$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/bafd2ca7-450d-3c0d-82a6-5912a35aabc0.roa File: bafd2ca7-450d-3c0d-82a6-5912a35aabc0.roa (raw, json) Hash identifier: GY3KTAI7Dm+qYTBCzjl1ARcoDgK49DFCR3o6gOSypkw= Subject key identifier: A9:84:CC:10:1D:D9:C6:B7:6D:1A:77:E5:9F:40:13:D7:57:97:60:BF Certificate issuer: /CN=557a586a-7e35-45b6-bb87-b7631d4dda84 Certificate serial: 010D0C9F4328584D38D68B36E2812910147DE940 Authority key identifier: A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/bafd2ca7-450d-3c0d-82a6-5912a35aabc0.roa Signing time: Thu 19 Mar 2026 16:39:07 +0000 ROA not before: Thu 19 Mar 2026 16:39:07 +0000 ROA not after: Wed 17 Jun 2026 16:39:07 +0000 asID: 16509 IP address blocks: 66.84.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:d6:8b:36:e2:81:29:10:14:7d:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557a586a-7e35-45b6-bb87-b7631d4dda84 Validity Not Before: Mar 19 16:39:07 2026 GMT Not After : Jun 17 16:39:07 2026 GMT Subject: CN=05256ba5-180f-4924-8478-6709ef2a64b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:79:2d:db:28:16:1c:87:b4:3c:6f:e7:05:e1: 1a:75:36:30:72:6f:37:ec:02:82:9c:1d:05:2c:19: 9a:f2:b2:41:be:53:4f:38:fa:e6:f5:45:5b:47:90: e1:9c:a0:d6:80:5a:24:04:8d:76:0a:69:9c:f5:3f: a3:cb:ed:d9:1c:b9:72:08:dd:12:3f:53:b6:0a:04: 36:50:f7:6a:3c:88:08:4e:db:8f:ad:80:c3:68:05: d5:1c:87:12:e5:db:2d:28:88:c2:95:1b:1d:94:3f: f2:06:7a:95:d7:82:4e:da:f1:27:5d:29:5d:7f:61: 6e:f2:0d:36:c2:67:15:69:84:37:ca:7f:9f:5e:9d: f9:ae:4f:95:28:95:4f:fc:a4:46:b6:fe:20:88:ff: 38:dc:05:51:96:e0:5b:c8:e5:1e:ed:24:ab:5d:48: 40:04:61:13:d8:b9:ee:b4:f5:0e:9b:9f:68:73:23: ed:ca:24:c2:6b:d9:54:45:be:54:60:0c:b5:6d:86: 0e:d7:dc:bd:0d:25:d8:a6:6e:a6:92:f4:c3:6a:8b: 74:a9:f4:a3:ca:ca:28:18:7c:9b:52:b1:f8:cd:ee: 61:7d:57:54:bd:cc:4d:38:b1:c6:a0:b3:09:31:62: 1a:51:ed:19:22:f4:d6:1d:c8:29:55:32:58:3c:22: c8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:84:CC:10:1D:D9:C6:B7:6D:1A:77:E5:9F:40:13:D7:57:97:60:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/bafd2ca7-450d-3c0d-82a6-5912a35aabc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl X509v3 Authority Key Identifier: keyid:A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer sbgp-ipAddrBlock: critical IPv4: 66.84.