$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/edc285b8-fb52-31a5-b807-2778523b0f22.roa File: edc285b8-fb52-31a5-b807-2778523b0f22.roa (raw, json) Hash identifier: +cjK6/FddBxwFV3bhFJOCNBlTWaAQh777MVCMOM3RJk= Subject key identifier: 62:14:6F:F3:7D:AF:14:CB:6E:BE:03:E5:E9:1F:C1:A6:63:98:76:06 Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584D2379F24DDB91432338ABC500 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/edc285b8-fb52-31a5-b807-2778523b0f22.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12202 IP address blocks: 23.154.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f2:4d:db:91:43:23:38:ab:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=d7fa5b5f-5806-4075-a2a0-ddcfc7577b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:2e:ac:81:5b:6b:b7:b9:35:1a:2d:63:1a: de:6e:8f:a5:1a:ee:4b:3c:0d:e8:ba:d2:aa:aa:c2: 23:b8:f9:bc:16:8a:bd:15:ac:e2:1e:c7:76:1f:2f: 2c:7d:02:7a:2f:2b:2b:0e:3c:5e:23:9f:46:48:c1: 99:a9:7e:ce:38:f5:b7:29:71:d4:ec:ca:c6:0f:5a: d1:14:92:57:7a:7b:b8:4d:16:b2:da:34:51:ab:ab: 06:c2:00:1b:70:41:8f:cb:14:fc:38:20:37:80:fa: 79:9c:67:ec:66:84:ba:f5:5f:12:65:31:53:e8:8e: 60:30:0d:59:44:e4:e0:78:81:ac:96:ec:3c:08:e2: 64:99:42:5b:40:93:f0:e6:6c:bb:ed:7c:f1:0a:42: 4b:35:33:2b:e4:94:65:b7:8a:33:7f:74:6e:b1:96: 30:06:aa:1f:12:da:84:41:b1:c3:8a:55:e0:8a:93: 9a:95:3c:f5:1c:16:e7:f9:7c:67:9b:b4:2c:04:48: e0:f7:bd:e4:d7:2c:93:16:9e:94:fe:cd:7c:6d:80: c8:71:92:a6:14:c5:93:fd:2a:f6:b6:c1:6b:61:9c: a5:13:9e:21:0d:18:85:f1:3c:d0:ac:06:2f:59:41: 48:20:7a:ab:69:04:f3:8a:6b:50:b6:1c:33:ec:01: 06:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:14:6F:F3:7D:AF:14:CB:6E:BE:03:E5:E9:1F:C1:A6:63:98:76:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/edc285b8-fb52-31a5-b807-2778523b0f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 23.154.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:60:04:01:bf:1a:26:e3:9a:fe:99:16:50:51:30:a7:93:ee: 2c:70:d9:df:75:46:8a:14:49:e7:61:1f:93:81:9c:40:0b:32: ac:b5:9a:af:44:de:cc:20:3e:ca:26:52:0d:9a:db:bc:10:69: f6:ff:b0:41:b5:82:d8:cb:08:af:1f:75:cc:fc:f4:b2:8d:36: e9:32:d9:0b:2e:80:4c:d0:3f:18:d3:79:bb:db:38:95:c8:26: 69:e6:25:5b:b9:ed:8c:87:e1:71:9b:d7:8f:8f:04:af:7f:4f: c2:ae:54:57:12:68:cb:21:80:67:b0:ca:0b:87:db:34:3c:b1: 9b:b7:6d:e8:af:eb:df:ed:fb:39:81:6f:e6:a2:70:50:2e:62: ea:71:2a:42:55:66:32:0a:29:12:6d:93:5d:06:4c:32:b7:90: 14:83:66:46:04:85:02:76:b6:d9:67:3c:4c:36:33:85:85:50: f3:46:11:4d:29:04:70:0c:c4:62:25:d5:d7:78:0d:1d:d6:cc: 87:e8:22:9f:12:ac:c6:d1:9b:61:ae:4f:4b:86:49:b6:d4:04: 5b:5e:21:ad:3e:2d:34:5c:54:4f:5e:a4:7d:bd:36:ca:f1:75: ea:ee:35:91:a4:c0:6f:34:2a:54:3d:5f:86:98:fc:5b:f9:ef: 0f:d1:fb:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefJN25FDIzirxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDdmYTViNWYtNTgwNi00MDc1LWEyYTAtZGRjZmM3NTc3YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk0urIFba7e5NRotYxrebo+lGu5LPA3outKq qsIjuPm8Foq9FaziHsd2Hy8sfQJ6LysrDjxeI59GSMGZqX7OOPW3KXHU7MrGD1rR FJJXenu4TRay2jRRq6sGwgAbcEGPyxT8OCA3gPp5nGfsZoS69V8SZTFT6I5gMA1Z ROTgeIGsluw8COJkmUJbQJPw5my77XzxCkJLNTMr5JRlt4ozf3RusZYwBqofEtqE QbHDilXgipOalTz1HBbn+Xxnm7QsBEjg973k1yyTFp6U/s18bYDIcZKmFMWT/Sr2 tsFrYZylE54hDRiF8TzQrAYvWUFIIHqraQTzimtQthwz7AEG5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIUb/N9rxTLbr4D5ekfwaZjmHYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvZWRjMjg1YjgtZmI1Mi0z MWE1LWI4MDctMjc3ODUyM2IwZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1gBAG/Gibjmv6ZFlBRMKeT7ixw2d91RooUSedhH5OBnEALMqy1mq9E 3swgPsomUg2a27wQafb/sEG1gtjLCK8fdcz89LKNNuky2QsugEzQPxjTebvbOJXI JmnmJVu57YyH4XGb14+PBK9/T8KuVFcSaMshgGewyguH2zQ8sZu3beiv69/t+zmB b+aicFAuYupxKkJVZjIKKRJtk10GTDK3kBSDZkYEhQJ2ttlnPEw2M4WFUPNGEU0p BHAMxGIl1dd4DR3WzIfoIp8SrMbRm2GuT0uGSbbUBFteIa0+LTRcVE9epH29Nsrx deruNZGkwG80KlQ9X4aY/Fv57w/R+9A= -----END CERTIFICATE-----Generated at Thu Mar 26 19:28:59 2026 by rpki-client