$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa File: af2b9587-c7e7-3560-a142-285f95c0baea.roa (raw, json) Hash identifier: lyqVnP7uzVbVpMZAZMsBxzvIMHSl0Kf4mwJp9LonAUQ= Subject key identifier: 9B:96:95:13:1F:A0:19:DF:44:C2:BD:68:F4:0F:58:63:C4:AD:7B:36 Certificate issuer: /CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0 Certificate serial: 010D0C9F4328584D4A8F9D9B6216F2833DBB0880 Authority key identifier: 48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 6082 IP address blocks: 66.182.128.0/22 maxlen: 24 66.182.149.0/24 maxlen: 24 66.182.156.0/22 maxlen: 24 66.182.170.0/23 maxlen: 24 66.182.172.0/23 maxlen: 24 66.182.174.0/23 maxlen: 24 199.71.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9d:9b:62:16:f2:83:3d:bb:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=2434156f-17f0-49dc-bb46-41d04ededac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:ab:ca:90:c9:7e:a0:fc:c9:3a:02:6e:c2: 41:77:41:1d:81:4e:5c:aa:ac:db:37:71:ae:ae:33: b9:75:85:e8:94:71:ed:33:cc:df:e6:9c:aa:ab:36: 2a:cc:6b:61:66:b0:89:ab:fb:86:64:88:f0:6c:ab: e3:be:7b:9a:aa:d8:da:cf:18:70:10:54:b2:2c:2a: 99:81:4d:61:cd:cc:c1:86:4e:8d:fd:2f:a8:e7:f4: 0e:3a:d9:6a:98:4d:30:fc:b2:79:53:b1:db:7b:7e: 72:b8:5b:27:a5:e3:2b:42:c2:88:e1:eb:bb:d4:2c: da:26:70:de:51:32:e4:a4:ea:af:d9:3f:45:db:83: 3e:5f:e8:fd:eb:6c:9c:69:aa:2d:93:df:46:30:12: e3:88:26:df:de:98:8f:67:d4:fb:87:f2:43:70:4d: bb:e1:68:eb:8a:bc:ba:03:15:d0:0f:ab:f0:2a:78: 5a:a6:d5:e4:bc:51:13:b8:c6:88:5b:a8:c7:61:da: 05:be:af:6d:e8:2d:01:59:b4:e9:d5:41:ec:99:f7: 80:49:8f:05:6f:81:86:ab:8e:86:b2:28:a7:bd:5d: 24:53:d8:1c:57:64:f7:8d:2b:c8:6f:53:b7:bf:e7: 8d:15:57:b3:1b:92:b5:44:d0:8a:cc:8b:02:28:3a: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:96:95:13:1F:A0:19:DF:44:C2:BD:68:F4:0F:58:63:C4:AD:7B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl X509v3 Authority Key Identifier: keyid:48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer sbgp-ipAddrBlock: critical IPv4: 66.182.128.0/22 66.182.149.0/24 66.182.156.0/22 66.182.170.0-66.182.175.255 199.71.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6d:91:88:7d:ff:8e:8a:ed:48:70:45:dd:31:c1:10:a9:09: 7b:ad:83:4d:37:f1:b7:22:40:53:67:57:24:ec:7b:37:d4:81: 73:ae:fa:9a:bf:50:44:dc:d4:03:b2:18:27:71:71:b4:e2:c7: 7d:9d:36:d8:94:dc:71:53:79:d6:32:01:a5:2e:56:31:8d:f7: dd:4e:8c:20:92:2e:59:2d:63:cf:ea:b3:9e:01:f0:c4:2d:3d: 4d:63:9d:e8:c2:bb:d3:a3:31:9e:31:6d:cd:e1:57:6d:53:95: bc:cd:a3:dc:0d:8a:3f:a6:89:e2:d1:cb:74:e9:20:36:b3:9c: da:76:84:c3:3d:69:68:ee:06:46:fe:87:9d:3c:eb:64:03:7e: 29:93:41:c3:5f:a4:a2:eb:b9:44:62:33:75:2f:a3:30:6d:8b: 6d:d1:5e:b8:d6:ce:cd:fd:28:e0:7f:ab:22:71:aa:98:a5:ec: f8:cb:a6:f5:d8:27:1d:dd:1e:ed:3f:ad:00:1a:3a:7b:16:0f: d7:90:6c:d3:36:5a:98:65:59:b9:4e:77:cc:40:87:ad:06:e1: 19:32:13:c5:f0:ca:92:77:2f:33:6f:2f:3b:aa:ee:e2:76:d3: 0f:aa:d3:72:39:be:2a:00:d3:be:7e:e7:1c:fa:2e:c9:c6:b1: d0:73:7d:3a -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE1Kj52bYhbygz27CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY2NWNjNjEtMmI0YS00ZjQ4LWFlNWQtMjgzNjZhYTJk Y2IwMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MjQzNDE1NmYtMTdmMC00OWRjLWJiNDYtNDFkMDRlZGVkYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK6rypDJfqD8yToCbsJBd0EdgU5cqqzbN3Gu rjO5dYXolHHtM8zf5pyqqzYqzGthZrCJq/uGZIjwbKvjvnuaqtjazxhwEFSyLCqZ gU1hzczBhk6N/S+o5/QOOtlqmE0w/LJ5U7Hbe35yuFsnpeMrQsKI4eu71CzaJnDe UTLkpOqv2T9F24M+X+j962ycaaotk99GMBLjiCbf3piPZ9T7h/JDcE274Wjriry6 AxXQD6vwKnhaptXkvFETuMaIW6jHYdoFvq9t6C0BWbTp1UHsmfeASY8Fb4GGq46G siinvV0kU9gcV2T3jSvIb1O3v+eNFVezG5K1RNCKzIsCKDostwIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFJuWlRMfoBnfRMK9aPQPWGPErXs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZjY1 Y2M2MS0yYjRhLTRmNDgtYWU1ZC0yODM2NmFhMmRjYjAvYWYyYjk1ODctYzdlNy0z NTYwLWExNDItMjg1Zjk1YzBiYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGY2NWNjNjEtMmI0YS00ZjQ4LWFl NWQtMjgzNjZhYTJkY2IwLzBmNjVjYzYxLTJiNGEtNGY0OC1hZTVkLTI4MzY2YWEy ZGNiMC5jcmwwHwYDVR0jBBgwFoAUSCC3o2IZFe1+Qr9kQZNPTMzuz+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZjY1Y2M2MS0yYjRhLTRmNDgtYWU1ZC0yODM2 NmFhMmRjYjAuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCQraAAwQA QraVAwQCQracMAwDBAFCtqoDBARCtqADBAHHR9IwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPG2RiH3/jort SHBF3THBEKkJe62DTTfxtyJAU2dXJOx7N9SBc676mr9QRNzUA7IYJ3FxtOLHfZ02 2JTccVN51jIBpS5WMY333U6MIJIuWS1jz+qzngHwxC09TWOd6MK706MxnjFtzeFX bVOVvM2j3A2KP6aJ4tHLdOkgNrOc2naEwz1paO4GRv6HnTzrZAN+KZNBw1+kouu5 RGIzdS+jMG2LbdFeuNbOzf0o4H+rInGqmKXs+Mum9dgnHd0e7T+tABo6exYP15Bs 0zZamGVZuU53zECHrQbhGTITxfDKkncvM28vO6ru4nbTD6rTcjm+KgDTvn7nHPou ycax0HN9Og== -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:34 2026 by rpki-client