$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa File: a8f35c59-b971-3d84-a662-b03a19638ac2.roa (raw, json) Hash identifier: AbAIZOujRyvl4VrdruM8cYzgOoa4ZODNLf91I+GuWG8= Subject key identifier: F7:C5:E6:A5:D8:45:2F:B5:51:74:3F:5C:D0:E2:F0:55:0F:43:31:FC Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584D2D3F76854F45CB0C5FC0D080 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 14877 IP address blocks: 166.66.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:76:85:4f:45:cb:0c:5f:c0:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=3e598387-16be-47a5-933f-cbb97a30555a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ea:1f:ff:19:70:5b:65:45:ba:38:0d:fa:b1: 1a:a2:77:5d:2f:b6:07:24:f1:d0:f7:ae:51:93:ab: 53:12:25:da:40:61:a5:d3:2e:51:51:1d:85:9e:af: 8a:f7:99:b1:ff:ad:e7:44:e0:05:df:e3:e3:94:7a: b7:e5:dd:28:3e:d3:29:aa:9b:a1:c7:d4:8a:5c:b3: 9f:44:59:dd:ef:7d:d3:e7:28:d8:db:16:4e:72:73: d8:ca:42:34:fa:e5:cf:9d:5b:83:d2:97:d7:f7:f2: aa:38:a1:8c:f4:e4:88:8e:a4:2b:3c:5e:28:9b:4a: 76:f5:96:97:ce:c4:b4:8e:f1:6a:d0:a9:c2:d9:e9: 97:e4:41:27:86:32:d2:e7:b7:c3:06:53:c7:2c:58: d4:99:ac:b0:d3:eb:16:3c:ee:48:62:d7:3e:25:d7: ad:5b:75:4d:65:a5:80:a8:67:83:11:d9:52:cc:83: 2f:d3:64:1e:5d:b7:fc:12:9c:ba:69:2c:53:2b:e8: ed:19:2c:16:05:1d:dc:97:19:56:fc:99:b2:cd:bb: 17:fc:f9:99:fc:6c:dc:17:17:67:94:63:72:28:24: d0:25:26:31:d9:eb:cb:36:78:3d:4d:0d:97:b1:99: 00:e8:14:c2:77:46:8b:4f:21:18:61:20:27:8d:3d: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C5:E6:A5:D8:45:2F:B5:51:74:3F:5C:D0:E2:F0:55:0F:43:31:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: 166.66.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1d:57:be:13:c5:4c:41:12:15:8c:44:ee:d2:ac:74:43:a1: c0:b2:d4:dc:f0:16:21:2e:eb:8f:0d:23:c0:ea:a8:4d:f8:b9: b7:b8:cf:d9:f7:74:cd:12:2b:fe:66:8b:9d:de:d6:65:fa:c5: 28:80:6e:90:9b:21:55:77:3d:5d:fe:73:3a:4e:20:08:1e:58: a1:13:74:84:36:db:46:39:0b:a9:93:c3:c7:0b:53:45:c3:78: 39:c2:d1:18:cc:34:0b:b0:18:f4:00:5a:46:f6:7b:2e:1e:24: 96:4d:c8:6f:5d:d7:5d:f4:d9:58:c1:0b:d0:dd:e4:96:65:b7: ad:2d:17:85:ff:05:5a:84:05:e3:97:fa:24:76:e6:b8:97:7f: d1:3c:5d:58:dc:0d:8f:8a:bc:82:0f:1d:b4:50:8b:e5:12:15: 6c:18:5c:87:a3:8c:a0:5b:ac:38:10:e9:10:1e:d7:2d:44:ff: 02:01:57:62:6c:ac:36:8e:fb:7a:3e:36:e3:5c:05:d1:93:b8: 57:92:04:de:e1:78:d1:35:8c:f1:70:63:0d:88:a4:9a:f6:08: 47:12:ab:f9:2f:7a:83:cb:1c:c4:22:21:84:16:c2:93:06:0b: c3:d1:86:fe:5f:48:1c:10:07:4a:8b:e7:d9:8a:5d:12:a4:9c: 8a:38:10:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3aFT0XLDF/A0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk M2U1OTgzODctMTZiZS00N2E1LTkzM2YtY2JiOTdhMzA1NTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguof/xlwW2VFujgN+rEaonddL7YHJPHQ965R k6tTEiXaQGGl0y5RUR2Fnq+K95mx/63nROAF3+PjlHq35d0oPtMpqpuhx9SKXLOf RFnd733T5yjY2xZOcnPYykI0+uXPnVuD0pfX9/KqOKGM9OSIjqQrPF4om0p29ZaX zsS0jvFq0KnC2emX5EEnhjLS57fDBlPHLFjUmayw0+sWPO5IYtc+JdetW3VNZaWA qGeDEdlSzIMv02QeXbf8Epy6aSxTK+jtGSwWBR3clxlW/JmyzbsX/PmZ/GzcFxdn lGNyKCTQJSYx2evLNng9TQ2XsZkA6BTCd0aLTyEYYSAnjT3OCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfF5qXYRS+1UXQ/XNDi8FUPQzH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvYThmMzVjNTktYjk3MS0z ZDg0LWE2NjItYjAzYTE5NjM4YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApkLKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0dV74TxUxBEhWMRO7SrHRDocCy1NzwFiEu648NI8DqqE34ube4z9n3 dM0SK/5mi53e1mX6xSiAbpCbIVV3PV3+czpOIAgeWKETdIQ220Y5C6mTw8cLU0XD eDnC0RjMNAuwGPQAWkb2ey4eJJZNyG9d11302VjBC9Dd5JZlt60tF4X/BVqEBeOX +iR25riXf9E8XVjcDY+KvIIPHbRQi+USFWwYXIejjKBbrDgQ6RAe1y1E/wIBV2Js rDaO+3o+NuNcBdGTuFeSBN7heNE1jPFwYw2IpJr2CEcSq/kveoPLHMQiIYQWwpMG C8PRhv5fSBwQB0qL59mKXRKknIo4EAo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:01 2026 by rpki-client