$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/f987cdce-08f6-37e1-b71a-8744a7f7a90e.roa File: f987cdce-08f6-37e1-b71a-8744a7f7a90e.roa (raw, json) Hash identifier: U9Lf9xfp6PAhfD0eyp3q5c3LFDwD92ofd6LZF3Fy0OQ= Subject key identifier: 3B:CB:B5:F0:FA:DE:7E:A3:41:FA:B9:B7:7C:D2:92:4B:F4:34:13:A1 Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584D47C4D3D61DDDD48322B41500 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/f987cdce-08f6-37e1-b71a-8744a7f7a90e.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 399804 IP address blocks: 66.187.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:d3:d6:1d:dd:d4:83:22:b4:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=9a8ba48d-25d4-4a9a-98c5-99eb4200cae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c4:88:e9:bd:fe:87:7c:72:03:54:62:2f:c3: 25:c6:d8:71:41:ff:8e:b7:2f:13:05:ba:b7:6d:34: 24:f8:f0:ad:34:f2:0f:47:f3:de:5b:2c:18:d1:8c: 6f:6d:cd:fd:58:00:85:dc:5d:b7:e3:d3:b2:76:d7: 47:db:fb:5a:9a:a4:cf:a8:2b:d0:7c:26:c0:74:1d: 87:7b:67:4f:01:3e:8b:33:3f:3d:11:dc:11:41:8a: c5:ca:60:02:b5:ce:0b:aa:ea:53:7c:9e:c7:a0:92: a6:0b:ba:45:98:a8:2c:44:ff:71:2a:4b:84:f0:8b: 53:97:fd:85:69:4f:6a:1d:60:2a:70:32:07:34:bf: e2:02:8c:83:bb:8c:bf:0d:2a:3c:d8:b2:a1:fc:c4: 77:8f:2b:13:64:e1:b9:64:8a:a1:3a:7e:c2:b6:29: b3:91:7e:37:32:93:3c:13:0e:0f:e5:12:19:38:76: d7:9b:e3:d7:3d:b5:5a:5e:31:e2:f5:c7:99:51:72: d3:24:40:5f:0c:79:11:ad:3e:28:cf:cf:3f:d3:b7: 8a:b9:1c:20:85:5e:9d:a0:d3:65:93:aa:58:2a:a7: fa:c4:6b:6d:f2:ec:0b:bb:7d:4b:e1:9c:e8:d4:3a: 5a:02:6f:14:f0:c6:18:d6:34:39:26:fd:36:c7:4d: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CB:B5:F0:FA:DE:7E:A3:41:FA:B9:B7:7C:D2:92:4B:F4:34:13:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/f987cdce-08f6-37e1-b71a-8744a7f7a90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv4: 66.187.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9f:49:68:77:4d:a8:45:f8:63:6d:f9:3c:bd:a4:07:73:b9: 64:13:1f:e6:a7:b8:b1:2b:88:8a:e9:1c:55:e0:fa:45:90:ba: 01:c5:8e:be:31:fb:2a:cb:88:6b:fd:c7:f4:f0:6b:ee:77:e8: e6:3f:39:7a:65:a7:b0:86:8e:5d:4e:24:2e:b8:0e:a7:6a:96: 12:c6:2a:a4:e2:35:cd:58:45:ed:dc:d8:03:32:45:c8:78:74: a4:5c:24:4d:82:ab:b4:1d:32:49:a6:34:79:a0:40:70:b2:c8: e6:6f:24:f2:58:d9:2d:db:56:93:80:a2:91:42:5d:a6:9f:e8: 52:d2:54:d6:a1:db:36:88:f8:c7:72:58:f9:7d:ce:c4:bf:29: 7f:e8:90:4c:78:ff:a5:d5:73:70:07:32:11:8c:28:1d:d8:05: d7:16:ef:b8:cf:f4:1a:d0:fe:db:78:76:dc:da:dc:a2:93:dd: 6d:ec:7a:96:dc:45:2b:10:b0:26:0b:26:8d:ee:84:c7:f3:e9: ad:41:81:16:47:f2:b3:79:4e:4e:19:48:8d:9f:13:16:ed:8c: 6f:c6:a9:cf:b1:91:a8:52:30:29:e0:ca:62:a8:54:31:73:65: d8:03:c9:92:bd:90:2d:20:8b:33:f7:5f:7e:8b:2f:a8:ee:bd: e5:39:7d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxNPWHd3UgyK0FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk OWE4YmE0OGQtMjVkNC00YTlhLTk4YzUtOTllYjQyMDBjYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8SI6b3+h3xyA1RiL8MlxthxQf+Oty8TBbq3 bTQk+PCtNPIPR/PeWywY0Yxvbc39WACF3F2349OydtdH2/tamqTPqCvQfCbAdB2H e2dPAT6LMz89EdwRQYrFymACtc4LqupTfJ7HoJKmC7pFmKgsRP9xKkuE8ItTl/2F aU9qHWAqcDIHNL/iAoyDu4y/DSo82LKh/MR3jysTZOG5ZIqhOn7CtimzkX43MpM8 Ew4P5RIZOHbXm+PXPbVaXjHi9ceZUXLTJEBfDHkRrT4oz88/07eKuRwghV6doNNl k6pYKqf6xGtt8uwLu31L4Zzo1DpaAm8U8MYY1jQ5Jv02x01kUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvLtfD63n6jQfq5t3zSkkv0NBOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvZjk4N2NkY2UtMDhmNi0z N2UxLWI3MWEtODc0NGE3ZjdhOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrsGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGfSWh3TahF+GNt+Ty9pAdzuWQTH+anuLEriIrpHFXg+kWQugHFjr4x +yrLiGv9x/Twa+536OY/OXplp7CGjl1OJC64DqdqlhLGKqTiNc1YRe3c2AMyRch4 dKRcJE2Cq7QdMkmmNHmgQHCyyOZvJPJY2S3bVpOAopFCXaaf6FLSVNah2zaI+Mdy WPl9zsS/KX/okEx4/6XVc3AHMhGMKB3YBdcW77jP9BrQ/tt4dtza3KKT3W3sepbc RSsQsCYLJo3uhMfz6a1BgRZH8rN5Tk4ZSI2fExbtjG/Gqc+xkahSMCngymKoVDFz ZdgDyZK9kC0gizP3X36LL6juveU5fWs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:37:15 2026 by rpki-client