$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2fd15866-a737-3bcd-a1ec-251f77de4fb5.roa File: 2fd15866-a737-3bcd-a1ec-251f77de4fb5.roa (raw, json) Hash identifier: gU3Mh8GN/jne42O7s2CBgraqo3wkGa6NxiiXy76w7ZA= Subject key identifier: 40:4B:60:76:D1:CC:A6:DE:FE:47:88:48:FF:B9:C8:9C:09:27:CF:FB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0E02CD8012BD87B19E936F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2fd15866-a737-3bcd-a1ec-251f77de4fb5.roa Signing time: Wed 04 Mar 2026 08:28:32 +0000 ROA not before: Wed 04 Mar 2026 08:28:32 +0000 ROA not after: Tue 02 Jun 2026 07:28:32 +0000 asID: 398704 IP address blocks: 66.92.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:02:cd:80:12:bd:87:b1:9e:93:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 4 08:28:32 2026 GMT Not After : Jun 2 07:28:32 2026 GMT Subject: CN=233ec5b8-82f2-46aa-958b-09c705e4f5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e3:c6:cc:9d:39:30:90:e8:a7:36:d4:fa:48: 8d:da:e7:ad:6e:78:ce:64:c4:e3:4d:93:ef:76:7c: 92:98:b7:b7:f2:2b:41:e1:40:97:77:20:72:b0:59: de:bd:6d:42:f5:db:06:71:a3:66:ab:4f:66:0b:57: d8:dc:c4:fe:f8:69:6d:77:5a:f7:2d:d4:d6:ee:1e: ae:6d:50:fb:cf:0b:54:36:fc:e6:db:7b:37:40:a4: c0:d6:85:9b:17:d6:b9:b3:67:bc:e0:c7:94:64:17: 3a:32:19:6c:d9:14:dc:77:bd:d2:58:09:c1:1a:13: 14:22:84:cf:69:3d:d1:09:59:0c:46:bd:be:31:74: de:5f:95:0c:fd:e4:2a:16:b2:aa:f8:a2:5f:27:47: 4f:6c:df:f3:d8:fc:df:af:f1:d0:35:c6:84:ae:62: 3d:55:a1:ca:99:65:0f:11:35:42:b8:a2:20:2a:1d: 26:69:12:68:a3:1f:84:a0:35:ca:84:5e:49:d0:17: 6c:2b:96:c9:e6:2e:23:2f:5e:85:54:34:47:05:14: 83:73:1f:a0:b1:90:90:e5:9e:a5:67:1f:fb:24:90: d8:6f:b9:62:b6:c7:94:6d:19:7b:6d:52:92:71:88: 8c:da:00:46:48:b2:ba:8f:84:9a:69:44:f5:34:44: 78:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4B:60:76:D1:CC:A6:DE:FE:47:88:48:FF:B9:C8:9C:09:27:CF:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2fd15866-a737-3bcd-a1ec-251f77de4fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d8:0c:f5:8a:19:10:4c:e7:cc:97:20:7b:42:00:68:38:fc: 55:36:18:96:53:7d:5e:1e:27:e7:0e:3d:c8:48:99:af:08:8f: d6:6a:f4:95:34:6f:d9:cb:99:85:ad:a5:13:6a:98:a4:fb:14: f2:07:bb:29:a6:87:f3:30:4f:78:02:fa:b4:c7:18:62:29:6a: 83:26:d4:12:dc:bd:45:a3:c2:5d:5c:6f:29:ca:bc:96:b6:bc: b9:fc:ca:65:8a:3b:9f:9a:18:60:95:80:a5:63:e3:df:c8:69: ed:3b:41:4f:cd:95:1f:61:4e:44:41:56:a1:c2:90:37:ab:a7: 9b:c2:37:1b:c8:5d:a9:ed:6d:67:d3:6c:55:b1:da:f3:24:d5: fb:d6:0e:be:da:b1:5b:e4:1c:91:67:b0:19:6f:92:ed:f9:80: d7:87:03:26:25:e7:ad:07:98:fb:d5:0d:73:44:bf:7a:11:32: f0:df:d7:83:ff:e6:31:83:12:73:a6:4d:29:76:20:79:2a:63: ef:fa:a0:39:c4:a4:e9:2f:f2:c1:30:90:fd:9d:88:e1:04:ec: fa:12:a7:25:d0:f7:1b:37:46:69:5c:40:9c:16:05:6f:65:1e: 66:83:fc:33:3c:77:2f:75:f3:7e:7f:aa:e9:c3:b0:9b:63:25: bc:df:1b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0OAs2AEr2HsZ6Tb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNDA4MjgzMloXDTI2MDYwMjA3MjgzMlowLzEtMCsGA1UEAxMk MjMzZWM1YjgtODJmMi00NmFhLTk1OGItMDljNzA1ZTRmNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoePGzJ05MJDopzbU+kiN2uetbnjOZMTjTZPv dnySmLe38itB4UCXdyBysFnevW1C9dsGcaNmq09mC1fY3MT++Gltd1r3LdTW7h6u bVD7zwtUNvzm23s3QKTA1oWbF9a5s2e84MeUZBc6Mhls2RTcd73SWAnBGhMUIoTP aT3RCVkMRr2+MXTeX5UM/eQqFrKq+KJfJ0dPbN/z2Pzfr/HQNcaErmI9VaHKmWUP ETVCuKIgKh0maRJoox+EoDXKhF5J0BdsK5bJ5i4jL16FVDRHBRSDcx+gsZCQ5Z6l Zx/7JJDYb7litseUbRl7bVKScYiM2gBGSLK6j4SaaUT1NER4rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBLYHbRzKbe/keISP+5yJwJJ8/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmZkMTU4NjYtYTczNy0z YmNkLWExZWMtMjUxZjc3ZGU0ZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlzVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITYDPWKGRBM58yXIHtCAGg4/FU2GJZTfV4eJ+cOPchIma8Ij9Zq9JU0 b9nLmYWtpRNqmKT7FPIHuymmh/MwT3gC+rTHGGIpaoMm1BLcvUWjwl1cbynKvJa2 vLn8ymWKO5+aGGCVgKVj49/Iae07QU/NlR9hTkRBVqHCkDerp5vCNxvIXantbWfT bFWx2vMk1fvWDr7asVvkHJFnsBlvku35gNeHAyYl560HmPvVDXNEv3oRMvDf14P/ 5jGDEnOmTSl2IHkqY+/6oDnEpOkv8sEwkP2diOEE7PoSpyXQ9xs3RmlcQJwWBW9l HmaD/DM8dy91835/qunDsJtjJbzfGwY= -----END CERTIFICATE-----Generated at Thu Mar 26 08:08:57 2026 by rpki-client