$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/097a36bd-63f5-3617-9cec-1157e3b7ad96.roa File: 097a36bd-63f5-3617-9cec-1157e3b7ad96.roa (raw, json) Hash identifier: BMfBoXD6vb5GqmqHv9hH2QZIu1DdxwDpEbIfUVmPQ6I= Subject key identifier: 78:43:1F:E3:7F:6A:33:7D:B0:66:E3:27:B0:F2:4E:03:FA:48:C9:0E Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584D4B6056ADED812FB2D0919280 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/097a36bd-63f5-3617-9cec-1157e3b7ad96.roa Signing time: Thu 26 Mar 2026 08:01:19 +0000 ROA not before: Thu 26 Mar 2026 08:01:19 +0000 ROA not after: Wed 24 Jun 2026 08:01:19 +0000 asID: 14618 IP address blocks: 23.154.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:60:56:ad:ed:81:2f:b2:d0:91:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Mar 26 08:01:19 2026 GMT Not After : Jun 24 08:01:19 2026 GMT Subject: CN=9a3926e6-fa63-46a8-b758-af82d5ad0ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:94:19:f4:80:51:7c:6e:cb:10:d0:0d:e5:59: fe:55:ba:c5:77:f6:72:b0:7e:e3:b8:ff:4c:97:c9: 4a:0b:f2:b7:2d:cd:c1:f4:6b:1c:c4:25:60:51:e4: 6a:e5:fd:34:e1:d4:f4:ad:bb:09:39:86:eb:f2:a2: f0:d4:3c:94:6b:bc:0b:54:f4:7f:0b:01:a3:9c:91: fa:68:f9:80:77:ec:ae:24:36:b3:87:77:a2:87:8a: 9b:1f:56:f4:a5:56:76:88:93:68:7a:9c:48:23:1f: fc:7c:18:63:13:07:2a:47:d0:25:55:57:ca:3a:39: f3:72:2d:ee:2f:4d:41:39:c7:4d:ba:e5:53:87:d6: 60:30:20:9f:d5:7e:5a:1f:7d:89:0d:9a:29:a5:6a: 08:21:06:61:13:e7:6b:f0:fc:47:a5:a7:ff:0c:45: d9:00:59:d8:76:34:91:3e:81:a6:6c:1e:55:ba:b9: 5e:73:52:8a:97:f5:df:60:d7:60:c7:da:09:7b:c9: 2a:4f:55:f5:83:89:ea:d9:3a:b8:60:8c:4e:66:e8: 80:ad:bf:3d:ad:d6:9e:80:42:54:3d:ec:fe:64:b9: ef:a2:68:bb:fa:72:a0:da:24:a6:57:bb:79:13:73: 87:a9:bf:be:e6:0e:48:3c:e1:b3:a1:32:cd:60:6b: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:43:1F:E3:7F:6A:33:7D:B0:66:E3:27:B0:F2:4E:03:FA:48:C9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/097a36bd-63f5-3617-9cec-1157e3b7ad96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 23.154.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:40:56:f1:e6:e1:3e:4d:e3:c0:da:02:e6:8b:96:f0:8c:47: 19:21:fc:d5:90:25:6b:f9:4d:37:52:11:ec:33:e9:57:5a:92: e9:22:a7:d2:df:7e:f0:b4:9e:33:ce:0c:79:30:1a:61:e8:6b: 4a:0d:30:50:0b:24:90:ec:f1:93:8b:bb:19:b2:00:39:f3:b0: b9:75:7f:68:a2:73:a1:24:65:eb:aa:cc:52:60:ee:de:15:9e: 0c:03:67:93:8b:74:d1:94:d7:3d:d3:b2:2e:16:31:d8:7e:84: 78:a3:f9:86:f7:0a:99:8e:1c:0f:80:8e:f7:a1:c4:20:8e:2b: dd:64:cb:4a:fb:d2:15:b9:a6:61:0d:29:e8:ec:da:ee:a8:5b: dc:2e:ca:05:cd:aa:bd:9a:c5:bb:47:c0:f5:a8:e0:b0:34:71: d9:88:5a:70:76:9d:41:13:88:70:f1:99:8b:c1:2b:b6:61:1d: bc:a2:fb:64:1a:03:cb:5a:aa:9e:0c:89:b5:80:ac:65:1f:36: 17:0d:c3:99:9e:0e:e3:6d:0f:bf:bb:5f:69:90:13:a8:d2:95: 02:49:df:3d:fe:c4:f8:72:d7:82:8e:b1:05:00:20:80:f9:e8: 17:19:c4:21:0d:49:dd:29:8b:08:f5:30:27:3f:1c:9d:d6:57: 41:64:c8:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1LYFat7YEvstCRkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI2MDMyNjA4MDExOVoXDTI2MDYyNDA4MDExOVowLzEtMCsGA1UEAxMk OWEzOTI2ZTYtZmE2My00NmE4LWI3NTgtYWY4MmQ1YWQwY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5QZ9IBRfG7LENAN5Vn+VbrFd/ZysH7juP9M l8lKC/K3Lc3B9GscxCVgUeRq5f004dT0rbsJOYbr8qLw1DyUa7wLVPR/CwGjnJH6 aPmAd+yuJDazh3eih4qbH1b0pVZ2iJNoepxIIx/8fBhjEwcqR9AlVVfKOjnzci3u L01BOcdNuuVTh9ZgMCCf1X5aH32JDZoppWoIIQZhE+dr8PxHpaf/DEXZAFnYdjSR PoGmbB5Vurlec1KKl/XfYNdgx9oJe8kqT1X1g4nq2Tq4YIxOZuiArb89rdaegEJU Pez+ZLnvomi7+nKg2iSmV7t5E3OHqb++5g5IPOGzoTLNYGuZpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhDH+N/ajN9sGbjJ7DyTgP6SMkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMDk3YTM2YmQtNjNmNS0z NjE3LTljZWMtMTE1N2UzYjdhZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClAVvHm4T5N48DaAuaLlvCMRxkh/NWQJWv5TTdSEewz6Vdakukip9Lf fvC0njPODHkwGmHoa0oNMFALJJDs8ZOLuxmyADnzsLl1f2iic6EkZeuqzFJg7t4V ngwDZ5OLdNGU1z3Tsi4WMdh+hHij+Yb3CpmOHA+AjvehxCCOK91ky0r70hW5pmEN Kejs2u6oW9wuygXNqr2axbtHwPWo4LA0cdmIWnB2nUETiHDxmYvBK7ZhHbyi+2Qa A8taqp4MibWArGUfNhcNw5meDuNtD7+7X2mQE6jSlQJJ3z3+xPhy14KOsQUAIID5 6BcZxCENSd0piwj1MCc/HJ3WV0FkyGM= -----END CERTIFICATE-----Generated at Fri Mar 27 03:54:34 2026 by rpki-client