$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/ac8d8dd6-c5a9-3540-8bcf-e50c9ee3e07c.roa File: ac8d8dd6-c5a9-3540-8bcf-e50c9ee3e07c.roa (raw, json) Hash identifier: NugIlpdwJArVvH8wV0nEGafyV/vXwrIadylM7P08z7I= Subject key identifier: 11:5B:6A:6D:7A:88:14:88:8A:26:45:DB:89:B8:FE:61:D5:C4:A9:2A Certificate issuer: /CN=c99fde48-586e-4055-af69-8a7e56152de9 Certificate serial: 010D0C9F4328584D117255637EFA7A572DAACE80 Authority key identifier: AE:AD:EF:91:C3:99:E1:29:0D:BF:84:9E:76:9B:36:6C:74:7F:21:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/ac8d8dd6-c5a9-3540-8bcf-e50c9ee3e07c.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 30447 IP address blocks: 66.175.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/c99fde48-586e-4055-af69-8a7e56152de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/c99fde48-586e-4055-af69-8a7e56152de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:55:63:7e:fa:7a:57:2d:aa:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c99fde48-586e-4055-af69-8a7e56152de9 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=fd1722a8-209d-41d2-934c-c055c83e3f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:1e:0b:78:d5:b4:63:05:da:5f:96:d3:0e: f1:e7:65:c0:43:0e:83:5b:fc:82:0a:50:79:4f:14: 2e:0d:39:d1:2d:b8:ea:22:b6:8d:ea:19:3f:04:2e: 7e:31:3c:0b:fb:20:85:60:37:12:bc:b8:13:12:84: 06:f4:af:34:fb:f1:81:ee:00:19:06:5d:38:49:6a: 1c:a1:7b:ca:1a:6e:00:a4:51:ae:d3:12:98:93:4e: a4:0d:51:76:b0:3c:3c:03:5f:27:08:ea:5c:58:3f: f2:f5:1c:2a:5e:ca:ff:e4:1c:14:75:e1:63:af:ec: 3f:72:27:31:2d:ae:9e:06:15:c0:7c:36:df:4e:54: f6:7c:77:1f:37:13:d2:67:d1:e7:fb:39:bf:9c:6f: c6:e9:8d:46:4d:59:9d:12:32:83:be:1c:ba:4e:fc: af:08:5d:56:d2:af:33:89:2f:53:1b:bd:b6:d0:8d: d7:04:a7:bf:7f:15:18:91:bd:8f:2f:d0:56:c0:26: 09:f8:e9:1b:28:35:f1:6f:4f:7f:a7:d1:31:3e:7f: c6:6e:a7:b5:72:0e:4f:4b:18:9f:08:c1:11:bf:a2: 30:39:9d:c9:26:a5:9c:d5:e9:89:d1:4a:20:17:fb: d5:aa:b3:9f:20:ce:b2:07:4c:6a:b4:6c:bc:e3:0c: 45:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5B:6A:6D:7A:88:14:88:8A:26:45:DB:89:B8:FE:61:D5:C4:A9:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/ac8d8dd6-c5a9-3540-8bcf-e50c9ee3e07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/c99fde48-586e-4055-af69-8a7e56152de9.crl X509v3 Authority Key Identifier: keyid:AE:AD:EF:91:C3:99:E1:29:0D:BF:84:9E:76:9B:36:6C:74:7F:21:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9.cer sbgp-ipAddrBlock: critical IPv4: 66.175.