$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/1bf25bd3-0d95-35f0-9f53-96f916de7440.roa File: 1bf25bd3-0d95-35f0-9f53-96f916de7440.roa (raw, json) Hash identifier: 5sG9P2tud1JfSw4jSINItDXLM3Ts/9so6wOkWdnJ74A= Subject key identifier: 3C:F5:B9:CC:23:54:0C:00:FF:43:EC:19:C1:70:A8:C1:AD:2E:04:D8 Certificate issuer: /CN=11b225f7-40bc-41c6-8ed3-2e2845094089 Certificate serial: 010D0C9F4328584D386A4C881340F81635D29200 Authority key identifier: E6:83:88:DD:0C:19:63:A6:36:CA:34:51:29:66:1C:2C:AE:0C:B5:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/1bf25bd3-0d95-35f0-9f53-96f916de7440.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 46763 IP address blocks: 66.45.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/11b225f7-40bc-41c6-8ed3-2e2845094089.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/11b225f7-40bc-41c6-8ed3-2e2845094089.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4c:88:13:40:f8:16:35:d2:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b225f7-40bc-41c6-8ed3-2e2845094089 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=63b9e148-7449-4c2c-a46f-b7d4de91b2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:aa:91:e0:6e:1c:69:1b:81:18:9b:ef:b2: 19:4e:00:c2:ac:c6:34:9a:3a:97:8c:61:6c:60:f8: d1:1e:4b:ed:04:67:ed:f3:ca:81:3e:7e:fe:7c:5b: 88:3c:6c:6c:8f:07:49:7b:05:18:c2:2c:c3:71:ce: b9:41:41:b8:29:1a:ac:0e:d7:cd:9c:c8:47:8b:39: 49:27:b8:61:ff:c9:1d:65:9a:bf:35:4d:c5:0d:6f: 0c:4b:66:76:4c:94:63:4a:ab:dd:c8:02:cb:29:58: 93:57:bb:17:49:0c:4a:8b:8d:2a:62:4d:44:6d:f3: f1:4e:25:a1:78:2b:be:d5:36:1c:4c:0c:7c:e0:fe: 00:ed:2f:a5:63:74:2a:a2:c7:ff:31:4a:61:ac:b1: 19:91:75:30:91:19:4b:94:ce:bb:81:8c:fa:9e:33: a5:f8:a3:b4:3e:82:dc:27:39:6c:df:e1:24:82:3c: 28:e2:f5:86:44:ac:04:7b:74:08:27:36:65:a9:8c: 89:dc:a2:8e:85:36:df:8c:8c:c8:2e:21:5a:21:6a: 44:ca:e4:62:87:57:d7:79:ba:9b:35:53:9f:1d:a5: 30:10:26:6c:50:05:77:e9:cf:34:1c:6c:5c:b6:ab: 63:86:99:bb:c1:26:20:bf:5b:65:1b:6c:8e:88:2e: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F5:B9:CC:23:54:0C:00:FF:43:EC:19:C1:70:A8:C1:AD:2E:04:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/1bf25bd3-0d95-35f0-9f53-96f916de7440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/11b225f7-40bc-41c6-8ed3-2e2845094089.crl X509v3 Authority Key Identifier: keyid:E6:83:88:DD:0C:19:63:A6:36:CA:34:51:29:66:1C:2C:AE:0C:B5:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089.cer sbgp-ipAddrBlock: critical IPv4: 66.45.