$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28cd1696-6e61-304c-aa2b-d656c095d37c.roa File: 28cd1696-6e61-304c-aa2b-d656c095d37c.roa (raw, json) Hash identifier: xuOdPNIo3VLg21S6NWfyd57gw/AkwMR0f5KChWJBDR4= Subject key identifier: 85:FF:2F:30:63:B9:B3:B3:0B:6D:69:A5:42:51:F8:9F:53:E1:54:DD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D422F7472F58D17B12E133C00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28cd1696-6e61-304c-aa2b-d656c095d37c.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 20473 IP address blocks: 66.253.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:74:72:f5:8d:17:b1:2e:13:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=bbc29a10-f24d-4e92-9c89-c136395c84f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:bc:4c:6e:5c:22:bd:32:b6:a2:c4:5f:bd: cd:a1:70:7e:33:47:92:f9:ec:e2:93:45:b5:d9:26: 81:58:72:e2:cb:3d:c3:20:f0:d7:62:3b:7d:39:c6: 81:b6:49:5a:1c:e6:68:eb:2b:32:86:51:7c:8e:15: 1d:81:b7:87:f5:33:6b:78:0d:27:ff:0e:a9:a3:e0: 60:79:c4:47:0d:f1:49:27:28:b1:95:e1:d4:2a:ff: 25:58:9c:58:c2:54:97:6d:71:48:24:2c:d7:db:b1: 7a:cb:da:3f:1c:e5:a5:3c:8d:18:29:6b:4e:c6:5d: ea:71:08:31:7f:62:8e:14:e2:b4:40:91:04:ea:13: 0f:b9:c1:b4:ed:e0:a9:dc:27:8a:5b:0e:66:06:ad: 84:a1:44:b3:f0:af:56:7d:0b:a5:c6:91:ff:50:f5: 2e:53:59:1b:b5:73:b6:ed:71:a1:78:f8:44:e4:fe: 1b:57:80:d0:c4:31:22:d8:80:19:ee:48:e3:6c:d2: b7:83:71:4d:db:55:57:47:4c:15:ec:3e:3d:78:7c: d4:04:e4:b9:77:07:11:fb:1c:58:1b:9f:71:6b:3a: 49:6c:b7:5c:b4:45:f1:cc:8f:ef:7a:22:66:93:fa: 62:de:94:de:73:cc:65:ea:63:af:62:9a:e3:9d:c8: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FF:2F:30:63:B9:B3:B3:0B:6D:69:A5:42:51:F8:9F:53:E1:54:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28cd1696-6e61-304c-aa2b-d656c095d37c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:6a:9b:7a:72:44:86:75:02:a5:00:d1:1c:33:52:5b:bd:72: 60:57:9c:7b:42:79:79:c2:3a:fe:ed:05:00:f1:26:88:7a:51: 0c:1a:72:c1:1f:94:40:8e:7e:b1:05:7b:95:b0:27:49:e7:08: 6d:3a:83:73:87:64:c4:08:8f:77:a7:0b:34:1d:e0:b0:20:41: fa:fc:22:91:92:a7:6f:d8:a8:92:fd:c7:95:4b:16:f7:0c:49: 61:0a:ac:e8:de:24:4d:6a:c4:b8:d9:1d:42:16:5e:e7:d6:f2: 35:5c:0d:62:03:c7:ce:4b:fd:e4:55:5b:1a:81:36:97:c2:d2: 19:24:cb:c4:4c:8d:86:be:f3:c1:d6:d3:db:7f:4f:d6:e1:22: 38:91:38:2c:9c:6e:8e:e2:cb:98:57:37:f5:bf:cf:49:4d:e3: 43:5e:11:80:e3:44:46:6e:24:e6:3b:0d:21:19:a5:0a:8c:37: e2:50:e9:a5:9f:59:a4:fe:f9:a5:7f:5f:af:06:3d:89:75:9c: 4b:9f:de:5f:5e:ad:f2:0c:7d:d7:91:09:f2:8b:2d:dc:98:0a: fc:cc:10:b1:98:3b:4f:33:ed:42:ab:6b:87:fe:1d:59:e5:bb: 8c:5e:6f:44:b9:51:80:cd:d0:0b:36:f4:22:ce:24:7d:54:c6: 96:aa:c9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL3Ry9Y0XsS4TPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk YmJjMjlhMTAtZjI0ZC00ZTkyLTljODktYzEzNjM5NWM4NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW+8TG5cIr0ytqLEX73NoXB+M0eS+ezik0W1 2SaBWHLiyz3DIPDXYjt9OcaBtklaHOZo6ysyhlF8jhUdgbeH9TNreA0n/w6po+Bg ecRHDfFJJyixleHUKv8lWJxYwlSXbXFIJCzX27F6y9o/HOWlPI0YKWtOxl3qcQgx f2KOFOK0QJEE6hMPucG07eCp3CeKWw5mBq2EoUSz8K9WfQulxpH/UPUuU1kbtXO2 7XGhePhE5P4bV4DQxDEi2IAZ7kjjbNK3g3FN21VXR0wV7D49eHzUBOS5dwcR+xxY G59xazpJbLdctEXxzI/veiJmk/pi3pTec8xl6mOvYprjncjk5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX/LzBjubOzC21ppUJR+J9T4VTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjhjZDE2OTYtNmU2MS0z MDRjLWFhMmItZDY1NmMwOTVkMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNqm3pyRIZ1AqUA0RwzUlu9cmBXnHtCeXnCOv7tBQDxJoh6UQwacsEf lECOfrEFe5WwJ0nnCG06g3OHZMQIj3enCzQd4LAgQfr8IpGSp2/YqJL9x5VLFvcM SWEKrOjeJE1qxLjZHUIWXufW8jVcDWIDx85L/eRVWxqBNpfC0hkky8RMjYa+88HW 09t/T9bhIjiROCycbo7iy5hXN/W/z0lN40NeEYDjREZuJOY7DSEZpQqMN+JQ6aWf WaT++aV/X68GPYl1nEuf3l9erfIMfdeRCfKLLdyYCvzMELGYO08z7UKra4f+HVnl u4xeb0S5UYDN0As29CLOJH1UxpaqySw= -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:14 2026 by rpki-client