$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/36476fee-e789-367a-851d-ce15bafabbbd.roa File: 36476fee-e789-367a-851d-ce15bafabbbd.roa (raw, json) Hash identifier: jA/3QepQqv+Q6ndM1q80+BaWEeECgjsmqNdAa2hzYEM= Subject key identifier: 4F:22:4A:73:B0:C5:5B:D0:8C:2E:78:BE:8D:20:7F:72:FB:12:FC:15 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D36C152B136B1D77EA3681040 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/36476fee-e789-367a-851d-ce15bafabbbd.roa Signing time: Wed 18 Mar 2026 22:44:45 +0000 ROA not before: Wed 18 Mar 2026 22:44:45 +0000 ROA not after: Tue 16 Jun 2026 22:44:45 +0000 asID: 26348 IP address blocks: 66.39.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:c1:52:b1:36:b1:d7:7e:a3:68:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 18 22:44:45 2026 GMT Not After : Jun 16 22:44:45 2026 GMT Subject: CN=29d560d2-5d90-4b8c-9335-395914c6c393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:71:3d:89:bb:74:b5:1b:80:08:59:23:5a: b3:59:ba:72:bd:f0:90:3e:a2:73:69:11:be:46:9f: 1b:e5:66:18:2c:db:8e:cf:c9:58:8c:5a:db:05:dd: c0:13:4e:a2:a7:3f:11:9b:a7:97:38:59:c0:ed:7b: 6c:36:fd:3a:28:cd:46:7f:ea:c1:52:fc:5c:36:71: 1e:08:41:01:75:e4:e8:bf:89:12:ab:ad:2c:ed:e9: 47:2d:3e:7f:93:6c:1b:80:90:da:94:a9:28:2a:31: b0:4e:49:c3:29:cc:e6:34:57:a1:51:d7:be:1a:a3: b0:1d:bc:de:7a:74:2c:fa:54:f7:35:52:39:4a:ad: bd:f0:4d:a9:6c:27:4b:16:41:43:ec:3f:33:f8:91: ae:17:73:39:ed:ed:4f:81:66:bd:9c:8c:d6:69:13: a7:dc:d6:93:c6:29:3b:4d:21:96:27:89:be:93:bf: 58:e3:16:ef:d4:cf:78:cb:57:7e:1e:00:16:4e:0d: 4a:58:63:f7:df:6f:78:11:46:f1:4b:91:77:ad:57: 60:21:66:13:de:2c:fe:53:d5:e6:12:79:78:1b:ff: a5:cd:94:a9:5e:cc:01:ed:17:07:cc:84:cd:5a:a4: 7a:e7:ff:b3:19:c5:2e:b2:77:75:a0:0c:43:9a:72: 39:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:22:4A:73:B0:C5:5B:D0:8C:2E:78:BE:8D:20:7F:72:FB:12:FC:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/36476fee-e789-367a-851d-ce15bafabbbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 66.39.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d3:95:59:a9:32:2d:4d:58:ba:17:66:9b:e4:e6:7b:a8:02: 36:7b:9f:b6:32:48:8c:a9:6e:3b:b9:ae:35:13:78:ec:22:36: 4e:7e:01:3a:75:d8:7c:ea:b7:10:63:23:54:14:c4:db:0d:a7: b6:50:e6:07:f0:3a:b6:be:1f:de:ce:ca:0a:8b:e2:7b:25:94: 17:8c:a6:da:96:58:fa:ff:ec:2b:e3:4c:32:ac:11:3f:1f:16: 52:80:69:9e:b3:92:60:98:fa:98:b2:6d:1a:2c:94:f0:70:2f: 9b:8d:15:66:02:58:48:15:d7:c5:f5:d0:42:51:ab:b7:63:aa: 74:e2:08:c9:c8:35:41:7c:ea:fd:71:c2:7e:96:05:6a:41:66: c5:e7:41:9f:bb:c7:d5:8e:97:6f:d8:28:dd:7b:93:3a:6a:bb: e0:4d:73:50:cf:60:8f:f0:4e:fb:9c:fd:d8:de:81:fb:56:c7: 7d:f0:b8:a6:63:1d:37:da:8e:a6:35:37:f6:cd:d6:66:c5:31: 00:7e:46:c3:80:6b:7f:f4:81:3f:2a:dd:46:e7:a1:8a:55:44: d7:81:b1:08:ec:58:d9:28:77:a2:f3:ce:6a:00:dc:75:ca:f0: 10:1b:29:67:ec:5c:e8:05:d7:39:81:30:8d:da:72:3a:bc:0f: 71:b8:9e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02wVKxNrHXfqNoEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMxODIyNDQ0NVoXDTI2MDYxNjIyNDQ0NVowLzEtMCsGA1UEAxMk MjlkNTYwZDItNWQ5MC00YjhjLTkzMzUtMzk1OTE0YzZjMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp05xPYm7dLUbgAhZI1qzWbpyvfCQPqJzaRG+ Rp8b5WYYLNuOz8lYjFrbBd3AE06ipz8Rm6eXOFnA7XtsNv06KM1Gf+rBUvxcNnEe CEEBdeTov4kSq60s7elHLT5/k2wbgJDalKkoKjGwTknDKczmNFehUde+GqOwHbze enQs+lT3NVI5Sq298E2pbCdLFkFD7D8z+JGuF3M57e1PgWa9nIzWaROn3NaTxik7 TSGWJ4m+k79Y4xbv1M94y1d+HgAWTg1KWGP33294EUbxS5F3rVdgIWYT3iz+U9Xm Enl4G/+lzZSpXswB7RcHzITNWqR65/+zGcUusnd1oAxDmnI55QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8iSnOwxVvQjC54vo0gf3L7EvwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMzY0NzZmZWUtZTc4OS0z NjdhLTg1MWQtY2UxNWJhZmFiYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQifVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTTlVmpMi1NWLoXZpvk5nuoAjZ7n7YySIypbju5rjUTeOwiNk5+ATp1 2HzqtxBjI1QUxNsNp7ZQ5gfwOra+H97OygqL4nsllBeMptqWWPr/7CvjTDKsET8f FlKAaZ6zkmCY+piybRoslPBwL5uNFWYCWEgV18X10EJRq7djqnTiCMnINUF86v1x wn6WBWpBZsXnQZ+7x9WOl2/YKN17kzpqu+BNc1DPYI/wTvuc/djegftWx33wuKZj HTfajqY1N/bN1mbFMQB+RsOAa3/0gT8q3UbnoYpVRNeBsQjsWNkod6LzzmoA3HXK 8BAbKWfsXOgF1zmBMI3acjq8D3G4nlc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:35:42 2026 by rpki-client