$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbf0c17e-bc3c-3601-8913-43df20796b92.roa File: dbf0c17e-bc3c-3601-8913-43df20796b92.roa (raw, json) Hash identifier: oVuzk37bXVyVSS0nut666ivfC2CPATys7EBqqo4bBQk= Subject key identifier: 4D:BC:1A:BF:E3:9D:8A:B9:D5:D4:80:79:BA:AB:61:FD:3F:FB:19:79 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D3F64D1338E38C31ABD273010 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbf0c17e-bc3c-3601-8913-43df20796b92.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 834 IP address blocks: 66.253.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d1:33:8e:38:c3:1a:bd:27:30:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=7ea3be23-e559-4637-8bf0-f6a57a439c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:a3:10:91:bc:a8:b4:93:19:3a:e8:71:b8: 47:04:2a:6e:4f:2e:74:b0:c0:40:cc:69:4e:54:bc: f9:e0:e1:8e:de:69:4b:5d:61:b3:02:3b:f5:59:cf: a2:74:03:e7:b7:92:73:f9:18:df:5e:b8:7d:26:bd: ad:9b:4e:1d:55:df:9d:4f:bd:40:35:e1:1c:39:01: ae:c5:4f:9f:0e:4d:ef:9f:87:01:64:94:81:09:82: 4f:db:04:30:ba:d4:4b:0d:f3:fa:b6:98:4a:31:26: 55:79:fc:9c:68:76:a6:fa:8a:42:23:49:4c:9d:24: 89:11:8c:a3:85:2d:98:97:89:b0:f4:84:a8:b7:85: 6f:17:55:08:b3:97:a4:b1:fe:be:e1:38:4c:1a:9a: 0b:b5:80:8b:b7:68:ee:58:64:b9:fc:1c:f9:5f:0f: 78:57:1d:c4:95:68:59:7d:62:f2:12:4d:e8:76:4c: 36:3a:62:0f:61:87:71:90:c3:a9:d1:f1:4e:33:82: e3:f1:eb:f9:8e:b0:53:d7:88:6e:da:2a:8b:76:bd: a3:cc:0f:d0:12:26:cb:cc:d8:c0:ce:43:3f:2a:9a: 35:d6:59:ab:05:28:55:eb:d5:ec:e8:fc:ca:a3:68: 23:c9:e6:29:bf:fb:5a:6b:45:51:0f:68:33:76:3b: 01:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BC:1A:BF:E3:9D:8A:B9:D5:D4:80:79:BA:AB:61:FD:3F:FB:19:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbf0c17e-bc3c-3601-8913-43df20796b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:56:71:b2:ae:9b:59:2d:c4:b4:26:9b:6a:5a:6a:8b:af:5d: 9d:dc:97:1d:36:38:d5:5e:5e:5e:1e:9f:f0:85:fc:fb:04:6e: e7:f9:fd:78:72:ee:1f:44:60:e9:c3:a6:be:7c:96:c7:d7:4d: 7b:1e:ae:65:bf:f8:0d:0a:45:d5:2d:46:43:09:fe:f5:9f:2f: 44:94:64:55:52:ee:2a:77:99:27:db:63:c5:bf:bb:b5:48:4b: a9:cb:6d:b5:d3:9a:ab:a3:55:09:30:60:97:47:1a:5a:34:bd: 35:de:1f:ee:16:69:51:a2:f9:e6:4c:f9:d8:27:da:54:42:26: dd:78:25:b6:bf:b1:d7:54:d5:52:c1:ee:1a:7b:ff:88:be:97: 23:d4:2a:41:1b:14:8f:93:8e:f6:a0:1b:ee:e9:88:ef:99:ed: c5:90:c9:6f:9c:d0:2b:c2:68:9a:ec:3f:c4:c8:1a:a0:2a:70: 44:50:10:0e:ad:c7:be:59:27:76:23:39:3a:3e:77:bb:23:30: e0:a2:7c:ab:ef:39:af:86:d2:05:88:d0:2f:9d:9b:79:cf:9a: 77:3f:f1:24:dd:74:f9:4f:53:28:15:b7:8d:41:5c:aa:7f:58: 2d:7c:58:5a:21:6d:5a:22:b6:35:cf:f8:11:8a:cd:26:91:a2: 9f:e9:dd:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNEzjjjDGr0nMBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk N2VhM2JlMjMtZTU1OS00NjM3LThiZjAtZjZhNTdhNDM5YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO2jEJG8qLSTGTrocbhHBCpuTy50sMBAzGlO VLz54OGO3mlLXWGzAjv1Wc+idAPnt5Jz+RjfXrh9Jr2tm04dVd+dT71ANeEcOQGu xU+fDk3vn4cBZJSBCYJP2wQwutRLDfP6tphKMSZVefycaHam+opCI0lMnSSJEYyj hS2Yl4mw9ISot4VvF1UIs5eksf6+4ThMGpoLtYCLt2juWGS5/Bz5Xw94Vx3ElWhZ fWLyEk3odkw2OmIPYYdxkMOp0fFOM4Lj8ev5jrBT14hu2iqLdr2jzA/QEibLzNjA zkM/Kpo11lmrBShV69Xs6PzKo2gjyeYpv/taa0VRD2gzdjsBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE28Gr/jnYq51dSAebqrYf0/+xl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGJmMGMxN2UtYmMzYy0z NjAxLTg5MTMtNDNkZjIwNzk2YjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQv1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxWcbKum1ktxLQmm2paaouvXZ3clx02ONVeXl4en/CF/PsEbuf5/Xhy 7h9EYOnDpr58lsfXTXsermW/+A0KRdUtRkMJ/vWfL0SUZFVS7ip3mSfbY8W/u7VI S6nLbbXTmqujVQkwYJdHGlo0vTXeH+4WaVGi+eZM+dgn2lRCJt14Jba/sddU1VLB 7hp7/4i+lyPUKkEbFI+TjvagG+7piO+Z7cWQyW+c0CvCaJrsP8TIGqAqcERQEA6t x75ZJ3YjOTo+d7sjMOCifKvvOa+G0gWI0C+dm3nPmnc/8STddPlPUygVt41BXKp/ WC18WFohbVoitjXP+BGKzSaRop/p3WY= -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:33 2026 by rpki-client