$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/0f5de3cf-38f4-358d-87b9-d26a85402381.roa File: 0f5de3cf-38f4-358d-87b9-d26a85402381.roa (raw, json) Hash identifier: yDZYU6ZSLY9F8jdXWzGoI1Dk32mj4T8H5QnLFRmSkcI= Subject key identifier: C0:5F:E4:3B:E3:22:34:C1:7B:2E:0E:88:47:8C:CC:64:33:DC:FD:BE Certificate issuer: /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Certificate serial: 010D0C9F4328584D1B1A6001D079340D3DD44880 Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/0f5de3cf-38f4-358d-87b9-d26a85402381.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 66.207.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:60:01:d0:79:34:0d:3d:d4:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=b8719e8d-dcd5-4501-b807-8f2b1c943d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:13:67:fa:8f:ae:40:2a:b8:08:f8:c5:03: 42:6e:a7:c9:73:7f:b2:06:8a:8d:e2:f3:72:f2:a3: ad:c8:8d:c2:91:5a:54:bc:a4:26:22:99:58:2b:e0: 79:4a:bd:c7:04:89:b1:f2:ab:f9:84:e3:a6:37:f7: 3e:8a:e9:ed:60:b8:fc:56:30:73:d2:ed:bf:86:d0: ec:33:fa:8d:67:41:4d:d6:73:73:7a:1f:66:52:ee: 0c:92:6e:46:93:d8:2f:ae:c0:75:c3:ab:07:94:36: 42:1d:d2:53:59:3e:bf:92:fe:c0:9d:45:de:89:b4: a0:10:c7:c5:66:a8:ba:9c:bc:c1:f9:c4:71:16:fb: 54:4c:fb:ef:e6:5e:7e:a3:d4:67:88:bd:2f:26:70: 8c:35:cb:f5:4e:26:e5:6a:83:07:69:ef:4b:98:04: 6d:2d:0a:c4:68:97:02:98:5e:45:46:59:f3:f4:6a: 2d:d3:b6:9c:f2:7a:f3:0e:8e:16:cb:0f:52:87:1e: e2:61:db:24:b1:32:50:50:ed:91:ab:84:03:09:21: 4c:a7:a1:a4:8c:a2:35:c0:0f:d7:e0:59:e0:01:97: 3f:93:a8:a0:c6:3d:53:44:3c:18:a2:be:82:f0:01: a9:0f:e6:99:d1:d8:2d:ef:01:c9:71:5b:cb:4a:d0: 66:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5F:E4:3B:E3:22:34:C1:7B:2E:0E:88:47:8C:CC:64:33:DC:FD:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/0f5de3cf-38f4-358d-87b9-d26a85402381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl X509v3 Authority Key Identifier: keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer sbgp-ipAddrBlock: critical IPv4: 66.207.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:66:f9:ae:f4:ff:79:89:c6:22:a6:9d:a6:07:71:a5:58:19: 88:06:9c:59:e4:fb:bd:0d:a9:72:a6:59:20:81:5c:e2:30:c5: 11:af:36:67:7b:6c:a8:2c:7a:5f:14:8a:30:58:9d:b5:20:1b: e3:5e:30:29:ec:d2:91:9f:7f:84:06:56:e4:98:f0:6b:47:5e: 61:b3:5f:54:40:4b:69:8a:90:89:41:da:f5:9d:8a:dd:03:d7: 17:40:ee:bd:f5:8d:e0:b5:c2:92:e0:3b:ea:d5:f0:54:75:d0: 1c:4d:7b:6d:18:78:ad:c0:5d:56:32:e2:a0:ad:74:21:fe:fc: cd:1e:50:89:32:16:74:17:49:70:1e:af:e1:42:b5:d8:55:45: fb:f8:e1:d0:db:df:fa:13:b9:48:e8:e7:f2:7d:e7:c7:5b:0c: 60:e0:5d:3c:3a:38:35:9d:fd:6d:b2:c2:dc:ae:88:40:3f:28: a9:46:da:a7:a3:38:ff:ef:3a:80:02:71:ec:1d:8e:5d:2e:86: ff:66:94:ed:e8:fa:ac:83:b5:db:3b:7c:7c:96:f7:84:63:3c: 09:d1:17:d5:ad:43:03:45:90:2c:72:50:e8:9d:b9:5c:76:5e: 4b:81:51:3a:ba:40:81:7c:79:bd:7a:da:8d:24:81:75:9e:d6: 08:ed:9e:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmAB0Hk0DT3USIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YTUzYzItYWQzZC00ODI2LThjNDktODQ4NTdkZDRk YjYwMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Yjg3MTllOGQtZGNkNS00NTAxLWI4MDctOGYyYjFjOTQzZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFcTZ/qPrkAquAj4xQNCbqfJc3+yBoqN4vNy 8qOtyI3CkVpUvKQmIplYK+B5Sr3HBImx8qv5hOOmN/c+iuntYLj8VjBz0u2/htDs M/qNZ0FN1nNzeh9mUu4Mkm5Gk9gvrsB1w6sHlDZCHdJTWT6/kv7AnUXeibSgEMfF Zqi6nLzB+cRxFvtUTPvv5l5+o9RniL0vJnCMNcv1TiblaoMHae9LmARtLQrEaJcC mF5FRlnz9Got07ac8nrzDo4Wyw9Shx7iYdsksTJQUO2Rq4QDCSFMp6GkjKI1wA/X 4FngAZc/k6igxj1TRDwYor6C8AGpD+aZ0dgt7wHJcVvLStBmuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBf5DvjIjTBey4OiEeMzGQz3P2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh NTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1N2RkNGRiNjAvMGY1ZGUzY2YtMzhmNC0z NThkLTg3YjktZDI2YTg1NDAyMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YTUzYzItYWQzZC00ODI2LThj NDktODQ4NTdkZDRkYjYwLzVjNWE1M2MyLWFkM2QtNDgyNi04YzQ5LTg0ODU3ZGQ0 ZGI2MC5jcmwwHwYDVR0jBBgwFoAUOpNtDGAmuMECDnX45ZtKtMXiNyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhNTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1 N2RkNGRiNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQs+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1m+a70/3mJxiKmnaYHcaVYGYgGnFnk+70NqXKmWSCBXOIwxRGvNmd7 bKgsel8UijBYnbUgG+NeMCns0pGff4QGVuSY8GtHXmGzX1RAS2mKkIlB2vWdit0D 1xdA7r31jeC1wpLgO+rV8FR10BxNe20YeK3AXVYy4qCtdCH+/M0eUIkyFnQXSXAe r+FCtdhVRfv44dDb3/oTuUjo5/J958dbDGDgXTw6ODWd/W2ywtyuiEA/KKlG2qej OP/vOoACcewdjl0uhv9mlO3o+qyDtds7fHyW94RjPAnRF9WtQwNFkCxyUOiduVx2 XkuBUTq6QIF8eb162o0kgXWe1gjtnvo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:31:22 2026 by rpki-client