$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/0be2d864-778a-3d88-b580-fc11211d94f8.roa File: 0be2d864-778a-3d88-b580-fc11211d94f8.roa (raw, json) Hash identifier: uampv+E7eLQVobsTTo73XWg3aIlfyDqFFlufQJytFOs= Subject key identifier: EB:FD:AE:27:17:22:18:F8:27:42:CC:B9:73:2F:16:BE:7C:30:3C:E2 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D36C0E2D541A067398E2F9840 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/0be2d864-778a-3d88-b580-fc11211d94f8.roa Signing time: Wed 18 Mar 2026 22:43:52 +0000 ROA not before: Wed 18 Mar 2026 22:43:52 +0000 ROA not after: Tue 16 Jun 2026 22:43:52 +0000 asID: 16740 IP address blocks: 66.39.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:c0:e2:d5:41:a0:67:39:8e:2f:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 18 22:43:52 2026 GMT Not After : Jun 16 22:43:52 2026 GMT Subject: CN=6d8ae7c5-ace8-463f-aa89-94cd8b2c7f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:b6:01:ba:3c:e7:3c:35:61:72:65:7e:d1: 67:12:39:85:70:e8:6a:ed:3b:c5:32:76:04:e4:0f: 66:c0:d0:99:74:e8:bf:58:c7:10:6e:fa:3e:d6:8b: 38:92:87:a4:77:d0:ba:69:6e:b7:94:59:bf:d2:73: 78:25:bf:4e:6d:28:73:b4:f5:bd:47:bf:48:36:f5: 49:8c:47:c5:dc:41:8c:87:b0:5e:21:21:37:03:9e: 57:5b:ff:e4:3d:37:89:6b:f4:0a:ca:16:1c:47:33: de:0a:43:1a:51:77:bd:61:fc:b3:9b:fd:5c:c6:da: 3f:99:c4:d2:ee:f2:58:ad:71:0f:68:85:df:8a:15: 69:d8:08:ef:06:9c:3d:ba:13:e6:5f:e6:0f:4d:82: 0b:2e:e0:c2:ee:27:10:f0:10:02:7c:82:11:42:b3: 9f:35:d4:79:22:a5:8a:35:80:fc:21:c0:76:6b:c8: d7:97:2b:07:a2:0c:38:27:47:cc:54:56:e1:7f:49: 16:7f:9d:39:1b:43:98:3c:d9:59:c7:68:a8:be:37: 7f:2e:08:84:21:7a:fa:4e:9d:fc:89:36:7d:8d:01: 7b:55:3d:ca:97:48:8e:e7:4f:fa:06:c3:7d:cb:fa: 07:2e:34:09:9a:a6:4d:4f:f9:a9:d1:45:4b:83:72: 93:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FD:AE:27:17:22:18:F8:27:42:CC:B9:73:2F:16:BE:7C:30:3C:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/0be2d864-778a-3d88-b580-fc11211d94f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 66.39.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d6:09:b7:99:93:3a:f3:ff:a3:16:74:73:f4:8c:1a:23:90: e1:dd:72:1a:64:59:21:c1:6d:58:c6:73:67:90:e1:46:8e:ef: 7e:5e:4e:64:3f:4a:d7:26:75:05:7a:a3:8f:18:75:d2:fe:02: a2:10:a2:fe:c9:68:9d:41:b3:51:e3:36:20:ca:11:36:91:e8: a9:eb:35:b8:ed:b5:73:7b:cc:8c:8d:13:b3:47:f6:d3:a8:bf: 79:4d:ac:c0:0a:30:4d:cf:7b:b5:78:41:39:80:a9:c8:d1:35: c9:e1:0b:a9:c5:da:b7:8d:fe:cf:b0:0d:b9:2f:6b:56:41:f6: af:06:fe:23:17:c0:00:09:e9:4f:b4:4a:42:d9:f1:e0:bf:1e: 0a:a4:c1:37:ee:a3:27:14:88:f9:87:6b:a5:89:61:06:ee:64: 20:8f:ce:a1:dd:8a:56:78:4f:63:ae:b8:7a:06:ea:01:3d:35: b1:74:99:9f:f8:73:08:eb:32:6e:33:87:e7:33:71:23:7a:5a: a6:7c:f8:f0:86:84:fc:c5:c6:1f:c7:86:15:0d:80:6c:34:ec: 84:a6:89:97:27:29:15:cd:61:1c:1b:3c:d0:56:ec:85:66:34: 05:a8:9f:d3:20:de:67:c3:6c:07:f3:a6:d7:a8:3f:39:44:57: 6f:81:d4:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02wOLVQaBnOY4vmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMxODIyNDM1MloXDTI2MDYxNjIyNDM1MlowLzEtMCsGA1UEAxMk NmQ4YWU3YzUtYWNlOC00NjNmLWFhODktOTRjZDhiMmM3ZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptq2Abo85zw1YXJlftFnEjmFcOhq7TvFMnYE 5A9mwNCZdOi/WMcQbvo+1os4koekd9C6aW63lFm/0nN4Jb9ObShztPW9R79INvVJ jEfF3EGMh7BeISE3A55XW//kPTeJa/QKyhYcRzPeCkMaUXe9Yfyzm/1cxto/mcTS 7vJYrXEPaIXfihVp2AjvBpw9uhPmX+YPTYILLuDC7icQ8BACfIIRQrOfNdR5IqWK NYD8IcB2a8jXlysHogw4J0fMVFbhf0kWf505G0OYPNlZx2iovjd/LgiEIXr6Tp38 iTZ9jQF7VT3Kl0iO50/6BsN9y/oHLjQJmqZNT/mp0UVLg3KTLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOv9ricXIhj4J0LMuXMvFr58MDziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMGJlMmQ4NjQtNzc4YS0z ZDg4LWI1ODAtZmMxMTIxMWQ5NGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQifRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbWCbeZkzrz/6MWdHP0jBojkOHdchpkWSHBbVjGc2eQ4UaO735eTmQ/ StcmdQV6o48YddL+AqIQov7JaJ1Bs1HjNiDKETaR6KnrNbjttXN7zIyNE7NH9tOo v3lNrMAKME3Pe7V4QTmAqcjRNcnhC6nF2reN/s+wDbkva1ZB9q8G/iMXwAAJ6U+0 SkLZ8eC/HgqkwTfuoycUiPmHa6WJYQbuZCCPzqHdilZ4T2OuuHoG6gE9NbF0mZ/4 cwjrMm4zh+czcSN6WqZ8+PCGhPzFxh/HhhUNgGw07ISmiZcnKRXNYRwbPNBW7IVm NAWon9Mg3mfDbAfzpteoPzlEV2+B1DM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:06:19 2026 by rpki-client