$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/01529e09-9594-3dd0-b7da-092fd6d1c742.roa File: 01529e09-9594-3dd0-b7da-092fd6d1c742.roa (raw, json) Hash identifier: ATUzSc5DvvW2i3DgjqIddOcXzXZ80yE56AQdCSkUW0k= Subject key identifier: 0C:8B:17:A1:7A:44:A1:FF:B7:45:47:D6:AD:28:30:B2:60:2B:8E:C5 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D0D426DB11C010BAFFB26EE80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/01529e09-9594-3dd0-b7da-092fd6d1c742.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 401415 IP address blocks: 66.115.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6d:b1:1c:01:0b:af:fb:26:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=fe8f977e-39f0-4667-85ce-944962ddb0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:e6:1d:f7:4c:4f:7f:52:b4:25:00:ca:6d: c4:7e:5a:5e:a5:ff:a0:72:56:a2:d0:2d:8f:29:a7: aa:d0:1e:f0:97:3f:a6:71:15:73:c7:75:2f:ad:63: d3:b2:2a:fb:dc:d3:8c:59:b8:72:e0:dc:d7:21:67: d3:57:e0:e6:fa:38:a6:a2:7f:26:3b:2a:38:58:40: 6d:7f:65:2b:61:45:14:3a:59:35:f2:de:0a:09:71: 79:0d:11:20:ab:41:70:56:42:18:0f:f7:8e:2c:aa: e9:7f:a1:8b:76:4a:79:32:51:ec:8b:68:34:c3:13: cc:00:60:6d:ba:4c:c6:40:3d:07:43:b9:11:fd:86: 4a:c4:1f:a9:84:36:15:4c:79:82:5a:a9:8d:98:a9: 12:ab:fe:d9:04:ad:ae:29:28:46:f3:bb:fa:5d:4a: a6:12:48:95:11:07:23:90:d1:ea:11:b1:17:6c:61: f6:fe:49:e8:10:02:77:b3:43:cf:9c:37:52:1a:9e: ba:0e:15:d4:de:2f:ea:bd:b8:f9:b3:c9:65:9a:ca: 54:20:11:e9:ad:5e:5d:1c:1c:94:b6:0d:0f:21:89: f9:8e:c0:8a:ec:21:aa:c2:c5:98:92:08:0f:55:4c: 28:08:a7:84:15:61:69:c0:e2:bb:d2:58:38:9f:67: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8B:17:A1:7A:44:A1:FF:B7:45:47:D6:AD:28:30:B2:60:2B:8E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/01529e09-9594-3dd0-b7da-092fd6d1c742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ce:40:69:c2:b3:25:80:24:df:de:db:82:84:ae:3c:67:7a: 80:03:4b:bb:cd:b5:c4:38:2c:d9:bb:ea:6d:dc:f1:49:80:31: fc:48:67:7e:70:f9:6f:25:fe:06:47:a7:e9:e9:db:14:37:e3: 23:c6:01:ac:90:57:db:46:2a:dd:d3:cb:bd:1f:fc:36:9c:b7: 0d:32:f6:02:8c:fe:00:38:c2:b9:ef:87:a3:0a:a1:ea:9e:ba: ee:2f:8c:57:39:3d:e8:85:44:cc:28:01:7b:31:9f:b6:84:03: f4:9f:bb:17:a8:89:49:10:03:5e:63:ec:aa:6e:c0:6e:52:0f: eb:b8:f7:2f:3d:79:3f:b2:68:88:7d:f5:53:f7:fc:d1:cb:2c: e1:16:92:ae:b4:7f:28:1a:72:62:cf:4d:93:2c:de:5c:29:45: 8e:a3:49:be:34:42:6b:39:cb:b0:08:58:77:05:f3:b9:d4:5c: 99:b8:8f:1f:b2:d0:b5:36:d4:92:04:eb:a3:bd:19:88:5c:06: 10:5a:9c:f2:e5:02:6a:50:bb:a3:84:4a:65:b0:60:3e:ab:d9: 98:b0:2c:d6:13:18:a8:f1:ee:22:bc:0b:53:2a:80:57:84:d7: 57:5e:5c:91:d8:98:a4:5d:f1:b1:12:03:3f:40:a8:f8:e9:4e: 4f:46:ec:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQm2xHAELr/sm7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZmU4Zjk3N2UtMzlmMC00NjY3LTg1Y2UtOTQ0OTYyZGRiMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrTmHfdMT39StCUAym3Eflpepf+gclai0C2P Kaeq0B7wlz+mcRVzx3UvrWPTsir73NOMWbhy4NzXIWfTV+Dm+jimon8mOyo4WEBt f2UrYUUUOlk18t4KCXF5DREgq0FwVkIYD/eOLKrpf6GLdkp5MlHsi2g0wxPMAGBt ukzGQD0HQ7kR/YZKxB+phDYVTHmCWqmNmKkSq/7ZBK2uKShG87v6XUqmEkiVEQcj kNHqEbEXbGH2/knoEAJ3s0PPnDdSGp66DhXU3i/qvbj5s8llmspUIBHprV5dHByU tg0PIYn5jsCK7CGqwsWYkggPVUwoCKeEFWFpwOK70lg4n2eRYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyLF6F6RKH/t0VH1q0oMLJgK47FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDE1MjllMDktOTU5NC0z ZGQwLWI3ZGEtMDkyZmQ2ZDFjNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQnPWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzOQGnCsyWAJN/e24KErjxneoADS7vNtcQ4LNm76m3c8UmAMfxIZ35w +W8l/gZHp+np2xQ34yPGAayQV9tGKt3Ty70f/Dactw0y9gKM/gA4wrnvh6MKoeqe uu4vjFc5PeiFRMwoAXsxn7aEA/SfuxeoiUkQA15j7KpuwG5SD+u49y89eT+yaIh9 9VP3/NHLLOEWkq60fygacmLPTZMs3lwpRY6jSb40Qms5y7AIWHcF87nUXJm4jx+y 0LU21JIE66O9GYhcBhBanPLlAmpQu6OESmWwYD6r2ZiwLNYTGKjx7iK8C1MqgFeE 11deXJHYmKRd8bESAz9AqPjpTk9G7N0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:21:26 2026 by rpki-client