$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0be7827d-7a91-3e19-ba7e-200865a2af7b.roa File: 0be7827d-7a91-3e19-ba7e-200865a2af7b.roa (raw, json) Hash identifier: Gz1Pc9JLLI5fbDjaR9ABJtvAgNLEoJbb8qWAEJvLMKw= Subject key identifier: 2C:E4:48:E3:E9:53:10:FB:73:FE:7F:72:A8:32:6E:A8:15:88:73:1F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D24C6D5979872ABBA054408F0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0be7827d-7a91-3e19-ba7e-200865a2af7b.roa Signing time: Thu 12 Mar 2026 12:11:18 +0000 ROA not before: Thu 12 Mar 2026 12:11:18 +0000 ROA not after: Wed 10 Jun 2026 12:11:18 +0000 asID: 7346 IP address blocks: 66.253.0.0/24 maxlen: 24 66.253.1.0/24 maxlen: 24 69.17.65.0/24 maxlen: 24 69.17.66.0/24 maxlen: 24 198.144.105.0/24 maxlen: 24 198.144.106.0/24 maxlen: 24 198.144.107.0/24 maxlen: 24 216.132.107.0/24 maxlen: 24 216.132.108.0/24 maxlen: 24 216.132.110.0/24 maxlen: 24 216.132.111.0/24 maxlen: 24 216.133.146.0/24 maxlen: 24 216.133.147.0/24 maxlen: 24 216.231.36.0/24 maxlen: 24 216.231.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:c6:d5:97:98:72:ab:ba:05:44:08:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 12 12:11:18 2026 GMT Not After : Jun 10 12:11:18 2026 GMT Subject: CN=b14c1eed-2cb7-45e5-b0ad-67097c00a896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e5:cc:74:4d:55:d8:8d:c4:b8:af:c9:c2:09: 3f:a8:89:78:5e:f1:ba:3c:cd:92:86:8c:f0:e0:24: f6:12:5c:ec:92:a6:df:55:21:9d:ff:6f:a4:38:21: e6:ad:7b:1a:c0:b6:c9:9d:cf:e9:c9:a3:b7:b9:31: 31:89:0c:ac:0c:f4:b1:22:ff:bd:3f:ce:a5:35:e9: 0f:35:17:95:cf:b8:a3:71:d0:63:7d:47:13:98:2c: 91:7b:fd:3e:57:24:e9:25:9a:59:9d:dc:15:37:2e: c1:fa:0d:fe:c0:41:da:7f:f3:e6:ad:5b:aa:4e:fb: a2:b5:2b:cc:44:56:a8:0c:81:42:ae:25:9a:4c:21: 14:17:e3:d7:9d:fa:47:e2:82:3a:e8:ed:c4:e4:d9: e2:02:a6:79:fc:ff:86:e6:60:72:99:6c:63:86:dd: ce:45:7c:29:b8:d0:6b:86:f3:b0:8d:e1:f7:d5:d4: 5d:70:67:f7:cc:30:10:7a:45:cf:23:12:a4:f4:03: da:fc:cc:22:c5:d3:76:4b:ce:ca:dc:4f:2d:0c:cf: 13:6e:b8:45:9b:4d:a5:13:99:a5:f7:1a:f2:fb:83: c5:04:d2:04:d4:5e:ae:41:a6:73:19:76:88:e6:f1: 06:8a:36:be:28:11:40:11:53:ff:14:e7:de:46:1a: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E4:48:E3:E9:53:10:FB:73:FE:7F:72:A8:32:6E:A8:15:88:73:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0be7827d-7a91-3e19-ba7e-200865a2af7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.0.0/23 69.17.65.0-69.17.66.255 198.144.105.0-198.144.107.255 216.132.107.0-216.132.108.255 216.132.110.0/23 216.133.146.0/23 216.231.36.0/24 216.231.