$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c674f1d-6a7a-3fd3-a712-2a8f23da0b2b.roa File: 4c674f1d-6a7a-3fd3-a712-2a8f23da0b2b.roa (raw, json) Hash identifier: HoQEFs38/tcHIt8Z9WkNGPIvNToKpeHXOn3B+HGe8vk= Subject key identifier: 42:C7:5B:75:58:28:15:71:B3:C7:E3:EA:B0:FD:19:82:BE:5F:15:24 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D12D79CC54FE7FA20D9E5D800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c674f1d-6a7a-3fd3-a712-2a8f23da0b2b.roa Signing time: Fri 06 Mar 2026 02:00:31 +0000 ROA not before: Fri 06 Mar 2026 02:00:31 +0000 ROA not after: Thu 04 Jun 2026 01:00:31 +0000 asID: 2914 IP address blocks: 66.80.172.0/22 maxlen: 24 207.145.96.0/22 maxlen: 24 207.145.184.0/22 maxlen: 24 207.168.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:12:d7:9c:c5:4f:e7:fa:20:d9:e5:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 6 02:00:31 2026 GMT Not After : Jun 4 01:00:31 2026 GMT Subject: CN=11a1cb13-513d-4703-80b1-cf1bbbeb3750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:0a:5e:30:cc:94:90:da:5a:ed:68:a1:8a: 67:a0:63:cc:6c:17:74:f5:fd:7a:0f:1c:b9:c3:cf: e0:99:77:9d:26:8d:69:4b:a7:92:c2:4f:4e:6e:de: 38:34:df:ac:a5:37:38:d4:05:30:74:a2:5c:7c:a0: 93:ac:39:fe:9b:95:40:72:68:14:1b:e3:f2:fb:1a: 1a:83:bb:a2:8e:7f:c0:6c:1c:f9:80:03:e0:35:97: e7:62:af:25:58:67:dd:93:51:70:63:03:31:0e:6f: de:0b:fb:ec:e9:40:5b:0b:01:3c:1b:b5:a0:b1:14: 00:a6:bb:c9:7a:16:45:20:8d:70:f1:8b:a0:d4:a6: 10:5c:a4:72:89:41:0a:6d:3a:fe:b0:ec:38:7b:6e: a5:14:0d:58:7c:2f:f4:30:bf:6a:40:f6:40:03:c0: 42:47:a3:ae:88:1e:c6:49:32:e3:34:2d:c2:69:d4: 46:60:ae:33:40:42:08:89:f4:29:d8:e4:46:b5:1c: a1:ea:39:72:13:b1:67:fe:81:7b:85:6f:37:9e:1b: ef:25:ce:21:e2:45:e6:6d:03:10:90:4e:39:21:11: 6e:e8:ff:1b:0f:30:d8:36:c9:67:74:b0:3f:bb:6f: 02:f8:7e:57:f0:df:7a:f5:46:fb:c6:3c:e4:dd:5b: f5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C7:5B:75:58:28:15:71:B3:C7:E3:EA:B0:FD:19:82:BE:5F:15:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c674f1d-6a7a-3fd3-a712-2a8f23da0b2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.80.172.0/22 207.145.96.0/22 207.145.184.0/22 207.168.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:54:cb:d7:cd:0a:db:88:89:94:06:ea:c7:44:aa:f3:2b:30: 22:bb:9d:47:a0:cf:96:48:57:82:77:e8:1e:e8:cb:bd:aa:ac: 19:f0:3a:90:92:15:32:19:a4:d8:1a:5e:73:bb:6a:cb:d1:9e: 98:b8:b3:2a:ec:28:5b:92:ce:25:47:63:97:de:35:36:4c:fd: f3:00:27:8e:10:74:d8:bf:01:92:20:3b:c6:84:ee:3c:01:20: 10:92:38:6b:3b:f2:95:3a:4b:2e:f2:35:2f:ca:81:d4:c3:d1: 26:ed:81:fa:42:d2:de:61:a5:8e:d3:c1:34:3c:67:e2:52:5d: c1:e1:49:61:45:12:ad:39:57:fb:2d:ae:e4:be:34:5f:c5:0c: 52:93:d4:2a:c9:06:ea:02:26:a1:07:fe:bb:9d:bc:09:6e:7d: a8:f9:27:3a:2a:a1:b8:cd:66:68:9b:82:28:fd:ac:ae:74:0d: 6b:6a:0e:d1:cf:7a:60:79:92:5e:3c:83:42:f9:c7:7b:77:f0: 01:a4:5c:7a:c7:99:38:00:60:54:69:a6:30:c5:e6:9b:2e:cc: 25:1d:78:dc:80:67:f8:74:92:1c:ea:9a:a8:de:1e:af:b4:ff: 8f:f6:c1:80:34:e8:16:2d:21:c3:8b:15:69:23:02:23:a0:fe: d1:22:3f:dd -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE0S15zFT+f6INnl2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNjAyMDAzMVoXDTI2MDYwNDAxMDAzMVowLzEtMCsGA1UEAxMk MTFhMWNiMTMtNTEzZC00NzAzLTgwYjEtY2YxYmJiZWIzNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoosKXjDMlJDaWu1ooYpnoGPMbBd09f16Dxy5 w8/gmXedJo1pS6eSwk9Obt44NN+spTc41AUwdKJcfKCTrDn+m5VAcmgUG+Py+xoa g7uijn/AbBz5gAPgNZfnYq8lWGfdk1FwYwMxDm/eC/vs6UBbCwE8G7WgsRQAprvJ ehZFII1w8Yug1KYQXKRyiUEKbTr+sOw4e26lFA1YfC/0ML9qQPZAA8BCR6OuiB7G STLjNC3CadRGYK4zQEIIifQp2ORGtRyh6jlyE7Fn/oF7hW83nhvvJc4h4kXmbQMQ kE45IRFu6P8bDzDYNslndLA/u28C+H5X8N969Ub7xjzk3Vv1/wIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFELHW3VYKBVxs8fj6rD9GYK+XxUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGM2NzRmMWQtNmE3YS0z ZmQzLWE3MTItMmE4ZjIzZGEwYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCQlCsAwQC z5FgAwQCz5G4AwQCz6h0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABtUy9fNCtuIiZQG6sdEqvMrMCK7nUeg z5ZIV4J36B7oy72qrBnwOpCSFTIZpNgaXnO7asvRnpi4syrsKFuSziVHY5feNTZM /fMAJ44QdNi/AZIgO8aE7jwBIBCSOGs78pU6Sy7yNS/KgdTD0SbtgfpC0t5hpY7T wTQ8Z+JSXcHhSWFFEq05V/struS+NF/FDFKT1CrJBuoCJqEH/rudvAlufaj5Jzoq objNZmibgij9rK50DWtqDtHPemB5kl48g0L5x3t38AGkXHrHmTgAYFRppjDF5psu zCUdeNyAZ/h0khzqmqjeHq+0/4/2wYA06BYtIcOLFWkjAiOg/tEiP90= -----END CERTIFICATE-----Generated at Thu Mar 26 14:29:18 2026 by rpki-client