$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa File: 7a842816-3127-38d1-9d65-422d4458e42b.roa (raw, json) Hash identifier: VhhsnRhcXyw9tlfGfJr+U4aG3xmywUJyWe0ujNxOL+M= Subject key identifier: 96:4B:69:88:50:0A:21:09:7F:32:CE:26:F1:DD:89:48:15:B5:AB:8E Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584D2A74E6D88B6ADDAC9F4C98C0 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 55293 IP address blocks: 68.66.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e6:d8:8b:6a:dd:ac:9f:4c:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=41c2f6bb-6da8-401e-b091-381d6ab4917b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:96:43:dd:7a:f6:93:11:ea:35:41:f0:42:d6: ad:96:bc:fd:90:2b:7a:eb:05:73:73:b2:fd:99:c7: 1b:f3:db:59:a3:b4:70:25:9f:ca:76:2b:d9:e1:6d: 30:09:26:6a:9a:50:0e:4f:ff:8a:d1:42:85:0c:da: 7b:a0:b8:59:e8:79:c4:46:19:3f:4a:15:51:fa:01: dd:ec:3e:a2:47:b0:97:51:66:0b:93:6b:55:8a:21: dd:71:a3:d6:14:ea:f4:4f:20:06:d0:b7:a9:d7:6e: b2:ab:aa:f8:d3:bc:a2:f5:cc:7a:6f:f2:8a:7b:8c: 15:97:b0:66:fc:ff:c9:49:18:ab:7a:dd:a3:34:45: d5:bf:fa:23:4c:0c:3a:ad:eb:00:6d:ae:b3:9c:29: 06:eb:d2:ae:a2:7b:1d:f3:72:a4:88:c9:27:4c:fb: c3:f6:91:3f:53:9a:76:e2:9e:58:c3:d7:5a:97:7c: 14:6c:d7:31:fd:32:87:d2:81:eb:91:1a:f1:53:67: d1:70:ff:70:f5:d7:1a:c6:73:50:5d:15:6d:70:ff: fa:2a:cc:9e:81:ee:fd:b6:73:57:98:de:92:43:73: 26:37:a8:27:44:60:4c:e9:70:1d:ba:86:40:77:69: 9e:0d:91:92:11:88:2f:f2:46:59:0f:05:0d:01:db: dd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4B:69:88:50:0A:21:09:7F:32:CE:26:F1:DD:89:48:15:B5:AB:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 68.66.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:09:e5:1b:c3:74:80:dd:50:c8:21:5e:ae:1d:f8:00:95:5a: 20:41:13:9d:ce:f7:eb:39:03:75:5d:55:cd:df:ab:2a:f0:b7: f3:d9:34:a8:2a:94:d8:1a:c4:51:83:c7:42:69:c6:00:58:ae: ad:7f:f5:88:05:43:21:9d:35:a3:11:a8:f0:b5:3b:ec:02:81: ec:da:18:c3:6d:5d:d5:7a:8f:0e:ae:17:ed:34:a4:ef:b9:e5: a2:a1:62:68:4f:47:de:fc:da:e4:ce:2d:a6:b3:d4:28:f7:19: 6f:dc:36:e6:4b:fc:c7:7c:a7:42:8b:96:46:5d:b1:08:44:f6: e1:41:d5:b3:70:e0:64:9e:5b:e1:81:d0:eb:7b:5f:04:8a:23: e3:c5:8a:64:be:8d:0c:24:44:04:ec:b1:4e:d2:fb:05:c4:ec: eb:36:0c:af:b1:96:7e:f7:3a:01:f4:48:e4:21:c4:fb:c6:5a: bf:bb:65:77:18:8a:bf:f5:32:94:68:50:85:cc:7e:af:7e:51: 37:3d:c0:28:76:c0:a2:e8:e6:bf:88:cf:cd:f8:30:6e:4d:5f: b2:97:66:78:66:36:f6:13:40:df:44:e3:a4:38:b0:98:8c:f5: 11:5b:b5:04:5a:fa:0f:05:96:aa:c2:fb:2f:8c:5f:f0:4b:41: d2:1d:68:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdObYi2rdrJ9MmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NDFjMmY2YmItNmRhOC00MDFlLWIwOTEtMzgxZDZhYjQ5MTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5ZD3Xr2kxHqNUHwQtatlrz9kCt66wVzc7L9 mccb89tZo7RwJZ/KdivZ4W0wCSZqmlAOT/+K0UKFDNp7oLhZ6HnERhk/ShVR+gHd 7D6iR7CXUWYLk2tViiHdcaPWFOr0TyAG0Lep126yq6r407yi9cx6b/KKe4wVl7Bm /P/JSRiret2jNEXVv/ojTAw6resAba6znCkG69Kuonsd83KkiMknTPvD9pE/U5p2 4p5Yw9dal3wUbNcx/TKH0oHrkRrxU2fRcP9w9dcaxnNQXRVtcP/6Ksyege79tnNX mN6SQ3MmN6gnRGBM6XAduoZAd2meDZGSEYgv8kZZDwUNAdvdcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZLaYhQCiEJfzLOJvHdiUgVtauOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvN2E4NDI4MTYtMzEyNy0z OGQxLTlkNjUtNDIyZDQ0NThlNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERELwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIJ5RvDdIDdUMghXq4d+ACVWiBBE53O9+s5A3VdVc3fqyrwt/PZNKgq lNgaxFGDx0JpxgBYrq1/9YgFQyGdNaMRqPC1O+wCgezaGMNtXdV6jw6uF+00pO+5 5aKhYmhPR9782uTOLaaz1Cj3GW/cNuZL/Md8p0KLlkZdsQhE9uFB1bNw4GSeW+GB 0Ot7XwSKI+PFimS+jQwkRATssU7S+wXE7Os2DK+xln73OgH0SOQhxPvGWr+7ZXcY ir/1MpRoUIXMfq9+UTc9wCh2wKLo5r+Iz834MG5NX7KXZnhmNvYTQN9E46Q4sJiM 9RFbtQRa+g8FlqrC+y+MX/BLQdIdaBI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:24 2026 by rpki-client