$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2605b6c4-cfe2-3057-8698-eccb49b9a270.roa File: 2605b6c4-cfe2-3057-8698-eccb49b9a270.roa (raw, json) Hash identifier: ACtzOQE4vahW0Aq3f8YPYBMYcpEG3ULG2WPqE8Pp420= Subject key identifier: 0D:D4:61:F1:82:90:79:81:E5:1F:5E:26:86:38:51:FC:10:39:D8:59 Certificate issuer: /CN=2cf622f9-718a-4280-a116-72e2088c51e3 Certificate serial: 010D0C9F4328584D09126F6E183B2CFC8CF82E00 Authority key identifier: 30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2605b6c4-cfe2-3057-8698-eccb49b9a270.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 13649 IP address blocks: 66.45.13.0/24 maxlen: 24 2620:dd:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:6f:6e:18:3b:2c:fc:8c:f8:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cf622f9-718a-4280-a116-72e2088c51e3 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=f860880f-0aee-4dd5-8c01-287dbd549e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:6b:3f:a7:98:a9:47:78:e8:e0:06:c3:6b: f6:5c:0f:61:2a:67:00:d2:b3:f5:6d:ab:0e:50:f5: 7e:e9:09:71:55:41:22:e2:b6:16:6c:74:7c:a7:27: e8:91:a7:57:08:0a:b9:26:94:7f:d4:81:21:40:81: c5:ee:14:8e:20:f0:df:13:e4:eb:8a:1a:5a:a2:0d: e1:65:ab:1a:aa:20:0d:90:f3:bb:06:4a:44:ca:6a: 40:ac:e7:4b:59:69:15:2d:fd:15:c9:31:8e:7c:79: 5c:a6:a4:35:ec:cc:b7:2a:87:75:c2:d8:8b:d3:bb: 07:33:0c:f0:fe:5d:f9:1b:be:b2:04:0b:b1:5b:44: 58:0f:36:9a:cd:a9:a9:9f:9f:79:53:64:7e:c5:97: 48:92:26:71:27:da:51:7f:0e:2c:c9:98:6e:a9:57: d5:f4:30:7b:8a:9d:8f:a1:c1:e7:bf:3f:19:06:8d: 9e:6f:1a:8a:6c:72:26:fa:76:5a:96:75:57:91:0e: 42:d0:9a:28:f5:8e:7d:04:10:30:fc:23:6e:9f:05: ce:d9:3b:e6:46:52:41:1c:b9:7e:29:33:7a:b3:5b: 91:91:0e:0f:d3:31:71:2c:61:e9:d4:06:d1:47:a6: 68:8e:e1:c8:c4:59:4d:3c:58:94:82:b6:5e:21:06: 0a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D4:61:F1:82:90:79:81:E5:1F:5E:26:86:38:51:FC:10:39:D8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2605b6c4-cfe2-3057-8698-eccb49b9a270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl X509v3 Authority Key Identifier: keyid:30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer sbgp-ipAddrBlock: critical IPv4: 66.45.13.0/24 IPv6: 2620:dd:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:45:d8:03:7c:6a:2c:97:fa:a8:43:3d:78:46:1e:f0:13:59: e0:d5:78:b2:b4:47:fc:9d:4d:d0:e7:3d:ce:0c:44:aa:6d:1f: c1:25:2d:9f:de:86:6f:78:fb:c6:61:83:94:bb:a1:67:8a:60: dc:5a:70:7c:ff:b2:6d:b7:c1:ed:a3:65:f4:b5:1c:1a:22:fc: 77:39:d8:0d:c0:21:04:68:00:ef:dc:d5:32:dc:60:ea:59:a7: 99:8e:ca:a6:28:ad:53:ce:47:47:b8:6a:94:4f:e4:07:22:55: fc:1d:fc:f8:b8:c1:e5:76:24:3f:19:93:03:59:54:24:f7:23: 18:8a:05:ed:15:16:2f:a8:39:15:14:c1:bb:8f:1f:80:9a:ae: 47:e1:77:58:b2:3f:fe:9d:97:bd:85:d1:d4:71:55:67:91:0b: 82:e8:55:f2:02:3b:60:06:c4:d4:f3:3f:9b:ac:ae:81:53:38: 9c:26:33:26:e7:82:a7:05:cf:bb:94:af:7b:bd:ff:42:24:be: 1c:1a:ba:7b:df:b4:4d:41:b3:ad:ad:47:32:a6:37:5e:c4:c2: b5:8c:99:9e:02:7d:9a:49:22:ec:0f:f1:f6:12:e8:a9:1d:4c: f3:1d:e6:17:35:44:61:56:ca:81:8b:55:d9:35:0f:61:a8:5e: ea:ab:ae:27 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE0JEm9uGDss/Iz4LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNmNjIyZjktNzE4YS00MjgwLWExMTYtNzJlMjA4OGM1 MWUzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk Zjg2MDg4MGYtMGFlZS00ZGQ1LThjMDEtMjg3ZGJkNTQ5ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AdrP6eYqUd46OAGw2v2XA9hKmcA0rP1basO UPV+6QlxVUEi4rYWbHR8pyfokadXCAq5JpR/1IEhQIHF7hSOIPDfE+Trihpaog3h ZasaqiANkPO7BkpEympArOdLWWkVLf0VyTGOfHlcpqQ17My3Kod1wtiL07sHMwzw /l35G76yBAuxW0RYDzaazampn595U2R+xZdIkiZxJ9pRfw4syZhuqVfV9DB7ip2P ocHnvz8ZBo2ebxqKbHIm+nZalnVXkQ5C0Joo9Y59BBAw/CNunwXO2TvmRlJBHLl+ KTN6s1uRkQ4P0zFxLGHp1AbRR6ZojuHIxFlNPFiUgrZeIQYKzwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFA3UYfGCkHmB5R9eJoY4UfwQOdhZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yY2Y2 MjJmOS03MThhLTQyODAtYTExNi03MmUyMDg4YzUxZTMvMjYwNWI2YzQtY2ZlMi0z MDU3LTg2OTgtZWNjYjQ5YjlhMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmNmNjIyZjktNzE4YS00MjgwLWEx MTYtNzJlMjA4OGM1MWUzLzJjZjYyMmY5LTcxOGEtNDI4MC1hMTE2LTcyZTIwODhj NTFlMy5jcmwwHwYDVR0jBBgwFoAUMGLaWKnwufvsj2/Mg0mYz+O0DGowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yY2Y2MjJmOS03MThhLTQyODAtYTExNi03MmUy MDg4YzUxZTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQi0NMA8E AgACMAkDBwAmIADdwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbEXYA3xqLJf6qEM9eEYe8BNZ4NV4srRH /J1N0Oc9zgxEqm0fwSUtn96Gb3j7xmGDlLuhZ4pg3FpwfP+ybbfB7aNl9LUcGiL8 dznYDcAhBGgA79zVMtxg6lmnmY7KpiitU85HR7hqlE/kByJV/B38+LjB5XYkPxmT A1lUJPcjGIoF7RUWL6g5FRTBu48fgJquR+F3WLI//p2XvYXR1HFVZ5ELguhV8gI7 YAbE1PM/m6yugVM4nCYzJueCpwXPu5Sve73/QiS+HBq6e9+0TUGzra1HMqY3XsTC tYyZngJ9mkki7A/x9hLoqR1M8x3mFzVEYVbKgYtV2TUPYahe6quuJw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:27 2026 by rpki-client