$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa File: b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa (raw, json) Hash identifier: eNm9cTqD7/1mAXhx4wUOT6WRxKrSNScXJb8/U7gpJNA= Subject key identifier: 1D:F3:15:66:10:5B:32:DF:7B:F2:58:8A:57:44:03:0F:C8:76:D9:B2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D47C50B017C5477A36E08A800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 5065 IP address blocks: 216.132.198.0/24 maxlen: 24 216.132.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:0b:01:7c:54:77:a3:6e:08:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=d0096fd3-8c2b-424c-9626-b9742c9cc063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:fd:f5:0c:1c:6c:96:73:0d:c1:bd:a4:e8: 62:8d:a8:50:e7:b4:ec:62:28:6c:85:23:31:00:f4: e9:8a:4e:3b:55:06:cd:c8:b2:ce:77:1c:f0:de:97: f8:d9:aa:b2:67:bc:cd:a0:4f:59:5b:01:95:1d:a6: 93:a6:e0:c7:ee:f4:95:e8:c4:3b:a5:b5:dd:17:6c: e0:f4:dc:13:9f:95:61:1f:f2:dc:ec:46:f3:11:4f: e9:84:b3:62:a9:c1:c5:1e:c3:15:6c:37:77:49:4d: a5:a7:f4:9f:46:33:5a:17:96:1e:22:6c:86:99:dd: dd:1f:4f:30:39:d3:c4:3f:95:63:7c:0b:03:96:9f: 47:08:7f:1d:2e:dd:7f:c8:62:18:cd:d8:ff:59:0a: 85:c9:d0:45:ec:26:20:48:3a:86:97:74:99:76:14: 30:38:1d:f9:6c:84:6e:8c:89:8f:eb:0c:58:83:ee: f0:1a:03:35:1c:dd:91:3c:55:aa:76:00:7a:be:31: 54:24:49:93:c0:c7:26:81:c0:7d:12:fe:39:c3:62: 70:9f:1c:c5:5e:b4:8a:93:78:ba:9f:81:ef:f0:31: 36:2a:84:c9:1c:06:b6:a1:bb:ef:60:42:02:4b:08: 18:60:26:f7:8b:44:c1:86:85:a2:36:48:2f:63:7a: 52:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F3:15:66:10:5B:32:DF:7B:F2:58:8A:57:44:03:0F:C8:76:D9:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.198.0/24 216.132.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:cb:d4:e4:02:67:f5:78:9b:7d:97:c5:ba:f8:48:47:50:50: b9:83:dd:1c:1f:d5:1f:c8:4b:11:c4:9d:21:0d:cd:94:d2:a5: 01:89:41:f9:98:50:e3:9a:26:34:4d:80:1d:92:95:8b:fd:95: 1e:6f:26:77:60:4f:db:98:18:22:6e:3e:a9:ee:fa:14:02:26: 65:3d:cc:93:fc:9f:15:f2:dd:60:e9:99:49:b3:7e:d8:27:c6: 43:a7:05:db:40:ac:b1:97:4b:48:a3:dd:3a:f0:75:0a:fe:bb: 85:e9:18:05:b4:15:6f:5a:47:22:8c:06:94:e8:99:67:dc:e0: a7:91:dd:49:90:5e:85:d2:37:f8:d0:aa:77:d7:ad:b9:21:3f: 91:35:8f:07:a0:19:ec:81:8e:f9:f4:5c:3c:a3:33:4c:b2:35: 78:ea:66:f9:7b:5b:5e:dd:60:be:2b:3d:27:44:34:70:57:7d: 43:48:db:31:b8:78:8a:01:b0:d7:1b:14:70:7d:cf:63:7f:15: 02:81:a4:89:39:8c:27:81:d2:b6:04:ff:d2:a5:3e:98:f8:03: 86:dd:da:6e:cf:08:78:94:0a:b7:bd:20:9e:8e:74:d1:e7:9f: c0:30:b7:be:f8:f0:5f:e5:8c:b1:32:40:7c:e7:ef:85:78:e8: b9:f1:63:1a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1HxQsBfFR3o24IqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ZDAwOTZmZDMtOGMyYi00MjRjLTk2MjYtYjk3NDJjOWNjMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rb99QwcbJZzDcG9pOhijahQ57TsYihshSMx APTpik47VQbNyLLOdxzw3pf42aqyZ7zNoE9ZWwGVHaaTpuDH7vSV6MQ7pbXdF2zg 9NwTn5VhH/Lc7EbzEU/phLNiqcHFHsMVbDd3SU2lp/SfRjNaF5YeImyGmd3dH08w OdPEP5VjfAsDlp9HCH8dLt1/yGIYzdj/WQqFydBF7CYgSDqGl3SZdhQwOB35bIRu jImP6wxYg+7wGgM1HN2RPFWqdgB6vjFUJEmTwMcmgcB9Ev45w2JwnxzFXrSKk3i6 n4Hv8DE2KoTJHAa2obvvYEICSwgYYCb3i0TBhoWiNkgvY3pSzwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB3zFWYQWzLfe/JYildEAw/IdtmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjY2ZmZlMmYtZTY1My0z N2JmLTk0OTMtMTkxOGNjMjNlM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2ITGAwQA 2ITkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGDL1OQCZ/V4m32Xxbr4SEdQULmD3Rwf1R/ISxHEnSENzZTS pQGJQfmYUOOaJjRNgB2SlYv9lR5vJndgT9uYGCJuPqnu+hQCJmU9zJP8nxXy3WDp mUmzftgnxkOnBdtArLGXS0ij3TrwdQr+u4XpGAW0FW9aRyKMBpTomWfc4KeR3UmQ XoXSN/jQqnfXrbkhP5E1jwegGeyBjvn0XDyjM0yyNXjqZvl7W17dYL4rPSdENHBX fUNI2zG4eIoBsNcbFHB9z2N/FQKBpIk5jCeB0rYE/9KlPpj4A4bd2m7PCHiUCre9 IJ6OdNHnn8Awt7748F/ljLEyQHzn74V46LnxYxo= -----END CERTIFICATE-----Generated at Thu Mar 26 06:08:27 2026 by rpki-client