$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa File: 677c9e94-c45b-345c-8a40-a975fad8cd7d.roa (raw, json) Hash identifier: AxXRUQ0sB/yS9tvB+M2iJD2fb/Krk5/M0BsLdtg7tUk= Subject key identifier: 5B:AF:88:58:27:2E:6C:F7:32:88:AB:70:DA:EC:11:B0:A7:03:F7:59 Certificate issuer: /CN=669f938e-8371-4220-9059-9081449ba23b Certificate serial: 010D0C9F4328584D3B34DD98F4F8970564E877C0 Authority key identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 46694 IP address blocks: 66.209.240.0/20 maxlen: 24 192.68.190.0/24 maxlen: 24 2607:6280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:dd:98:f4:f8:97:05:64:e8:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=669f938e-8371-4220-9059-9081449ba23b Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=21d02348-5e8d-499b-944c-f346f453b6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:99:83:89:bc:0f:6a:02:a2:eb:11:2b:36: 40:f3:0e:42:7b:41:73:74:29:b5:66:89:8f:9d:8d: 08:0d:31:66:22:ac:45:38:48:5f:0c:22:12:59:9c: 72:b9:f0:18:09:44:cc:c1:61:8f:f6:aa:b2:8a:7b: 4e:70:6c:05:8c:e3:32:c4:47:98:82:05:ce:57:f4: 2b:26:28:74:d3:98:f5:d9:be:62:d8:37:fa:90:c4: 0a:57:b6:59:09:8f:64:3e:b9:f3:46:42:cf:46:2c: 02:51:5f:f0:88:e9:a3:e8:e8:17:71:5c:49:9d:46: f5:e5:db:d9:a8:59:99:e3:b6:44:54:09:ef:15:02: 33:40:46:c8:ff:5f:79:fd:df:18:b4:73:be:d7:b8: c8:b7:27:94:d1:90:8d:ed:8f:e7:a5:f8:76:5a:40: 23:41:d3:81:ad:c0:42:d6:e5:98:75:f2:69:93:8d: 06:c7:0a:d9:8a:17:e5:20:30:8c:b7:26:7d:2c:63: 44:7f:3d:b7:d9:41:d9:e1:c9:12:ee:93:83:8d:e3: 11:9c:ea:e4:df:d9:be:66:03:cd:27:cd:70:d9:e9: b5:0e:4c:21:7f:0e:ce:55:d5:ce:05:a6:03:b1:94: 95:db:53:81:15:fe:ae:18:ee:dd:f6:b0:b7:cc:a1: f5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AF:88:58:27:2E:6C:F7:32:88:AB:70:DA:EC:11:B0:A7:03:F7:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl X509v3 Authority Key Identifier: keyid:D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer sbgp-ipAddrBlock: critical IPv4: 66.209.240.0/20 192.68.190.0/24 IPv6: 2607:6280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c2:80:d8:f7:02:af:d5:70:7b:f3:12:5e:e9:87:e5:bb:5c: 0d:ce:8a:fd:f5:86:12:03:71:68:1a:ea:26:94:78:45:aa:ec: 0a:2c:b5:d8:45:fc:1a:3e:da:83:4e:a3:b1:54:2d:a9:c2:43: 53:fd:19:1f:65:0d:ea:a5:4d:2c:69:47:f7:9e:5b:1f:a9:75: c0:97:3f:1a:aa:1a:65:5e:41:0a:bb:72:21:e3:40:a7:62:bb: d6:aa:c1:a9:48:54:05:c6:22:53:66:c1:87:35:93:a2:27:ad: 5a:c2:eb:4e:04:cf:db:cb:d9:01:f0:c7:25:7d:95:be:5f:b8: b0:26:b4:6e:50:da:77:f8:98:81:bf:ac:33:cb:70:d1:ee:a5: 76:6b:93:d1:0f:37:c8:ad:6b:a2:60:77:0a:c1:a1:3c:35:fe: 61:12:6a:5b:0f:61:26:e9:5a:ad:48:7a:02:55:6d:09:e6:21: 78:00:34:ca:3b:4c:5b:05:a2:10:77:bd:dc:b2:69:ac:e7:6a: b3:6e:15:46:77:c8:16:b4:e6:bd:b7:d5:ea:66:07:c7:d7:b1: 66:e4:47:ca:6b:bc:aa:05:48:68:35:21:2f:19:f2:8d:99:de: 00:90:db:f6:7c:f8:d3:9c:1d:68:4b:2e:d2:ce:1f:3e:ed:ec: 9a:a9:ff:75 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE07NN2Y9PiXBWTod8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY5ZjkzOGUtODM3MS00MjIwLTkwNTktOTA4MTQ0OWJh MjNiMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk MjFkMDIzNDgtNWU4ZC00OTliLTk0NGMtZjM0NmY0NTNiNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1mZg4m8D2oCousRKzZA8w5Ce0FzdCm1ZomP nY0IDTFmIqxFOEhfDCISWZxyufAYCUTMwWGP9qqyintOcGwFjOMyxEeYggXOV/Qr Jih005j12b5i2Df6kMQKV7ZZCY9kPrnzRkLPRiwCUV/wiOmj6OgXcVxJnUb15dvZ qFmZ47ZEVAnvFQIzQEbI/195/d8YtHO+17jItyeU0ZCN7Y/npfh2WkAjQdOBrcBC 1uWYdfJpk40GxwrZihflIDCMtyZ9LGNEfz232UHZ4ckS7pODjeMRnOrk39m+ZgPN J81w2em1Dkwhfw7OVdXOBaYDsZSV21OBFf6uGO7d9rC3zKH1GQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFuviFgnLmz3MoircNrsEbCnA/dZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Njlm OTM4ZS04MzcxLTQyMjAtOTA1OS05MDgxNDQ5YmEyM2IvNjc3YzllOTQtYzQ1Yi0z NDVjLThhNDAtYTk3NWZhZDhjZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjY5ZjkzOGUtODM3MS00MjIwLTkw NTktOTA4MTQ0OWJhMjNiLzY2OWY5MzhlLTgzNzEtNDIyMC05MDU5LTkwODE0NDli YTIzYi5jcmwwHwYDVR0jBBgwFoAU0DQ2yYzKs+8Zker3PLDZ8S9TQcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NjlmOTM4ZS04MzcxLTQyMjAtOTA1OS05MDgx NDQ5YmEyM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQtHwAwQA wES+MA0EAgACMAcDBQAmB2KAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGzCgNj3Aq/VcHvzEl7ph+W7XA3O iv31hhIDcWga6iaUeEWq7AostdhF/Bo+2oNOo7FULanCQ1P9GR9lDeqlTSxpR/ee Wx+pdcCXPxqqGmVeQQq7ciHjQKdiu9aqwalIVAXGIlNmwYc1k6InrVrC604Ez9vL 2QHwxyV9lb5fuLAmtG5Q2nf4mIG/rDPLcNHupXZrk9EPN8ita6JgdwrBoTw1/mES alsPYSbpWq1IegJVbQnmIXgANMo7TFsFohB3vdyyaaznarNuFUZ3yBa05r231epm B8fXsWbkR8prvKoFSGg1IS8Z8o2Z3gCQ2/Z8+NOcHWhLLtLOHz7t7Jqp/3U= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:31 2026 by rpki-client