$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa File: af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa (raw, json) Hash identifier: V87mLV5pkjP4trvvXCCqr9hPdL8eHmgZsj0p1F9e/8M= Subject key identifier: E7:AB:E7:7B:41:54:76:22:D8:E2:39:77:88:86:A9:6B:F3:8C:4C:83 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584D2A74E6CB00AA4BB563513400 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 55293 IP address blocks: 68.66.224.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e6:cb:00:aa:4b:b5:63:51:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=7c4ad8c4-1c1c-4f34-a58f-e8ae7020779c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b3:ee:40:dc:a0:56:e7:af:93:b2:c2:45:8b: 7c:bd:8f:46:e9:3d:4f:84:da:65:df:b3:34:11:ed: 57:17:88:29:4b:e0:a8:67:b9:13:0f:87:2c:e1:5d: 72:80:c6:52:67:ff:75:4b:d8:3e:36:66:ea:93:ab: 05:3b:21:91:aa:fd:00:70:7d:fd:86:3e:c3:75:65: 7d:1e:20:96:00:0f:33:41:20:48:1c:9f:10:6c:91: 34:12:f6:37:38:53:38:f5:e7:c6:ce:58:e0:f3:ec: da:7c:8f:a6:9a:1f:02:ae:48:5c:29:54:d1:7a:b3: 1a:bd:2f:fe:4b:13:fa:f8:fd:ad:bb:76:01:16:cd: fe:5c:4d:36:57:08:99:c9:dc:52:a0:d0:0b:8d:dc: 81:ba:41:84:52:74:5c:03:24:40:9f:95:49:62:f2: 57:de:43:23:64:01:c0:2b:f8:d3:31:2b:d5:73:63: 68:39:e3:c1:90:38:19:90:99:64:b1:80:b6:ea:6a: 71:12:0b:e9:af:f0:03:d2:cb:00:6a:53:48:3e:1c: 9c:45:24:32:05:64:dc:66:1f:7d:9d:ae:08:91:d6: 85:d7:12:9c:0a:21:8f:94:60:d1:ed:16:0c:2e:d9: fd:e1:5d:53:36:54:80:cc:0d:79:41:4e:13:d6:24: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AB:E7:7B:41:54:76:22:D8:E2:39:77:88:86:A9:6B:F3:8C:4C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 68.66.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:71:bf:57:68:3c:20:d3:0f:4b:7b:7f:2b:3b:38:0d:a9:aa: db:db:6c:cd:3b:69:c4:67:0e:59:a2:a0:b2:21:8d:76:db:d6: 55:69:9e:b4:67:1e:e3:fa:9a:30:2a:df:d1:3c:17:99:e6:95: 45:95:d0:23:e2:4f:7f:0e:b1:8b:15:79:5e:60:b3:1c:2b:90: a5:2e:40:29:35:1e:c4:b7:c5:1f:5a:1c:ac:8e:e8:29:4d:b5: 1e:3a:d1:b2:08:6a:b4:cf:cb:87:9f:00:9d:11:52:09:59:99: 39:3e:6a:20:0d:43:e6:2d:dc:8f:3c:75:5d:53:fe:e3:f9:be: ac:c4:16:db:f5:36:f3:26:60:45:ee:07:90:36:5f:02:40:df: 48:53:40:28:42:5e:0d:d7:fa:90:ed:fa:c2:fa:b9:32:ae:2d: 13:5a:58:89:e8:da:78:8f:d9:58:9c:04:88:03:8a:62:ed:97: b7:3e:c2:de:2e:09:01:e5:5a:8e:57:46:b8:97:ae:5d:2a:25: 4d:1f:c4:ad:79:e8:09:7b:19:7d:46:75:e7:92:a4:e9:07:db: c9:5f:30:c1:24:46:89:a7:86:6e:9b:10:07:6d:63:74:2e:96: 7c:f3:9a:5c:b3:0d:69:cc:cc:83:4e:0c:27:ff:89:70:32:02: 37:b3:8b:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdObLAKpLtWNRNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk N2M0YWQ4YzQtMWMxYy00ZjM0LWE1OGYtZThhZTcwMjA3NzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bPuQNygVuevk7LCRYt8vY9G6T1PhNpl37M0 Ee1XF4gpS+CoZ7kTD4cs4V1ygMZSZ/91S9g+Nmbqk6sFOyGRqv0AcH39hj7DdWV9 HiCWAA8zQSBIHJ8QbJE0EvY3OFM49efGzljg8+zafI+mmh8CrkhcKVTRerMavS/+ SxP6+P2tu3YBFs3+XE02VwiZydxSoNALjdyBukGEUnRcAyRAn5VJYvJX3kMjZAHA K/jTMSvVc2NoOePBkDgZkJlksYC26mpxEgvpr/AD0ssAalNIPhycRSQyBWTcZh99 na4IkdaF1xKcCiGPlGDR7RYMLtn94V1TNlSAzA15QU4T1iT+EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOer53tBVHYi2OI5d4iGqWvzjEyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYWY4NGMzZjAtZmJiMC0z ZTQ3LTlmOTMtMThjOTZkZjJiMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERELgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhxv1doPCDTD0t7fys7OA2pqtvbbM07acRnDlmioLIhjXbb1lVpnrRn HuP6mjAq39E8F5nmlUWV0CPiT38OsYsVeV5gsxwrkKUuQCk1HsS3xR9aHKyO6ClN tR460bIIarTPy4efAJ0RUglZmTk+aiANQ+Yt3I88dV1T/uP5vqzEFtv1NvMmYEXu B5A2XwJA30hTQChCXg3X+pDt+sL6uTKuLRNaWIno2niP2VicBIgDimLtl7c+wt4u CQHlWo5XRriXrl0qJU0fxK156Al7GX1GdeeSpOkH28lfMMEkRomnhm6bEAdtY3Qu lnzzmlyzDWnMzINODCf/iXAyAjezi3s= -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:05 2026 by rpki-client