$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa File: cfa20e25-bed2-3567-961a-5bbdbe881853.roa (raw, json) Hash identifier: rbVSGWf6mR8h7XzYXcV+i1+XAaqMU5KZl/NFDO/AeaY= Subject key identifier: BB:C8:51:18:50:89:A4:F9:BF:E6:CE:CB:47:32:98:4F:77:3E:6F:32 Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Certificate serial: 010D0C9F4328584D2D3F7990D7984998558CC280 Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 26703 IP address blocks: 66.102.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:79:90:d7:98:49:98:55:8c:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=daa2dccc-7380-4f85-89c8-c284081c472a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:1b:de:88:ea:05:df:93:5b:3e:42:45:33: 03:85:5a:d9:a3:80:30:8c:0c:db:c7:6c:d2:dc:0b: d3:3f:76:20:56:92:fa:3c:64:51:e1:07:f3:e9:f8: 3b:61:27:b7:82:38:09:d2:87:16:ac:24:51:9e:c2: c3:a0:ff:4a:9d:67:b9:85:a3:00:f1:61:54:f8:ab: 12:8c:fb:e5:20:45:7d:09:81:87:9b:02:ce:ba:dc: 2a:ec:a6:3c:ae:76:ea:fb:b9:a9:c1:b7:0d:22:2d: ab:7a:77:59:2e:6e:7e:a4:fe:cd:7e:c1:d3:28:1e: 92:a2:a0:8a:70:08:fd:fd:f8:c1:d5:3e:71:65:29: b8:49:e5:3b:25:7b:c5:cf:b5:fb:0e:08:e1:cd:30: d6:98:3f:c2:09:04:e4:7d:c3:1a:9c:e8:f9:38:2e: cd:03:5d:a6:83:7b:f3:13:b6:bd:00:ac:d1:c3:b4: 2a:db:f7:df:27:4d:71:cd:44:4e:07:88:b0:77:8c: 96:dc:3a:ef:3a:bf:51:63:1d:84:0c:16:80:3d:d5: 8c:b3:6a:c5:01:f7:57:04:12:41:3d:9d:a7:c5:64: 73:e6:ac:b5:88:37:5f:09:a4:4e:9a:32:ca:ad:d1: bd:38:1e:b4:33:59:2a:9e:d5:8a:0c:85:71:2f:ac: 42:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C8:51:18:50:89:A4:F9:BF:E6:CE:CB:47:32:98:4F:77:3E:6F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl X509v3 Authority Key Identifier: keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer sbgp-ipAddrBlock: critical IPv4: 66.102.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:97:f1:0e:f1:8d:cd:3e:23:47:7a:48:75:16:f0:80:6c:7d: eb:8e:5e:0d:c3:d0:2d:d6:14:d0:9f:dd:d3:29:c4:35:5a:05: 1d:75:52:4a:3b:9b:21:47:8c:b2:39:df:81:b7:50:67:4a:04: 72:11:42:3a:20:18:a2:c6:6d:9d:37:8a:b0:69:64:af:73:26: 21:b6:5b:d5:07:8a:3b:a1:b7:ea:38:89:58:8f:12:09:a8:7a: 9d:64:30:03:d2:d0:8a:58:e9:37:1c:9c:67:69:d2:bf:b7:bb: d9:aa:ef:c6:7a:57:9f:6c:0e:54:78:ec:37:45:4c:97:ca:48: b3:4a:01:e7:34:94:eb:8c:f5:ae:cf:4e:4a:7b:b4:14:92:b9: cd:dc:82:6b:76:65:97:9c:2a:19:f5:20:c3:90:10:6e:90:3c: 4b:a9:eb:a0:0d:09:f1:d0:08:2d:57:89:c8:4b:ac:a2:61:06: e9:b8:62:80:81:77:27:6c:0a:54:09:ec:ec:47:23:dd:cb:15: 39:60:e2:59:96:cf:01:08:86:bf:22:ff:50:44:89:f1:12:20: 9b:41:d0:95:0d:24:c2:e1:6d:44:b6:78:2c:08:4e:de:f3:6c: 5d:f8:6d:f8:ab:8d:70:a3:e8:fb:93:c5:9c:2e:73:2a:10:00: 54:56:19:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3mQ15hJmFWMwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj ZTA4MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ZGFhMmRjY2MtNzM4MC00Zjg1LTg5YzgtYzI4NDA4MWM0NzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo94b3ojqBd+TWz5CRTMDhVrZo4AwjAzbx2zS 3AvTP3YgVpL6PGRR4Qfz6fg7YSe3gjgJ0ocWrCRRnsLDoP9KnWe5haMA8WFU+KsS jPvlIEV9CYGHmwLOutwq7KY8rnbq+7mpwbcNIi2rendZLm5+pP7NfsHTKB6SoqCK cAj9/fjB1T5xZSm4SeU7JXvFz7X7DgjhzTDWmD/CCQTkfcManOj5OC7NA12mg3vz E7a9AKzRw7Qq2/ffJ01xzUROB4iwd4yW3DrvOr9RYx2EDBaAPdWMs2rFAfdXBBJB PZ2nxWRz5qy1iDdfCaROmjLKrdG9OB60M1kqntWKDIVxL6xC4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvIURhQiaT5v+bOy0cymE93Pm8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4 M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvY2ZhMjBlMjUtYmVkMi0z NTY3LTk2MWEtNWJiZGJlODgxODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4 NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSX8Q7xjc0+I0d6SHUW8IBsfeuOXg3D0C3WFNCf3dMpxDVaBR11Uko7 myFHjLI534G3UGdKBHIRQjogGKLGbZ03irBpZK9zJiG2W9UHijuht+o4iViPEgmo ep1kMAPS0IpY6TccnGdp0r+3u9mq78Z6V59sDlR47DdFTJfKSLNKAec0lOuM9a7P Tkp7tBSSuc3cgmt2ZZecKhn1IMOQEG6QPEup66ANCfHQCC1XichLrKJhBum4YoCB dydsClQJ7OxHI93LFTlg4lmWzwEIhr8i/1BEifESIJtB0JUNJMLhbUS2eCwITt7z bF34bfirjXCj6PuTxZwucyoQAFRWGUQ= -----END CERTIFICATE-----Generated at Fri Mar 27 01:10:29 2026 by rpki-client