$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa File: a3e28558-5307-3ceb-a172-8724d830db67.roa (raw, json) Hash identifier: rbZlN/rnjSPlV9T1IcXbwXuQdjICpr3nJL6Hw6DiCO8= Subject key identifier: AA:CE:3A:3F:73:2B:B1:2A:2A:00:62:6F:B3:2B:5C:AB:D5:33:D0:26 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D2379FE20ECB7D7437E72EDD0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 9009 IP address blocks: 66.95.198.0/23 maxlen: 24 68.165.98.0/23 maxlen: 24 68.166.178.0/23 maxlen: 24 68.167.74.0/23 maxlen: 24 68.167.78.0/23 maxlen: 24 68.167.130.0/23 maxlen: 24 68.167.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fe:20:ec:b7:d7:43:7e:72:ed:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f29596bd-e93a-4f4b-b3d3-d1773ccb6e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:20:08:bb:e0:31:45:5f:48:2a:75:a2:91:85: da:92:75:f2:c7:fa:5f:26:ab:66:56:81:7a:4d:c5: 9e:a4:f5:c3:0e:0c:eb:c6:12:5f:40:f6:80:26:67: ab:d2:17:49:00:d7:7f:d1:9a:c4:43:f1:3d:6c:56: 81:e7:a4:0a:49:9c:9f:36:8b:69:8f:76:05:fe:76: e0:9a:c5:b4:70:03:40:b0:d5:66:60:06:9c:10:37: 67:df:b5:44:5e:56:1d:9d:4b:80:c6:36:79:9e:6a: 2a:8d:55:79:7a:6e:55:08:b8:33:b9:f1:14:41:26: dd:d6:59:a9:94:af:2a:18:6d:96:e9:11:3c:cd:4b: 75:5a:23:97:e5:7e:88:d0:a1:99:31:8e:33:1d:a6: 70:1f:ee:7c:db:43:e5:93:a9:14:a0:a2:79:5f:36: b2:ad:74:62:a7:d0:49:94:c1:a5:db:77:19:a8:b6: 5c:50:49:22:43:11:0f:b1:f4:ea:fb:1c:ec:12:cb: ac:8c:5e:8c:00:26:3a:70:2b:48:6e:8d:26:97:13: ff:95:c6:d3:d0:51:f3:da:a5:28:b9:5b:ce:2a:b9: ab:4e:c1:7d:57:35:b8:eb:0d:8e:61:5f:fb:91:ab: 0e:f8:a3:b4:3e:c5:e1:d7:74:16:26:1f:21:fd:9f: c5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CE:3A:3F:73:2B:B1:2A:2A:00:62:6F:B3:2B:5C:AB:D5:33:D0:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3e28558-5307-3ceb-a172-8724d830db67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.95.198.0/23 68.165.98.0/23 68.166.178.0/23 68.167.74.0/23 68.167.78.0/23 68.167.130.0/23 68.167.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:05:ac:7f:2d:75:c5:bb:f9:06:55:96:e7:e3:ab:27:8b:b8: e1:bd:d6:02:c2:eb:7d:31:f0:06:53:ee:99:78:e9:d0:b8:a6: 9f:db:41:c3:15:3b:c7:33:e1:d7:db:f2:aa:eb:d7:e3:bb:b2: b5:86:8c:8b:1d:0d:86:34:0d:b5:dd:1b:99:65:9d:2e:86:70: 47:32:9d:92:10:e4:6c:c0:b9:35:e7:01:d2:db:eb:6c:00:89: 21:61:e4:85:92:a6:e7:bb:92:86:ad:b2:dd:82:d0:de:f1:20: 7a:4b:6e:e0:ff:f4:92:07:74:5e:61:88:19:6e:c9:b2:27:32: 15:93:b0:9b:7a:58:40:9a:78:4b:14:fc:dd:07:86:0c:1d:8d: 81:9f:96:d8:7c:6c:52:a2:12:e4:ed:51:60:87:e9:cb:35:3f: 31:7a:de:2d:76:58:e1:78:4c:26:62:a5:b7:d4:05:6a:17:3e: ef:f8:59:8c:18:f5:ca:3a:62:06:c1:53:9a:d6:dc:f9:15:d3: e2:c2:d8:90:95:cf:dd:8f:00:55:03:00:70:ab:08:35:82:80: ac:9c:4a:c3:56:4d:53:36:67:b4:3c:a7:87:5b:73:d7:ee:de: 99:5e:08:17:f1:35:45:b3:c4:0c:3f:a6:28:46:e7:f0:bc:8d: b9:ad:95:aa -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE0jef4g7LfXQ35y7dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjI5NTk2YmQtZTkzYS00ZjRiLWIzZDMtZDE3NzNjY2I2ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSAIu+AxRV9IKnWikYXaknXyx/pfJqtmVoF6 TcWepPXDDgzrxhJfQPaAJmer0hdJANd/0ZrEQ/E9bFaB56QKSZyfNotpj3YF/nbg msW0cANAsNVmYAacEDdn37VEXlYdnUuAxjZ5nmoqjVV5em5VCLgzufEUQSbd1lmp lK8qGG2W6RE8zUt1WiOX5X6I0KGZMY4zHaZwH+5820Plk6kUoKJ5XzayrXRip9BJ lMGl23cZqLZcUEkiQxEPsfTq+xzsEsusjF6MACY6cCtIbo0mlxP/lcbT0FHz2qUo uVvOKrmrTsF9VzW46w2OYV/7kasO+KO0PsXh13QWJh8h/Z/FBwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFKrOOj9zK7EqKgBib7MrXKvVM9AmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTNlMjg1NTgtNTMwNy0z Y2ViLWExNzItODcyNGQ4MzBkYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBQl/GAwQB RKViAwQBRKayAwQBRKdKAwQBRKdOAwQBRKeCAwQBRKeOMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIEFrH8t dcW7+QZVlufjqyeLuOG91gLC630x8AZT7pl46dC4pp/bQcMVO8cz4dfb8qrr1+O7 srWGjIsdDYY0DbXdG5llnS6GcEcynZIQ5GzAuTXnAdLb62wAiSFh5IWSpue7koat st2C0N7xIHpLbuD/9JIHdF5hiBluybInMhWTsJt6WECaeEsU/N0HhgwdjYGflth8 bFKiEuTtUWCH6cs1PzF63i12WOF4TCZipbfUBWoXPu/4WYwY9co6YgbBU5rW3PkV 0+LC2JCVz92PAFUDAHCrCDWCgKycSsNWTVM2Z7Q8p4dbc9fu3pleCBfxNUWzxAw/ pihG5/C8jbmtlao= -----END CERTIFICATE-----Generated at Fri Mar 27 03:44:57 2026 by rpki-client