$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/178e3f6b-18ff-371a-826d-1da0e83a30a3.roa File: 178e3f6b-18ff-371a-826d-1da0e83a30a3.roa (raw, json) Hash identifier: aY88txvHcHQPmiMLRLXNAxcV+CMzuSMMrkr8DdU6r38= Subject key identifier: 89:15:C5:93:84:7B:90:51:91:EF:73:BF:7D:8D:05:38:36:06:4D:F7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D3E000DE5203D8B3E07EEBA50 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/178e3f6b-18ff-371a-826d-1da0e83a30a3.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 151373 IP address blocks: 66.253.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0d:e5:20:3d:8b:3e:07:ee:ba:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=8c65e02f-8282-48a8-a3f4-2b7d38945fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:49:a7:8c:68:9d:f6:65:c0:d5:47:f8:19: 2d:4c:26:01:b8:da:5d:7a:41:90:3e:81:13:a4:60: c1:4e:39:bd:f5:0f:5f:cb:46:13:59:1e:77:22:7a: 84:c7:8c:ac:09:55:fa:77:8f:39:83:df:1d:d9:bd: 1f:c6:1e:1d:55:e3:28:7f:b3:ee:14:af:59:e1:74: 32:27:eb:95:02:3b:c0:73:92:0e:ef:35:7c:06:36: 5d:d2:87:ac:b2:03:48:cd:33:e4:b6:5d:6f:6b:47: 6d:4d:e7:b2:1b:bc:19:aa:7a:2f:c4:38:1b:45:ba: 53:ad:a3:94:98:9b:cf:95:48:be:f4:d6:31:9e:62: 66:a8:20:72:92:00:1a:67:f3:62:70:c1:63:98:a9: 95:f7:e4:12:76:3c:5f:0f:cd:6f:02:60:22:6f:25: d0:2f:2b:5d:e4:8b:96:5b:09:76:0b:e4:2a:06:3c: 76:75:c3:4a:3b:11:15:1d:52:67:0b:8f:c2:73:c4: d9:0d:e5:d8:f5:c6:9a:74:ae:c4:2d:6c:6d:c1:07: ce:b9:bc:d2:fd:3c:38:15:15:16:cf:a1:dd:bb:24: 24:a8:e5:bd:d0:03:51:9c:b2:69:8c:7c:d1:e6:0d: 8a:5c:7f:19:0c:76:c6:d2:90:c8:a9:99:ab:9d:5d: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:15:C5:93:84:7B:90:51:91:EF:73:BF:7D:8D:05:38:36:06:4D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/178e3f6b-18ff-371a-826d-1da0e83a30a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:35:0e:d0:9d:6e:77:10:1e:71:85:99:68:6f:4d:cc:47:88: 92:ae:2c:98:6f:7b:84:ab:3b:1b:4b:65:41:55:0c:af:09:39: 58:70:70:b1:29:ff:6b:d3:e7:26:64:39:c8:3c:08:09:21:5b: a0:90:b0:41:7e:64:f0:7f:93:6d:d6:56:03:92:b5:ad:b5:47: f5:c6:43:e0:e8:39:89:21:3a:89:c6:19:e4:d1:5f:f3:41:c2: 00:6e:0f:96:28:df:33:9e:bf:b4:f2:0b:7b:aa:e5:07:5b:6c: ae:d9:bd:c5:40:da:c9:19:4c:f8:e1:cf:0f:13:82:23:1f:8e: 2a:a2:b1:ee:37:23:5f:f8:d1:8b:38:b6:04:25:25:69:69:8e: 6e:64:f7:f7:1c:ec:23:4d:37:59:da:ab:78:96:48:a1:e3:ea: 51:95:ec:83:7f:8b:e0:31:f1:05:71:9f:c8:c2:aa:aa:d3:65: 20:f4:29:fb:4e:77:8b:a7:7a:88:48:7e:d4:e0:67:04:de:a2: de:23:68:e2:07:43:c9:ae:c4:47:81:f0:23:46:f6:74:f9:9e: ee:33:b8:22:a5:b2:48:29:5e:28:54:b8:51:ee:50:78:30:f4: 7f:b2:ce:1c:a5:93:e1:ab:63:07:32:29:f1:b5:ad:d2:cb:93: 28:bb:2b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AA3lID2LPgfuulAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OGM2NWUwMmYtODI4Mi00OGE4LWEzZjQtMmI3ZDM4OTQ1ZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP5Jp4xonfZlwNVH+BktTCYBuNpdekGQPoET pGDBTjm99Q9fy0YTWR53InqEx4ysCVX6d485g98d2b0fxh4dVeMof7PuFK9Z4XQy J+uVAjvAc5IO7zV8BjZd0oessgNIzTPktl1va0dtTeeyG7wZqnovxDgbRbpTraOU mJvPlUi+9NYxnmJmqCBykgAaZ/NicMFjmKmV9+QSdjxfD81vAmAibyXQLytd5IuW Wwl2C+QqBjx2dcNKOxEVHVJnC4/Cc8TZDeXY9caadK7ELWxtwQfOubzS/Tw4FRUW z6HduyQkqOW90ANRnLJpjHzR5g2KXH8ZDHbG0pDIqZmrnV0EMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkVxZOEe5BRke9zv32NBTg2Bk33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTc4ZTNmNmItMThmZi0z NzFhLTgyNmQtMWRhMGU4M2EzMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKs1DtCdbncQHnGFmWhvTcxHiJKuLJhve4SrOxtLZUFVDK8JOVhwcLEp /2vT5yZkOcg8CAkhW6CQsEF+ZPB/k23WVgOSta21R/XGQ+DoOYkhOonGGeTRX/NB wgBuD5Yo3zOev7TyC3uq5QdbbK7ZvcVA2skZTPjhzw8TgiMfjiqise43I1/40Ys4 tgQlJWlpjm5k9/cc7CNNN1naq3iWSKHj6lGV7IN/i+Ax8QVxn8jCqqrTZSD0KftO d4uneohIftTgZwTeot4jaOIHQ8muxEeB8CNG9nT5nu4zuCKlskgpXihUuFHuUHgw 9H+yzhylk+GrYwcyKfG1rdLLkyi7K8U= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:27 2026 by rpki-client