$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa File: aaaac3ee-1605-31c1-81a4-003c07299c97.roa (raw, json) Hash identifier: ak7eM/SMxhLYZ3xl9N9P3EIqAahMbYcGs4PYoFu6+E4= Subject key identifier: DF:38:A7:F2:24:5C:C9:11:AC:BD:A1:44:CE:A9:79:4E:45:CF:30:35 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584D2A74E68C1EA499FEC21EFAC0 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 55293 IP address blocks: 68.66.208.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e6:8c:1e:a4:99:fe:c2:1e:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=659ad3af-4372-49cd-805d-5fccf790feaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:87:59:c1:a5:9e:dc:c3:eb:33:32:bc:af:36: 2c:b2:41:a7:e6:14:d0:23:bd:e3:f6:7e:5b:77:7f: 43:da:83:77:c9:94:59:f2:5f:52:27:7d:ad:33:e4: 84:f7:07:a3:bd:c6:50:98:45:25:04:b8:85:a1:b7: 3a:3e:61:3e:2c:c4:ee:2a:97:f9:d5:f3:4d:a1:6c: 0f:65:d8:f3:31:a4:cb:2b:34:c5:b4:fe:43:04:9e: 42:06:2e:db:c4:6b:09:d4:c2:b8:c1:75:78:a3:71: 7f:ed:1b:4c:c9:9d:b6:5a:b3:84:5a:c3:d1:6c:be: 9a:91:1e:18:54:e9:5c:e4:ac:32:b4:93:ac:74:77: 13:84:73:3c:e4:6b:8c:4d:8f:43:76:94:5e:5d:46: 7a:be:74:82:c5:2f:7b:a3:ae:af:80:86:2a:16:9c: a4:7b:43:5a:7e:48:97:5d:99:99:65:e2:19:c6:dc: 73:06:ed:8f:c1:87:e3:e2:e8:76:c1:95:e1:56:3a: 76:dc:40:6c:2e:1f:70:37:ca:2b:bb:c2:57:05:28: 1b:f2:45:32:44:e2:b4:54:56:49:bb:6f:70:a1:d0: 62:d7:f6:d7:02:27:7b:0f:04:d3:a2:21:36:ca:30: 07:f4:92:0d:de:cf:a7:6d:6c:e6:d6:cf:fb:ef:b5: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:38:A7:F2:24:5C:C9:11:AC:BD:A1:44:CE:A9:79:4E:45:CF:30:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 68.66.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5f:81:fb:f8:49:07:7c:07:5c:bb:00:37:9b:44:3b:f4:9c: 03:89:d9:3a:f9:e9:15:23:3b:57:db:29:8b:1a:e6:6c:8e:ac: f6:0c:85:a1:70:91:5a:9d:c5:8f:50:8f:33:3b:49:58:e5:c8: ee:23:da:48:38:5a:e0:78:6c:a4:fb:5e:4a:ad:7e:90:54:b7: 5d:a9:01:d6:5c:24:f6:4a:90:5b:93:65:a1:d6:da:81:44:6b: 5f:0f:7b:aa:b6:7d:65:70:0d:6d:b7:d3:72:00:ec:00:1d:49: 06:0d:fd:f3:86:fc:99:94:fb:89:62:52:bc:71:9a:74:9e:46: 6d:43:2c:8b:57:b9:d3:4e:09:c9:b9:e3:f4:2d:56:8d:92:ec: db:86:af:10:45:2c:d3:0b:08:3f:9f:30:6e:9a:59:0c:cc:3c: 62:f0:56:31:db:f6:9c:57:e0:46:07:af:7d:77:d9:65:8a:92: e9:fe:0d:3b:09:cb:e2:81:59:4e:e7:87:99:a2:51:dc:39:ea: 7e:ef:71:3e:e3:c6:7e:e9:6d:27:77:44:5c:42:2c:30:03:7c: db:54:ab:ab:07:2e:7e:55:c6:69:1a:bf:23:c2:f6:3c:f2:ff: ff:94:25:d9:93:e9:7b:88:18:c9:3d:94:0b:a7:b7:4f:ea:b1: 64:b3:7f:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOaMHqSZ/sIe+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NjU5YWQzYWYtNDM3Mi00OWNkLTgwNWQtNWZjY2Y3OTBmZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYdZwaWe3MPrMzK8rzYsskGn5hTQI73j9n5b d39D2oN3yZRZ8l9SJ32tM+SE9wejvcZQmEUlBLiFobc6PmE+LMTuKpf51fNNoWwP ZdjzMaTLKzTFtP5DBJ5CBi7bxGsJ1MK4wXV4o3F/7RtMyZ22WrOEWsPRbL6akR4Y VOlc5KwytJOsdHcThHM85GuMTY9DdpReXUZ6vnSCxS97o66vgIYqFpyke0NafkiX XZmZZeIZxtxzBu2PwYfj4uh2wZXhVjp23EBsLh9wN8oru8JXBSgb8kUyROK0VFZJ u29wodBi1/bXAid7DwTToiE2yjAH9JIN3s+nbWzm1s/777WEGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN84p/IkXMkRrL2hRM6peU5FzzA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYWFhYWMzZWUtMTYwNS0z MWMxLTgxYTQtMDAzYzA3Mjk5Yzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRELQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJfgfv4SQd8B1y7ADebRDv0nAOJ2Tr56RUjO1fbKYsa5myOrPYMhaFw kVqdxY9QjzM7SVjlyO4j2kg4WuB4bKT7XkqtfpBUt12pAdZcJPZKkFuTZaHW2oFE a18Pe6q2fWVwDW2303IA7AAdSQYN/fOG/JmU+4liUrxxmnSeRm1DLItXudNOCcm5 4/QtVo2S7NuGrxBFLNMLCD+fMG6aWQzMPGLwVjHb9pxX4EYHr3132WWKkun+DTsJ y+KBWU7nh5miUdw56n7vcT7jxn7pbSd3RFxCLDADfNtUq6sHLn5VxmkavyPC9jzy //+UJdmT6XuIGMk9lAunt0/qsWSzf7E= -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:53 2026 by rpki-client