$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ae97b7e-78a2-3fae-a85a-84ec3deb20ac.roa File: 8ae97b7e-78a2-3fae-a85a-84ec3deb20ac.roa (raw, json) Hash identifier: CPxwK+u72VU7j46zVZpYBHVnCKqiITpCHS1Oe0wOjAk= Subject key identifier: 20:13:D3:E6:F5:F8:B9:0F:5B:97:1F:DD:2C:04:AF:28:37:AA:8A:6D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77A3D5963D42E0F9B145C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ae97b7e-78a2-3fae-a85a-84ec3deb20ac.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 202 IP address blocks: 66.54.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a3:d5:96:3d:42:e0:f9:b1:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=1dcd76a4-7a62-48dd-8b87-4518441f7fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:4b:94:c4:4b:e7:8f:f9:fb:1d:cb:60:13: f0:c7:06:92:ec:c6:c9:6c:db:62:54:6d:71:91:21: b8:b9:40:67:4a:92:c4:d3:d5:b2:34:7d:ef:d6:4d: 59:a8:ba:30:39:fb:f5:98:08:78:45:1f:b2:72:02: 2b:cb:95:d1:87:da:51:5a:a8:b0:35:2d:a3:e9:bb: 55:9a:e4:e6:5d:ed:98:e7:39:55:58:5d:d5:0c:34: 01:c4:b6:da:66:ba:a5:96:f6:0d:33:25:21:3a:0c: 68:f7:10:49:99:5f:46:e4:5e:36:dd:cb:48:58:ca: 85:63:2d:ed:91:35:09:76:7a:ab:5c:5b:ae:7e:42: c8:19:b6:f9:3e:55:32:84:27:cb:ca:4b:f2:c8:13: 0d:80:c4:89:da:ff:53:44:34:d0:24:1a:35:e3:ca: 39:41:b1:c2:40:48:e6:94:4f:63:42:50:f5:de:a5: 31:68:03:b9:86:ec:18:c0:2f:46:aa:bc:c3:33:71: 88:95:e8:04:d1:85:31:d0:d5:cc:c0:44:2d:9f:fd: ed:c7:1f:3a:22:e8:e6:39:ae:93:9b:9e:0d:0f:0e: 0e:f9:03:0e:6f:7e:93:d1:4c:35:a8:65:bf:8d:e2: 51:be:ca:69:2f:6f:34:12:f9:a3:e3:1a:ea:d1:d8: 26:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:13:D3:E6:F5:F8:B9:0F:5B:97:1F:DD:2C:04:AF:28:37:AA:8A:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ae97b7e-78a2-3fae-a85a-84ec3deb20ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5d:70:e2:aa:f1:43:f2:45:4c:63:86:0c:28:ae:c3:0f:08: e1:a3:a7:06:00:e1:e1:0e:52:06:b2:8a:d4:b7:4c:af:fa:9f: a5:08:5e:03:7e:c7:21:44:70:4a:cf:19:cf:fc:35:b4:cb:ba: c8:5c:c9:bf:01:82:e5:0c:63:50:e6:b8:64:7c:8d:e9:14:32: 7a:c6:79:af:a3:31:65:e8:53:be:1e:98:70:99:04:a7:bf:3b: 63:cd:66:8e:1f:f1:18:b6:fe:cd:11:f4:97:20:12:9b:00:d4: 22:71:28:4e:0c:8b:6a:89:05:fa:33:09:ae:e3:c1:15:7a:06: e1:73:57:73:d5:36:93:ef:dd:59:1a:64:34:58:90:82:e2:37: 6c:d3:5e:34:61:2f:a1:9b:82:60:b5:f3:e2:3f:87:24:c3:08: ed:4e:cb:74:6c:c6:f1:68:51:d0:d2:32:e4:ba:2a:07:03:b0: bc:05:dd:e7:3d:57:50:a8:e8:d0:d7:71:5a:67:73:02:80:7c: b0:e7:90:66:44:6c:a5:c0:29:69:a1:63:9b:9b:73:fe:2e:70: 41:e6:3d:5b:73:d4:74:14:93:53:2a:a2:00:f3:c6:2e:c3:70: 99:09:c3:0f:4a:30:b9:95:57:50:55:12:c6:53:46:bd:5d:7f: 9c:53:24:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6PVlj1C4PmxRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk MWRjZDc2YTQtN2E2Mi00OGRkLThiODctNDUxODQ0MWY3ZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlltLlMRL54/5+x3LYBPwxwaS7MbJbNtiVG1x kSG4uUBnSpLE09WyNH3v1k1ZqLowOfv1mAh4RR+ycgIry5XRh9pRWqiwNS2j6btV muTmXe2Y5zlVWF3VDDQBxLbaZrqllvYNMyUhOgxo9xBJmV9G5F423ctIWMqFYy3t kTUJdnqrXFuufkLIGbb5PlUyhCfLykvyyBMNgMSJ2v9TRDTQJBo148o5QbHCQEjm lE9jQlD13qUxaAO5huwYwC9GqrzDM3GIlegE0YUx0NXMwEQtn/3txx86IujmOa6T m54NDw4O+QMOb36T0Uw1qGW/jeJRvsppL280Evmj4xrq0dgm2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAT0+b1+LkPW5cf3SwEryg3qoptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGFlOTdiN2UtNzhhMi0z ZmFlLWE4NWEtODRlYzNkZWIyMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAddcOKq8UPyRUxjhgworsMPCOGjpwYA4eEOUgayitS3TK/6n6UIXgN+ xyFEcErPGc/8NbTLushcyb8BguUMY1DmuGR8jekUMnrGea+jMWXoU74emHCZBKe/ O2PNZo4f8Ri2/s0R9JcgEpsA1CJxKE4Mi2qJBfozCa7jwRV6BuFzV3PVNpPv3Vka ZDRYkILiN2zTXjRhL6GbgmC18+I/hyTDCO1Oy3RsxvFoUdDSMuS6KgcDsLwF3ec9 V1Co6NDXcVpncwKAfLDnkGZEbKXAKWmhY5ubc/4ucEHmPVtz1HQUk1MqogDzxi7D cJkJww9KMLmVV1BVEsZTRr1df5xTJOo= -----END CERTIFICATE-----Generated at Thu Mar 26 13:23:44 2026 by rpki-client