$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/90a16cc6-c906-37e6-9a02-609e41f06cdc.roa File: 90a16cc6-c906-37e6-9a02-609e41f06cdc.roa (raw, json) Hash identifier: VpgPtGjr5u6pbDEKGgCQbrmXBAeSY8t3uvSasAiDhDw= Subject key identifier: 56:D4:16:50:4F:3C:D3:48:94:81:6F:7B:CA:82:78:37:1E:0C:E0:DF Certificate issuer: /CN=e4b7d875-ab48-4302-be86-14ecc49104bb Certificate serial: 010D0C9F4328584D09126033DE894F8AF60D0F00 Authority key identifier: B4:B1:E9:7F:80:D2:BB:F8:9D:87:46:68:05:2E:A7:20:A8:78:27:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/90a16cc6-c906-37e6-9a02-609e41f06cdc.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 64296 IP address blocks: 66.220.42.0/23 maxlen: 23 66.220.42.0/24 maxlen: 24 66.220.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/e4b7d875-ab48-4302-be86-14ecc49104bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/e4b7d875-ab48-4302-be86-14ecc49104bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:60:33:de:89:4f:8a:f6:0d:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b7d875-ab48-4302-be86-14ecc49104bb Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=3244f45b-9945-4f30-9127-00e3396620c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:4a:3d:96:83:81:7e:0a:3f:93:aa:46:48: 49:84:c0:5b:4f:79:bb:ce:35:fb:3e:1d:8a:f2:b1: 25:21:70:af:5c:02:cf:9b:f7:96:a8:e6:b5:b2:02: 54:f2:56:61:be:8d:2e:23:90:ce:4b:4e:4d:c4:50: 0d:55:18:94:90:63:e3:96:ee:20:cd:42:eb:09:7e: dc:62:fe:53:a6:20:b6:38:a1:7b:a0:de:4e:f4:25: 8f:a1:73:0c:30:70:e0:dc:4e:e3:50:59:eb:90:d9: a9:47:67:ba:de:77:37:a5:e9:7b:8d:f7:cf:28:a9: cb:36:43:1b:08:aa:7c:d9:0d:95:7a:9b:10:40:f2: d0:0e:c4:41:c6:fb:de:e9:e1:11:84:b1:f6:df:ea: cb:a8:a3:7c:00:f0:8a:a8:a2:bd:81:3f:23:01:6f: 15:e7:bf:4b:ac:1e:4c:66:b3:d9:71:cc:9e:24:73: 5f:6e:a5:c6:37:dd:83:6a:d6:a1:f9:66:79:e9:40: 1f:1c:3f:80:d5:ac:17:0d:64:40:2c:ff:e7:1f:bc: cd:92:95:c5:41:43:fe:f9:e9:d9:b7:57:01:a4:b4: d7:6d:be:6f:79:b8:dc:fa:ee:2e:6e:28:a2:bf:b7: 5c:b6:05:f4:3c:c7:df:9f:22:00:79:21:79:61:09: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D4:16:50:4F:3C:D3:48:94:81:6F:7B:CA:82:78:37:1E:0C:E0:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/90a16cc6-c906-37e6-9a02-609e41f06cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/e4b7d875-ab48-4302-be86-14ecc49104bb.crl X509v3 Authority Key Identifier: keyid:B4:B1:E9:7F:80:D2:BB:F8:9D:87:46:68:05:2E:A7:20:A8:78:27:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb.cer sbgp-ipAddrBlock: critical IPv4: 66.220.