$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa File: 3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa (raw, json) Hash identifier: 6ybg7hS0D3XB20OzzNA/g96mTa54o6XHxU0evNYz3ag= Subject key identifier: DD:7A:C3:87:CF:2F:34:9C:3F:2A:A7:39:85:87:67:47:C8:D5:6D:DF Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584D19B4D1E4BD6AA1EAB441F780 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 1403 IP address blocks: 66.158.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d1:e4:bd:6a:a1:ea:b4:41:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=0c5eb6ec-1780-4d1e-8ceb-62023654a6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:45:f4:f1:e1:dd:a8:0c:fa:8d:aa:b4:6c:12: 7c:d7:f1:32:e9:0f:99:70:1f:05:ee:10:82:9a:1b: 83:08:99:ce:65:76:a3:57:e4:ab:99:15:48:b2:3b: 35:92:7f:e2:b8:09:d2:7f:f0:61:03:7c:c4:16:07: 04:4f:1f:66:7b:7d:c5:46:a7:f0:d2:87:0b:03:a1: f2:b8:1d:8b:2e:75:de:c4:8a:6a:8a:42:14:b1:2a: ed:ca:c0:e2:e1:18:f8:b0:65:19:eb:e1:c5:f3:39: 0a:f8:d2:30:ad:0e:d3:aa:1a:38:dc:f3:ae:df:5b: 66:24:9e:81:ca:dc:39:99:84:72:6a:27:fa:47:80: fe:39:c0:16:22:c2:ad:72:39:22:f0:ca:8f:b7:69: c6:c1:98:4b:ab:92:75:32:76:9b:b9:49:53:4b:90: aa:0e:ba:70:97:54:0f:02:a0:5d:b8:77:fd:a8:8b: 7f:f6:39:82:8d:fe:f8:04:80:37:b3:0c:58:3c:8a: 97:d9:56:f1:8b:19:20:22:4e:e7:b7:ac:de:bb:c2: 9e:ab:7c:3d:1a:79:0f:fc:bf:69:aa:f5:c5:f2:2f: d0:3e:ee:a9:5e:7c:ad:46:92:4c:c2:ab:00:3a:02: 38:00:56:71:fb:dd:d4:ce:cf:4f:82:00:0e:81:5e: 3f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7A:C3:87:CF:2F:34:9C:3F:2A:A7:39:85:87:67:47:C8:D5:6D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.158.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:16:25:29:1e:6c:59:29:09:aa:21:ee:54:7c:91:86:48:05: ea:5c:4d:a5:33:ad:f1:47:e9:e7:8c:3a:f2:76:95:5e:89:d9: d1:a3:d3:20:bd:f2:5a:b5:a0:f8:9d:5b:9f:21:af:79:2a:23: 97:b4:d6:cf:83:48:0f:90:29:26:8e:cf:95:27:a5:80:e8:ea: c4:68:61:a1:36:b0:57:c8:c1:e6:82:fc:43:0d:08:c5:2a:5e: 50:f8:31:43:e5:14:eb:3e:c8:ac:e5:85:87:28:c9:9d:5d:36: a1:43:5f:a8:1d:88:e5:9b:63:e6:52:7c:92:6c:cb:9b:b0:6a: de:4d:a7:0a:3d:07:08:9b:68:1d:24:14:67:bd:ea:af:0f:0b: d0:d4:fb:1e:6b:fe:d6:37:fa:70:2b:75:7e:9a:62:0e:79:2d: 55:fc:5d:ad:71:4d:7f:0e:53:ac:ff:6f:7c:ce:62:30:e1:a7: c0:d9:9f:02:04:cb:d9:b6:ca:25:4d:71:b6:31:8b:df:79:12: c0:7f:1d:94:e6:00:6a:1a:67:21:18:f7:ee:b9:4f:11:50:1a: 61:52:98:08:fb:59:d3:93:f1:be:9f:42:3c:87:77:f7:61:e0: 3f:00:da:53:2f:7b:63:85:5f:24:0f:70:e4:8f:1a:6e:95:b4: bc:39:9f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNHkvWqh6rRB94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MGM1ZWI2ZWMtMTc4MC00ZDFlLThjZWItNjIwMjM2NTRhNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0X08eHdqAz6jaq0bBJ81/Ey6Q+ZcB8F7hCC mhuDCJnOZXajV+SrmRVIsjs1kn/iuAnSf/BhA3zEFgcETx9me33FRqfw0ocLA6Hy uB2LLnXexIpqikIUsSrtysDi4Rj4sGUZ6+HF8zkK+NIwrQ7Tqho43POu31tmJJ6B ytw5mYRyaif6R4D+OcAWIsKtcjki8MqPt2nGwZhLq5J1MnabuUlTS5CqDrpwl1QP AqBduHf9qIt/9jmCjf74BIA3swxYPIqX2VbxixkgIk7nt6zeu8Keq3w9GnkP/L9p qvXF8i/QPu6pXnytRpJMwqsAOgI4AFZx+93Uzs9PggAOgV4/UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN16w4fPLzScPyqnOYWHZ0fI1W3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvM2IwYWM4ZGQtMDQyNC0z MGIwLWIwZDUtN2ZjZDI4YjE1MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQp6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIWJSkebFkpCaoh7lR8kYZIBepcTaUzrfFH6eeMOvJ2lV6J2dGj0yC9 8lq1oPidW58hr3kqI5e01s+DSA+QKSaOz5UnpYDo6sRoYaE2sFfIweaC/EMNCMUq XlD4MUPlFOs+yKzlhYcoyZ1dNqFDX6gdiOWbY+ZSfJJsy5uwat5Npwo9BwibaB0k FGe96q8PC9DU+x5r/tY3+nArdX6aYg55LVX8Xa1xTX8OU6z/b3zOYjDhp8DZnwIE y9m2yiVNcbYxi995EsB/HZTmAGoaZyEY9+65TxFQGmFSmAj7WdOT8b6fQjyHd/dh 4D8A2lMve2OFXyQPcOSPGm6VtLw5nyk= -----END CERTIFICATE-----Generated at Thu Mar 26 06:03:52 2026 by rpki-client