$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86867f22-2b6b-3831-b249-a42a5f8164c3.roa File: 86867f22-2b6b-3831-b249-a42a5f8164c3.roa (raw, json) Hash identifier: p+XTiz/rgiPvhUBWjWq40bOL/jxswJWajjIUDHHc6xk= Subject key identifier: FD:4A:F9:C3:1D:31:2E:91:DF:A3:D6:92:9F:31:4F:C8:6E:A9:06:4E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D300AB1C058C915E4C0340000 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86867f22-2b6b-3831-b249-a42a5f8164c3.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7922 IP address blocks: 66.253.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:b1:c0:58:c9:15:e4:c0:34:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=cd599f23-a4af-43fc-b004-74d47830adcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:a9:20:c4:64:52:2c:97:f1:11:40:19:8f: 70:32:55:cc:9b:39:3e:b6:21:2e:1b:15:1e:2d:1a: ff:1b:a5:7b:9d:1f:31:85:59:df:55:f3:ea:e8:4d: a4:90:dd:db:4a:a1:d5:17:d9:20:cd:bb:26:ad:b3: b1:55:7d:cb:cb:58:95:05:cf:7c:b6:c4:34:3b:b8: cd:08:c6:4e:a8:aa:f9:d7:c6:39:a5:30:78:70:e9: 31:3c:df:c2:c1:c0:7b:5b:68:2e:a1:cb:d5:89:1e: 83:90:eb:18:40:01:07:0f:36:5a:6a:ae:d1:d6:6c: 17:c8:98:33:fb:5a:be:a7:a1:5b:13:35:de:40:38: 06:86:01:50:4b:72:9e:f6:29:b2:01:0a:0b:40:dc: f3:df:ac:6a:6e:11:c5:98:ea:6e:79:03:9d:ab:ca: 49:8f:bd:d7:42:17:52:1c:3f:72:6a:0e:32:88:8d: 4b:4c:10:74:7e:5a:54:fb:da:21:00:a3:a0:f6:b1: 63:d7:8f:42:28:ef:77:6c:35:9c:1f:55:a2:bd:6b: f7:92:6d:14:3a:a7:fa:d4:4b:8b:0b:fe:ee:d3:83: 91:36:a0:e4:71:a7:e2:b9:88:ea:8d:3e:96:28:52: e2:97:63:d3:fb:9f:52:54:37:2b:7b:eb:72:32:53: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4A:F9:C3:1D:31:2E:91:DF:A3:D6:92:9F:31:4F:C8:6E:A9:06:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86867f22-2b6b-3831-b249-a42a5f8164c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:51:8d:e1:3b:9f:92:f5:be:75:30:46:c5:02:f3:14:96:40: 9d:3a:0a:a7:2f:d1:c1:47:3a:27:d6:c2:57:91:cf:1a:b5:76: e6:10:15:a2:6e:e3:71:88:2b:3f:3a:43:c1:d4:d7:2b:91:ee: 3f:3f:e1:75:b3:ef:31:6f:58:1e:4a:4f:72:8d:4e:e0:c1:8d: 1a:54:31:cb:74:7a:83:f2:2a:84:d8:01:b1:db:35:96:9e:e3: c6:8a:0e:78:8e:fc:ec:ed:57:1d:ba:c3:7e:33:98:c7:f9:88: 3d:40:e8:98:81:3c:73:b7:00:5e:d4:60:63:29:f0:57:17:e1: 26:06:dd:df:26:64:5c:ed:ea:66:27:6a:d2:9e:97:09:7d:7a: 49:c0:29:26:59:59:9b:90:36:a1:83:ae:84:e5:ef:67:0f:29: c7:9e:d9:b5:a6:27:73:2a:fd:3a:62:9f:50:b5:ab:95:53:57: d4:8b:33:11:b8:bf:af:e2:b2:fa:5a:8f:cd:42:92:74:fc:74: 16:e6:2f:37:2c:54:0a:c7:dc:4d:d9:40:9f:24:51:45:96:e4: 26:21:2b:ee:84:2f:23:56:4d:f3:0c:0f:6e:d6:0a:ab:28:33: 0e:c6:6d:bb:99:d6:25:ad:69:04:8e:7b:be:d8:70:59:e9:de: f5:eb:6d:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCrHAWMkV5MA0AAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2Q1OTlmMjMtYTRhZi00M2ZjLWIwMDQtNzRkNDc4MzBhZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg2pIMRkUiyX8RFAGY9wMlXMmzk+tiEuGxUe LRr/G6V7nR8xhVnfVfPq6E2kkN3bSqHVF9kgzbsmrbOxVX3Ly1iVBc98tsQ0O7jN CMZOqKr518Y5pTB4cOkxPN/CwcB7W2guocvViR6DkOsYQAEHDzZaaq7R1mwXyJgz +1q+p6FbEzXeQDgGhgFQS3Ke9imyAQoLQNzz36xqbhHFmOpueQOdq8pJj73XQhdS HD9yag4yiI1LTBB0flpU+9ohAKOg9rFj149CKO93bDWcH1WivWv3km0UOqf61EuL C/7u04ORNqDkcafiuYjqjT6WKFLil2PT+59SVDcre+tyMlM+mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1K+cMdMS6R36PWkp8xT8huqQZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODY4NjdmMjItMmI2Yi0z ODMxLWIyNDktYTQyYTVmODE2NGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVRjeE7n5L1vnUwRsUC8xSWQJ06Cqcv0cFHOifWwleRzxq1duYQFaJu 43GIKz86Q8HU1yuR7j8/4XWz7zFvWB5KT3KNTuDBjRpUMct0eoPyKoTYAbHbNZae 48aKDniO/OztVx26w34zmMf5iD1A6JiBPHO3AF7UYGMp8FcX4SYG3d8mZFzt6mYn atKelwl9eknAKSZZWZuQNqGDroTl72cPKcee2bWmJ3Mq/Tpin1C1q5VTV9SLMxG4 v6/isvpaj81CknT8dBbmLzcsVArH3E3ZQJ8kUUWW5CYhK+6ELyNWTfMMD27WCqso Mw7GbbuZ1iWtaQSOe77YcFnp3vXrbbI= -----END CERTIFICATE-----Generated at Thu Mar 26 20:42:59 2026 by rpki-client