$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/10450cb1-e254-3c5e-9e08-5d331f7755bc.roa File: 10450cb1-e254-3c5e-9e08-5d331f7755bc.roa (raw, json) Hash identifier: oiM8ZS/XA8jcc4AFWBzFxbAzZn9H3vpbsLJe4xonbc0= Subject key identifier: 4A:A4:4F:31:B6:4E:ED:C3:29:92:3B:16:80:CA:D0:3E:B4:3A:42:E1 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D36C14E04D2EF6AE636E7F180 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/10450cb1-e254-3c5e-9e08-5d331f7755bc.roa Signing time: Wed 18 Mar 2026 22:44:43 +0000 ROA not before: Wed 18 Mar 2026 22:44:43 +0000 ROA not after: Tue 16 Jun 2026 22:44:43 +0000 asID: 1421 IP address blocks: 66.39.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:c1:4e:04:d2:ef:6a:e6:36:e7:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 18 22:44:43 2026 GMT Not After : Jun 16 22:44:43 2026 GMT Subject: CN=51f79302-15a8-4a8b-bd7d-1df9784d24b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:89:e9:3a:8b:14:7b:1f:92:6c:3f:4c:dc: 76:9a:df:a7:f9:9a:9f:26:d3:d7:cd:3a:d9:e6:74: 72:5e:97:15:d5:7f:a2:5d:56:48:23:b3:c8:dc:34: 58:bf:95:3c:97:5c:f2:e4:b2:38:d2:98:d1:a2:87: c6:dc:8e:6d:11:d5:76:ee:88:b5:70:86:67:e7:d0: dd:26:2c:55:4c:8d:18:c4:e4:20:fb:7e:e3:9d:57: 49:99:3f:3b:11:ab:e6:86:e5:e1:6a:fd:3e:6b:70: be:87:7b:a9:99:b2:e1:b2:13:ee:b5:19:61:26:c9: 68:c1:6e:df:f5:8e:6d:fc:cc:d2:ef:43:c4:c7:44: 1e:c3:b8:e0:c7:80:d5:47:48:be:88:9d:50:41:38: b3:3e:21:c7:04:a8:66:3a:36:fe:76:91:18:b1:6a: 57:64:80:32:97:b2:62:2e:33:5d:bc:c7:95:b5:8a: 38:1f:b8:2d:ea:1d:60:e1:d2:a6:b4:e9:bb:e8:6e: c2:99:59:ec:6c:2d:31:8b:32:14:52:94:6b:ec:ab: 21:7c:4f:d4:4d:94:73:8c:04:0e:e1:f1:b1:6f:25: cb:aa:17:e0:6d:9a:df:60:31:ff:99:f3:11:91:6a: fe:ad:9f:92:98:7b:1d:bc:26:00:92:8b:d8:6e:ad: 40:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A4:4F:31:B6:4E:ED:C3:29:92:3B:16:80:CA:D0:3E:B4:3A:42:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/10450cb1-e254-3c5e-9e08-5d331f7755bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 66.39.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:58:28:f3:8a:69:37:a0:81:3b:5d:3f:61:c7:ba:91:0a:3e: 4f:50:3f:ce:4d:5b:c1:7a:ed:a3:28:a5:3a:c3:aa:4f:0f:f4: 5c:87:41:c1:86:ae:49:f9:05:16:c4:cc:05:7c:6a:97:82:07: 3e:0e:25:84:fa:cd:35:fc:a7:c3:b6:58:89:a9:e4:50:e1:f1: 68:f2:f0:03:ca:33:ea:6b:43:fe:b3:61:0f:79:66:b8:1d:51: 0a:09:48:be:1e:a7:3d:22:85:38:6a:a5:53:5e:e8:de:b8:aa: 18:62:4b:d4:0e:ab:8b:b1:29:d2:28:dc:6b:d6:ea:34:ff:cb: f0:8f:c4:ef:f0:6a:bd:36:23:5a:87:5b:6b:b5:4b:9a:f8:07: 8c:09:23:42:33:35:55:1a:89:58:c6:06:12:ea:77:c0:05:cb: f6:36:14:ab:8e:8e:8d:69:70:68:13:96:ad:f7:24:f1:24:7a: 7b:c1:a7:3f:3a:23:45:61:46:3a:db:88:74:8c:2b:c5:c9:d3: 44:6e:7a:89:fb:dc:56:dc:de:b2:ca:15:b0:d8:6d:94:f8:81: 3c:f7:3b:e9:60:0e:eb:b7:b5:b4:b1:18:b1:90:38:aa:c3:92: 69:79:56:ad:81:c4:be:56:28:23:52:26:41:8e:d5:2e:39:b0: 5b:67:e8:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02wU4E0u9q5jbn8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMxODIyNDQ0M1oXDTI2MDYxNjIyNDQ0M1owLzEtMCsGA1UEAxMk NTFmNzkzMDItMTVhOC00YThiLWJkN2QtMWRmOTc4NGQyNGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4iJ6TqLFHsfkmw/TNx2mt+n+ZqfJtPXzTrZ 5nRyXpcV1X+iXVZII7PI3DRYv5U8l1zy5LI40pjRoofG3I5tEdV27oi1cIZn59Dd JixVTI0YxOQg+37jnVdJmT87EavmhuXhav0+a3C+h3upmbLhshPutRlhJslowW7f 9Y5t/MzS70PEx0Qew7jgx4DVR0i+iJ1QQTizPiHHBKhmOjb+dpEYsWpXZIAyl7Ji LjNdvMeVtYo4H7gt6h1g4dKmtOm76G7CmVnsbC0xizIUUpRr7KshfE/UTZRzjAQO 4fGxbyXLqhfgbZrfYDH/mfMRkWr+rZ+SmHsdvCYAkovYbq1AkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqkTzG2Tu3DKZI7FoDK0D60OkLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMTA0NTBjYjEtZTI1NC0z YzVlLTllMDgtNWQzMzFmNzc1NWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQifSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1YKPOKaTeggTtdP2HHupEKPk9QP85NW8F67aMopTrDqk8P9FyHQcGG rkn5BRbEzAV8apeCBz4OJYT6zTX8p8O2WImp5FDh8Wjy8APKM+prQ/6zYQ95Zrgd UQoJSL4epz0ihThqpVNe6N64qhhiS9QOq4uxKdIo3GvW6jT/y/CPxO/war02I1qH W2u1S5r4B4wJI0IzNVUaiVjGBhLqd8AFy/Y2FKuOjo1pcGgTlq33JPEkenvBpz86 I0VhRjrbiHSMK8XJ00Rueon73Fbc3rLKFbDYbZT4gTz3O+lgDuu3tbSxGLGQOKrD kml5Vq2BxL5WKCNSJkGO1S45sFtn6DE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:35:44 2026 by rpki-client