$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/66c1e438-b93f-3485-ad7f-eda4326c7eec.roa File: 66c1e438-b93f-3485-ad7f-eda4326c7eec.roa (raw, json) Hash identifier: BWkzaTvBzaGjZ2La/2zmZ/eJWCS5wlnXWM+Kiyhv7ac= Subject key identifier: AE:6F:17:4B:EF:D3:DE:AE:33:45:E7:EF:F8:B7:A4:64:5B:21:E5:52 Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584D15A24E13B546DA9628AEA300 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/66c1e438-b93f-3485-ad7f-eda4326c7eec.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 14291 IP address blocks: 199.73.28.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:4e:13:b5:46:da:96:28:ae:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=e57b1c4c-47ec-4b8c-b454-f6fbc3c2c5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:60:17:4e:f8:9f:03:5b:5f:1d:43:aa:f4:65: 34:22:77:c6:22:ae:4e:53:79:9c:9a:77:63:d4:d7: 25:d3:b6:97:61:d9:60:cd:f0:3b:08:9c:d4:1b:e6: 2e:ed:fd:96:a7:91:d7:b9:07:21:85:8a:50:fe:11: 8b:e5:6c:13:ad:c4:b5:33:c4:61:f3:2a:51:c3:7e: 09:b8:9c:48:90:4a:9b:44:f6:f2:0d:27:58:0b:11: 38:af:7e:eb:62:4d:eb:1d:7a:b3:63:cc:b5:43:8d: 95:5b:5b:00:48:cd:36:70:5e:d9:93:4b:53:41:ef: 57:13:ac:d5:e6:12:85:97:a7:a2:46:03:1d:23:ce: 42:03:4e:06:90:2b:dd:50:c3:7d:a6:5b:98:64:3b: fa:72:6c:0e:55:c0:1e:e2:b1:25:bb:c7:5b:90:61: 38:a9:3c:81:98:84:cf:f7:18:95:9e:b0:44:31:44: ef:51:a3:c4:a6:c2:22:c4:2e:e9:d5:56:7c:c5:ae: a0:88:94:c6:04:b3:b5:99:af:9c:7c:2c:cc:f7:f1: d6:f3:be:8c:ab:06:17:14:40:34:b4:7f:19:c9:af: b2:05:e7:d1:39:4c:b1:3c:10:4d:7a:b7:83:bb:e5: 80:86:3c:0a:a6:99:57:03:77:8c:c9:72:79:57:98: eb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6F:17:4B:EF:D3:DE:AE:33:45:E7:EF:F8:B7:A4:64:5B:21:E5:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/66c1e438-b93f-3485-ad7f-eda4326c7eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 199.73.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:79:ff:39:5e:6a:3d:54:35:de:38:e4:9e:d3:f9:10:31:fe: 27:26:b4:cd:d1:38:f0:0a:e3:1a:13:9d:c8:e8:54:46:b6:aa: 54:68:d3:76:78:fe:ff:38:56:e5:d0:8d:a3:34:bd:ac:e3:85: 75:97:1e:61:1b:b1:49:b8:6c:cf:a5:08:ec:0a:17:94:18:43: 84:b1:d4:81:ca:f7:ba:43:08:52:73:63:2e:46:a1:1c:99:d1: a6:6c:1b:f7:9d:00:de:bb:19:f1:b1:3e:23:ee:8d:7e:b9:a8: 72:13:dc:6b:be:27:9c:16:e4:8a:31:bd:55:59:4f:fb:90:f7: 2a:0f:d7:c9:16:ed:58:64:05:60:97:84:55:64:e5:a9:ea:67: b1:2a:86:88:e2:41:dc:08:38:9f:da:73:ab:56:05:b4:28:e6: 51:11:54:cb:44:77:c5:a1:3d:bd:06:18:0a:b7:82:bb:e6:75: 18:fc:c0:2e:a4:c1:4e:13:99:30:4f:47:df:72:6c:09:68:59: 44:9a:f4:a4:f8:1d:3b:6d:0e:49:81:61:b2:2f:71:bc:af:69: 02:37:2a:10:eb:98:c9:a1:03:f9:c1:d0:08:c5:a2:7c:80:14: f9:9b:c1:98:8b:7c:39:cd:20:7e:77:05:f6:45:da:46:10:df: 17:5d:31:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vok4TtUbaliiuowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZTU3YjFjNGMtNDdlYy00YjhjLWI0NTQtZjZmYmMzYzJjNWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWAXTvifA1tfHUOq9GU0InfGIq5OU3mcmndj 1Ncl07aXYdlgzfA7CJzUG+Yu7f2Wp5HXuQchhYpQ/hGL5WwTrcS1M8Rh8ypRw34J uJxIkEqbRPbyDSdYCxE4r37rYk3rHXqzY8y1Q42VW1sASM02cF7Zk0tTQe9XE6zV 5hKFl6eiRgMdI85CA04GkCvdUMN9pluYZDv6cmwOVcAe4rElu8dbkGE4qTyBmITP 9xiVnrBEMUTvUaPEpsIixC7p1VZ8xa6giJTGBLO1ma+cfCzM9/HW876MqwYXFEA0 tH8Zya+yBefROUyxPBBNereDu+WAhjwKpplXA3eMyXJ5V5jrHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5vF0vv096uM0Xn7/i3pGRbIeVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvNjZjMWU0MzgtYjkzZi0z NDg1LWFkN2YtZWRhNDMyNmM3ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0kcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp5/zleaj1UNd445J7T+RAx/icmtM3ROPAK4xoTncjoVEa2qlRo03Z4 /v84VuXQjaM0vazjhXWXHmEbsUm4bM+lCOwKF5QYQ4Sx1IHK97pDCFJzYy5GoRyZ 0aZsG/edAN67GfGxPiPujX65qHIT3Gu+J5wW5IoxvVVZT/uQ9yoP18kW7VhkBWCX hFVk5anqZ7EqhojiQdwIOJ/ac6tWBbQo5lERVMtEd8WhPb0GGAq3grvmdRj8wC6k wU4TmTBPR99ybAloWUSa9KT4HTttDkmBYbIvcbyvaQI3KhDrmMmhA/nB0AjFonyA FPmbwZiLfDnNIH53BfZF2kYQ3xddMSg= -----END CERTIFICATE-----Generated at Thu Mar 26 04:09:18 2026 by rpki-client