$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd17524d-0a0c-343a-8188-fa123d7a671e.roa File: bd17524d-0a0c-343a-8188-fa123d7a671e.roa (raw, json) Hash identifier: B4J8yVyDGpNYm0JVoDwcKB2mGoMadcmPDDs2ACWO1dg= Subject key identifier: A9:E1:7B:CE:05:ED:D8:C7:2B:15:8A:41:8E:A0:FE:8E:0C:45:BB:DA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D1C7F4C025839854450CAAA80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd17524d-0a0c-343a-8188-fa123d7a671e.roa Signing time: Mon 09 Mar 2026 13:00:40 +0000 ROA not before: Mon 09 Mar 2026 13:00:40 +0000 ROA not after: Sun 07 Jun 2026 13:00:40 +0000 asID: 834 IP address blocks: 66.93.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1c:7f:4c:02:58:39:85:44:50:ca:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 9 13:00:40 2026 GMT Not After : Jun 7 13:00:40 2026 GMT Subject: CN=a6165e48-8c45-46fc-8f0b-e7901ec87d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0b:a9:a3:e8:6e:67:55:9f:76:ce:6c:db:df: 4a:2a:7c:93:65:74:2a:b2:19:d4:e2:fe:ae:bc:74: 1b:a0:66:e6:88:d0:27:6f:6b:75:30:95:dd:57:ac: af:cc:c0:ee:03:88:1d:67:9a:50:ec:a4:f1:46:04: 47:00:24:22:50:1f:5b:62:72:3a:c5:ef:93:9d:11: 2a:c4:ff:df:7e:f1:a1:ae:b0:7a:c7:28:8b:5d:ba: 83:92:c6:4b:79:30:44:c7:c9:0c:f9:a9:b7:45:93: 56:91:eb:04:61:1d:72:1d:87:d6:32:64:cd:6c:11: b1:8e:84:d1:be:24:86:83:15:bb:9f:93:6e:0f:f5: 40:7f:0a:44:eb:f8:91:ee:ff:6d:67:98:98:be:c6: 03:36:d7:cb:e8:f4:45:23:41:58:6e:51:f9:19:7a: 7f:22:b8:3e:00:15:1d:f4:f9:c2:76:b4:7e:ce:7c: 50:3a:2e:85:54:63:dc:5f:45:a8:68:02:10:9c:15: f0:d1:06:c8:72:f1:d3:76:50:79:64:05:f4:e8:0a: da:b7:7d:83:38:6f:d0:91:54:c0:48:16:63:1b:e2: 49:c9:17:87:92:a6:f7:c1:4d:af:5b:d7:14:ce:45: 64:77:b1:0b:a5:1f:2e:f9:2e:43:6d:b7:9f:65:92: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E1:7B:CE:05:ED:D8:C7:2B:15:8A:41:8E:A0:FE:8E:0C:45:BB:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd17524d-0a0c-343a-8188-fa123d7a671e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:f7:b2:3b:93:80:18:2e:51:92:43:5c:eb:4a:a8:da:2a:f3: e6:00:36:e6:83:c1:a3:ba:be:4b:f5:39:ed:47:ba:b0:d3:06: a5:d8:92:c3:3e:16:97:a5:05:c2:91:73:73:8d:be:9c:8b:66: e6:5e:5a:fc:37:a8:5f:2d:c1:27:a8:7e:af:98:f6:39:f4:c2: b5:03:5d:2c:43:b9:ed:70:f6:b2:6d:88:69:d3:e9:41:57:bc: 16:68:df:e6:53:7c:3d:ae:3c:bb:09:63:46:2a:3d:2c:11:ba: e2:64:ca:b2:08:a4:8a:8b:f2:bc:1c:c1:5e:5b:a6:54:10:7b: d2:bb:94:46:c5:61:85:8f:64:42:d2:bc:b3:1d:4b:5b:30:f0: 39:ac:2b:35:88:85:1f:55:76:7d:0a:f6:94:36:12:75:aa:bf: a7:71:21:06:b6:79:6b:0b:85:7e:a8:f7:00:24:96:fd:74:a5: b1:57:c0:c3:49:3d:ce:28:c2:d1:ea:78:1e:02:1e:8a:8c:cd: 5a:e0:bc:d5:40:c6:ad:64:e6:18:a7:59:53:96:25:d8:cb:e1: d6:da:f1:cd:6b:63:8e:bd:66:02:65:01:4c:c1:db:9d:c1:e6: cb:89:71:1d:11:a0:06:17:5b:4e:45:11:9e:40:55:a1:4f:d7: b1:75:6a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0cf0wCWDmFRFDKqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwOTEzMDA0MFoXDTI2MDYwNzEzMDA0MFowLzEtMCsGA1UEAxMk YTYxNjVlNDgtOGM0NS00NmZjLThmMGItZTc5MDFlYzg3ZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwupo+huZ1Wfds5s299KKnyTZXQqshnU4v6u vHQboGbmiNAnb2t1MJXdV6yvzMDuA4gdZ5pQ7KTxRgRHACQiUB9bYnI6xe+TnREq xP/ffvGhrrB6xyiLXbqDksZLeTBEx8kM+am3RZNWkesEYR1yHYfWMmTNbBGxjoTR viSGgxW7n5NuD/VAfwpE6/iR7v9tZ5iYvsYDNtfL6PRFI0FYblH5GXp/Irg+ABUd 9PnCdrR+znxQOi6FVGPcX0WoaAIQnBXw0QbIcvHTdlB5ZAX06Arat32DOG/QkVTA SBZjG+JJyReHkqb3wU2vW9cUzkVkd7ELpR8u+S5DbbefZZItgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnhe84F7djHKxWKQY6g/o4MRbvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmQxNzUyNGQtMGEwYy0z NDNhLTgxODgtZmExMjNkN2E2NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQl0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMj3sjuTgBguUZJDXOtKqNoq8+YANuaDwaO6vkv1Oe1HurDTBqXYksM+ FpelBcKRc3ONvpyLZuZeWvw3qF8twSeofq+Y9jn0wrUDXSxDue1w9rJtiGnT6UFX vBZo3+ZTfD2uPLsJY0YqPSwRuuJkyrIIpIqL8rwcwV5bplQQe9K7lEbFYYWPZELS vLMdS1sw8DmsKzWIhR9Vdn0K9pQ2EnWqv6dxIQa2eWsLhX6o9wAklv10pbFXwMNJ Pc4owtHqeB4CHoqMzVrgvNVAxq1k5hinWVOWJdjL4dba8c1rY469ZgJlAUzB253B 5suJcR0RoAYXW05FEZ5AVaFP17F1ags= -----END CERTIFICATE-----Generated at Thu Mar 26 17:37:14 2026 by rpki-client