$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5bf8617-a7fb-3831-94f8-af43bc000a62.roa File: a5bf8617-a7fb-3831-94f8-af43bc000a62.roa (raw, json) Hash identifier: qf+Kc8agXhosIFP4HiHVDmhkkIF2b3krJpVamTkZ1oY= Subject key identifier: 16:2E:01:48:21:EF:E2:B3:EE:67:8E:C7:DE:DB:49:33:6B:F8:53:BA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D237A3E557203997EAD3FA100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5bf8617-a7fb-3831-94f8-af43bc000a62.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 212238 IP address blocks: 66.95.204.0/23 maxlen: 24 66.134.84.0/23 maxlen: 24 68.167.72.0/23 maxlen: 24 68.167.136.0/23 maxlen: 24 68.167.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3e:55:72:03:99:7e:ad:3f:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=2909cd7a-4ecf-44fe-941e-be70f8375b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:75:71:20:74:7a:f4:35:56:25:ce:f3:64:c9: d3:71:95:b7:92:59:b2:21:44:32:7c:fa:75:4b:bb: 35:61:ca:45:e6:86:98:8f:1f:4c:dc:f3:b1:f7:9a: bd:7c:04:a2:86:f1:a2:ba:68:d9:8e:fe:d5:52:16: a5:9c:1e:6d:31:d9:00:da:5d:21:23:5e:8b:bf:21: 1f:9a:52:b9:c4:44:39:93:64:dd:64:11:69:1b:68: 27:95:9a:9e:4c:58:2b:ff:8f:62:81:3d:2e:c0:4e: 7e:60:a2:61:62:59:37:56:84:49:cf:ba:be:31:40: 4c:24:a3:c6:29:34:f4:e8:77:3e:fa:28:9f:9e:cc: 4e:da:9b:68:2a:6f:de:0a:7a:62:a4:ed:d9:fd:c6: 42:9d:cc:89:4d:f4:0d:f6:77:c5:0f:4a:2d:08:ce: 83:87:d1:ff:f7:9c:e1:23:0b:f5:f6:c4:83:75:cb: c8:e4:f9:be:4c:aa:43:46:cf:4a:8a:02:7f:2f:f1: 9a:27:6b:ca:79:36:57:c8:98:9c:1d:af:a8:23:27: b5:ea:55:a7:24:d6:1e:2e:e8:0d:89:e6:26:be:1e: 66:1a:10:12:9e:5d:c8:ef:a3:39:a1:79:e1:4b:64: 85:92:fc:0b:41:52:6f:a6:23:c4:f9:bd:e2:7d:e7: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2E:01:48:21:EF:E2:B3:EE:67:8E:C7:DE:DB:49:33:6B:F8:53:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5bf8617-a7fb-3831-94f8-af43bc000a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.95.204.0/23 66.134.84.0/23 68.167.72.0/23 68.167.136.0/23 68.167.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:32:94:fa:87:ad:91:46:ce:f1:67:aa:e5:6f:fe:d3:d0:1b: 7c:b8:bc:4b:ce:1c:28:39:6c:cc:4f:de:02:7f:92:45:0f:68: bf:4d:3e:cf:30:e0:4c:76:f1:92:9c:b4:aa:67:ed:00:ce:9c: 90:fe:dc:c6:0c:1c:12:63:76:d6:80:4a:f3:36:06:59:c3:8e: eb:b6:89:59:0d:93:d7:44:3b:6a:db:ab:54:6b:8a:ca:d8:b1: a9:8d:6a:86:0a:fd:5b:c4:71:ef:65:e7:3e:6d:eb:41:66:81: fe:6c:b0:89:28:e9:99:fd:46:fe:af:19:26:3b:50:35:1e:c2: 01:19:44:03:63:49:cc:2a:cc:ab:b9:92:e5:14:cf:b5:f7:7a: 67:0a:88:c1:f3:46:d4:3f:eb:cb:67:07:98:88:29:a6:c7:b4: 47:6b:1b:c4:53:42:42:b0:76:53:cc:7a:e0:0d:8e:c6:93:80: cb:e2:39:47:37:25:61:6f:84:f3:a7:94:bd:86:d4:a0:78:c6: 29:f4:db:5d:34:3c:00:6c:29:a6:dd:24:fc:dd:19:5a:09:7f: 58:08:e1:3e:c6:67:fd:43:b8:2d:0b:f3:dd:3d:c7:b5:46:47: c8:7a:2b:59:c2:45:78:ee:49:ab:fb:25:3b:38:be:f7:32:d5: 3c:53:b8:2d -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE0jej5VcgOZfq0/oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjkwOWNkN2EtNGVjZi00NGZlLTk0MWUtYmU3MGY4Mzc1YjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3VxIHR69DVWJc7zZMnTcZW3klmyIUQyfPp1 S7s1YcpF5oaYjx9M3POx95q9fASihvGiumjZjv7VUhalnB5tMdkA2l0hI16LvyEf mlK5xEQ5k2TdZBFpG2gnlZqeTFgr/49igT0uwE5+YKJhYlk3VoRJz7q+MUBMJKPG KTT06Hc++iifnsxO2ptoKm/eCnpipO3Z/cZCncyJTfQN9nfFD0otCM6Dh9H/95zh Iwv19sSDdcvI5Pm+TKpDRs9KigJ/L/GaJ2vKeTZXyJicHa+oIye16lWnJNYeLugN ieYmvh5mGhASnl3I76M5oXnhS2SFkvwLQVJvpiPE+b3ifec1nQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFBYuAUgh7+Kz7meOx97bSTNr+FO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTViZjg2MTctYTdmYi0z ODMxLTk0ZjgtYWY0M2JjMDAwYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBQl/MAwQB QoZUAwQBRKdIAwQBRKeIAwQBRKecMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMIylPqHrZFGzvFnquVv/tPQ G3y4vEvOHCg5bMxP3gJ/kkUPaL9NPs8w4Ex28ZKctKpn7QDOnJD+3MYMHBJjdtaA SvM2BlnDjuu2iVkNk9dEO2rbq1RrisrYsamNaoYK/VvEce9l5z5t60Fmgf5ssIko 6Zn9Rv6vGSY7UDUewgEZRANjScwqzKu5kuUUz7X3emcKiMHzRtQ/68tnB5iIKabH tEdrG8RTQkKwdlPMeuANjsaTgMviOUc3JWFvhPOnlL2G1KB4xin02100PABsKabd JPzdGVoJf1gI4T7GZ/1DuC0L8909x7VGR8h6K1nCRXjuSav7JTs4vvcy1TxTuC0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:49:06 2026 by rpki-client