$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5025f2dc-def6-3e17-b7c9-cd03f628f8a3.roa File: 5025f2dc-def6-3e17-b7c9-cd03f628f8a3.roa (raw, json) Hash identifier: 2M28V5r89gRbf3aLa1kgJ1toeYU0lgPFtQtMTFxL5AI= Subject key identifier: 58:56:4C:1E:89:3F:56:D0:B3:A2:8F:6A:91:10:69:3D:A1:51:9E:AC Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D300A32325EEEF2E2002B5280 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5025f2dc-def6-3e17-b7c9-cd03f628f8a3.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 397630 IP address blocks: 66.146.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:32:32:5e:ee:f2:e2:00:2b:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=fbacf0ad-e66a-4b38-a944-7123ce03df5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fb:db:cd:a8:59:69:28:5b:80:7d:df:74:27: bf:d5:b5:a8:7e:ce:7d:f1:7a:4f:92:56:e1:a6:b3: 56:6b:6a:d8:e9:7c:54:ae:7b:03:db:c8:b4:dc:3b: e4:a5:f4:36:8e:a9:1c:67:75:0d:d6:55:ee:7a:7f: fc:69:80:48:2e:83:7b:09:b3:64:6c:86:9d:a9:84: d9:48:ec:48:36:a7:a9:d7:97:22:d1:1f:27:fa:38: 06:55:5a:2e:fb:ab:2d:d3:7b:cd:47:76:47:d4:69: f1:fe:ee:ad:8d:1e:cc:92:ae:0e:f7:0c:9d:39:1e: 71:07:7c:52:ba:58:19:2b:0f:28:cc:f0:e3:f8:d5: 03:7f:ce:07:ab:46:df:20:5c:8d:3d:c5:78:e8:02: 7f:ce:cd:d5:61:c3:ac:e2:38:fd:1b:e6:e8:58:f3: c0:8e:d9:5f:f8:b9:29:57:92:92:b1:25:51:39:f9: d3:be:b0:94:0d:7b:5b:37:48:c4:e9:26:92:5b:a3: f2:5a:ec:5c:a0:90:e5:e2:91:b7:e9:4a:9d:cc:83: 0c:bc:6d:ec:d2:c4:2d:ed:b7:c4:13:aa:2e:77:9c: 73:69:7c:ef:84:27:a6:02:5e:15:fe:16:1f:ce:ee: 75:a7:5e:25:36:30:47:4a:34:97:7e:e0:f0:5c:80: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:56:4C:1E:89:3F:56:D0:B3:A2:8F:6A:91:10:69:3D:A1:51:9E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5025f2dc-def6-3e17-b7c9-cd03f628f8a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 66.146.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:28:3a:22:21:98:e5:38:02:1a:4b:e1:39:a5:f4:30:31:c4: df:4e:c8:0a:9a:fc:4b:79:78:cf:31:4b:66:4e:b6:6f:ca:91: fd:90:8a:ce:84:5b:d8:f7:02:3d:24:80:cc:b3:83:46:bc:51: 21:21:d2:b5:ea:6a:29:65:66:a7:9a:d9:ab:6d:e2:34:a5:e0: 1d:47:44:3b:16:60:d6:93:1e:a9:1a:f4:78:d7:e2:6a:03:ae: 36:cc:92:37:3e:01:89:c9:41:39:88:6f:d5:57:55:f0:65:71: 2b:2d:7f:b4:8b:61:bd:a3:d3:6b:f7:8f:21:1b:37:68:d7:14: c7:41:e7:9a:cc:a7:19:b1:de:d4:dd:ec:65:89:db:3b:cf:bc: e0:64:1d:27:56:14:4a:b5:e8:af:e4:50:7a:97:66:10:9e:c8: 2e:5c:72:25:09:04:95:56:3d:71:f5:f3:43:c9:03:cc:99:39: f7:40:16:bc:f8:63:11:80:fb:0b:22:90:48:01:e8:50:76:ff: 71:32:ba:65:d3:14:f8:04:14:a2:46:4a:df:86:d4:15:9f:90: c6:17:01:c8:e4:f8:d6:3d:90:1a:cc:c6:cc:27:f1:25:9e:a0: fe:a4:32:56:ed:36:e2:5d:d2:cd:13:2b:e0:0f:fc:cd:29:82: 8b:63:d1:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjIyXu7y4gArUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmJhY2YwYWQtZTY2YS00YjM4LWE5NDQtNzEyM2NlMDNkZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfvbzahZaShbgH3fdCe/1bWofs598XpPklbh prNWa2rY6XxUrnsD28i03DvkpfQ2jqkcZ3UN1lXuen/8aYBILoN7CbNkbIadqYTZ SOxINqep15ci0R8n+jgGVVou+6st03vNR3ZH1Gnx/u6tjR7Mkq4O9wydOR5xB3xS ulgZKw8ozPDj+NUDf84Hq0bfIFyNPcV46AJ/zs3VYcOs4jj9G+boWPPAjtlf+Lkp V5KSsSVROfnTvrCUDXtbN0jE6SaSW6PyWuxcoJDl4pG36UqdzIMMvG3s0sQt7bfE E6oud5xzaXzvhCemAl4V/hYfzu51p14lNjBHSjSXfuDwXIBrxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhWTB6JP1bQs6KPapEQaT2hUZ6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNTAyNWYyZGMtZGVmNi0z ZTE3LWI3YzktY2QwM2Y2MjhmOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQpLtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkoOiIhmOU4AhpL4Tml9DAxxN9OyAqa/Et5eM8xS2ZOtm/Kkf2Qis6E W9j3Aj0kgMyzg0a8USEh0rXqaillZqea2att4jSl4B1HRDsWYNaTHqka9HjX4moD rjbMkjc+AYnJQTmIb9VXVfBlcSstf7SLYb2j02v3jyEbN2jXFMdB55rMpxmx3tTd 7GWJ2zvPvOBkHSdWFEq16K/kUHqXZhCeyC5cciUJBJVWPXH180PJA8yZOfdAFrz4 YxGA+wsikEgB6FB2/3EyumXTFPgEFKJGSt+G1BWfkMYXAcjk+NY9kBrMxswn8SWe oP6kMlbtNuJd0s0TK+AP/M0pgotj0bI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:23 2026 by rpki-client