$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa File: b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa (raw, json) Hash identifier: /8Jy7Wi8AAmwyWGe3tPPyvLzav+hCRV9W+EcJjcIv7s= Subject key identifier: ED:53:1D:C7:AA:C6:8D:3D:02:AD:83:5B:6F:06:E7:EA:AD:16:FC:AD Certificate issuer: /CN=785749fa-091c-4978-a918-3238e45d2a1c Certificate serial: 010D0C9F4328584D3DFFB1AA7D1C42243799E280 Authority key identifier: 33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 400686 IP address blocks: 64.146.166.0/24 maxlen: 24 66.119.196.0/24 maxlen: 24 66.119.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b1:aa:7d:1c:42:24:37:99:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785749fa-091c-4978-a918-3238e45d2a1c Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=98010da8-77eb-4b12-b322-de4daef853f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6b:1b:11:29:eb:9b:c6:2a:23:b2:a0:7d:d4: a5:ff:f7:f5:40:26:99:f6:35:5c:49:5a:d8:4a:1a: aa:e2:85:ed:59:bf:a3:7d:ab:28:72:eb:5c:e3:97: 42:9e:a9:07:4d:f2:bc:20:ae:29:5f:03:cd:eb:96: 64:6e:a6:e1:1e:3e:04:28:9c:16:de:6b:9e:23:60: 89:09:8a:3d:3c:e1:f4:07:6f:10:eb:02:31:a5:f2: d1:58:57:fa:ba:05:e0:36:f6:5a:3b:40:35:0d:fc: 21:3f:7d:bb:04:99:10:81:31:9c:22:3f:5b:33:a9: 02:2e:b4:28:c3:d8:ab:b8:98:f7:91:ff:01:98:e5: f4:68:6a:c4:96:aa:b1:63:5d:fa:b2:f7:25:2c:94: ba:4e:49:b2:ed:b9:65:1f:18:41:6c:b0:25:1d:13: 18:12:7f:19:0c:4f:78:a3:4f:3d:57:cc:66:30:a8: 24:81:cd:b7:29:ee:ff:38:85:c9:cd:e5:13:05:ee: c6:55:5f:11:c1:00:20:f8:50:76:1e:61:ca:26:01: a1:0f:61:fd:89:39:fa:df:5e:96:d9:d9:92:67:43: 96:ae:81:f2:dc:13:ac:ef:f7:1d:d2:56:bf:97:68: 44:6c:9b:ab:c2:25:aa:91:a5:e3:f2:96:f3:cf:44: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:53:1D:C7:AA:C6:8D:3D:02:AD:83:5B:6F:06:E7:EA:AD:16:FC:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl X509v3 Authority Key Identifier: keyid:33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer sbgp-ipAddrBlock: critical IPv4: 64.146.166.0/24 66.119.196.0/24 66.119.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c8:bb:4d:f0:e3:95:0a:f0:6d:24:28:2e:b4:8f:9e:d7:4d: 75:8c:01:16:1e:20:a0:fb:c4:d9:e0:d3:34:8a:f4:84:36:ac: 3b:26:33:e1:38:cd:d4:70:fd:4e:c6:46:87:34:58:74:21:44: 09:65:4d:91:04:66:5a:f5:9e:3d:67:2c:e3:42:3d:8e:e3:19: 05:73:20:e2:b9:3f:be:66:aa:8d:25:61:34:ba:62:61:3a:14: c2:bd:46:1e:d9:89:f5:0e:91:7a:13:54:56:ad:20:76:69:01: 46:dc:45:5b:f6:a9:62:2f:4a:a9:03:19:9a:3d:0d:8a:36:06: 62:42:bb:d2:9b:e9:d4:02:ff:66:51:38:e4:ec:7e:b2:8a:86: 79:9c:30:a6:c1:93:83:70:f8:15:c7:d8:d3:98:29:60:37:fc: 34:7b:27:22:13:d6:9f:6a:33:82:6e:d9:70:af:4c:e8:11:2c: c6:ad:54:29:55:ac:bc:d9:1c:3b:1a:ec:ff:a4:3d:da:3f:9c: 95:7f:ae:43:3b:ff:e3:a3:18:db:78:7e:c5:1b:66:16:e7:d1: e8:13:bb:99:b1:8f:d9:9f:c2:1e:e3:1c:90:d3:ab:9f:76:62: 9e:e0:61:99:11:24:69:05:5d:2f:b3:2d:03:4e:d7:ec:38:c2: 26:15:ab:66 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE09/7GqfRxCJDeZ4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg1NzQ5ZmEtMDkxYy00OTc4LWE5MTgtMzIzOGU0NWQy YTFjMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OTgwMTBkYTgtNzdlYi00YjEyLWIzMjItZGU0ZGFlZjg1M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmsbESnrm8YqI7KgfdSl//f1QCaZ9jVcSVrY Shqq4oXtWb+jfasocutc45dCnqkHTfK8IK4pXwPN65ZkbqbhHj4EKJwW3mueI2CJ CYo9POH0B28Q6wIxpfLRWFf6ugXgNvZaO0A1DfwhP327BJkQgTGcIj9bM6kCLrQo w9iruJj3kf8BmOX0aGrElqqxY136svclLJS6Tkmy7bllHxhBbLAlHRMYEn8ZDE94 o089V8xmMKgkgc23Ke7/OIXJzeUTBe7GVV8RwQAg+FB2HmHKJgGhD2H9iTn6316W 2dmSZ0OWroHy3BOs7/cd0la/l2hEbJurwiWqkaXj8pbzz0TUjwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFO1THceqxo09Aq2DW28G5+qtFvytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ODU3 NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4ZTQ1ZDJhMWMvYjY4NmNlOGMtMzJmNi0z Y2YzLWE3MjAtODhhODFlNWM5NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzg1NzQ5ZmEtMDkxYy00OTc4LWE5 MTgtMzIzOGU0NWQyYTFjLzc4NTc0OWZhLTA5MWMtNDk3OC1hOTE4LTMyMzhlNDVk MmExYy5jcmwwHwYDVR0jBBgwFoAUM/CaLjnFL2kAyNtqqNf/Nh34MRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83ODU3NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4 ZTQ1ZDJhMWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQJKmAwQA QnfEAwQCQnfQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAErIu03w45UK8G0kKC60j57XTXWMARYeIKD7xNng 0zSK9IQ2rDsmM+E4zdRw/U7GRoc0WHQhRAllTZEEZlr1nj1nLONCPY7jGQVzIOK5 P75mqo0lYTS6YmE6FMK9Rh7ZifUOkXoTVFatIHZpAUbcRVv2qWIvSqkDGZo9DYo2 BmJCu9Kb6dQC/2ZROOTsfrKKhnmcMKbBk4Nw+BXH2NOYKWA3/DR7JyIT1p9qM4Ju 2XCvTOgRLMatVClVrLzZHDsa7P+kPdo/nJV/rkM7/+OjGNt4fsUbZhbn0egTu5mx j9mfwh7jHJDTq592Yp7gYZkRJGkFXS+zLQNO1+w4wiYVq2Y= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:56 2026 by rpki-client