$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa File: 2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa (raw, json) Hash identifier: fxClB1K1WLMrUFZtB7tEGM/XwyvLg3WdtGmMmXna34Q= Subject key identifier: 8B:56:11:BE:A1:71:B2:03:2D:24:6F:AB:5A:D7:D9:00:33:0A:A4:05 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D19B4D79C68151E8781372200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 5650 IP address blocks: 66.93.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d7:9c:68:15:1e:87:81:37:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=68e1a830-78f4-4662-a698-98646e5480e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:75:42:99:4f:97:ae:5b:90:81:1b:7c:ee:28: e2:72:03:f5:9f:70:fd:a8:31:30:95:68:1b:15:6f: 91:0e:a5:44:9a:f4:c3:29:26:60:ca:02:2e:3f:6e: 5e:c3:9e:f4:9c:f9:9e:1f:e3:b2:a8:17:86:fd:f1: e9:8a:e2:e1:f0:ba:5a:71:5c:e9:0f:b7:24:78:e2: 78:8a:82:09:be:eb:49:4c:f5:e9:85:9c:28:e9:08: 87:41:9c:f4:8e:29:22:6e:b5:98:40:ff:b5:fe:fc: 99:33:4a:a4:1f:90:05:14:1e:a3:f7:e6:83:49:f3: 71:d9:18:18:8d:80:7d:b1:ec:d8:df:c6:48:0c:9b: b9:4e:8a:d0:1a:5b:4c:7a:87:d5:e4:17:26:ad:15: f2:07:5c:a5:f4:31:ef:63:27:f9:5b:56:8b:1b:7a: 5f:bc:4e:c1:b3:10:90:6f:88:bc:b1:db:cd:07:ab: c8:31:ed:c6:be:0c:05:63:25:f8:d5:b0:05:0a:56: b3:9c:7f:e9:a4:39:f7:fc:a6:61:cd:9c:54:6d:24: ed:a3:24:38:9b:7b:80:e4:2a:a3:c3:53:96:86:e0: 46:ba:96:48:fd:ff:0e:9a:c2:a3:84:af:66:80:48: 4a:c1:00:b1:97:a1:97:93:cb:2c:92:c7:6a:4a:ec: f8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:56:11:BE:A1:71:B2:03:2D:24:6F:AB:5A:D7:D9:00:33:0A:A4:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6ddeac-f233-3429-8785-5def0d6a5bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:8b:5b:29:69:67:44:37:1d:73:57:6b:74:63:be:a5:2b:53: 5d:b2:54:4c:3f:57:f9:08:0d:b2:e8:96:b7:83:bf:21:be:b4: 9a:23:86:97:60:8c:52:7d:10:3d:d4:3d:d0:c1:6c:ab:1b:c7: 28:94:a1:d4:a9:6f:64:64:d3:57:6b:b1:a3:95:46:a4:55:33: 25:04:e1:82:13:0e:25:98:c8:57:ac:fd:3e:a5:80:22:5b:4b: 55:fd:5a:28:a0:df:f8:36:ca:88:50:1d:80:6a:79:cd:52:36: d7:a9:57:b2:78:a2:f3:b2:c7:02:3a:35:80:39:42:24:7c:4f: 01:53:a3:63:24:54:f1:18:3d:62:32:cd:1e:9f:71:35:50:e1: 7d:a5:9a:40:32:94:c7:7e:07:c0:17:13:42:ee:6e:e8:92:14: 2f:1d:e2:4b:e5:9f:11:8d:04:02:04:2a:40:b1:f6:82:1a:b0: 18:b0:c1:ad:92:61:5f:61:80:6b:5a:06:92:bb:06:63:24:9a: 82:71:88:87:1c:6f:0b:27:50:69:8f:59:d0:be:30:b6:45:e3: 1f:d3:b8:43:17:14:90:fd:a9:f4:2a:30:9c:d5:4a:c7:12:45: a5:9e:f7:4a:a1:fa:92:3c:50:c7:89:29:2c:7a:bf:39:a5:ac: 40:31:36:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNecaBUeh4E3IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NjhlMWE4MzAtNzhmNC00NjYyLWE2OTgtOTg2NDZlNTQ4MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinVCmU+XrluQgRt87ijicgP1n3D9qDEwlWgb FW+RDqVEmvTDKSZgygIuP25ew570nPmeH+OyqBeG/fHpiuLh8LpacVzpD7ckeOJ4 ioIJvutJTPXphZwo6QiHQZz0jikibrWYQP+1/vyZM0qkH5AFFB6j9+aDSfNx2RgY jYB9sezY38ZIDJu5TorQGltMeofV5BcmrRXyB1yl9DHvYyf5W1aLG3pfvE7BsxCQ b4i8sdvNB6vIMe3GvgwFYyX41bAFClaznH/ppDn3/KZhzZxUbSTtoyQ4m3uA5Cqj w1OWhuBGupZI/f8OmsKjhK9mgEhKwQCxl6GXk8ssksdqSuz4nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItWEb6hcbIDLSRvq1rX2QAzCqQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmI2ZGRlYWMtZjIzMy0z NDI5LTg3ODUtNWRlZjBkNmE1YmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQl18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaLWylpZ0Q3HXNXa3RjvqUrU12yVEw/V/kIDbLolreDvyG+tJojhpdg jFJ9ED3UPdDBbKsbxyiUodSpb2Rk01drsaOVRqRVMyUE4YITDiWYyFes/T6lgCJb S1X9Wiig3/g2yohQHYBqec1SNtepV7J4ovOyxwI6NYA5QiR8TwFTo2MkVPEYPWIy zR6fcTVQ4X2lmkAylMd+B8AXE0LubuiSFC8d4kvlnxGNBAIEKkCx9oIasBiwwa2S YV9hgGtaBpK7BmMkmoJxiIccbwsnUGmPWdC+MLZF4x/TuEMXFJD9qfQqMJzVSscS RaWe90qh+pI8UMeJKSx6vzmlrEAxNoo= -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:59 2026 by rpki-client