$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a8aa824-3166-3e26-a98a-1d3979daaab8.roa File: 5a8aa824-3166-3e26-a98a-1d3979daaab8.roa (raw, json) Hash identifier: 0r8Cy0eR6XdULTeop6ZsMMXtMBF/KK0UD1cGvT8Q8Gg= Subject key identifier: CA:A1:B7:25:00:7A:D7:8F:C2:AE:20:E5:5A:C0:60:A3:C5:C3:EF:F1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D1B1A05A99822CA67A5C05900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a8aa824-3166-3e26-a98a-1d3979daaab8.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 66.93.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:05:a9:98:22:ca:67:a5:c0:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=c2aee9a5-f34f-40d2-a0e3-a0ea4fa7ca1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b4:53:b3:2e:e5:3b:fe:e1:75:e2:e9:65:1d: 4c:fb:10:eb:5e:55:18:c1:d4:f6:5e:67:47:7d:14: 9e:b9:87:e1:9c:d6:5a:00:d0:f1:bc:fd:53:3c:11: b8:e1:71:27:27:61:37:ed:e8:55:9e:70:da:19:1c: c5:2c:31:b7:e8:ac:6c:79:a1:21:30:f9:72:bf:ca: 88:61:b2:8b:10:a8:b1:db:75:77:8a:26:6d:88:6f: 3d:7f:23:36:1a:a2:04:9f:fd:22:e2:dd:e9:d8:97: 3e:e8:25:9e:ec:6c:a0:d0:32:a9:29:2e:3d:1a:e4: f4:ef:a3:ab:56:1e:9b:80:ce:81:65:2c:cb:ff:c8: 62:6b:d8:06:58:70:af:d1:c1:2c:74:2f:f3:b8:ef: 27:4f:64:85:9d:56:83:b6:64:36:16:cb:df:b9:ed: b5:e8:48:ce:34:03:41:32:96:9f:13:a2:25:c8:26: a5:32:86:cc:85:88:55:ea:5b:70:e4:70:76:9c:b9: 53:e6:29:c3:9a:a7:67:a1:ca:5b:65:32:cf:b5:6e: d8:5b:a5:63:4e:18:16:a2:6d:63:c3:42:43:fd:15: a2:6f:59:96:9b:f0:ae:e6:cc:5c:ec:84:4c:35:38: 19:f2:7d:69:a6:97:92:36:89:83:d3:cf:a9:2a:95: 1a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A1:B7:25:00:7A:D7:8F:C2:AE:20:E5:5A:C0:60:A3:C5:C3:EF:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a8aa824-3166-3e26-a98a-1d3979daaab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:31:6c:d4:8e:e9:40:32:a5:67:eb:39:36:f1:c3:41:57:32: 7f:3a:bd:e5:95:0a:b1:e3:35:62:6e:a3:a8:d1:10:7f:cc:fe: e4:23:31:75:53:44:06:53:48:2b:31:34:db:cd:62:4d:3d:78: 30:c3:29:87:05:f9:41:26:5b:bb:e4:43:30:88:95:3c:39:3e: a4:2c:8c:a6:00:81:09:af:60:30:a7:af:7b:a2:67:6c:78:89: 28:9b:6a:5a:11:82:32:9b:7a:27:e3:ed:16:ec:30:b4:70:bd: f5:c3:a8:4d:41:8b:44:5b:5a:76:5b:7c:cc:68:9f:08:ec:a7: 2a:82:fe:eb:24:a8:1f:21:0e:6e:91:c0:ce:5d:1f:18:18:cd: 13:d0:f2:5a:77:ac:81:34:38:2b:54:32:ed:c2:2e:bf:2b:a8: 66:a0:71:a5:d2:e4:a1:6b:f7:d7:8b:9b:be:0d:ab:07:9c:91: f5:83:e4:2f:b0:05:0c:79:f9:a6:24:29:38:aa:ad:8f:0d:0f: 58:2e:40:7a:a7:0f:16:a0:f1:a4:a6:d8:68:0e:9c:63:05:3e: 0d:b9:93:45:7e:68:f0:c6:d6:a6:65:78:d3:f6:5a:4d:c6:f3: 2b:ae:6c:f2:57:22:54:c2:55:d0:0e:b8:3e:d3:a5:95:f4:54: e9:9f:d8:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGgWpmCLKZ6XAWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YzJhZWU5YTUtZjM0Zi00MGQyLWEwZTMtYTBlYTRmYTdjYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rRTsy7lO/7hdeLpZR1M+xDrXlUYwdT2XmdH fRSeuYfhnNZaANDxvP1TPBG44XEnJ2E37ehVnnDaGRzFLDG36KxseaEhMPlyv8qI YbKLEKix23V3iiZtiG89fyM2GqIEn/0i4t3p2Jc+6CWe7Gyg0DKpKS49GuT076Or Vh6bgM6BZSzL/8hia9gGWHCv0cEsdC/zuO8nT2SFnVaDtmQ2Fsvfue216EjONANB MpafE6IlyCalMobMhYhV6ltw5HB2nLlT5inDmqdnocpbZTLPtW7YW6VjThgWom1j w0JD/RWib1mWm/Cu5sxc7IRMNTgZ8n1pppeSNomD08+pKpUa9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqhtyUAetePwq4g5VrAYKPFw+/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWE4YWE4MjQtMzE2Ni0z ZTI2LWE5OGEtMWQzOTc5ZGFhYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQl3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgxbNSO6UAypWfrOTbxw0FXMn86veWVCrHjNWJuo6jREH/M/uQjMXVT RAZTSCsxNNvNYk09eDDDKYcF+UEmW7vkQzCIlTw5PqQsjKYAgQmvYDCnr3uiZ2x4 iSibaloRgjKbeifj7RbsMLRwvfXDqE1Bi0RbWnZbfMxonwjspyqC/uskqB8hDm6R wM5dHxgYzRPQ8lp3rIE0OCtUMu3CLr8rqGagcaXS5KFr99eLm74NqweckfWD5C+w BQx5+aYkKTiqrY8ND1guQHqnDxag8aSm2GgOnGMFPg25k0V+aPDG1qZleNP2Wk3G 8yuubPJXIlTCVdAOuD7TpZX0VOmf2Mw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:24 2026 by rpki-client