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3f:4f:52:01:7a:5e:96:20:02:33:c3:e2:d9:d1:69:ff:5a: 49:70:ca:37:79:9a:97:b9:a9:d6:2e:35:a0:3d:4b:72:b8:0f: 66:ba:d8:87:72:77:57:6d:d2:ac:b8:72:e2:12:02:76:3f:72: 4a:05:66:04:5b:87:1e:e1:26:7f:46:3b:d7:53:15:3f:af:2f: ac:99:f4:17:1d:58:72:3e:58:88:32:4f:c7:d9:d5:e4:05:c3: a0:dd:5c:d0:eb:22:05:b0:bb:b2:7a:6d:0f:a2:b5:48:55:20: 7c:f3:c8:34:01:80:f6:6f:c7:92:6d:90:c8:d0:8d:ce:cf:91: 1d:07:28:80:ce:8a:d2:57:9c:86:6a:a1:6c:03:72:09:10:89: 0a:87:8b:c7:91:40:38:40:40:3f:72:24:98:69:ed:30:17:57: ac:c3:c5:79:c7:4e:b8:39:66:5d:bc:e1:91:0d:a7:84:de:b1: 23:9f:47:8a:bc:ab:6c:60:68:aa:ec:98:b6:ee:27:1a:34:2d: 53:18:e9:eb:1d:12:ce:4d:1f:97:bc:db:0a:33:90:fe:b3:8b: 2b:32:08:41:48:52:b0:dd:e6:e8:c7:06:3c:d6:73:bb:20:c3: 2e:df:3f:0f:29:d1:0e:55:d8:8a:ff:94:2d:1d:cd:51:55:97: 4c:e8:93:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE041os24oEpEBR96UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU3YTU4NmEtN2UzNS00NWI2LWJiODctYjc2MzFkNGRk YTg0MB4XDTI2MDMxOTE2MzkwN1oXDTI2MDYxNzE2MzkwN1owLzEtMCsGA1UEAxMk MDUyNTZiYTUtMTgwZi00OTI0LTg0NzgtNjcwOWVmMmE2NGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3kt2ygWHIe0PG/nBeEadTYwcm837AKCnB0F LBma8rJBvlNPOPrm9UVbR5DhnKDWgFokBI12Cmmc9T+jy+3ZHLlyCN0SP1O2CgQ2 UPdqPIgITtuPrYDDaAXVHIcS5dstKIjClRsdlD/yBnqV14JO2vEnXSldf2Fu8g02 wmcVaYQ3yn+fXp35rk+VKJVP/KRGtv4giP843AVRluBbyOUe7SSrXUhABGET2Lnu tPUOm59ocyPtyiTCa9lURb5UYAy1bYYO19y9DSXYpm6mkvTDaot0qfSjysooGHyb UrH4ze5hfVdUvcxNOLHGoLMJMWIaUe0ZIvTWHcgpVTJYPCLILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmEzBAd2ca3bRp35Z9AE9dXl2C/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81NTdh NTg2YS03ZTM1LTQ1YjYtYmI4Ny1iNzYzMWQ0ZGRhODQvYmFmZDJjYTctNDUwZC0z YzBkLTgyYTYtNTkxMmEzNWFhYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTU3YTU4NmEtN2UzNS00NWI2LWJi ODctYjc2MzFkNGRkYTg0LzU1N2E1ODZhLTdlMzUtNDViNi1iYjg3LWI3NjMxZDRk ZGE4NC5jcmwwHwYDVR0jBBgwFoAUp138/nyBEt/M9IcKfEtG1UhERSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81NTdhNTg2YS03ZTM1LTQ1YjYtYmI4Ny1iNzYz MWQ0ZGRhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlRRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0/T1IBel6WIAIzw+LZ0Wn/Wklwyjd5mpe5qdYuNaA9S3K4D2a62Idy d1dt0qy4cuISAnY/ckoFZgRbhx7hJn9GO9dTFT+vL6yZ9BcdWHI+WIgyT8fZ1eQF w6DdXNDrIgWwu7J6bQ+itUhVIHzzyDQBgPZvx5JtkMjQjc7PkR0HKIDOitJXnIZq oWwDcgkQiQqHi8eRQDhAQD9yJJhp7TAXV6zDxXnHTrg5Zl284ZENp4TesSOfR4q8 q2xgaKrsmLbuJxo0LVMY6esdEs5NH5e82wozkP6ziysyCEFIUrDd5ujHBjzWc7sg wy7fPw8p0Q5V2Ir/lC0dzVFVl0zok0c= -----END CERTIFICATE-----Generated at Thu Mar 26 01:48:01 2026 by rpki-client