$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1ad47068-d192-3747-bf69-e4678412dfb6.roa File: 1ad47068-d192-3747-bf69-e4678412dfb6.roa (raw, json) Hash identifier: ZtQKTL/wd4/LDe3jsAXrdy+K/5fJtKxp+/dc16GDix8= Subject key identifier: E2:4A:41:52:C5:9E:34:AC:7C:A8:2A:E8:7E:35:84:0D:5E:96:E9:6D Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584D1B1A1B75714A445DCAD79B80 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1ad47068-d192-3747-bf69-e4678412dfb6.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 394437 IP address blocks: 66.249.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:1b:75:71:4a:44:5d:ca:d7:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=3af5c6ca-89d0-41e2-a378-02be61eb3c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:38:d1:85:43:ed:9a:62:14:1e:7c:c7:bb: 80:4e:db:6c:57:ee:81:af:65:3f:8c:52:4e:96:a5: 31:42:e4:fc:a9:9f:9c:aa:88:b5:00:15:6b:ab:b3: fe:8d:d1:c6:99:85:cf:dc:a3:33:0b:20:6e:ac:bd: ea:d6:87:55:dc:d1:a4:9d:93:94:ce:a8:7f:b2:92: 0a:2a:1b:a8:3f:da:0b:0c:6f:fd:d5:d4:a6:37:1f: ad:5d:05:e5:7b:4a:79:c8:ae:a4:d2:1c:37:87:61: a5:b2:d0:9a:b9:65:30:11:9e:80:b5:70:c5:64:5a: ff:2c:57:38:01:3a:54:40:ae:94:7b:74:d2:a2:5d: 3a:2c:9e:f0:17:97:d6:9a:e8:38:21:0b:10:77:43: 8d:27:d0:cf:af:91:c8:11:6b:9f:90:9c:08:81:61: 68:18:49:0a:3d:c2:28:6e:b8:16:0c:13:81:ff:41: 87:78:2a:89:2e:3e:8d:c5:fb:a1:f1:cd:0a:2e:04: 25:dd:28:a7:e5:d4:60:a9:b5:a1:1e:b7:90:66:18: 08:e4:36:85:37:d6:f3:e1:62:bf:73:4f:00:a2:cd: 5e:44:77:27:f0:28:8c:34:65:f6:5c:52:2b:12:7a: e2:c7:ee:49:75:73:38:ed:9b:da:98:67:42:8e:94: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4A:41:52:C5:9E:34:AC:7C:A8:2A:E8:7E:35:84:0D:5E:96:E9:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1ad47068-d192-3747-bf69-e4678412dfb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 66.249.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:5d:5b:12:96:8e:1a:52:e5:99:00:d3:14:ce:be:85:f0:36: db:b3:1a:e7:e1:ef:35:f1:60:82:6d:36:43:03:14:ba:df:16: 7a:60:5f:b8:0f:4c:01:69:b7:ac:4e:6e:37:32:5a:06:60:7d: b6:96:72:c8:23:4b:65:ee:ea:4f:d9:4c:32:84:03:59:46:c7: 60:80:de:83:e0:e1:95:57:d8:6a:72:38:9a:38:55:de:1c:15: 32:be:22:c9:6a:08:fa:79:fc:05:8d:92:6b:62:ac:28:a5:ec: aa:56:cb:d5:23:05:9f:7f:68:0e:a0:83:7d:e2:dd:a6:8f:c9: 18:d1:8e:39:5d:7d:f1:ce:29:2d:2a:10:03:da:0b:2d:19:e4: e6:69:79:47:4b:a5:36:cb:f8:c6:ff:51:94:fa:b4:2c:02:5a: 6e:b8:25:9f:1b:38:ca:82:49:17:d3:75:3c:a2:d9:3b:9c:c8: c9:c9:46:bf:ae:4f:79:7f:fa:d9:2f:32:fd:22:0c:9c:62:b9: 24:88:9c:7e:30:78:f8:ec:ae:1e:38:94:3c:23:e3:ce:bb:f8: cc:45:20:7e:e2:0e:fa:01:bf:14:01:10:9d:10:7a:0b:cb:06: f3:10:61:5a:3d:d2:d7:33:1b:a3:bd:8c:c5:d2:92:a5:d5:24: 08:af:eb:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGht1cUpEXcrXm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk M2FmNWM2Y2EtODlkMC00MWUyLWEzNzgtMDJiZTYxZWIzYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDk40YVD7ZpiFB58x7uATttsV+6Br2U/jFJO lqUxQuT8qZ+cqoi1ABVrq7P+jdHGmYXP3KMzCyBurL3q1odV3NGknZOUzqh/spIK KhuoP9oLDG/91dSmNx+tXQXle0p5yK6k0hw3h2GlstCauWUwEZ6AtXDFZFr/LFc4 ATpUQK6Ue3TSol06LJ7wF5fWmug4IQsQd0ONJ9DPr5HIEWufkJwIgWFoGEkKPcIo brgWDBOB/0GHeCqJLj6Nxfuh8c0KLgQl3Sin5dRgqbWhHreQZhgI5DaFN9bz4WK/ c08Aos1eRHcn8CiMNGX2XFIrEnrix+5JdXM47ZvamGdCjpTErQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJKQVLFnjSsfKgq6H41hA1elultMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMWFkNDcwNjgtZDE5Mi0z NzQ3LWJmNjktZTQ2Nzg0MTJkZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVdWxKWjhpS5ZkA0xTOvoXwNtuzGufh7zXxYIJtNkMDFLrfFnpgX7gP TAFpt6xObjcyWgZgfbaWcsgjS2Xu6k/ZTDKEA1lGx2CA3oPg4ZVX2GpyOJo4Vd4c FTK+IslqCPp5/AWNkmtirCil7KpWy9UjBZ9/aA6gg33i3aaPyRjRjjldffHOKS0q EAPaCy0Z5OZpeUdLpTbL+Mb/UZT6tCwCWm64JZ8bOMqCSRfTdTyi2TucyMnJRr+u T3l/+tkvMv0iDJxiuSSInH4wePjsrh44lDwj4867+MxFIH7iDvoBvxQBEJ0QegvL BvMQYVo90tczG6O9jMXSkqXVJAiv62c= -----END CERTIFICATE-----Generated at Thu Mar 26 19:48:50 2026 by rpki-client