c6:6d:a7:de:46:99:6a:ae:95:b3:cb:f5:a5: c4:8a:a8:06:e7:70:54:92:09:ef:df:f2:25:d3:5a:de:23:38: 5a:b5:99:f0:3e:72:22:4c:43:7f:3e:77:45:1f:41:cd:91:ab: f6:72:75:2f:7d:c9:e7:b5:b5:c3:78:47:98:3a:b5:7b:76:42: 8b:c0:57:c9:41:ff:ce:c1:12:84:57:f2:4b:b8:5f:ad:ad:37: 52:94:6e:46:62:81:1b:e5:f1:73:f5:84:e0:29:cb:97:19:d1: b7:c5:c2:d0:0f:b6:ae:cd:c1:8a:e1:d3:79:cb:f0:38:33:c9: e8:1b:f6:4f:d7:3b:d6:87:24:11:93:15:82:98:73:01:e9:f9: 3f:99:91:f0:d2:d6:e2:53:12:57:f9:de:48:90:20:55:c2:45: ac:1a:c5:67:a2:8b:a0:0b:9d:85:aa:1c:83:66:81:a5:9a:58: ea:22:f5:f7:f6:3d:5a:d9:5f:7a:e3:59:04:c0:f0:fe:cf:d2: 04:a3:34:70:04:5a:49:69:e6:be:c2:94:57:51:0b:b1:9f:5d: 44:38:2a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNyP8IV8/UIP94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk N2U4ODdkYzktZTIxYi00ZDU2LTllNTQtM2IxZGY0ZTFmODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyyFAnNpYIjasBLToSVdWCi31SKUoxiR3ctn An1pA6XthRvLgBWnD7wH8OzUMRRxIoqwnGKjGGt0d2KjsszxWuz1B5GY6MxoSiPr 2Qz1S6ZPF7Nto5wDRGzW4auPiDEim3iQunAZtsIAufk0earTLYJDO0S6utWYTQqz OaamtG2qsmi4kIfklbB5wiKve+PLYnII4Mba0o9NzSMoXkFCmNWD4slc96NUdsti 9ysojUxHs672j8TvU+4N28MoK0XgyhoK3bpNtv7jC/xbJc9nQZBm8vkGuSN3ULg/ 1B0NZUAYKpKh24zkH/xYAR9F/hYtFfpD6NA3mkUyQkqrlNmi/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIiWajDa4P5FnpgYyexz4daFqI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZDVhNjBmMmYtZWU2Ny0z NGEyLWE4ZmMtY2JmZjI1MDU2ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz+aEKB2AFWi23BgkxJ+NWz0laT5NhNOYwCcbv548CQ2jPnFN7qthxS xm2n3kaZaq6Vs8v1pcSKqAbncFSSCe/f8iXTWt4jOFq1mfA+ciJMQ38+d0UfQc2R q/ZydS99yee1tcN4R5g6tXt2QovAV8lB/87BEoRX8ku4X62tN1KUbkZigRvl8XP1 hOApy5cZ0bfFwtAPtq7NwYrh03nL8Dgzyegb9k/XO9aHJBGTFYKYcwHp+T+ZkfDS 1uJTElf53kiQIFXCRawaxWeii6ALnYWqHINmgaWaWOoi9ff2PVrZX3rjWQTA8P7P 0gSjNHAEWklp5r7ClFdRC7GfXUQ4KiU= -----END CERTIFICATE-----Generated at Thu Mar 26 05:46:12 2026 by rpki-client