$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/1aa50007-0212-31f3-a767-d0b9800bf8fb.roa File: 1aa50007-0212-31f3-a767-d0b9800bf8fb.roa (raw, json) Hash identifier: JHVHw0Qoj6mNZBVsvPHTSkA6SIQM6iluD7LYIC1rHwg= Subject key identifier: F8:C6:23:15:39:0A:B0:20:7F:4D:AC:6B:86:85:A6:FD:C2:5D:AC:11 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584D386A492C472B795813AE82A0 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/1aa50007-0212-31f3-a767-d0b9800bf8fb.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 35847 IP address blocks: 66.33.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:49:2c:47:2b:79:58:13:ae:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=4a2c717f-8a70-4217-8a43-1c7ce4e6c110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:5a:ee:a9:b0:39:7a:ad:ba:c6:76:f8:75: 36:f4:9e:f6:e4:51:38:48:cb:8e:92:b1:04:91:c6: e5:91:23:58:f9:74:80:a0:5c:0f:12:91:6c:75:f0: 58:4d:ce:ad:de:ec:dc:32:c1:36:08:db:f2:38:dc: 5b:44:ae:d2:95:38:cd:b7:47:4d:e4:b2:c7:78:c7: 43:53:f1:b9:f4:7e:ff:45:fa:36:6f:47:22:47:04: 49:b6:75:58:c2:e3:f3:df:a9:b3:5a:fc:81:b5:5f: 2e:36:01:ab:75:a5:9c:d8:9b:1f:f1:91:99:98:b7: 08:a4:34:aa:a3:23:21:78:14:b2:a9:26:76:50:d4: 63:b0:07:f8:5a:7e:e0:51:29:64:01:fd:48:0f:8c: d2:ce:f2:cd:b5:97:93:0e:ef:ed:41:8c:dc:08:cc: d7:ea:3f:b0:37:cc:af:a4:4d:d5:95:16:f1:a6:62: ae:b9:a6:63:52:8b:f4:bd:9d:d8:01:ab:58:77:f0: e5:2d:0a:8a:f9:bf:71:d1:42:9f:8c:3e:66:54:29: f5:3a:3f:e0:44:f3:01:f1:d1:eb:be:0f:b7:c0:e1: a8:82:47:82:0a:22:57:3b:fd:c2:a8:40:ee:25:60: 58:4b:0c:0b:49:7a:89:7b:70:5a:62:09:77:3c:bd: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C6:23:15:39:0A:B0:20:7F:4D:AC:6B:86:85:A6:FD:C2:5D:AC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/1aa50007-0212-31f3-a767-d0b9800bf8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 66.33.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:1a:d6:50:a2:03:18:62:9b:7f:e7:a6:1e:c1:b7:96:2e:32: a0:4b:8a:2a:de:d6:8d:ea:bd:58:90:6d:f0:12:2c:f9:75:78: f1:cf:33:74:f5:4b:8c:ce:0d:bf:28:e5:1a:d8:81:bd:e2:b6: e8:10:95:9e:7a:3a:c8:16:52:40:1e:b4:91:09:45:07:57:94: ff:a6:e1:a2:0c:f9:f7:0a:26:8e:d9:d8:f0:57:0e:da:ab:80: 73:14:e6:49:6a:54:7f:13:13:99:a3:bb:6c:a3:aa:4f:b3:49: a0:0d:d5:a7:07:b0:03:a7:47:db:c7:ce:65:68:52:a4:0a:4a: 5b:9a:f8:f6:40:7b:c3:76:15:1c:40:40:5c:bf:5b:92:e5:9c: a6:e8:49:b4:b2:89:4c:34:96:bc:49:da:bc:bd:c8:b2:29:2a: ed:75:96:d7:3e:b2:7b:0c:a7:0f:a8:a4:1a:64:4c:40:3b:a3: 43:da:75:d7:82:56:70:77:46:7c:e9:f9:b9:2f:b4:2e:df:6c: 64:2a:2f:4e:01:34:51:12:5a:c7:87:4f:c4:20:3c:22:a7:03: 70:86:fd:73:10:55:41:8c:c9:94:14:e0:ba:49:ce:88:76:c5: 35:f6:31:2f:d2:97:d2:31:25:5b:6d:e8:ef:06:9c:a4:fa:24: 19:a6:91:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akksRyt5WBOugqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NGEyYzcxN2YtOGE3MC00MjE3LThhNDMtMWM3Y2U0ZTZjMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Ra7qmwOXqtusZ2+HU29J725FE4SMuOkrEE kcblkSNY+XSAoFwPEpFsdfBYTc6t3uzcMsE2CNvyONxbRK7SlTjNt0dN5LLHeMdD U/G59H7/Rfo2b0ciRwRJtnVYwuPz36mzWvyBtV8uNgGrdaWc2Jsf8ZGZmLcIpDSq oyMheBSyqSZ2UNRjsAf4Wn7gUSlkAf1ID4zSzvLNtZeTDu/tQYzcCMzX6j+wN8yv pE3VlRbxpmKuuaZjUov0vZ3YAatYd/DlLQqK+b9x0UKfjD5mVCn1Oj/gRPMB8dHr vg+3wOGogkeCCiJXO/3CqEDuJWBYSwwLSXqJe3BaYgl3PL0AywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjGIxU5CrAgf02sa4aFpv3CXawRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvMWFhNTAwMDctMDIxMi0z MWYzLWE3NjctZDBiOTgwMGJmOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJga1lCiAxhim3/nph7Bt5YuMqBLiire1o3qvViQbfASLPl1ePHPM3T1 S4zODb8o5RrYgb3itugQlZ56OsgWUkAetJEJRQdXlP+m4aIM+fcKJo7Z2PBXDtqr gHMU5klqVH8TE5mju2yjqk+zSaAN1acHsAOnR9vHzmVoUqQKSlua+PZAe8N2FRxA QFy/W5LlnKboSbSyiUw0lrxJ2ry9yLIpKu11ltc+snsMpw+opBpkTEA7o0PaddeC VnB3Rnzp+bkvtC7fbGQqL04BNFESWseHT8QgPCKnA3CG/XMQVUGMyZQU4LpJzoh2 xTX2MS/Sl9IxJVtt6O8GnKT6JBmmkVY= -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:39 2026 by rpki-client