$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccb02a8b-0b62-345a-bf75-99edabab9104.roa File: ccb02a8b-0b62-345a-bf75-99edabab9104.roa (raw, json) Hash identifier: 6Pn4fE82eZE3ql6Bc+Ydxi6HaV4BAsZFPOGn32H19EU= Subject key identifier: 89:92:EB:A5:67:D1:0A:90:E6:0F:43:21:FD:05:1A:8C:B4:B4:0E:96 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D37DC2003CF085D82391A6560 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccb02a8b-0b62-345a-bf75-99edabab9104.roa Signing time: Thu 19 Mar 2026 08:14:34 +0000 ROA not before: Thu 19 Mar 2026 08:14:34 +0000 ROA not after: Wed 17 Jun 2026 08:14:34 +0000 asID: 3257 IP address blocks: 209.87.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:dc:20:03:cf:08:5d:82:39:1a:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 19 08:14:34 2026 GMT Not After : Jun 17 08:14:34 2026 GMT Subject: CN=a3f82dad-7d75-4058-af69-802c9f6c7766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:d0:9a:4f:0c:86:ec:fa:0a:0e:8b:1c:f5: f3:7c:f4:4c:e3:31:fe:7a:9a:c4:17:c6:44:84:b5: 54:1b:8d:3b:91:80:71:80:11:07:8d:c5:0c:74:9f: 75:82:1b:46:92:7c:a5:f8:da:84:c8:41:71:b1:84: ba:68:51:2a:3a:ba:b5:52:d2:84:9f:1e:0e:b4:e3: e6:2d:ca:b4:db:0f:fa:4f:a7:d3:1e:47:2b:92:39: 99:36:63:b3:82:01:e9:c4:2c:40:5f:eb:61:cd:81: 30:bf:0d:a6:92:b8:7b:34:07:a5:bc:87:c8:f0:c7: 38:75:da:be:21:ab:a3:a5:54:98:4a:b3:78:d9:ee: 91:d8:34:cd:d7:8f:ed:1f:8e:b1:65:ab:af:a0:d9: 53:b2:d4:dd:c9:87:53:d3:05:ff:d0:f1:e4:ea:44: 89:28:f8:ac:af:2a:b7:4d:2a:69:1e:4b:9f:82:54: 58:74:c8:5a:0e:e5:20:af:5a:7c:c2:aa:09:c3:62: 49:2b:96:f5:0b:a8:64:9b:92:8b:c0:44:11:14:b6: 84:96:5a:b1:8a:1f:16:d3:56:6e:e7:13:d1:87:1a: 62:d9:d6:05:cd:df:c4:fb:04:3b:86:dc:78:99:d6: 02:4a:70:b8:8c:80:cb:61:c0:b3:02:e1:4b:e2:1f: 21:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:92:EB:A5:67:D1:0A:90:E6:0F:43:21:FD:05:1A:8C:B4:B4:0E:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccb02a8b-0b62-345a-bf75-99edabab9104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.87.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:99:1c:40:4c:5e:95:4f:37:4d:10:d3:f2:1b:0e:76:65:39: 6d:eb:94:0c:1f:98:db:d9:f9:06:15:91:34:4d:79:4b:d4:83: 07:2c:8f:25:db:b7:9f:1f:ac:8c:57:9e:2a:95:06:b8:1c:25: de:07:63:4f:b8:36:e7:8b:a4:4a:d2:5e:13:f4:4b:7c:43:01: b9:20:da:38:ba:44:a9:c6:3f:2e:76:b4:a9:94:99:3c:af:a7: d8:2d:b5:ff:ac:52:fd:75:0c:a3:d8:bd:61:6c:4f:28:75:0b: ea:f4:b0:d6:9d:08:0e:79:ba:99:53:f5:cf:39:8c:d6:a4:8b: 3e:7f:6a:06:01:93:4b:f2:bb:92:ab:f9:b0:e8:65:c8:38:4c: 84:be:25:32:6b:f6:31:69:26:92:39:36:9a:8b:a7:47:fa:d0: 91:cd:f2:27:7e:0b:ab:20:4c:0b:1e:05:48:33:30:21:8c:4f: aa:d3:c9:12:86:ef:48:c1:b3:81:60:59:a6:fb:f8:cf:64:31: 1d:33:c8:3d:89:a6:22:e8:0d:b3:23:52:cd:05:b5:68:4d:6f: 1e:94:d9:15:15:ff:f9:16:90:fd:a1:19:87:92:67:bb:8f:86: d2:34:eb:22:ca:a3:34:45:05:a6:0f:b7:d8:4c:f8:a3:de:42: d6:b5:ba:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE033CADzwhdgjkaZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxOTA4MTQzNFoXDTI2MDYxNzA4MTQzNFowLzEtMCsGA1UEAxMk YTNmODJkYWQtN2Q3NS00MDU4LWFmNjktODAyYzlmNmM3NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXjQmk8Mhuz6Cg6LHPXzfPRM4zH+eprEF8ZE hLVUG407kYBxgBEHjcUMdJ91ghtGknyl+NqEyEFxsYS6aFEqOrq1UtKEnx4OtOPm Lcq02w/6T6fTHkcrkjmZNmOzggHpxCxAX+thzYEwvw2mkrh7NAelvIfI8Mc4ddq+ IaujpVSYSrN42e6R2DTN14/tH46xZauvoNlTstTdyYdT0wX/0PHk6kSJKPisryq3 TSppHkufglRYdMhaDuUgr1p8wqoJw2JJK5b1C6hkm5KLwEQRFLaEllqxih8W01Zu 5xPRhxpi2dYFzd/E+wQ7htx4mdYCSnC4jIDLYcCzAuFL4h8h6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImS66Vn0QqQ5g9DIf0FGoy0tA6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2NiMDJhOGItMGI2Mi0z NDVhLWJmNzUtOTllZGFiYWI5MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VdCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKZHEBMXpVPN00Q0/IbDnZlOW3rlAwfmNvZ+QYVkTRNeUvUgwcsjyXb t58frIxXniqVBrgcJd4HY0+4NueLpErSXhP0S3xDAbkg2ji6RKnGPy52tKmUmTyv p9gttf+sUv11DKPYvWFsTyh1C+r0sNadCA55uplT9c85jNakiz5/agYBk0vyu5Kr +bDoZcg4TIS+JTJr9jFpJpI5NpqLp0f60JHN8id+C6sgTAseBUgzMCGMT6rTyRKG 70jBs4FgWab7+M9kMR0zyD2JpiLoDbMjUs0FtWhNbx6U2RUV//kWkP2hGYeSZ7uP htI06yLKozRFBaYPt9hM+KPeQta1usI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:57 2026 by rpki-client