$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2a135386-d97c-3dc6-8e81-a83bebd128a0.roa File: 2a135386-d97c-3dc6-8e81-a83bebd128a0.roa (raw, json) Hash identifier: AWENdsPCM0L6rbOm1d2L2kbkCNQQ1FMc9Gmi66K6sRY= Subject key identifier: 3B:B3:99:26:79:39:81:C5:FA:4D:85:D9:4C:03:2A:7F:27:4F:CD:16 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77A3C3BC17FBE5D8639E00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2a135386-d97c-3dc6-8e81-a83bebd128a0.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 3360 IP address blocks: 66.54.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a3:c3:bc:17:fb:e5:d8:63:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=cebbd0f1-a6ab-4084-a89e-993d92476da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9a:c5:78:8d:53:8e:16:6b:e3:9c:94:89:1a: b6:87:54:c3:93:35:c0:f8:5d:dc:88:6a:bf:cd:03: 1d:a9:86:d4:32:78:6e:44:d0:0a:34:15:1f:df:fb: ea:ad:58:67:19:b5:d2:84:07:3e:81:9a:26:e9:56: 77:bc:67:69:ad:99:de:73:c2:f9:4b:2a:7b:41:8b: 6e:aa:c9:76:d0:4b:97:64:1c:e0:c1:b1:cf:d7:94: fa:5d:93:4e:e1:55:31:80:f7:73:95:ab:67:09:cc: 88:13:a7:08:c3:95:04:84:7b:cc:0e:57:d7:00:02: 26:3a:23:4c:6b:0a:1b:ad:a3:cf:f4:0c:37:41:22: c3:dc:79:23:bc:37:c6:68:c9:59:be:61:cf:d2:e6: 3f:18:8f:ea:24:0f:b0:3c:9e:57:05:b0:1c:e1:db: 73:49:63:d2:18:d5:0f:9c:dc:c7:97:ea:1c:0f:56: f2:1d:17:e3:bc:31:f7:73:fe:64:82:24:ae:31:d2: db:fd:8d:55:79:77:e6:f9:4d:40:48:99:ee:84:bd: ff:40:1e:55:23:ea:63:2f:17:b2:9f:77:18:e3:70: 50:e7:4c:38:dd:c8:e2:8c:96:50:14:d0:53:92:2a: d2:98:e7:39:36:b3:21:e3:d0:93:c8:7d:e9:fd:fa: 14:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B3:99:26:79:39:81:C5:FA:4D:85:D9:4C:03:2A:7F:27:4F:CD:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2a135386-d97c-3dc6-8e81-a83bebd128a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f2:c6:a3:11:de:63:99:d9:6b:d4:f6:4e:d0:7f:1c:ac:0b: dd:da:cc:b8:15:41:ba:a3:b0:25:e9:40:b4:27:e2:b9:8a:71: 3b:3e:70:1a:5f:f8:c4:2c:23:05:54:86:b3:2a:9a:97:26:da: c6:bc:f3:f6:cb:eb:47:1e:e4:dd:cc:bd:ee:f1:2a:7e:ba:d6: 70:62:59:07:4a:8d:db:ac:a5:2e:48:05:0c:36:01:df:7a:fc: 2e:07:a6:96:2d:5c:31:fa:87:18:cd:aa:39:79:1f:36:47:e2: ee:97:68:6a:39:5e:33:b9:c0:0f:59:69:d5:23:cd:0b:e3:7d: 87:40:e7:5d:e3:ac:74:1e:74:de:a6:46:83:4d:8d:46:72:67: 17:58:35:4c:2a:4b:97:17:55:af:94:a4:44:df:47:c7:c9:f0: 7f:bc:0c:cb:76:34:39:55:c1:6f:e1:a2:2f:0e:ff:81:e7:e2: 86:98:97:ae:48:a9:e3:5c:00:07:90:72:7d:f8:ee:7a:07:34: 8c:07:0e:78:5c:cc:82:2a:28:b5:be:a7:28:f0:18:6a:db:26: 13:2e:16:9f:34:1e:c9:01:91:03:7e:35:59:d2:f8:2e:2d:c5: 78:9a:e7:e5:eb:0a:f4:84:9e:8c:e7:2c:d3:77:d3:86:0f:5e: b3:9f:2e:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6PDvBf75dhjngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk Y2ViYmQwZjEtYTZhYi00MDg0LWE4OWUtOTkzZDkyNDc2ZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJrFeI1TjhZr45yUiRq2h1TDkzXA+F3ciGq/ zQMdqYbUMnhuRNAKNBUf3/vqrVhnGbXShAc+gZom6VZ3vGdprZnec8L5Syp7QYtu qsl20EuXZBzgwbHP15T6XZNO4VUxgPdzlatnCcyIE6cIw5UEhHvMDlfXAAImOiNM awobraPP9Aw3QSLD3HkjvDfGaMlZvmHP0uY/GI/qJA+wPJ5XBbAc4dtzSWPSGNUP nNzHl+ocD1byHRfjvDH3c/5kgiSuMdLb/Y1VeXfm+U1ASJnuhL3/QB5VI+pjLxey n3cY43BQ50w43cjijJZQFNBTkirSmOc5NrMh49CTyH3p/foU4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuzmSZ5OYHF+k2F2UwDKn8nT80WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmExMzUzODYtZDk3Yy0z ZGM2LThlODEtYTgzYmViZDEyOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnyxqMR3mOZ2WvU9k7QfxysC93azLgVQbqjsCXpQLQn4rmKcTs+cBpf +MQsIwVUhrMqmpcm2sa88/bL60ce5N3Mve7xKn661nBiWQdKjduspS5IBQw2Ad96 /C4HppYtXDH6hxjNqjl5HzZH4u6XaGo5XjO5wA9ZadUjzQvjfYdA513jrHQedN6m RoNNjUZyZxdYNUwqS5cXVa+UpETfR8fJ8H+8DMt2NDlVwW/hoi8O/4Hn4oaYl65I qeNcAAeQcn347noHNIwHDnhczIIqKLW+pyjwGGrbJhMuFp80HskBkQN+NVnS+C4t xXia5+XrCvSEnoznLNN304YPXrOfLuk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:10 2026 by rpki-client