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:51:19:a0:96:86:25:96:e4:5a:7c:c9:58:45:94:80:e7:72: 1c:cb:e4:7b:04:4f:08:94:9a:9c:9d:e8:dc:76:f2:bd:ab:10: 91:ca:0e:27:8d:38:73:5a:e2:da:53:55:5a:a1:c0:02:7c:2b: b9:43:69:65:e0:d8:6d:d6:7e:32:46:99:f3:86:23:f6:93:e6: f2:b4:5b:75:42:32:56:41:17:22:4b:18:9d:c8:96:2e:9b:ba: b5:2a:7d:78:ee:da:a4:1a:95:dc:d8:a1:60:80:dd:76:00:9e: 86:2b:7c:1b:11:65:9e:09:ce:40:5a:99:e5:51:82:59:b6:98: 04:0a:15:9f:cb:35:9f:67:b3:ef:d6:7f:74:97:3a:ad:ca:98: 3b:ee:7e:73:db:a5:63:b0:6f:e4:70:e0:ae:db:96:cd:54:7a: c4:92:34:35:fb:52:f4:20:42:75:45:2c:b4:16:4a:de:53:a7: 1f:05:06:13:4b:a9:6a:ee:42:8e:23:1b:86:38:9a:21:c6:99: 93:33:b2:f9:c9:b2:2d:99:8f:c3:e4:db:ed:1f:2d:fd:5e:8d: c0:66:36:a1:0f:68:9f:d2:b9:1e:8d:14:31:ed:37:40:fb:0a: 48:a3:74:26:20:01:20:93:65:b8:29:1e:1f:a1:2f:76:c9:5c: 7c:87:20:0a -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWE0kxtWXmHKrugVECPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxMjEyMTExOFoXDTI2MDYxMDEyMTExOFowLzEtMCsGA1UEAxMk YjE0YzFlZWQtMmNiNy00NWU1LWIwYWQtNjcwOTdjMDBhODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOXMdE1V2I3EuK/Jwgk/qIl4XvG6PM2Shozw 4CT2ElzskqbfVSGd/2+kOCHmrXsawLbJnc/pyaO3uTExiQysDPSxIv+9P86lNekP NReVz7ijcdBjfUcTmCyRe/0+VyTpJZpZndwVNy7B+g3+wEHaf/PmrVuqTvuitSvM RFaoDIFCriWaTCEUF+PXnfpH4oI66O3E5NniAqZ5/P+G5mBymWxjht3ORXwpuNBr hvOwjeH31dRdcGf3zDAQekXPIxKk9APa/MwixdN2S87K3E8tDM8TbrhFm02lE5ml 9xry+4PFBNIE1F6uQaZzGXaI5vEGija+KBFAEVP/FOfeRhpJEwIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFCzkSOPpUxD7c/5/cqgybqgViHMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGJlNzgyN2QtN2E5MS0z ZTE5LWJhN2UtMjAwODY1YTJhZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQBQv0AMAwD BABFEUEDBABFEUIwDAMEAMaQaQMEAsaQaDAMAwQA2IRrAwQA2IRsAwQB2IRuAwQB 2IWSAwQA2OckAwQA2OcxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAItRGaCWhiWW5Fp8yVhFlIDnchzL5HsE TwiUmpyd6Nx28r2rEJHKDieNOHNa4tpTVVqhwAJ8K7lDaWXg2G3WfjJGmfOGI/aT 5vK0W3VCMlZBFyJLGJ3Ili6burUqfXju2qQaldzYoWCA3XYAnoYrfBsRZZ4JzkBa meVRglm2mAQKFZ/LNZ9ns+/Wf3SXOq3KmDvufnPbpWOwb+Rw4K7bls1UesSSNDX7 UvQgQnVFLLQWSt5Tpx8FBhNLqWruQo4jG4Y4miHGmZMzsvnJsi2Zj8Pk2+0fLf1e jcBmNqEPaJ/SuR6NFDHtN0D7CkijdCYgASCTZbgpHh+hL3bJXHyHIAo= -----END CERTIFICATE-----Generated at Thu Mar 26 06:01:45 2026 by rpki-client