$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa File: 09ef4b44-ba95-30f1-91ff-60c41204628c.roa (raw, json) Hash identifier: 44LxGEeqmLpooWYMX3mvuVokgRwDoPaC/ZSXSP6sFzs= Subject key identifier: 94:A9:C6:6A:26:46:88:6A:04:AD:30:44:F1:BC:C8:51:7C:1F:75:EA Certificate issuer: /CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Certificate serial: 010D0C9F4328584D492A61345764DFE1F0D11880 Authority key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 13917 IP address blocks: 66.206.160.0/20 maxlen: 20 66.206.175.0/24 maxlen: 24 2606:f000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:61:34:57:64:df:e1:f0:d1:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=66d5e45b-de82-4599-8815-3e6500c03bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:34:fb:8c:7a:0c:35:98:76:af:cb:aa:6c: 2f:47:9a:1e:8a:8a:14:7b:e9:fb:77:1b:44:a1:01: c0:65:79:51:b7:26:0c:f8:79:fc:22:43:cd:b4:bf: 18:7e:73:22:c5:cd:e1:03:34:77:03:ba:a5:5f:1a: 59:93:5e:86:de:12:06:4a:13:aa:c3:08:d5:4b:df: ba:c7:ea:54:0c:6f:86:f0:d9:9a:cd:ae:c6:72:82: f7:e0:51:ed:1a:6e:18:aa:35:19:58:a6:51:15:82: b5:42:77:57:de:cf:c6:72:46:fa:c0:f3:02:2b:60: c5:af:be:d7:4a:7a:60:83:68:8c:c9:c9:75:d9:d7: 0d:96:85:14:ff:ab:67:f1:e6:b3:5e:33:e7:69:28: e7:86:de:51:c4:e5:e5:ee:86:67:b6:fa:8e:c0:8e: 7d:3f:aa:0a:6d:f2:40:15:47:02:cb:ae:7f:12:81: a8:ce:be:3b:d7:96:05:94:ab:43:5a:18:14:8b:da: 74:fa:9a:1e:2d:07:02:15:af:da:2e:22:94:77:04: 9c:c7:98:2d:5e:cc:c4:cd:32:c3:d0:66:7d:25:60: 36:f2:7e:b0:77:84:b2:94:f9:02:3c:da:28:da:70: f4:cb:5b:c4:7d:4b:b0:9f:7d:5f:38:cd:d5:d9:95: 5c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A9:C6:6A:26:46:88:6A:04:AD:30:44:F1:BC:C8:51:7C:1F:75:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl X509v3 Authority Key Identifier: keyid:9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer sbgp-ipAddrBlock: critical IPv4: 66.206.160.0/20 IPv6: 2606:f000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:70:4f:21:27:fa:59:05:2f:ed:bd:e5:b5:7c:78:24:1b:7f: 03:7c:bc:db:02:0e:44:c8:ce:9c:c5:54:d6:95:93:bd:2e:44: 12:06:52:4e:e6:99:4c:09:6d:c2:b1:78:78:8f:75:7a:58:dd: 0d:4d:2e:45:6e:0b:32:cc:45:90:62:58:90:bc:b4:12:a8:18: 10:82:4d:74:13:f4:59:56:1d:44:ca:3d:b9:f0:a7:44:e1:bf: f6:f1:bf:a0:dc:bf:31:82:a2:42:f7:9d:b2:9d:e2:85:05:a3: 65:69:4c:06:83:9b:76:f5:c5:6f:41:22:8c:8a:00:96:01:46: b0:0f:44:1d:45:20:d1:3a:1e:ac:4d:ed:9d:ed:89:59:e4:63: e2:6c:be:25:30:06:ed:f6:91:89:9b:1c:21:a1:17:75:95:91: 7e:f5:cc:e9:cd:97:b9:18:11:31:e1:28:f9:c1:50:3d:21:80: 58:8d:ca:03:d6:e2:cb:a9:a8:a7:13:8a:0c:fc:b0:30:84:14: 8a:c9:7c:b3:06:e6:fe:16:31:57:64:8a:eb:d7:3e:8c:f6:9f: e9:e6:c4:71:68:88:59:4a:10:21:86:d5:14:7f:67:16:db:1b: c1:98:70:ea:f9:e9:45:b6:32:23:39:6d:ba:4f:aa:27:95:d2: 87:e1:bf:1a -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE1JKmE0V2Tf4fDRGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1 YjhiMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NjZkNWU0NWItZGU4Mi00NTk5LTg4MTUtM2U2NTAwYzAzYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8I0+4x6DDWYdq/LqmwvR5oeiooUe+n7dxtE oQHAZXlRtyYM+Hn8IkPNtL8YfnMixc3hAzR3A7qlXxpZk16G3hIGShOqwwjVS9+6 x+pUDG+G8Nmaza7GcoL34FHtGm4YqjUZWKZRFYK1QndX3s/Gckb6wPMCK2DFr77X Snpgg2iMycl12dcNloUU/6tn8eazXjPnaSjnht5RxOXl7oZntvqOwI59P6oKbfJA FUcCy65/EoGozr4715YFlKtDWhgUi9p0+poeLQcCFa/aLiKUdwScx5gtXszEzTLD 0GZ9JWA28n6wd4SylPkCPNoo2nD0y1vEfUuwn31fOM3V2ZVcUwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJSpxmomRohqBK0wRPG8yFF8H3XqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMx ZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvMDllZjRiNDQtYmE5NS0z MGYxLTkxZmYtNjBjNDEyMDQ2MjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDEzMWZmYWEtODVmMi00YmQ1LTg5 NjEtOWRjOGFkZjE1YjhiL2QxMzFmZmFhLTg1ZjItNGJkNS04OTYxLTlkYzhhZGYx NWI4Yi5jcmwwHwYDVR0jBBgwFoAUnxc+xPRbxWcgps2BFQ3CS2MpTvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4 YWRmMTViOGIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEQs6gMA0E AgACMAcDBQAmBvAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAC9wTyEn+lkFL+295bV8eCQbfwN8vNsCDkTI zpzFVNaVk70uRBIGUk7mmUwJbcKxeHiPdXpY3Q1NLkVuCzLMRZBiWJC8tBKoGBCC TXQT9FlWHUTKPbnwp0Thv/bxv6DcvzGCokL3nbKd4oUFo2VpTAaDm3b1xW9BIoyK AJYBRrAPRB1FINE6HqxN7Z3tiVnkY+JsviUwBu32kYmbHCGhF3WVkX71zOnNl7kY ETHhKPnBUD0hgFiNygPW4supqKcTigz8sDCEFIrJfLMG5v4WMVdkiuvXPoz2n+nm xHFoiFlKECGG1RR/ZxbbG8GYcOr56UW2MiM5bbpPqieV0ofhvxo= -----END CERTIFICATE-----Generated at Thu Mar 26 23:49:56 2026 by rpki-client