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:a4:5e:2d:30:7f:fc:34:3e:5f:5b:30:43:77:ad:63:39:f4: 17:dc:87:6b:e1:63:3a:d2:82:43:f4:d7:f1:da:17:fd:c5:0c: 24:14:37:a2:b3:44:51:38:58:82:41:53:95:f2:0b:58:69:7f: 03:72:97:6d:ca:64:3d:ea:7a:c8:48:a2:94:ef:3d:69:74:9b: e3:f3:44:a1:f4:c8:1e:9f:79:14:23:df:b6:21:2d:f3:7c:03: 5c:a7:95:20:a3:24:e6:b8:3a:9c:b6:93:9a:6f:11:3c:b7:ab: 49:07:9e:b0:16:8e:36:51:35:3c:37:3b:d6:07:ef:04:8d:62: af:c6:eb:f4:4e:e1:32:dc:16:31:c6:25:c4:b4:9c:ef:7f:6d: 43:b2:f9:fe:c9:5a:f0:09:33:b0:70:74:75:de:8f:eb:18:f9: bb:36:9a:a5:dc:61:f0:e5:49:5c:62:a2:e6:0c:57:6f:5e:5f: 06:00:04:9e:62:66:1e:59:5f:ff:65:3a:b0:0e:52:84:dc:05: 12:b9:55:9e:b0:2d:8a:5f:2b:91:46:0a:70:02:6b:48:51:3b: d0:86:87:e8:e5:20:21:ea:3f:65:31:b4:84:09:83:1d:18:99: 33:12:d8:da:5e:60:f7:c7:23:07:97:0d:cd:2f:35:dc:c0:a2: e1:0d:cf:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RclVjfvp6Vy2qzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk5ZmRlNDgtNTg2ZS00MDU1LWFmNjktOGE3ZTU2MTUy ZGU5MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZmQxNzIyYTgtMjA5ZC00MWQyLTkzNGMtYzA1NWM4M2UzZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCEeC3jVtGMF2l+W0w7x52XAQw6DW/yCClB5 TxQuDTnRLbjqIraN6hk/BC5+MTwL+yCFYDcSvLgTEoQG9K80+/GB7gAZBl04SWoc oXvKGm4ApFGu0xKYk06kDVF2sDw8A18nCOpcWD/y9RwqXsr/5BwUdeFjr+w/cicx La6eBhXAfDbfTlT2fHcfNxPSZ9Hn+zm/nG/G6Y1GTVmdEjKDvhy6TvyvCF1W0q8z iS9TG7220I3XBKe/fxUYkb2PL9BWwCYJ+OkbKDXxb09/p9ExPn/Gbqe1cg5PSxif CMERv6IwOZ3JJqWc1emJ0UogF/vVqrOfIM6yB0xqtGy84wxFtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFbam16iBSIiiZF24m4/mHVxKkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOTlm ZGU0OC01ODZlLTQwNTUtYWY2OS04YTdlNTYxNTJkZTkvYWM4ZDhkZDYtYzVhOS0z NTQwLThiY2YtZTUwYzllZTNlMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzk5ZmRlNDgtNTg2ZS00MDU1LWFm NjktOGE3ZTU2MTUyZGU5L2M5OWZkZTQ4LTU4NmUtNDA1NS1hZjY5LThhN2U1NjE1 MmRlOS5jcmwwHwYDVR0jBBgwFoAUrq3vkcOZ4SkNv4Sedps2bHR/IUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOTlmZGU0OC01ODZlLTQwNTUtYWY2OS04YTdl NTYxNTJkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQq8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFykXi0wf/w0Pl9bMEN3rWM59Bfch2vhYzrSgkP01/HaF/3FDCQUN6Kz RFE4WIJBU5XyC1hpfwNyl23KZD3qeshIopTvPWl0m+PzRKH0yB6feRQj37YhLfN8 A1ynlSCjJOa4Opy2k5pvETy3q0kHnrAWjjZRNTw3O9YH7wSNYq/G6/RO4TLcFjHG JcS0nO9/bUOy+f7JWvAJM7BwdHXej+sY+bs2mqXcYfDlSVxiouYMV29eXwYABJ5i Zh5ZX/9lOrAOUoTcBRK5VZ6wLYpfK5FGCnACa0hRO9CGh+jlICHqP2UxtIQJgx0Y mTMS2NpeYPfHIweXDc0vNdzAouENz4c= -----END CERTIFICATE-----Generated at Thu Mar 26 09:53:35 2026 by rpki-client