$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa File: 7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa (raw, json) Hash identifier: igs1WATYz5uIJtihY2OoBJdBT1uE+Xf0QnUq0zolhqA= Subject key identifier: 2F:D8:9A:14:94:08:75:D9:F9:72:F8:38:D1:CB:11:8C:EB:74:E4:D0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D47C507CEDD43F3CE67083A68 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 199527 IP address blocks: 66.17.130.0/23 maxlen: 24 66.17.140.0/24 maxlen: 24 66.17.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:07:ce:dd:43:f3:ce:67:08:3a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=b4c8aa4b-006e-4e06-90e4-96ffc9d6d50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:40:61:ad:c9:d1:ef:37:c6:23:b0:e8:17: 1b:07:c4:b9:23:d2:49:39:64:d2:06:1c:ef:90:3b: d6:4a:c2:77:1d:a5:b6:26:91:a5:72:6f:02:5e:65: cc:32:0e:58:79:a6:d1:9b:63:ff:4b:ad:0b:87:4f: c4:7f:5b:c6:e1:76:35:84:5d:c0:72:99:42:00:34: 29:3d:f5:73:49:5e:1f:cd:20:f9:7d:52:b0:2e:2c: 33:1d:c2:fd:6b:d5:9c:7d:6b:9a:f0:de:a3:38:84: af:70:56:9a:a2:d4:27:6a:8a:17:06:06:7a:e2:be: 8b:0f:ea:29:18:97:66:2b:ec:93:e0:bb:0f:7d:0e: d1:01:f5:a7:4f:82:a1:d9:f5:6e:1d:28:b9:fe:da: 31:c1:dd:c9:22:33:a5:cb:12:9a:01:64:2d:35:4e: d7:83:96:57:73:07:12:26:da:66:dd:61:14:b0:31: 98:44:59:d0:ca:86:2f:5b:08:29:56:0c:22:29:82: c1:b7:7c:de:37:3b:a4:49:c8:d6:9b:00:b1:60:26: 9b:dc:b7:15:61:d7:b5:df:3b:b9:3e:ce:e5:94:30: 95:22:38:8d:00:cd:04:89:fe:e6:b5:f0:2c:33:ab: 76:48:7a:58:aa:a6:82:40:ec:5a:7c:36:8b:35:15: e5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D8:9A:14:94:08:75:D9:F9:72:F8:38:D1:CB:11:8C:EB:74:E4:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7aadbbea-0f54-30d7-86a9-a299953cd5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.17.130.0/23 66.17.140.0/24 66.17.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:07:f6:8c:1a:3f:78:24:31:4c:3c:d7:4a:6e:3a:17:4f:d3: 11:b0:a0:ee:87:da:93:dc:9e:5d:4c:77:94:20:ab:93:b2:22: 66:91:ff:8b:2d:6f:13:4a:3a:9d:fb:3f:7e:b1:44:7b:de:d8: 19:64:f9:8b:3f:b7:14:94:34:cf:35:4b:b6:ca:6e:58:e0:c5: 33:84:ea:43:29:5c:a7:90:bc:42:cb:90:62:d5:74:2f:c7:2c: d5:2e:a9:65:7f:94:1f:4e:39:77:db:21:c8:7b:ae:b9:b7:5c: f8:9b:a3:0a:7b:6e:a1:00:d3:a7:4f:be:15:e8:18:ed:e0:f8: 89:e5:10:0d:9d:1f:21:b0:b4:96:c2:97:8f:9a:28:38:bf:68: 55:d2:97:be:6f:4e:7a:34:f5:c3:cb:11:84:64:93:30:28:8b: 18:2c:14:b9:b6:e3:df:6d:48:21:09:82:55:c3:7e:e1:79:23: 8c:ba:57:70:4a:bf:11:a2:77:57:4b:3c:78:ea:77:80:93:c8: 9e:96:74:e4:cd:ee:ce:b3:a2:7b:3a:3f:01:77:fe:c9:8c:61: 0e:e5:ad:5f:b8:15:52:90:72:54:50:59:0b:1c:64:71:40:9b: 72:0c:ea:8a:df:cb:fa:05:b1:7e:0d:17:88:f9:51:8c:d3:a5: 46:5c:2e:2a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1HxQfO3UPzzmcIOmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk YjRjOGFhNGItMDA2ZS00ZTA2LTkwZTQtOTZmZmM5ZDZkNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQdAYa3J0e83xiOw6BcbB8S5I9JJOWTSBhzv kDvWSsJ3HaW2JpGlcm8CXmXMMg5YeabRm2P/S60Lh0/Ef1vG4XY1hF3AcplCADQp PfVzSV4fzSD5fVKwLiwzHcL9a9WcfWua8N6jOISvcFaaotQnaooXBgZ64r6LD+op GJdmK+yT4LsPfQ7RAfWnT4Kh2fVuHSi5/toxwd3JIjOlyxKaAWQtNU7Xg5ZXcwcS Jtpm3WEUsDGYRFnQyoYvWwgpVgwiKYLBt3zeNzukScjWmwCxYCab3LcVYde13zu5 Ps7llDCVIjiNAM0Eif7mtfAsM6t2SHpYqqaCQOxafDaLNRXlZQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFC/YmhSUCHXZ+XL4ONHLEYzrdOTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2FhZGJiZWEtMGY1NC0z MGQ3LTg2YTktYTI5OTk1M2NkNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBQhGCAwQA QhGMAwQAQhHcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFIH9owaP3gkMUw810puOhdP0xGwoO6H2pPcnl1M d5Qgq5OyImaR/4stbxNKOp37P36xRHve2Blk+Ys/txSUNM81S7bKbljgxTOE6kMp XKeQvELLkGLVdC/HLNUuqWV/lB9OOXfbIch7rrm3XPibowp7bqEA06dPvhXoGO3g +InlEA2dHyGwtJbCl4+aKDi/aFXSl75vTno09cPLEYRkkzAoixgsFLm2499tSCEJ glXDfuF5I4y6V3BKvxGid1dLPHjqd4CTyJ6WdOTN7s6zons6PwF3/smMYQ7lrV+4 FVKQclRQWQscZHFAm3IM6orfy/oFsX4NF4j5UYzTpUZcLio= -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:30 2026 by rpki-client