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:15:5c:10:e9:77:d2:f9:0e:4b:63:b2:ed:d1:a1:04:3b:4e: 1c:42:cf:fd:16:78:27:d0:53:83:04:30:78:1f:38:6d:d0:3b: ac:7a:ac:c1:dc:23:68:31:ef:1b:da:1e:2f:46:dc:96:f9:da: 84:1c:d7:6a:63:41:c5:34:d8:a4:30:6a:9c:d6:38:f8:5c:98: 5c:a9:1a:af:2a:6f:ea:7a:62:ca:71:97:a2:3b:a9:cc:a7:17: 84:f5:cc:c8:c9:3b:9c:58:f8:7e:1a:0a:9f:17:f2:42:2b:ee: 5c:c3:6f:40:22:29:de:40:ca:98:0c:d6:8c:5e:ba:63:99:6e: 78:07:df:65:0f:fb:b6:24:ee:99:99:52:75:00:2b:46:07:09: ac:44:b6:cb:61:98:6e:3c:55:59:f8:ba:13:04:ff:c6:79:5f: ce:45:a1:06:74:cf:bf:d7:86:fb:11:3d:ae:b5:6f:7f:a0:33: e6:cf:34:0f:a4:c8:f5:df:03:c2:42:0b:3a:24:a1:c7:a3:e7: 5e:2d:96:b5:85:cc:89:3f:cf:57:68:8e:0f:f9:6f:34:cf:b3: 5a:1d:60:a2:77:c9:42:2c:73:64:b6:8f:b5:79:e3:f5:7d:08: 41:39:cc:42:6e:08:eb:5c:6c:2c:3c:53:9a:01:4e:f8:86:09: 59:12:18:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmAz3olPivYNDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiN2Q4NzUtYWI0OC00MzAyLWJlODYtMTRlY2M0OTEw NGJiMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MzI0NGY0NWItOTk0NS00ZjMwLTkxMjctMDBlMzM5NjYyMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnlKPZaDgX4KP5OqRkhJhMBbT3m7zjX7Ph2K 8rElIXCvXALPm/eWqOa1sgJU8lZhvo0uI5DOS05NxFANVRiUkGPjlu4gzULrCX7c Yv5TpiC2OKF7oN5O9CWPoXMMMHDg3E7jUFnrkNmpR2e63nc3pel7jffPKKnLNkMb CKp82Q2VepsQQPLQDsRBxvve6eERhLH23+rLqKN8APCKqKK9gT8jAW8V579LrB5M ZrPZccyeJHNfbqXGN92Datah+WZ56UAfHD+A1awXDWRALP/nH7zNkpXFQUP++enZ t1cBpLTXbb5vebjc+u4ubiiiv7dctgX0PMffnyIAeSF5YQl8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbUFlBPPNNIlIFve8qCeDceDODfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNGI3 ZDg3NS1hYjQ4LTQzMDItYmU4Ni0xNGVjYzQ5MTA0YmIvOTBhMTZjYzYtYzkwNi0z N2U2LTlhMDItNjA5ZTQxZjA2Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTRiN2Q4NzUtYWI0OC00MzAyLWJl ODYtMTRlY2M0OTEwNGJiL2U0YjdkODc1LWFiNDgtNDMwMi1iZTg2LTE0ZWNjNDkx MDRiYi5jcmwwHwYDVR0jBBgwFoAUtLHpf4DSu/idh0ZoBS6nIKh4JzAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNGI3ZDg3NS1hYjQ4LTQzMDItYmU4Ni0xNGVj YzQ5MTA0YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0VXBDpd9L5Dktjsu3RoQQ7ThxCz/0WeCfQU4MEMHgfOG3QO6x6rMHc I2gx7xvaHi9G3Jb52oQc12pjQcU02KQwapzWOPhcmFypGq8qb+p6Yspxl6I7qcyn F4T1zMjJO5xY+H4aCp8X8kIr7lzDb0AiKd5AypgM1oxeumOZbngH32UP+7Yk7pmZ UnUAK0YHCaxEtsthmG48VVn4uhME/8Z5X85FoQZ0z7/XhvsRPa61b3+gM+bPNA+k yPXfA8JCCzokocej514tlrWFzIk/z1dojg/5bzTPs1odYKJ3yUIsc2S2j7V54/V9 CEE5zEJuCOtcbCw8U5oBTviGCVkSGI4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:24 2026 by rpki-client