$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/141f1e78-6a68-3ff4-9ef7-e8e03c1842ac.roa File: 141f1e78-6a68-3ff4-9ef7-e8e03c1842ac.roa (raw, json) Hash identifier: DfKrIn6OdpLI25LM+8sW4isgBQ0tiN5fc88Tj6y6GPI= Subject key identifier: FB:30:89:B3:FF:E7:17:3E:3E:02:7B:41:6B:5B:74:95:23:D9:B3:D6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D19B4DA79DFF1D96AD75C2880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/141f1e78-6a68-3ff4-9ef7-e8e03c1842ac.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 834 IP address blocks: 66.253.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:da:79:df:f1:d9:6a:d7:5c:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=6f49d9df-3ffd-41e5-bd0c-c4a841cf5312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:99:18:fc:7d:fb:4d:ef:d7:da:9e:28:88:30: a6:a3:f2:e3:20:17:f6:d8:33:30:16:35:1f:d6:ca: ed:65:83:24:61:da:88:cd:0e:a6:23:27:f0:2f:dd: 43:6a:07:8c:55:bd:b7:f0:ec:ae:ba:01:84:0b:c5: 5d:f5:a1:f4:d8:e2:c9:4c:b2:f9:ea:74:dc:ff:fb: bc:75:6f:f0:6a:55:21:66:44:dd:f8:28:fa:04:3c: 54:d7:3e:55:95:2b:be:5c:ff:30:19:db:1f:93:c4: d1:44:35:9b:d9:e1:1c:5d:03:30:20:44:9b:fa:da: 4d:2c:4b:81:3e:36:1b:d1:af:00:8a:a1:39:20:81: 27:0d:51:6c:52:49:6a:f6:71:1b:2d:76:b1:8f:1f: e5:ab:1e:75:f4:4a:74:90:80:0e:cf:07:1a:c9:e7: aa:37:63:c2:6f:d4:f4:f5:78:2b:96:e2:54:bc:55: ae:e1:9d:d9:c8:3d:e7:e4:b0:f4:2a:16:d8:87:90: 12:b8:e0:a3:10:0d:80:d7:57:24:7e:58:9e:63:a4: 9c:33:8c:d6:0f:3f:44:4b:af:43:8b:98:15:3a:99: 08:c8:fe:04:c6:e6:f0:09:6e:52:7f:d1:68:22:09: ae:dd:90:f1:db:64:3c:61:cf:e1:5c:bd:da:d0:33: 05:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:30:89:B3:FF:E7:17:3E:3E:02:7B:41:6B:5B:74:95:23:D9:B3:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/141f1e78-6a68-3ff4-9ef7-e8e03c1842ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b9:87:7d:cd:70:a3:d7:2b:0b:0e:de:c6:7f:e1:89:02:f7: 57:07:4c:67:4a:7e:4f:bd:a0:01:43:26:1e:fc:63:cd:ff:d7: f3:c4:1d:c4:a9:05:b4:9c:35:36:86:1c:c7:97:86:16:26:21: 7e:9a:01:28:aa:1c:6b:4b:8c:49:e6:fb:c5:f0:12:69:0c:1b: 01:aa:18:60:61:5b:4f:26:2e:52:04:68:21:cb:d4:63:17:04: 3f:64:46:20:d7:c2:bd:59:9e:86:a9:62:c0:b5:bf:e7:1e:e8: 57:12:37:06:f9:b5:01:30:3f:e9:98:06:0f:da:cf:72:be:c3: cb:98:df:57:d9:75:da:df:af:fc:81:3c:06:b4:0e:7d:49:21: 02:8b:33:2a:dc:58:e1:8f:62:eb:6f:22:e7:c5:e7:38:69:9a: 1c:24:63:ca:5e:27:3f:9b:00:18:e4:30:74:f3:34:36:56:29: e1:00:fe:a3:01:37:76:10:c9:1b:1b:6c:7a:3a:c6:50:92:2a: b2:93:ab:8e:ab:d8:73:8f:8c:9f:98:39:86:51:a8:de:a9:f0: f7:a6:2b:3f:5a:02:ca:4f:bc:64:04:35:03:11:5b:79:75:34: 07:16:34:5f:ab:bf:d6:ba:5f:ad:1a:87:2f:eb:f2:0a:97:38: ab:41:da:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNp53/HZatdcKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NmY0OWQ5ZGYtM2ZmZC00MWU1LWJkMGMtYzRhODQxY2Y1MzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZkY/H37Te/X2p4oiDCmo/LjIBf22DMwFjUf 1srtZYMkYdqIzQ6mIyfwL91DageMVb238OyuugGEC8Vd9aH02OLJTLL56nTc//u8 dW/walUhZkTd+Cj6BDxU1z5VlSu+XP8wGdsfk8TRRDWb2eEcXQMwIESb+tpNLEuB PjYb0a8AiqE5IIEnDVFsUklq9nEbLXaxjx/lqx519Ep0kIAOzwcayeeqN2PCb9T0 9XgrluJUvFWu4Z3ZyD3n5LD0KhbYh5ASuOCjEA2A11ckflieY6ScM4zWDz9ES69D i5gVOpkIyP4ExubwCW5Sf9FoIgmu3ZDx22Q8Yc/hXL3a0DMFewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPswibP/5xc+PgJ7QWtbdJUj2bPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTQxZjFlNzgtNmE2OC0z ZmY0LTllZjctZThlMDNjMTg0MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK5h33NcKPXKwsO3sZ/4YkC91cHTGdKfk+9oAFDJh78Y83/1/PEHcSp BbScNTaGHMeXhhYmIX6aASiqHGtLjEnm+8XwEmkMGwGqGGBhW08mLlIEaCHL1GMX BD9kRiDXwr1ZnoapYsC1v+ce6FcSNwb5tQEwP+mYBg/az3K+w8uY31fZddrfr/yB PAa0Dn1JIQKLMyrcWOGPYutvIufF5zhpmhwkY8peJz+bABjkMHTzNDZWKeEA/qMB N3YQyRsbbHo6xlCSKrKTq46r2HOPjJ+YOYZRqN6p8PemKz9aAspPvGQENQMRW3l1 NAcWNF+rv9a6X60ahy/r8gqXOKtB2r8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:51:57 2026 by rpki-client