$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa File: faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa (raw, json) Hash identifier: I0qkvuhw8VON7hf2RP9ODAwXRdR61EHOXh52O6S6xBU= Subject key identifier: 7D:75:12:9B:F0:DF:EC:BA:9B:81:1C:CF:97:FF:D7:DC:CC:9B:B6:CF Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584D3F64E4AB1F5F91CB6FC09600 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 5511 IP address blocks: 66.112.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e4:ab:1f:5f:91:cb:6f:c0:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=06bbd8a5-15c4-4de8-9f39-3d8c4f60873a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f2:4f:00:d8:5f:eb:a3:29:2b:d9:96:f8:de: 3e:99:e1:ff:56:28:4a:57:11:2f:24:95:40:9f:25: 42:37:15:c6:92:cb:5b:9e:88:31:19:de:4f:17:74: 13:11:2c:94:64:37:f9:a0:ac:87:7b:33:69:63:65: 1b:e7:d1:cd:c4:a3:20:bd:0e:f3:13:39:79:61:a7: 0b:c6:b9:73:36:bc:b4:d0:81:0d:4c:45:ec:21:0b: d2:7f:27:e9:dc:ce:53:75:33:c4:75:a0:fb:da:d7: 4c:83:e7:6e:f8:38:c3:b5:00:3b:e5:a5:19:c2:30: 20:c6:6c:cc:57:e0:fc:b2:b3:c8:26:0b:e7:30:39: 10:69:85:4e:56:2b:4d:10:e1:4e:9a:92:d9:1b:a3: 0f:81:70:3f:02:80:16:ca:68:68:a5:64:d7:b3:0d: 11:3e:9f:8b:bb:e7:1b:6b:55:07:63:e5:f8:33:5c: da:04:cb:3e:e5:dd:ce:90:66:48:73:1d:72:d4:29: 12:1f:ce:4a:df:ce:f6:94:cd:31:4f:84:21:83:c9: 0a:46:ce:2b:71:a0:a8:81:e3:e2:fd:a6:da:f6:fc: 89:ba:88:2c:b2:94:32:bb:85:f0:f2:b8:4f:30:be: ca:fb:75:74:17:3b:c0:a5:dd:37:52:90:80:81:b7: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:75:12:9B:F0:DF:EC:BA:9B:81:1C:CF:97:FF:D7:DC:CC:9B:B6:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f6:c6:b8:d9:41:69:cd:c4:da:ab:40:62:71:a0:17:d2:40: 78:27:91:d1:26:cf:bf:90:0e:8a:17:70:af:2e:2f:2f:22:8a: a4:d2:84:57:54:b8:70:5c:0a:ca:92:fc:c1:94:eb:ce:d9:a5: 5f:06:8c:34:83:d3:bf:e0:a1:e7:e3:44:6b:81:d4:a2:80:d1: 0b:8d:e9:c0:ba:6f:67:a3:34:4c:6e:db:6c:db:7e:4a:75:a5: 60:9e:57:b3:99:84:55:c7:ff:e6:88:56:2e:eb:17:51:af:9d: a5:01:e6:24:51:1f:24:6a:16:c5:31:ed:ea:af:12:43:c9:a7: f3:e0:52:77:f9:57:c9:eb:d4:fc:9d:ac:22:d5:09:c3:ac:a3: 29:99:56:6e:32:bc:68:4b:60:0b:f0:ba:28:71:53:a5:d9:2b: 46:fd:05:5e:b6:06:c0:82:a3:df:9d:95:35:77:6a:07:3c:05: de:68:d0:30:eb:4e:da:29:77:88:6b:49:52:e2:17:93:43:92: 19:81:6f:c7:1e:8b:54:c5:27:88:b7:9e:78:52:d2:08:c5:1c: 00:3b:f6:82:74:1f:bf:7d:4e:67:3e:83:9b:fe:47:ed:2a:c8: 84:a7:04:dd:cb:66:2f:47:d2:34:44:7f:b3:71:17:35:fa:b9: 19:d3:19:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZOSrH1+Ry2/AlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MDZiYmQ4YTUtMTVjNC00ZGU4LTlmMzktM2Q4YzRmNjA4NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPJPANhf66MpK9mW+N4+meH/VihKVxEvJJVA nyVCNxXGkstbnogxGd5PF3QTESyUZDf5oKyHezNpY2Ub59HNxKMgvQ7zEzl5YacL xrlzNry00IENTEXsIQvSfyfp3M5TdTPEdaD72tdMg+du+DjDtQA75aUZwjAgxmzM V+D8srPIJgvnMDkQaYVOVitNEOFOmpLZG6MPgXA/AoAWymhopWTXsw0RPp+Lu+cb a1UHY+X4M1zaBMs+5d3OkGZIcx1y1CkSH85K3872lM0xT4Qhg8kKRs4rcaCogePi /aba9vyJuogsspQyu4Xw8rhPML7K+3V0FzvApd03UpCAgbfANwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH11Epvw3+y6m4Ecz5f/19zMm7bPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZmFhZjk0ODgtNzVhNy0z NjEyLWI1YjYtYTY1YTllNGY2YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJb2xrjZQWnNxNqrQGJxoBfSQHgnkdEmz7+QDooXcK8uLy8iiqTShFdU uHBcCsqS/MGU687ZpV8GjDSD07/goefjRGuB1KKA0QuN6cC6b2ejNExu22zbfkp1 pWCeV7OZhFXH/+aIVi7rF1GvnaUB5iRRHyRqFsUx7eqvEkPJp/PgUnf5V8nr1Pyd rCLVCcOsoymZVm4yvGhLYAvwuihxU6XZK0b9BV62BsCCo9+dlTV3agc8Bd5o0DDr Ttopd4hrSVLiF5NDkhmBb8cei1TFJ4i3nnhS0gjFHAA79oJ0H799Tmc+g5v+R+0q yISnBN3LZi9H0jREf7NxFzX6uRnTGd8= -----END CERTIFICATE-----Generated at Thu Mar 26 06:19:45 2026 by rpki-client