$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e81791d3-0c1d-3c7c-b417-f9f70a0eead3.roa File: e81791d3-0c1d-3c7c-b417-f9f70a0eead3.roa (raw, json) Hash identifier: 7Ubn7coa6DAeeRUuKxLaWBTFDnE9mVbjcJQDQzVafOw= Subject key identifier: 52:DD:20:23:60:04:33:BD:6B:94:51:BE:53:E9:C1:E5:68:41:04:23 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D46323682AD54E26919C9D000 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e81791d3-0c1d-3c7c-b417-f9f70a0eead3.roa Signing time: Tue 24 Mar 2026 11:29:20 +0000 ROA not before: Tue 24 Mar 2026 11:29:20 +0000 ROA not after: Mon 22 Jun 2026 11:29:20 +0000 asID: 211439 IP address blocks: 66.92.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:32:36:82:ad:54:e2:69:19:c9:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 24 11:29:20 2026 GMT Not After : Jun 22 11:29:20 2026 GMT Subject: CN=b80c97c9-cb71-491c-a529-3bc12612d9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:74:b8:f8:e6:8f:3f:5d:20:12:7d:a4:5f: 5a:17:c8:93:67:44:9c:0b:b8:f1:68:18:25:2c:46: 82:ab:de:98:42:df:4e:c3:2c:59:c2:a0:92:b3:32: 66:cb:c1:22:a6:b3:e9:16:b1:f5:2b:8e:f0:8c:0e: b7:8f:da:12:20:71:a8:c1:df:d8:8c:fc:9b:42:24: 5c:96:00:a7:ee:95:28:18:ed:6b:ac:5c:1e:6e:db: cd:1a:41:98:04:fc:83:57:25:9f:b1:f0:e2:65:9a: 7d:ce:6d:ea:1d:08:b7:bd:23:c1:8e:c8:cf:18:01: 36:cb:38:9c:e2:b0:29:b4:f6:1f:8a:ca:47:9c:5c: b5:2e:09:e6:62:24:18:21:ae:23:4d:9d:fc:7f:c2: 29:dc:d6:54:f4:da:45:95:bc:ba:1b:41:95:df:64: 49:4d:7a:4d:97:fb:8e:3f:48:d4:dd:bb:dd:45:9c: a5:46:06:10:d7:17:94:72:02:8f:ab:dd:9b:23:97: da:1c:41:6c:2b:b5:f3:59:e7:2c:bd:d9:1a:1e:e7: ac:a3:a9:58:ed:b1:60:ad:8b:18:bc:60:0f:dc:24: ea:ca:8f:f2:19:d7:d7:b5:f1:05:cd:e0:3f:14:59: c9:9b:d0:0c:3e:f8:0f:12:b9:97:e6:ca:3e:02:a9: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DD:20:23:60:04:33:BD:6B:94:51:BE:53:E9:C1:E5:68:41:04:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e81791d3-0c1d-3c7c-b417-f9f70a0eead3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4d:b5:56:ad:3f:d5:38:ae:9c:83:ff:68:60:82:72:31:ff: de:65:6d:81:e8:43:59:08:a6:36:0a:10:8c:e8:67:56:4e:19: 22:7b:72:57:bf:45:1b:e0:c8:3c:d6:7f:7d:48:43:8d:fe:19: ef:df:3b:08:6e:71:c5:94:b6:b9:43:3b:03:3f:c0:2c:df:b3: 71:98:4e:e9:2d:b5:d9:56:49:43:6c:24:73:1b:3b:94:e8:76: d9:19:c2:58:69:4b:f7:5f:af:ba:a1:af:1f:76:55:4b:e1:20: 43:7e:7f:96:20:ea:30:71:5c:95:4c:5e:c2:b2:31:29:59:83: 06:3c:3f:cb:4a:43:4f:01:ef:b6:e0:88:fc:a4:17:7f:35:be: f1:fb:0b:cb:20:a8:e5:a4:bf:2d:84:33:29:0a:fe:02:cb:52: 51:38:86:50:7e:e7:79:14:52:0e:83:42:47:25:f0:3e:cf:03: 41:52:a4:c1:2a:7f:91:54:52:3d:9f:5d:1f:4e:4d:2c:ce:9c: 1f:14:6a:ef:5d:60:18:5a:ad:86:60:a0:e6:7e:9e:11:86:47: 01:c0:97:70:47:f5:34:64:42:0f:70:fb:6e:63:6f:fc:4c:d1: ec:bf:a3:6a:d0:d6:34:e4:e3:3a:3f:01:11:5e:8e:00:76:1a: c5:d2:11:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GMjaCrVTiaRnJ0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNDExMjkyMFoXDTI2MDYyMjExMjkyMFowLzEtMCsGA1UEAxMk YjgwYzk3YzktY2I3MS00OTFjLWE1MjktM2JjMTI2MTJkOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4F0uPjmjz9dIBJ9pF9aF8iTZ0ScC7jxaBgl LEaCq96YQt9OwyxZwqCSszJmy8EiprPpFrH1K47wjA63j9oSIHGowd/YjPybQiRc lgCn7pUoGO1rrFwebtvNGkGYBPyDVyWfsfDiZZp9zm3qHQi3vSPBjsjPGAE2yzic 4rAptPYfispHnFy1LgnmYiQYIa4jTZ38f8Ip3NZU9NpFlby6G0GV32RJTXpNl/uO P0jU3bvdRZylRgYQ1xeUcgKPq92bI5faHEFsK7XzWecsvdkaHueso6lY7bFgrYsY vGAP3CTqyo/yGdfXtfEFzeA/FFnJm9AMPvgPErmX5so+Aqn8mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLdICNgBDO9a5RRvlPpweVoQQQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTgxNzkxZDMtMGMxZC0z YzdjLWI0MTctZjlmNzBhMGVlYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFNtVatP9U4rpyD/2hggnIx/95lbYHoQ1kIpjYKEIzoZ1ZOGSJ7cle/ RRvgyDzWf31IQ43+Ge/fOwhuccWUtrlDOwM/wCzfs3GYTukttdlWSUNsJHMbO5To dtkZwlhpS/dfr7qhrx92VUvhIEN+f5Yg6jBxXJVMXsKyMSlZgwY8P8tKQ08B77bg iPykF381vvH7C8sgqOWkvy2EMykK/gLLUlE4hlB+53kUUg6DQkcl8D7PA0FSpMEq f5FUUj2fXR9OTSzOnB8Uau9dYBharYZgoOZ+nhGGRwHAl3BH9TRkQg9w+25jb/xM 0ey/o2rQ1jTk4zo/ARFejgB2GsXSERk= -----END CERTIFICATE-----Generated at Thu Mar 26 23:18:41 2026 by rpki-client