$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa File: cf63350e-58a3-37fa-b946-5bfd45a67c05.roa (raw, json) Hash identifier: hYk3m0QwEwBzNm8129V7kS8ukOqWev2W0u3ptYiqeoo= Subject key identifier: 3D:92:CA:5D:57:B5:75:84:B2:58:04:D3:FA:FA:F8:7C:7F:60:DA:17 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D0D426DD5FAE353804DAFFC00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 401415 IP address blocks: 66.231.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6d:d5:fa:e3:53:80:4d:af:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=e9c24bab-ff7e-4e28-9da6-703446a3ce45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a6:d5:d0:41:62:da:83:8e:a1:d3:45:8d:c6: 6a:eb:21:96:fe:d5:3f:29:0e:7d:7b:fe:37:81:44: 4a:bf:4c:32:2a:37:c0:f8:99:1e:50:0c:81:8d:20: 0d:76:32:05:29:13:27:6d:ed:5e:44:3e:cc:25:5c: 6e:e7:3c:55:8d:9c:cd:07:fb:81:32:c0:e2:c8:1c: 98:c0:21:23:69:9e:ad:b3:f3:10:92:51:bc:ab:a1: 2d:bc:ba:90:07:20:ba:66:ec:ff:d7:1b:74:22:b8: 25:b0:90:9c:e2:fb:f0:f5:bd:b8:11:5c:4c:7a:a4: d8:e7:6a:3e:a2:30:9f:b0:95:c9:3d:6e:58:96:cf: b7:25:5a:e7:61:19:bf:3a:fa:80:d7:a5:1b:14:4a: 35:9c:b1:59:e7:22:5e:bd:94:f1:39:0b:0f:b5:93: 45:b3:73:44:f6:19:f4:93:51:bd:b9:f8:57:45:e1: 3a:27:5f:d1:63:0c:7f:48:64:ed:61:af:42:3c:a4: b4:6d:81:b4:e6:e4:02:7a:87:6e:1d:ed:a4:47:30: e1:e1:59:5e:2a:6d:92:e1:3a:4c:22:91:46:33:0e: 15:6b:52:b6:e3:a6:1b:88:4c:0c:1b:83:4b:4e:75: 41:a0:2d:bc:36:2a:a7:60:45:fa:53:1c:42:62:56: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:92:CA:5D:57:B5:75:84:B2:58:04:D3:FA:FA:F8:7C:7F:60:DA:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:27:0e:52:ef:8d:4a:c5:78:d1:d5:17:35:9a:c5:3a:dc:4d: 39:f3:e3:5f:5b:d2:0e:a1:ed:6f:72:e1:0a:2c:ee:e6:b1:19: d8:0b:a4:3a:e8:52:68:53:92:87:24:61:52:e4:4d:99:20:69: c5:b3:58:93:cc:ad:e4:b9:d7:a7:29:9c:81:88:a6:13:51:dc: 6d:d2:e9:2f:d8:53:9d:9b:6b:92:50:8e:0e:81:c7:54:f6:06: 67:cf:18:14:d2:95:38:ed:01:7a:07:28:28:c5:40:1f:64:27: 32:a2:01:60:89:e1:16:e5:57:ef:94:71:8b:ef:4d:69:ad:a5: 68:34:38:5c:63:56:ff:ab:55:9a:38:09:88:be:55:73:a4:d3: f6:cd:98:3c:24:d4:ad:66:b5:22:e9:6f:7b:ec:43:f9:5b:bb: c5:2a:82:d1:78:45:9b:fd:c2:99:35:9d:e9:da:44:f4:38:b2: f7:e3:f0:26:d0:30:3f:36:21:c6:d8:4d:c4:e0:34:6d:9d:92: 7d:93:c1:8f:ca:c8:3e:40:9d:af:e4:15:15:fa:9a:41:6c:8c: 2d:94:f2:70:ba:3a:41:60:b9:8d:f5:1a:21:45:42:fc:c8:8f: de:5b:57:39:eb:88:d7:11:88:6c:f3:9b:55:a6:e7:90:6c:82: 35:13:58:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQm3V+uNTgE2v/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZTljMjRiYWItZmY3ZS00ZTI4LTlkYTYtNzAzNDQ2YTNjZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqbV0EFi2oOOodNFjcZq6yGW/tU/KQ59e/43 gURKv0wyKjfA+JkeUAyBjSANdjIFKRMnbe1eRD7MJVxu5zxVjZzNB/uBMsDiyByY wCEjaZ6ts/MQklG8q6EtvLqQByC6Zuz/1xt0IrglsJCc4vvw9b24EVxMeqTY52o+ ojCfsJXJPW5Yls+3JVrnYRm/OvqA16UbFEo1nLFZ5yJevZTxOQsPtZNFs3NE9hn0 k1G9ufhXReE6J1/RYwx/SGTtYa9CPKS0bYG05uQCeoduHe2kRzDh4VleKm2S4TpM IpFGMw4Va1K246YbiEwMG4NLTnVBoC28NiqnYEX6UxxCYlasVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2Syl1XtXWEslgE0/r6+Hx/YNoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2Y2MzM1MGUtNThhMy0z N2ZhLWI5NDYtNWJmZDQ1YTY3YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQucCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYnDlLvjUrFeNHVFzWaxTrcTTnz419b0g6h7W9y4Qos7uaxGdgLpDro UmhTkockYVLkTZkgacWzWJPMreS516cpnIGIphNR3G3S6S/YU52ba5JQjg6Bx1T2 BmfPGBTSlTjtAXoHKCjFQB9kJzKiAWCJ4RblV++UcYvvTWmtpWg0OFxjVv+rVZo4 CYi+VXOk0/bNmDwk1K1mtSLpb3vsQ/lbu8UqgtF4RZv9wpk1nenaRPQ4svfj8CbQ MD82IcbYTcTgNG2dkn2TwY/KyD5Ana/kFRX6mkFsjC2U8nC6OkFguY31GiFFQvzI j95bVznriNcRiGzzm1Wm55BsgjUTWCg= -----END CERTIFICATE-----Generated at Thu Mar 26 16:55:31 2026 by rpki-client