$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa File: 9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa (raw, json) Hash identifier: 7FmslzRtdaOSEb0hL4ClutgofhTeGkOKCz2D1vr1n4o= Subject key identifier: 80:C5:8F:7B:15:43:B5:56:E7:6C:23:19:8F:23:8F:D1:A4:A8:BE:41 Certificate issuer: /CN=f488b7b9-ef6e-4097-9207-940bc62289f1 Certificate serial: 010D0C9F4328584D300A3E611100FA17DE372080 Authority key identifier: 3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 53889 IP address blocks: 66.235.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3e:61:11:00:fa:17:de:37:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f488b7b9-ef6e-4097-9207-940bc62289f1 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=a161615d-0a69-427e-acd5-a141ea247b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:69:f4:5b:4d:76:30:0b:e9:c4:19:5a:9a:83: 8c:7c:e4:69:30:8f:23:38:65:34:e8:92:38:47:99: f9:bd:a4:bc:fe:bc:ad:70:77:6e:20:87:26:42:13: 2e:53:eb:3e:f7:53:b6:75:88:cc:fd:00:f9:7d:66: 5a:a5:d8:04:20:72:6e:a7:dc:8b:8e:3e:4b:3e:7a: f1:f0:c0:c3:12:13:8b:fa:ba:c3:2b:28:ce:c4:d9: 8b:7d:1e:84:56:06:bf:59:d1:05:fa:e7:88:ca:a1: 6e:0c:3d:08:00:66:d3:63:3b:78:19:42:67:31:10: ec:b4:eb:d4:a1:85:a6:2a:ae:11:e3:13:e9:68:38: 17:de:34:5f:6b:40:b2:52:c1:ad:89:fa:1e:5b:7f: 78:90:f3:40:5d:73:08:76:b8:4b:3f:46:62:da:c4: 5a:d2:75:c2:8d:ea:dc:cd:19:99:7c:88:b2:8e:16: 12:58:f5:0f:78:ca:84:14:1b:e7:da:99:df:21:7b: af:f7:19:5f:57:f3:51:54:bc:97:38:ff:87:f5:6c: cf:ff:30:26:74:a6:bf:86:8d:d3:d8:a9:56:02:68: 75:0a:75:d8:06:c9:c6:30:7b:18:c8:d7:21:e1:9a: 17:86:3f:9d:03:21:7c:49:2e:59:a9:2b:95:6a:f8: 8c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C5:8F:7B:15:43:B5:56:E7:6C:23:19:8F:23:8F:D1:A4:A8:BE:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl X509v3 Authority Key Identifier: keyid:3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer sbgp-ipAddrBlock: critical IPv4: 66.235.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:7a:2c:f3:57:6c:50:b0:bb:43:5b:d3:14:d5:49:82:bf:e9: a2:28:61:4a:29:ec:66:89:da:6e:30:79:1b:ca:5f:15:e8:5e: 85:9e:9c:b0:db:27:45:5d:33:cd:62:1f:4f:51:6c:f3:70:6b: 6b:7c:91:94:62:d5:6a:80:c4:02:78:15:b4:d3:3a:7c:af:52: 85:6f:e2:ee:d5:df:a0:21:db:6d:e6:7a:8b:e3:84:4a:5b:a2: 69:f7:60:ba:f1:db:7d:17:a4:cb:5b:36:02:c3:4f:7c:d4:b6: 37:70:e7:a8:63:f6:30:1c:a8:b4:88:3d:f4:b0:75:d1:d5:7e: 82:d7:56:2d:d9:5b:ff:69:90:f4:6e:3b:7b:e7:98:0a:21:a0: c6:58:95:ff:1b:e4:c9:51:c3:32:41:29:fa:99:5c:1c:51:4c: f9:e0:d2:49:87:91:3d:bf:68:37:62:16:b4:ea:73:e0:c1:2f: 1b:58:49:28:f9:c1:7c:a6:59:42:5c:8f:ee:e4:80:58:ed:28: 99:e5:f5:f9:66:1e:5e:c9:e4:f4:b0:48:4f:95:78:76:98:66: 97:f0:9e:67:02:25:39:2f:fe:a3:be:88:19:91:5a:70:ff:22: a7:6b:32:5a:f8:5d:79:e5:21:79:47:af:84:ad:ca:84:da:8d: e9:ce:24:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCj5hEQD6F943IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ4OGI3YjktZWY2ZS00MDk3LTkyMDctOTQwYmM2MjI4 OWYxMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YTE2MTYxNWQtMGE2OS00MjdlLWFjZDUtYTE0MWVhMjQ3YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimn0W012MAvpxBlamoOMfORpMI8jOGU06JI4 R5n5vaS8/rytcHduIIcmQhMuU+s+91O2dYjM/QD5fWZapdgEIHJup9yLjj5LPnrx 8MDDEhOL+rrDKyjOxNmLfR6EVga/WdEF+ueIyqFuDD0IAGbTYzt4GUJnMRDstOvU oYWmKq4R4xPpaDgX3jRfa0CyUsGtifoeW394kPNAXXMIdrhLP0Zi2sRa0nXCjerc zRmZfIiyjhYSWPUPeMqEFBvn2pnfIXuv9xlfV/NRVLyXOP+H9WzP/zAmdKa/ho3T 2KlWAmh1CnXYBsnGMHsYyNch4ZoXhj+dAyF8SS5ZqSuVaviM/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDFj3sVQ7VW52wjGY8jj9GkqL5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNDg4 YjdiOS1lZjZlLTQwOTctOTIwNy05NDBiYzYyMjg5ZjEvOWI0NTdiYWMtOTE4MS0z ZWNjLThiOGQtNmZhZGQzMDMyY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjQ4OGI3YjktZWY2ZS00MDk3LTky MDctOTQwYmM2MjI4OWYxL2Y0ODhiN2I5LWVmNmUtNDA5Ny05MjA3LTk0MGJjNjIy ODlmMS5jcmwwHwYDVR0jBBgwFoAUPxxUDNtcDmXdBrbdYFiUOGPEBQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNDg4YjdiOS1lZjZlLTQwOTctOTIwNy05NDBi YzYyMjg5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQutoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJt6LPNXbFCwu0Nb0xTVSYK/6aIoYUop7GaJ2m4weRvKXxXoXoWenLDb J0VdM81iH09RbPNwa2t8kZRi1WqAxAJ4FbTTOnyvUoVv4u7V36Ah223meovjhEpb omn3YLrx230XpMtbNgLDT3zUtjdw56hj9jAcqLSIPfSwddHVfoLXVi3ZW/9pkPRu O3vnmAohoMZYlf8b5MlRwzJBKfqZXBxRTPng0kmHkT2/aDdiFrTqc+DBLxtYSSj5 wXymWUJcj+7kgFjtKJnl9flmHl7J5PSwSE+VeHaYZpfwnmcCJTkv/qO+iBmRWnD/ IqdrMlr4XXnlIXlHr4StyoTajenOJPM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:41 2026 by rpki-client