$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/16633004-e46a-3fb4-be3b-681f6a980807.roa File: 16633004-e46a-3fb4-be3b-681f6a980807.roa (raw, json) Hash identifier: ibSrJPYz7PIiPP64ki50e3HKDjZFVL2lYlVx5prfyLg= Subject key identifier: 33:3A:0A:AC:BD:9A:B2:9B:19:E3:95:5F:CD:D2:86:78:12:96:B8:D9 Certificate issuer: /CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Certificate serial: 010D0C9F4328584D3DFFACAF7A8C7E1727D4F800 Authority key identifier: 27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/16633004-e46a-3fb4-be3b-681f6a980807.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 394763 IP address blocks: 23.182.248.0/24 maxlen: 24 2620:c9:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ac:af:7a:8c:7e:17:27:d4:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=ad643507-1f22-472b-baf6-85367387812a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ed:2d:a9:40:7e:08:2a:6d:29:09:18:04:56: ab:03:11:62:db:26:ec:2a:31:74:6f:5f:ff:6a:af: 01:02:02:f4:25:70:b4:93:33:70:64:90:c1:90:a6: e7:66:ce:c1:10:6d:c4:68:03:2f:54:f0:83:ec:bc: d4:0e:e5:34:02:88:45:eb:98:3e:64:ef:50:6e:bc: 27:27:4c:ae:d9:ad:10:73:bf:63:d5:49:c2:35:0a: 31:b6:8d:18:1a:b5:24:5a:93:80:85:c7:d2:42:00: 2d:7d:5d:0c:01:bf:4a:fb:27:9c:db:52:7f:e5:d0: 45:93:9c:fd:b2:78:01:3d:78:a0:4a:7c:1b:71:43: 88:80:a2:2b:0c:cb:e0:d7:e3:f5:83:96:1c:7d:d7: 99:92:25:69:ba:78:5f:f4:28:58:32:c3:78:19:59: 25:4a:a9:ed:1f:77:61:cb:4f:7f:70:9d:ed:a1:9f: a3:c9:55:89:cc:24:a3:0d:8f:00:ff:ca:57:60:20: ac:cd:7c:96:9c:46:6b:71:c0:d2:c0:2d:05:54:4c: 96:29:02:d6:da:2e:33:d1:51:c1:ae:fd:62:3a:a9: b5:75:a4:d7:7a:6c:9e:79:14:96:0a:aa:92:a3:df: 12:27:5e:ea:af:ef:ce:da:95:1f:19:9b:dd:c5:b0: 33:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3A:0A:AC:BD:9A:B2:9B:19:E3:95:5F:CD:D2:86:78:12:96:B8:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/16633004-e46a-3fb4-be3b-681f6a980807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl X509v3 Authority Key Identifier: keyid:27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer sbgp-ipAddrBlock: critical IPv4: 23.182.248.0/24 IPv6: 2620:c9:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e8:39:6f:84:52:de:40:1a:d4:c8:0b:a0:e8:33:b7:3c:65: 87:20:50:e6:28:9b:b4:21:e3:60:62:fc:06:3b:13:da:99:7c: dd:ed:54:d8:da:59:64:4f:70:1a:74:78:98:e1:d8:2a:e9:d8: 42:c5:bd:92:2a:a9:f3:1e:82:88:58:8e:43:b3:b1:ad:17:ea: 39:b7:13:5c:f2:f9:a8:3a:4b:a7:bb:cd:df:a1:dd:6b:ed:e9: 7a:6a:b6:a0:4a:f9:76:b4:29:a6:91:35:5b:19:da:a2:98:7b: b1:16:bd:c1:de:ed:2d:9a:6a:79:1d:6a:22:55:3c:dc:18:20: 92:69:05:8f:73:08:3a:af:56:17:b6:5b:aa:42:2d:d3:17:11: a6:4b:1a:5f:4b:44:49:c3:62:43:ee:e6:45:d8:06:d8:91:82: c0:3d:bd:f5:f4:1d:e8:54:8a:9f:b6:3d:ec:c6:2d:95:ff:2f: 43:72:83:da:a3:85:a8:e3:28:38:40:3a:86:da:97:3e:64:76: df:6c:2b:27:0b:d9:99:c6:7b:4f:97:5b:12:b6:ae:4b:6c:ac: 5f:49:d5:2b:87:57:d1:6e:e6:d0:83:42:ee:cb:a0:7f:8d:ce: 15:1d:64:0a:93:28:26:38:bd:fc:4b:7f:b8:76:b7:21:ee:14: 1f:90:80:ed -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE09/6yveox+FyfU+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZDRhNDAtNzVkMy00MTEyLWE0YzgtNmRlOWNhNTcx ZmZlMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YWQ2NDM1MDctMWYyMi00NzJiLWJhZjYtODUzNjczODc4MTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+0tqUB+CCptKQkYBFarAxFi2ybsKjF0b1// aq8BAgL0JXC0kzNwZJDBkKbnZs7BEG3EaAMvVPCD7LzUDuU0AohF65g+ZO9Qbrwn J0yu2a0Qc79j1UnCNQoxto0YGrUkWpOAhcfSQgAtfV0MAb9K+yec21J/5dBFk5z9 sngBPXigSnwbcUOIgKIrDMvg1+P1g5YcfdeZkiVpunhf9ChYMsN4GVklSqntH3dh y09/cJ3toZ+jyVWJzCSjDY8A/8pXYCCszXyWnEZrccDSwC0FVEyWKQLW2i4z0VHB rv1iOqm1daTXemyeeRSWCqqSo98SJ17qr+/O2pUfGZvdxbAz+QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDM6Cqy9mrKbGeOVX83ShngSlrjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNk NGE0MC03NWQzLTQxMTItYTRjOC02ZGU5Y2E1NzFmZmUvMTY2MzMwMDQtZTQ2YS0z ZmI0LWJlM2ItNjgxZjZhOTgwODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZDRhNDAtNzVkMy00MTEyLWE0 YzgtNmRlOWNhNTcxZmZlLzY2Y2Q0YTQwLTc1ZDMtNDExMi1hNGM4LTZkZTljYTU3 MWZmZS5jcmwwHwYDVR0jBBgwFoAUJ4LHseRo4uvhVpDdLeNlrXlb7MswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNkNGE0MC03NWQzLTQxMTItYTRjOC02ZGU5 Y2E1NzFmZmUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF7b4MA8E AgACMAkDBwAmIADJ4AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfOg5b4RS3kAa1MgLoOgztzxlhyBQ5iib tCHjYGL8BjsT2pl83e1U2NpZZE9wGnR4mOHYKunYQsW9kiqp8x6CiFiOQ7OxrRfq ObcTXPL5qDpLp7vN36Hda+3pemq2oEr5drQpppE1Wxnaoph7sRa9wd7tLZpqeR1q IlU83BggkmkFj3MIOq9WF7ZbqkIt0xcRpksaX0tEScNiQ+7mRdgG2JGCwD299fQd 6FSKn7Y97MYtlf8vQ3KD2qOFqOMoOEA6htqXPmR232wrJwvZmcZ7T5dbErauS2ys X0nVK4dX0W7m0INC7sugf43OFR1kCpMoJji9/Et/uHa3Ie4UH5CA7Q== -----END CERTIFICATE-----Generated at Sat Mar 28 14:50:54 2026 by rpki-client