$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dfc1c6ca-4e05-319b-af21-9825088e6fc5.roa File: dfc1c6ca-4e05-319b-af21-9825088e6fc5.roa (raw, json) Hash identifier: yxxJ3Qgql122Xqz3VRbhaa4SuO/LRvf3ry2DXhLCh4k= Subject key identifier: A1:F2:E2:4A:AB:9B:7E:71:E5:17:B6:A2:63:21:FA:C1:36:0C:9B:43 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D2A74DD6EF02C42FB49015200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dfc1c6ca-4e05-319b-af21-9825088e6fc5.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 834 IP address blocks: 66.253.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:dd:6e:f0:2c:42:fb:49:01:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=66513d2a-1fe2-4395-b9b0-a7b2dc6091f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:72:7f:cf:a8:3e:d5:13:13:ec:02:a2:80:56: ce:e8:d7:4c:92:e9:80:2b:af:37:18:3c:44:89:e1: 80:7a:e4:a9:9c:7a:b8:c7:5b:26:d2:44:c8:99:60: 39:db:fb:5c:57:ca:ef:89:4b:46:75:ee:0e:0f:55: 12:e3:5a:d1:d5:7a:64:95:b6:6c:51:5e:80:b1:cd: cb:e7:73:e0:60:7f:6b:72:5e:27:f4:bc:7d:1f:fc: 44:c7:6a:2a:e4:b3:09:48:24:85:f0:c5:24:24:f4: 36:bc:73:8b:54:f0:32:5f:bb:80:b3:a9:0e:85:43: ff:a2:f7:9d:a5:0f:b2:e4:a3:e7:89:32:d1:41:78: f0:01:ef:d1:14:1d:d4:21:73:61:2f:06:57:07:b1: 97:0d:d7:b1:9f:50:42:aa:b8:10:81:26:75:5f:e4: 05:39:b3:fe:74:c2:de:75:22:a8:5d:80:42:9d:f5: fb:01:4b:2b:f1:e8:cb:0f:f8:db:00:75:6c:79:5f: 24:07:89:bc:3c:ce:d1:ff:7d:a1:b7:6d:83:29:77: bb:e0:18:85:26:5a:74:f8:9c:3a:d6:01:e8:70:93: fe:08:72:0a:07:84:c0:5f:51:46:f1:9b:ef:59:da: 7b:f5:6b:fc:ef:83:14:69:5d:e4:9c:cc:09:e4:88: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F2:E2:4A:AB:9B:7E:71:E5:17:B6:A2:63:21:FA:C1:36:0C:9B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dfc1c6ca-4e05-319b-af21-9825088e6fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:9d:0a:5e:19:55:98:48:df:5b:1d:e0:ce:c8:42:62:5f:2d: 87:fd:3c:c6:35:05:a8:da:51:7c:62:00:87:b7:c3:aa:b5:2d: 72:1c:ec:c7:95:d2:c1:9c:e9:73:08:fc:8f:8d:8a:4a:f3:c4: 6b:ea:d8:b4:90:a1:35:75:df:5a:71:de:1f:c9:7f:83:c4:23: 3e:85:7a:37:cb:af:ba:db:81:0e:53:14:0d:ac:43:8c:74:af: 06:c0:e4:2f:3e:00:57:aa:7f:ec:8d:0d:66:3b:60:31:42:91: 4f:30:2c:7e:a4:cf:e9:05:8c:66:2f:16:be:6d:d8:0d:26:cd: 4d:5b:fa:37:ac:1e:3a:a6:14:b4:c0:13:46:2c:e2:ef:21:7c: 61:ff:8c:fd:9f:d0:7e:78:75:4a:cb:52:5d:ac:6c:77:77:8a: ad:a2:28:ac:b2:4b:be:a9:71:30:21:12:9e:c7:f7:b6:92:c6: 52:38:79:1d:62:0f:b0:d9:d7:53:ba:98:5c:ae:3c:41:48:0b: 82:41:6c:af:77:5f:92:b8:d1:fc:77:39:db:17:5f:fa:f3:3e: 58:81:2f:e2:5b:d5:a1:7e:d2:9e:53:1b:48:a8:a7:4c:a5:bd: 9e:6b:78:74:bf:a9:9e:84:c3:b5:87:16:8e:81:34:27:92:ef: c3:d8:b7:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdN1u8CxC+0kBUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NjY1MTNkMmEtMWZlMi00Mzk1LWI5YjAtYTdiMmRjNjA5MWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XJ/z6g+1RMT7AKigFbO6NdMkumAK683GDxE ieGAeuSpnHq4x1sm0kTImWA52/tcV8rviUtGde4OD1US41rR1XpklbZsUV6Asc3L 53PgYH9rcl4n9Lx9H/xEx2oq5LMJSCSF8MUkJPQ2vHOLVPAyX7uAs6kOhUP/oved pQ+y5KPniTLRQXjwAe/RFB3UIXNhLwZXB7GXDdexn1BCqrgQgSZ1X+QFObP+dMLe dSKoXYBCnfX7AUsr8ejLD/jbAHVseV8kB4m8PM7R/32ht22DKXe74BiFJlp0+Jw6 1gHocJP+CHIKB4TAX1FG8ZvvWdp79Wv874MUaV3knMwJ5IiVvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHy4kqrm35x5Re2omMh+sE2DJtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGZjMWM2Y2EtNGUwNS0z MTliLWFmMjEtOTgyNTA4OGU2ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCdCl4ZVZhI31sd4M7IQmJfLYf9PMY1BajaUXxiAIe3w6q1LXIc7MeV 0sGc6XMI/I+NikrzxGvq2LSQoTV131px3h/Jf4PEIz6FejfLr7rbgQ5TFA2sQ4x0 rwbA5C8+AFeqf+yNDWY7YDFCkU8wLH6kz+kFjGYvFr5t2A0mzU1b+jesHjqmFLTA E0Ys4u8hfGH/jP2f0H54dUrLUl2sbHd3iq2iKKyyS76pcTAhEp7H97aSxlI4eR1i D7DZ11O6mFyuPEFIC4JBbK93X5K40fx3OdsXX/rzPliBL+Jb1aF+0p5TG0iop0yl vZ5reHS/qZ6Ew7WHFo6BNCeS78PYtzk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:59:10 2026 by rpki-client