$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa File: 628d4d18-2b20-319e-8245-80ecdf68c5f8.roa (raw, json) Hash identifier: BfZYJUs4pjt40yd0ZPR7G2KaXAsU9KnfLhulNIuFkuk= Subject key identifier: CF:39:84:6F:40:48:CA:F4:77:56:A8:36:31:2B:5A:D5:ED:69:7D:EC Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F4328584D2A74C3D4EE96160E20277580 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 66.59.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c3:d4:ee:96:16:0e:20:27:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=9f014ee9-1fd9-45da-845c-1b2362c40f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:56:d3:2f:4e:74:10:8a:41:7b:fd:66:e7:29: be:8e:89:fd:5e:3e:54:b3:f0:b5:be:76:87:48:19: e0:a0:37:08:49:9e:f4:1a:77:4e:9b:1b:f8:af:16: f4:ea:01:af:3f:d6:45:89:bc:32:28:1a:5c:a9:4f: 99:0f:0c:c5:67:78:50:df:b6:c7:01:82:dd:4d:65: 32:49:49:f8:11:15:9a:32:ef:78:a6:0a:c6:c3:59: f3:92:12:e1:4c:c9:ed:aa:d7:ba:51:9c:ba:f5:a7: 1d:85:c4:3f:58:2d:d8:07:82:75:e5:66:53:bf:e2: eb:cc:8f:f5:4b:17:14:fd:3b:50:6c:8f:b7:ab:19: ea:e4:27:9e:56:a5:6f:d3:53:b4:47:75:70:81:16: 3c:da:32:97:7a:31:ee:e6:6a:e7:40:13:2f:52:d1: 79:e6:6e:d0:54:3a:a7:51:c9:b4:e4:d9:e9:a2:c1: f2:6d:8f:15:95:c2:87:43:9d:e2:a5:68:51:6f:10: 8e:78:d1:c7:b0:2f:d9:bc:37:64:82:15:25:46:af: 05:77:6c:a2:80:49:2f:5b:17:9f:17:da:b5:18:a8: 94:db:8d:46:fe:5d:4c:17:02:bb:7f:13:5d:b2:3e: d3:e5:b2:b3:95:b5:af:7e:ec:1b:1c:2d:4d:a1:c2: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:39:84:6F:40:48:CA:F4:77:56:A8:36:31:2B:5A:D5:ED:69:7D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/628d4d18-2b20-319e-8245-80ecdf68c5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 66.59.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:27:6d:cd:ae:84:ea:82:ab:48:23:eb:be:3f:e5:4b:bd:c4: 96:70:dd:3e:cf:99:85:76:d2:e3:55:e7:b4:a7:20:82:b4:1f: 5e:c5:37:1b:e9:8a:41:17:95:25:75:39:bf:89:3c:a0:bb:3e: 6b:e0:07:0d:e9:30:26:cc:23:90:5c:ce:c3:32:c0:64:87:5b: e8:3b:37:c7:f2:d9:fb:df:e9:8f:4b:bc:8c:56:b6:bd:73:74: 48:fe:91:33:6b:64:23:c8:3f:a0:3f:49:4c:23:bc:51:ab:dc: 98:be:86:fa:de:54:32:69:6c:37:31:7d:12:86:4e:ab:7a:dc: 33:55:64:60:13:8f:09:a9:59:d4:88:9a:b1:c9:91:ae:a2:c2: b6:c2:c9:c4:64:3a:33:f3:e9:e1:73:ac:77:75:63:4c:e2:a5: aa:eb:d0:32:9e:a4:9b:81:da:c1:75:4a:28:46:c6:91:c0:01: 34:a4:f8:42:42:2f:cb:ed:7d:ae:f6:91:e7:86:99:9f:66:83: d9:a0:9a:89:73:23:51:da:64:8e:d0:a1:ac:00:cb:d4:62:63: 1b:8a:a9:c7:79:90:0e:e2:99:f0:ec:6f:f4:2b:44:df:6d:47: 48:df:25:f4:e5:fd:19:36:59:ea:4e:21:fd:24:6d:7b:c8:9f: 08:15:98:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMPU7pYWDiAndYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk OWYwMTRlZTktMWZkOS00NWRhLTg0NWMtMWIyMzYyYzQwZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FbTL050EIpBe/1m5ym+jon9Xj5Us/C1vnaH SBngoDcISZ70GndOmxv4rxb06gGvP9ZFibwyKBpcqU+ZDwzFZ3hQ37bHAYLdTWUy SUn4ERWaMu94pgrGw1nzkhLhTMntqte6UZy69acdhcQ/WC3YB4J15WZTv+LrzI/1 SxcU/TtQbI+3qxnq5CeeVqVv01O0R3VwgRY82jKXejHu5mrnQBMvUtF55m7QVDqn Ucm05NnposHybY8VlcKHQ53ipWhRbxCOeNHHsC/ZvDdkghUlRq8Fd2yigEkvWxef F9q1GKiU241G/l1MFwK7fxNdsj7T5bKzlbWvfuwbHC1NocIGdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM85hG9ASMr0d1aoNjErWtXtaX3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvNjI4ZDRkMTgtMmIyMC0z MTllLTgyNDUtODBlY2RmNjhjNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQjsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAknbc2uhOqCq0gj674/5Uu9xJZw3T7PmYV20uNV57SnIIK0H17FNxvp ikEXlSV1Ob+JPKC7PmvgBw3pMCbMI5BczsMywGSHW+g7N8fy2fvf6Y9LvIxWtr1z dEj+kTNrZCPIP6A/SUwjvFGr3Ji+hvreVDJpbDcxfRKGTqt63DNVZGATjwmpWdSI mrHJka6iwrbCycRkOjPz6eFzrHd1Y0ziparr0DKepJuB2sF1SihGxpHAATSk+EJC L8vtfa72keeGmZ9mg9mgmolzI1HaZI7QoawAy9RiYxuKqcd5kA7imfDsb/QrRN9t R0jfJfTl/Rk2WepOIf0kbXvInwgVmLY= -----END CERTIFICATE-----Generated at Thu Mar 26 02:01:57 2026 by rpki-client