$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3bcd2b09-470e-3974-afbf-206f57b5a74e.roa File: 3bcd2b09-470e-3974-afbf-206f57b5a74e.roa (raw, json) Hash identifier: 1m4GrLGKfnmI4c+S+iQy5CXDZCvFh5eTZCMRxreCYUE= Subject key identifier: 65:72:70:C0:75:C8:2B:E4:E9:34:9A:24:D3:7C:5F:4C:BA:D1:68:9B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D3B274160DCE1DA1ED7853280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3bcd2b09-470e-3974-afbf-206f57b5a74e.roa Signing time: Fri 20 Mar 2026 12:33:22 +0000 ROA not before: Fri 20 Mar 2026 12:33:22 +0000 ROA not after: Thu 18 Jun 2026 12:33:22 +0000 asID: 834 IP address blocks: 66.92.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:27:41:60:dc:e1:da:1e:d7:85:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 20 12:33:22 2026 GMT Not After : Jun 18 12:33:22 2026 GMT Subject: CN=fd8a6f29-598d-48a2-9d31-78e1dd96c41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:57:f7:ba:5a:76:4a:13:00:47:86:1e:88:e1: 62:36:03:1e:67:4f:31:24:47:22:b1:06:12:ca:0a: 79:95:63:ef:af:28:5a:b1:a0:94:4f:dc:fa:31:74: 26:e8:9e:c5:61:c2:fa:af:13:ef:2a:64:e2:40:4e: 25:59:a1:06:b0:72:1a:9e:56:29:9a:40:e5:77:e0: d7:1f:5e:d9:1d:49:5c:0a:67:53:31:2e:48:df:2e: 51:ef:9e:e9:00:43:87:5d:c4:72:8d:33:7e:a3:7a: 42:24:49:f7:a1:aa:ad:eb:c4:c5:65:b9:1c:a7:54: 65:5b:d1:94:21:15:4c:82:d5:10:53:43:10:11:b3: f4:1e:66:64:0d:79:f6:c0:78:39:f4:f6:17:61:32: 59:17:10:b2:7d:e3:3d:10:75:21:35:a7:9c:b3:ec: a4:37:ae:3d:33:78:93:d2:6c:18:19:e5:c2:48:fb: 41:f2:eb:47:ec:20:4e:d2:2c:88:ab:e5:79:af:20: 38:00:e2:59:92:e5:bd:7e:67:03:a6:5f:1b:9d:5c: ae:b5:1b:58:db:5f:88:d9:73:c0:9b:29:78:e0:1b: c8:4f:e1:76:69:2e:19:9f:a5:9d:bd:d0:fa:aa:f3: c2:47:97:ff:0c:98:a4:6d:9a:ed:35:30:ad:e6:ac: d7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:72:70:C0:75:C8:2B:E4:E9:34:9A:24:D3:7C:5F:4C:BA:D1:68:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3bcd2b09-470e-3974-afbf-206f57b5a74e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:07:28:87:f2:d3:0c:60:32:e5:42:5d:b0:e1:16:b0:93:49: 0c:bb:13:87:1b:21:b3:f7:69:9d:88:a1:a9:1d:71:18:99:7a: cc:3b:07:a0:1b:17:96:f6:44:09:13:87:b2:67:43:63:f2:b5: 79:24:5a:d5:53:e3:24:62:bd:1a:a2:2b:5c:24:4d:9c:da:22: 4b:79:4f:0c:f9:96:2d:a9:f3:49:ca:5e:03:b9:6b:b7:3d:71: 3a:11:8e:5b:1f:cd:29:36:68:fe:82:ba:67:35:4b:c7:07:eb: 9f:b6:83:ac:de:9f:dd:4b:52:5f:3a:c3:23:17:d1:66:ce:75: b0:51:bd:f7:ad:00:b5:c4:23:a9:0a:07:81:67:7d:6a:3e:ca: f9:23:05:4b:cf:b2:33:d8:cd:c1:cd:f4:51:20:38:33:b9:db: 03:2a:0b:46:9d:7f:92:37:eb:87:55:e3:cd:37:50:44:11:41: 37:cf:8f:a9:af:87:22:2a:58:8c:32:4e:ad:ff:38:e2:9d:5c: c3:73:1e:f5:3e:12:6c:29:c5:82:4a:c8:42:2b:89:28:79:75: 31:f3:ac:80:a7:23:e9:d4:54:8c:61:f8:b5:bb:54:ad:c7:3e: 0a:33:be:c6:7f:90:1c:82:f7:70:a5:75:72:ca:bf:38:0a:32: b3:45:ef:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07J0Fg3OHaHteFMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyMDEyMzMyMloXDTI2MDYxODEyMzMyMlowLzEtMCsGA1UEAxMk ZmQ4YTZmMjktNTk4ZC00OGEyLTlkMzEtNzhlMWRkOTZjNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vf3ulp2ShMAR4YeiOFiNgMeZ08xJEcisQYS ygp5lWPvryhasaCUT9z6MXQm6J7FYcL6rxPvKmTiQE4lWaEGsHIanlYpmkDld+DX H17ZHUlcCmdTMS5I3y5R757pAEOHXcRyjTN+o3pCJEn3oaqt68TFZbkcp1RlW9GU IRVMgtUQU0MQEbP0HmZkDXn2wHg59PYXYTJZFxCyfeM9EHUhNaecs+ykN649M3iT 0mwYGeXCSPtB8utH7CBO0iyIq+V5ryA4AOJZkuW9fmcDpl8bnVyutRtY21+I2XPA myl44BvIT+F2aS4Zn6WdvdD6qvPCR5f/DJikbZrtNTCt5qzXhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVycMB1yCvk6TSaJNN8X0y60WibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2JjZDJiMDktNDcwZS0z OTc0LWFmYmYtMjA2ZjU3YjVhNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlz1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcHKIfy0wxgMuVCXbDhFrCTSQy7E4cbIbP3aZ2IoakdcRiZesw7B6Ab F5b2RAkTh7JnQ2PytXkkWtVT4yRivRqiK1wkTZzaIkt5Twz5li2p80nKXgO5a7c9 cToRjlsfzSk2aP6Cumc1S8cH65+2g6zen91LUl86wyMX0WbOdbBRvfetALXEI6kK B4FnfWo+yvkjBUvPsjPYzcHN9FEgODO52wMqC0adf5I364dV4803UEQRQTfPj6mv hyIqWIwyTq3/OOKdXMNzHvU+EmwpxYJKyEIriSh5dTHzrICnI+nUVIxh+LW7VK3H PgozvsZ/kByC93CldXLKvzgKMrNF7zs= -----END CERTIFICATE-----Generated at Thu Mar 26 05:07:26 2026 by rpki-client