$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0efdc6f-7456-328f-a55b-9fbb51aeffda.roa File: b0efdc6f-7456-328f-a55b-9fbb51aeffda.roa (raw, json) Hash identifier: f1Hz70vxYkXK5gL+B5NHg/Zu80wPJ4D1wKvm46A9kPw= Subject key identifier: 88:CE:66:B9:EB:75:7B:3B:38:F6:D6:50:8C:AD:E1:C7:52:11:C2:57 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D2270021EAE098B2120654180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0efdc6f-7456-328f-a55b-9fbb51aeffda.roa Signing time: Wed 07 Jan 2026 02:00:30 +0000 ROA not before: Wed 07 Jan 2026 02:00:30 +0000 ROA not after: Tue 07 Apr 2026 01:00:30 +0000 asID: 36916 IP address blocks: 66.253.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:22:70:02:1e:ae:09:8b:21:20:65:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 7 02:00:30 2026 GMT Not After : Apr 7 01:00:30 2026 GMT Subject: CN=8b73b1cf-251b-449d-8071-7c06f3a2ac3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:34:a0:e6:66:74:84:0e:91:8b:1f:ee:fd:e6: e0:6a:0d:1b:ec:5e:24:2c:ea:fc:a1:68:1b:cc:38: 5b:33:4c:c1:37:d8:cc:dd:05:c1:94:10:28:d4:9f: fb:25:dd:d0:36:45:ec:11:0c:7c:a2:05:21:20:8b: cc:62:ec:0d:98:1d:f6:41:28:7f:ea:5b:1c:50:03: d4:0f:24:c4:63:13:4b:d1:76:51:8f:8d:df:90:2c: ec:28:f1:ff:51:e6:08:78:8a:9b:de:45:89:e0:c2: 9d:17:4b:ec:d4:f2:9e:f6:32:a9:f2:b1:68:60:c5: 10:d8:07:7f:b4:b4:ae:79:8f:59:64:e5:a8:91:2e: 24:50:87:a9:e7:54:ef:aa:a8:5d:3a:86:7c:16:bd: 7c:b6:dc:66:34:79:25:12:0e:ef:5a:03:10:85:c4: 3e:88:a2:aa:a2:df:1d:bc:27:c0:3f:4c:bb:af:a0: 52:d7:d2:bc:42:36:5a:d0:1b:d7:b5:f9:89:01:5a: cc:fd:71:e4:ca:6f:e2:5b:74:b8:4f:0f:09:5e:25: c3:78:03:71:ce:61:89:66:33:69:ac:8b:b9:35:27: b7:e0:b1:ad:35:f1:77:34:ee:26:c2:b9:17:1c:8b: 46:f5:93:e3:5f:d5:87:90:c4:50:75:e6:99:70:68: 42:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CE:66:B9:EB:75:7B:3B:38:F6:D6:50:8C:AD:E1:C7:52:11:C2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0efdc6f-7456-328f-a55b-9fbb51aeffda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c0:52:8f:17:b0:14:53:da:e6:5f:50:b7:10:fa:46:57:a2: dd:04:ed:64:7c:11:90:3c:90:ae:65:9e:4f:cd:41:d0:73:9f: b4:ea:e9:ee:9d:8e:6c:fd:84:33:e8:28:dd:f0:78:2c:c4:b6: 40:90:a3:11:5f:aa:18:c8:f2:ff:de:10:8b:db:98:3f:d0:5f: f5:12:cb:b3:fc:22:c1:08:28:cf:1f:22:b6:32:fd:a6:f4:92: 9f:fe:85:52:97:78:95:d0:94:c9:f9:0c:05:5e:67:41:5d:3f: 73:6b:d8:20:56:18:dd:00:a9:1d:83:20:1a:77:1c:01:8d:2c: cb:b5:08:b5:70:57:f2:fb:1e:ff:f9:19:ee:31:a4:a1:2a:46: 3e:c4:bd:1e:a8:0e:f2:1e:2d:bd:09:27:a5:92:27:a8:3b:ba: 36:c2:6c:e3:cd:fa:aa:ec:70:b3:7c:55:ac:2e:05:d3:8a:6f: c2:5a:da:59:73:62:f9:85:75:71:57:ad:1d:8c:ed:78:3e:16: 4e:17:2b:ed:89:43:c8:4e:0b:08:84:74:81:76:e9:4b:76:ad: 91:25:05:dc:10:e5:ba:36:2e:c6:c3:c0:40:8a:10:78:92:39: ef:5f:03:f8:50:a5:ca:ac:d8:a8:62:e5:da:aa:01:43:f7:e0: 87:b2:3b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0icAIergmLISBlQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEwNzAyMDAzMFoXDTI2MDQwNzAxMDAzMFowLzEtMCsGA1UEAxMk OGI3M2IxY2YtMjUxYi00NDlkLTgwNzEtN2MwNmYzYTJhYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTSg5mZ0hA6Rix/u/ebgag0b7F4kLOr8oWgb zDhbM0zBN9jM3QXBlBAo1J/7Jd3QNkXsEQx8ogUhIIvMYuwNmB32QSh/6lscUAPU DyTEYxNL0XZRj43fkCzsKPH/UeYIeIqb3kWJ4MKdF0vs1PKe9jKp8rFoYMUQ2Ad/ tLSueY9ZZOWokS4kUIep51TvqqhdOoZ8Fr18ttxmNHklEg7vWgMQhcQ+iKKqot8d vCfAP0y7r6BS19K8QjZa0BvXtfmJAVrM/XHkym/iW3S4Tw8JXiXDeANxzmGJZjNp rIu5NSe34LGtNfF3NO4mwrkXHItG9ZPjX9WHkMRQdeaZcGhCqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjOZrnrdXs7OPbWUIyt4cdSEcJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjBlZmRjNmYtNzQ1Ni0z MjhmLWE1NWItOWZiYjUxYWVmZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjAUo8XsBRT2uZfULcQ+kZXot0E7WR8EZA8kK5lnk/NQdBzn7Tq6e6d jmz9hDPoKN3weCzEtkCQoxFfqhjI8v/eEIvbmD/QX/USy7P8IsEIKM8fIrYy/ab0 kp/+hVKXeJXQlMn5DAVeZ0FdP3Nr2CBWGN0AqR2DIBp3HAGNLMu1CLVwV/L7Hv/5 Ge4xpKEqRj7EvR6oDvIeLb0JJ6WSJ6g7ujbCbOPN+qrscLN8VawuBdOKb8Ja2llz YvmFdXFXrR2M7Xg+Fk4XK+2JQ8hOCwiEdIF26Ut2rZElBdwQ5bo2LsbDwECKEHiS Oe9fA/hQpcqs2Khi5dqqAUP34IeyO1k= -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:04 2026 by rpki-client