$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa File: 3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa (raw, json) Hash identifier: Jlsa4DfpTvmTUVzOFoXojmEJ6fbnDR7G1e6QHkk57Ys= Subject key identifier: 4A:08:F3:3C:7E:95:55:7C:54:80:4D:D8:F1:08:A0:76:81:CE:BC:9D Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D362CDA74D1A737F6846BC880 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa Signing time: Wed 18 Mar 2026 17:45:36 +0000 ROA not before: Wed 18 Mar 2026 17:45:36 +0000 ROA not after: Tue 16 Jun 2026 17:45:36 +0000 asID: 20001 IP address blocks: 66.146.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:2c:da:74:d1:a7:37:f6:84:6b:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 18 17:45:36 2026 GMT Not After : Jun 16 17:45:36 2026 GMT Subject: CN=aca83bbc-e1d9-4e8a-968b-a6a01b6e8d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:18:c1:5c:21:d1:5f:5f:dc:75:c0:aa:22: c5:fc:97:95:86:6b:8c:af:5a:0a:37:39:96:b2:ba: 84:8b:8f:82:04:2f:7a:a0:3e:86:b3:8c:b7:a7:90: ce:63:26:3d:f5:16:59:24:90:ac:53:7f:f7:80:d7: fd:69:7f:3c:99:8d:5a:61:16:2c:55:3c:bf:35:c3: df:e1:2f:6c:7d:20:ad:be:bb:d2:e1:4a:52:ba:2a: db:f6:1d:c7:1d:df:0b:8b:32:1c:29:11:16:de:24: 57:f2:1e:d2:d7:aa:14:7b:35:a2:a5:45:1d:8c:eb: 85:e1:de:ee:01:8f:02:ae:f9:d8:2a:67:d3:b0:eb: bd:cd:bc:2b:82:d1:73:79:db:8d:e4:84:48:84:96: f0:e3:f1:37:8a:4f:10:c9:47:9a:be:7b:c1:fa:96: 8d:9f:31:2c:48:36:27:59:05:e6:6c:e1:85:7e:33: 99:83:b9:c0:f2:66:11:0d:d2:18:47:df:e9:19:50: 72:57:cb:37:eb:51:cd:93:3e:44:ae:36:9b:b1:77: f2:fe:6b:10:82:c3:65:4e:17:ad:f1:20:9c:b7:b0: a3:83:57:6b:b0:25:f6:9b:e2:71:e7:4d:d8:2c:e8: b6:ad:66:36:e4:ba:18:52:e6:78:c7:74:47:52:9a: 38:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:08:F3:3C:7E:95:55:7C:54:80:4D:D8:F1:08:A0:76:81:CE:BC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 66.146.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:aa:7a:af:b3:20:a4:39:d8:73:f1:9d:27:ee:6f:c0:04:c4: d2:c5:2e:93:48:7b:4d:95:1b:dc:38:ca:e3:b3:25:02:0c:87: 60:dd:47:02:ed:8c:d4:0d:08:a8:5a:cf:c4:0d:a7:3e:ec:0a: d0:ff:6f:4b:d7:9c:a9:58:ee:43:df:94:cc:da:cb:8d:ee:61: 4d:58:27:23:4a:61:9f:9c:3b:95:16:1a:8a:ba:19:c7:5f:5f: 76:02:cd:3a:81:2e:31:53:f1:b2:c2:7e:2f:44:1b:48:f0:39: ad:70:ba:92:75:6b:63:bb:27:43:4c:1b:0a:4e:38:4b:69:b7: f6:d7:71:7f:84:8e:e3:1c:18:83:80:6a:fa:9c:c4:1a:f5:63: d4:70:9d:91:ae:16:0c:09:1c:2d:14:87:1d:77:8f:47:13:a8: ed:ef:9a:f1:e5:55:1f:96:d2:91:61:24:82:e4:10:b5:19:14: db:b1:fd:90:53:e2:18:29:04:0f:ca:31:fe:23:35:1b:11:6e: bb:9a:e6:41:95:9b:bb:fb:29:25:1e:6c:83:24:bc:ad:58:4e: 90:d0:f9:c5:f4:ae:04:5e:4e:f1:a3:b0:6c:34:1b:58:2f:59: eb:6e:73:e8:23:4e:7a:31:84:7f:89:bb:36:af:e8:71:f4:89: 61:70:39:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02LNp00ac39oRryIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMxODE3NDUzNloXDTI2MDYxNjE3NDUzNlowLzEtMCsGA1UEAxMk YWNhODNiYmMtZTFkOS00ZThhLTk2OGItYTZhMDFiNmU4ZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudYYwVwh0V9f3HXAqiLF/JeVhmuMr1oKNzmW srqEi4+CBC96oD6Gs4y3p5DOYyY99RZZJJCsU3/3gNf9aX88mY1aYRYsVTy/NcPf 4S9sfSCtvrvS4UpSuirb9h3HHd8LizIcKREW3iRX8h7S16oUezWipUUdjOuF4d7u AY8CrvnYKmfTsOu9zbwrgtFzeduN5IRIhJbw4/E3ik8QyUeavnvB+paNnzEsSDYn WQXmbOGFfjOZg7nA8mYRDdIYR9/pGVByV8s361HNkz5ErjabsXfy/msQgsNlThet 8SCct7Cjg1drsCX2m+Jx503YLOi2rWY25LoYUuZ4x3RHUpo4PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoI8zx+lVV8VIBN2PEIoHaBzrydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2JkZmI0YzItZWIzNy0z YmVmLWI2NjYtYzRhYzRiZTVlYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQpLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiqeq+zIKQ52HPxnSfub8AExNLFLpNIe02VG9w4yuOzJQIMh2DdRwLt jNQNCKhaz8QNpz7sCtD/b0vXnKlY7kPflMzay43uYU1YJyNKYZ+cO5UWGoq6Gcdf X3YCzTqBLjFT8bLCfi9EG0jwOa1wupJ1a2O7J0NMGwpOOEtpt/bXcX+EjuMcGIOA avqcxBr1Y9RwnZGuFgwJHC0Uhx13j0cTqO3vmvHlVR+W0pFhJILkELUZFNux/ZBT 4hgpBA/KMf4jNRsRbrua5kGVm7v7KSUebIMkvK1YTpDQ+cX0rgReTvGjsGw0G1gv Wetuc+gjTnoxhH+Juzav6HH0iWFwOcE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:41:27 2026 by rpki-client