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:15:89:fb:97:62:d3:4d:e2:f6:82:19:cf:28:60:f4:dd:f0: a1:82:be:1b:2e:d4:25:ec:72:8b:f1:68:66:ce:55:1f:07:26: 75:c4:54:c5:ff:8d:7e:95:68:55:76:62:fe:f1:4f:b3:30:21: b2:fc:56:b4:18:d5:6e:b9:e7:60:0c:d1:7f:71:8a:ca:c0:bd: 4f:50:ab:9e:9e:be:a1:43:95:b4:f6:5d:ed:41:8c:b8:4f:2b: a6:d5:25:e0:78:8a:18:76:0c:fb:19:e4:b1:d3:2f:95:5e:b5: 96:b6:d8:a9:03:26:6b:be:6c:d5:d8:31:32:47:34:fe:c0:6d: 55:74:e2:60:31:b0:61:1d:30:aa:04:9d:2e:2c:b6:51:9c:bf: 8e:63:24:07:d5:87:47:cc:8f:99:10:d2:eb:53:56:8b:2a:a8: 6d:a5:8e:89:67:75:35:56:53:85:3c:52:2a:92:3c:9c:5c:b9: 8b:9e:7f:6b:eb:e2:28:96:87:4d:81:a6:1d:8d:9a:da:15:b2: a1:d5:a6:7b:75:38:20:21:e3:63:30:31:c1:55:5d:1c:03:ee: 5f:d5:c3:a9:50:0d:96:4c:f4:54:0a:15:6b:f0:1f:23:25:38: df:7f:71:5c:bd:ad:e5:08:8d:c7:25:35:87:dc:54:36:19:93: 63:ec:c0:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akyIE0D4FjXSkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFiMjI1ZjctNDBiYy00MWM2LThlZDMtMmUyODQ1MDk0 MDg5MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NjNiOWUxNDgtNzQ0OS00YzJjLWE0NmYtYjdkNGRlOTFiMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdmqkeBuHGkbgRib77IZTgDCrMY0mjqXjGFs YPjRHkvtBGft88qBPn7+fFuIPGxsjwdJewUYwizDcc65QUG4KRqsDtfNnMhHizlJ J7hh/8kdZZq/NU3FDW8MS2Z2TJRjSqvdyALLKViTV7sXSQxKi40qYk1EbfPxTiWh eCu+1TYcTAx84P4A7S+lY3Qqosf/MUphrLEZkXUwkRlLlM67gYz6njOl+KO0PoLc Jzls3+Ekgjwo4vWGRKwEe3QIJzZlqYyJ3KKOhTbfjIzILiFaIWpEyuRih1fXebqb NVOfHaUwECZsUAV36c80HGxctqtjhpm7wSYgv1tlG2yOiC7DTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDz1ucwjVAwA/0PsGcFwqMGtLgTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMWIy MjVmNy00MGJjLTQxYzYtOGVkMy0yZTI4NDUwOTQwODkvMWJmMjViZDMtMGQ5NS0z NWYwLTlmNTMtOTZmOTE2ZGU3NDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTFiMjI1ZjctNDBiYy00MWM2LThl ZDMtMmUyODQ1MDk0MDg5LzExYjIyNWY3LTQwYmMtNDFjNi04ZWQzLTJlMjg0NTA5 NDA4OS5jcmwwHwYDVR0jBBgwFoAU5oOI3QwZY6Y2yjRRKWYcLK4MtTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMWIyMjVmNy00MGJjLTQxYzYtOGVkMy0yZTI4 NDUwOTQwODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcVifuXYtNN4vaCGc8oYPTd8KGCvhsu1CXscovxaGbOVR8HJnXEVMX/ jX6VaFV2Yv7xT7MwIbL8VrQY1W6552AM0X9xisrAvU9Qq56evqFDlbT2Xe1BjLhP K6bVJeB4ihh2DPsZ5LHTL5VetZa22KkDJmu+bNXYMTJHNP7AbVV04mAxsGEdMKoE nS4stlGcv45jJAfVh0fMj5kQ0utTVosqqG2ljolndTVWU4U8UiqSPJxcuYuef2vr 4iiWh02Bph2NmtoVsqHVpnt1OCAh42MwMcFVXRwD7l/Vw6lQDZZM9FQKFWvwHyMl ON9/cVy9reUIjcclNYfcVDYZk2PswFA= -----END CERTIFICATE-----Generated at Thu Mar 26 02:47:54 2026 by rpki-client