$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/a1f18be9-2592-3adc-8ce4-dbe328e729a7.roa File: a1f18be9-2592-3adc-8ce4-dbe328e729a7.roa (raw, json) Hash identifier: NxqSxQiDOtbxp9N50lkzmyINfZt3YUM8ojxwH/w5ptQ= Subject key identifier: 2C:DC:38:35:C6:48:D1:7F:4B:5A:60:75:8B:71:4D:8E:FA:61:03:40 Certificate issuer: /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c Certificate serial: 010D0C9F4328584D1D060005D1A5C6D015F82D00 Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/a1f18be9-2592-3adc-8ce4-dbe328e729a7.roa Signing time: Mon 09 Mar 2026 17:32:06 +0000 ROA not before: Mon 09 Mar 2026 17:32:06 +0000 ROA not after: Sun 07 Jun 2026 17:32:06 +0000 asID: 30361 IP address blocks: 66.254.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:06:00:05:d1:a5:c6:d0:15:f8:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c Validity Not Before: Mar 9 17:32:06 2026 GMT Not After : Jun 7 17:32:06 2026 GMT Subject: CN=bda17779-448a-458f-936f-72f10f5b4ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:ff:ab:8c:4d:c3:9b:34:24:28:34:c8:71: d5:10:4a:50:ac:93:ae:97:77:f1:e0:da:7e:6a:4c: d1:fe:a1:95:63:7c:1e:8b:46:ef:9f:d9:73:9c:56: bc:fa:c5:cd:32:a8:7d:ac:ee:7a:9e:07:e3:71:48: 38:30:62:a4:b0:fe:07:44:bf:92:b6:74:81:78:3f: 1f:a4:17:34:27:32:09:7a:79:e6:fb:12:f4:0c:65: 70:3d:cb:bd:b3:10:76:ef:5e:9a:1a:28:9c:ad:fd: 0f:25:17:01:04:1e:d6:e3:60:df:3a:4b:d8:a3:17: 90:d8:d7:06:f0:64:2c:bf:09:b0:53:3a:62:74:69: 61:fc:83:01:68:be:6f:90:19:90:e7:14:3e:0d:50: 95:f6:a5:5e:ca:5b:d6:63:9f:85:be:9a:3e:cd:c2: 7e:90:f0:73:86:4a:50:7b:a1:61:8e:a5:0c:37:69: 14:05:bc:17:8d:63:e7:d1:df:ea:7b:19:26:b2:b0: 3d:60:9e:29:40:8a:21:fc:98:e8:c7:99:69:f8:77: 8a:f2:fd:31:60:2a:61:89:a9:fa:2c:25:e2:cf:78: 46:55:57:1a:65:8f:07:7b:cf:c8:8f:14:9d:73:75: 67:d6:4a:25:45:77:27:21:7f:97:68:7e:6b:81:22: ca:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DC:38:35:C6:48:D1:7F:4B:5A:60:75:8B:71:4D:8E:FA:61:03:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/a1f18be9-2592-3adc-8ce4-dbe328e729a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl X509v3 Authority Key Identifier: keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer sbgp-ipAddrBlock: critical IPv4: 66.254.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:1e:27:a6:bc:21:29:31:2b:aa:18:57:13:a5:e1:33:52:7e: da:f2:84:11:da:45:91:bd:94:73:44:e3:0e:38:43:53:32:95: 25:81:e6:94:0a:1a:f2:e5:ba:1b:8f:7b:4b:79:22:67:5e:23: e2:f7:3d:ef:9c:52:45:17:67:c0:5e:8e:6b:08:43:5e:04:dc: 27:12:0d:5c:ac:ad:15:33:92:46:38:9e:82:e6:dd:c3:38:f8: 93:cc:d5:a9:c2:96:6f:99:16:98:29:31:78:c9:c8:da:09:57: 6f:bd:f3:62:2a:92:53:7d:a5:d6:c4:35:5f:57:89:ca:06:47: a2:5c:78:93:63:cc:47:ed:75:bc:9b:3c:91:91:b9:cf:66:d0: 2f:2e:ba:a8:51:7c:d1:40:d9:c7:65:bf:93:25:fc:54:29:1f: 84:7b:58:36:7d:9c:ce:6d:ba:f8:32:4d:33:7d:37:d9:3f:8f: d5:77:c9:88:9e:c9:71:67:10:47:d2:44:20:d0:41:06:d1:20: 11:ad:f3:d3:06:e5:ba:41:a0:aa:9e:96:44:35:12:ae:f2:d9: bb:d4:c3:a6:a3:59:35:06:f3:d7:84:bb:f1:9c:f4:bc:7d:47: ba:6f:70:46:58:6f:8b:da:43:c2:5a:ce:82:74:6a:20:19:02: e2:d2:d8:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dBgAF0aXG0BX4LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVlZTM2NjItYmVlMy00MTBhLTljYjEtNTU5YTA3Y2U2 YTljMB4XDTI2MDMwOTE3MzIwNloXDTI2MDYwNzE3MzIwNlowLzEtMCsGA1UEAxMk YmRhMTc3NzktNDQ4YS00NThmLTkzNmYtNzJmMTBmNWI0ZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRv/q4xNw5s0JCg0yHHVEEpQrJOul3fx4Np+ akzR/qGVY3wei0bvn9lznFa8+sXNMqh9rO56ngfjcUg4MGKksP4HRL+StnSBeD8f pBc0JzIJennm+xL0DGVwPcu9sxB2716aGiicrf0PJRcBBB7W42DfOkvYoxeQ2NcG 8GQsvwmwUzpidGlh/IMBaL5vkBmQ5xQ+DVCV9qVeylvWY5+Fvpo+zcJ+kPBzhkpQ e6FhjqUMN2kUBbwXjWPn0d/qexkmsrA9YJ4pQIoh/Jjox5lp+HeK8v0xYCphian6 LCXiz3hGVVcaZY8He8/IjxSdc3Vn1kolRXcnIX+XaH5rgSLKuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzcODXGSNF/S1pgdYtxTY76YQNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZWVl MzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlhMDdjZTZhOWMvYTFmMThiZTktMjU5Mi0z YWRjLThjZTQtZGJlMzI4ZTcyOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWVlZTM2NjItYmVlMy00MTBhLTlj YjEtNTU5YTA3Y2U2YTljLzllZWUzNjYyLWJlZTMtNDEwYS05Y2IxLTU1OWEwN2Nl NmE5Yy5jcmwwHwYDVR0jBBgwFoAUYl5d1qqNrQyQP7AxOG0eM1GJ0fowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZWVlMzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlh MDdjZTZhOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv5/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHceJ6a8ISkxK6oYVxOl4TNSftryhBHaRZG9lHNE4w44Q1MylSWB5pQK GvLluhuPe0t5ImdeI+L3Pe+cUkUXZ8BejmsIQ14E3CcSDVysrRUzkkY4noLm3cM4 +JPM1anClm+ZFpgpMXjJyNoJV2+982IqklN9pdbENV9XicoGR6JceJNjzEftdbyb PJGRuc9m0C8uuqhRfNFA2cdlv5Ml/FQpH4R7WDZ9nM5tuvgyTTN9N9k/j9V3yYie yXFnEEfSRCDQQQbRIBGt89MG5bpBoKqelkQ1Eq7y2bvUw6ajWTUG89eEu/Gc9Lx9 R7pvcEZYb4vaQ8JazoJ0aiAZAuLS2GE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:20:07 2026 by rpki-client