$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fba664a-ec7a-303e-a08b-11158eee342a.roa File: 7fba664a-ec7a-303e-a08b-11158eee342a.roa (raw, json) Hash identifier: BwHy7kikTrS8kZDn+93FuqqiKqhehPtH9GAr/GXyoX0= Subject key identifier: 87:AA:9E:80:59:66:A7:7D:98:99:9D:F9:F8:97:16:69:4D:88:FF:45 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D300A479506DA12A5B7568740 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fba664a-ec7a-303e-a08b-11158eee342a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7922 IP address blocks: 66.253.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:47:95:06:da:12:a5:b7:56:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=cd00832d-cfda-481a-b92a-b496d8e63891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e4:3c:4f:55:0f:1a:1c:07:7a:92:ed:ba:66: 59:7b:74:6e:bd:c7:f0:ee:ba:5e:71:1b:1a:78:cd: cd:15:32:5f:24:97:e5:4c:ae:e2:4d:78:db:be:2b: 70:cf:83:30:60:99:ed:f9:72:9b:0e:7a:1a:0d:cf: 67:5a:e8:f2:64:93:ff:53:30:ee:98:dc:92:fb:81: aa:52:43:0a:60:e4:30:36:2f:3f:2d:ba:42:b3:f3: 7b:cc:75:66:16:29:d1:1c:fc:e2:fe:24:dc:3a:e8: 2d:6a:a7:67:b1:b7:52:9a:8d:6d:ee:9c:ae:aa:64: 87:da:11:1c:83:5e:7b:0f:0b:96:87:2a:3b:1f:08: bd:6f:35:78:f8:e4:83:c9:89:de:7e:08:5f:29:f4: b7:04:d3:1c:a5:9d:38:3f:06:36:b1:12:f7:69:b2: 5e:85:ba:6a:b4:52:89:d8:fe:14:8f:b4:ef:7a:1a: 8e:7f:e2:76:07:78:c2:17:3e:64:9b:f6:20:9b:0b: 0b:30:ba:62:26:83:21:ee:9f:29:fa:44:aa:4d:e5: c1:b3:14:32:bb:cd:66:ed:a5:7f:a8:d7:1a:11:12: 7c:c4:34:8f:e7:e3:ec:ce:45:cc:c1:0b:06:e1:70: 17:e6:66:b8:cb:86:4e:11:9d:16:39:f5:40:35:fb: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AA:9E:80:59:66:A7:7D:98:99:9D:F9:F8:97:16:69:4D:88:FF:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fba664a-ec7a-303e-a08b-11158eee342a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:26:61:5c:47:f4:65:a8:68:e1:58:ab:a6:17:0e:3c:ac:9c: 3c:ae:87:0d:f5:a7:09:6e:7f:9f:6e:94:fc:04:d6:9a:c7:54: d3:84:b3:b5:df:b5:7e:98:3b:2f:3c:7b:1d:ef:62:d4:32:8f: a5:76:34:01:22:6b:8c:df:f5:63:89:19:d3:67:9e:fc:93:f9: 68:fa:79:6a:d6:d5:9f:e8:5e:f3:2d:a2:65:88:c2:f1:16:ed: 34:26:a7:31:62:6e:2b:ae:3d:1f:88:6c:f3:4a:81:d1:86:18: b2:de:9d:8e:e0:3e:06:29:03:13:ec:aa:87:85:81:28:1d:de: 82:c9:64:ec:7c:4f:fe:6b:0a:1c:0f:e8:4a:a5:82:a5:64:1e: 53:43:ac:04:e2:b8:30:9b:c2:1d:8c:2b:19:d5:43:cd:fb:d1: cc:6b:dd:2e:5a:0a:1c:20:44:cd:95:52:87:cb:cc:83:92:c5: 3f:08:4c:b5:be:bd:b4:58:43:2b:21:65:90:f1:6c:71:68:10: b2:b3:66:17:26:a1:88:4b:ff:a7:41:57:f9:97:59:09:94:b3: 44:6f:a9:d7:00:2e:ea:af:80:a9:a9:cd:86:4d:1e:18:42:52: a4:f6:c2:03:a1:5a:75:c7:04:b1:aa:63:ce:40:de:2d:24:54: 55:22:63:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkeVBtoSpbdWh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2QwMDgzMmQtY2ZkYS00ODFhLWI5MmEtYjQ5NmQ4ZTYzODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uQ8T1UPGhwHepLtumZZe3Ruvcfw7rpecRsa eM3NFTJfJJflTK7iTXjbvitwz4MwYJnt+XKbDnoaDc9nWujyZJP/UzDumNyS+4Gq UkMKYOQwNi8/LbpCs/N7zHVmFinRHPzi/iTcOugtaqdnsbdSmo1t7pyuqmSH2hEc g157DwuWhyo7Hwi9bzV4+OSDyYnefghfKfS3BNMcpZ04PwY2sRL3abJehbpqtFKJ 2P4Uj7TvehqOf+J2B3jCFz5km/YgmwsLMLpiJoMh7p8p+kSqTeXBsxQyu81m7aV/ qNcaERJ8xDSP5+PszkXMwQsG4XAX5ma4y4ZOEZ0WOfVANfsTCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeqnoBZZqd9mJmd+fiXFmlNiP9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2ZiYTY2NGEtZWM3YS0z MDNlLWEwOGItMTExNThlZWUzNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAmYVxH9GWoaOFYq6YXDjysnDyuhw31pwluf59ulPwE1prHVNOEs7Xf tX6YOy88ex3vYtQyj6V2NAEia4zf9WOJGdNnnvyT+Wj6eWrW1Z/oXvMtomWIwvEW 7TQmpzFibiuuPR+IbPNKgdGGGLLenY7gPgYpAxPsqoeFgSgd3oLJZOx8T/5rChwP 6EqlgqVkHlNDrATiuDCbwh2MKxnVQ8370cxr3S5aChwgRM2VUofLzIOSxT8ITLW+ vbRYQyshZZDxbHFoELKzZhcmoYhL/6dBV/mXWQmUs0RvqdcALuqvgKmpzYZNHhhC UqT2wgOhWnXHBLGqY85A3i0kVFUiY24= -----END CERTIFICATE-----Generated at Thu Mar 26 18:25:57 2026 by rpki-client