$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4b68678e-021f-3536-acd6-84f61ed7e1d0.roa File: 4b68678e-021f-3536-acd6-84f61ed7e1d0.roa (raw, json) Hash identifier: Z/beB7PdGuDVEIORavz6fnoEMuKjO87oJJnF+gIN6sw= Subject key identifier: A0:A9:3F:59:65:E1:04:E9:BD:FE:15:DA:9A:7A:D2:0A:00:09:CD:D4 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D36C150CD1BAD0C151D4BED20 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4b68678e-021f-3536-acd6-84f61ed7e1d0.roa Signing time: Wed 18 Mar 2026 22:44:44 +0000 ROA not before: Wed 18 Mar 2026 22:44:44 +0000 ROA not after: Tue 16 Jun 2026 22:44:44 +0000 asID: 1421 IP address blocks: 66.39.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:c1:50:cd:1b:ad:0c:15:1d:4b:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 18 22:44:44 2026 GMT Not After : Jun 16 22:44:44 2026 GMT Subject: CN=a22797b2-a91a-43f0-b105-8b54db431603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:a9:32:b5:25:51:9d:8e:86:8f:10:c8:3e: ed:7f:6c:0a:80:f3:d2:cd:8f:4f:d6:5f:43:16:2d: 7d:bd:cb:04:fc:63:b7:db:91:11:40:f3:a3:08:eb: 12:b9:c6:0d:57:5c:e3:ef:16:63:36:a2:90:01:9a: da:09:d4:e3:ba:62:16:4f:0e:2d:0e:64:cc:c6:88: db:5f:f5:e5:76:c3:06:b9:10:a9:3f:60:71:eb:49: 6f:a9:a0:5c:f5:f9:1a:5f:8f:b1:7b:ff:60:c0:c4: 9a:e5:c3:da:2b:0e:8a:38:92:07:bd:5c:f0:17:79: 32:ae:05:f4:9e:67:20:8b:60:5f:15:13:16:2b:32: bf:46:09:88:3b:7d:bc:92:7d:b7:7f:7a:cf:4e:11: 2c:e0:ad:a5:e4:fd:ed:ac:46:60:3f:e9:81:ce:25: bb:a3:db:77:46:7a:bf:a8:a2:58:97:5e:50:69:4a: ee:1e:cb:bf:7b:d5:af:43:00:9c:e6:d2:92:11:40: a4:d1:66:9a:68:a7:b9:43:63:5e:45:09:c5:05:50: 6a:ad:1e:f4:c6:98:dc:84:3c:38:c2:8d:fd:75:ba: fa:a9:30:11:bd:dd:ac:14:55:20:03:eb:bf:a0:1c: 7f:fe:1b:55:55:00:dc:cf:14:64:eb:9c:cf:21:bc: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A9:3F:59:65:E1:04:E9:BD:FE:15:DA:9A:7A:D2:0A:00:09:CD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4b68678e-021f-3536-acd6-84f61ed7e1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 66.39.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ab:62:71:e9:a7:fc:5b:e1:ac:5d:26:4f:aa:50:05:5c:59: b9:a4:13:b2:9e:17:9d:95:af:07:72:c6:53:73:8b:9b:62:03: fa:4d:97:d0:68:92:13:24:37:c9:e0:cd:fe:96:77:33:c5:ad: 0f:29:85:08:c0:a6:30:63:3b:46:20:f9:11:a3:bf:c3:04:11: 7e:99:f0:1e:6c:02:ef:4d:d9:27:19:8c:18:0f:9d:a9:d9:e3: 11:f0:c5:ab:09:46:38:13:f5:e1:06:da:a4:bb:e7:1d:9b:89: 30:e5:ca:39:2b:1f:54:40:52:d9:ca:d7:8a:ca:95:20:9c:69: 53:e7:bd:c7:cb:22:bf:32:08:7b:1b:2c:b7:ea:2e:9d:e0:7a: 45:05:16:c2:a5:47:95:dc:14:18:ea:24:79:9b:fa:84:be:c5: 45:70:bb:96:82:bc:7b:8f:be:22:a4:bc:29:cd:7d:00:0b:48: 40:bb:bb:4a:e7:51:7c:25:94:31:95:58:58:94:26:45:50:ba: 20:cd:fb:43:78:9f:4c:2d:df:95:76:a5:04:59:17:6f:bf:6c: aa:03:96:0c:47:b5:a8:4d:b8:c1:ad:d7:02:9f:fb:eb:e7:9f: 24:63:a4:40:0f:58:66:27:2c:fe:37:03:29:bd:56:3c:06:e9: 64:67:99:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02wVDNG60MFR1L7SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMxODIyNDQ0NFoXDTI2MDYxNjIyNDQ0NFowLzEtMCsGA1UEAxMk YTIyNzk3YjItYTkxYS00M2YwLWIxMDUtOGI1NGRiNDMxNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnCpMrUlUZ2Oho8QyD7tf2wKgPPSzY9P1l9D Fi19vcsE/GO325ERQPOjCOsSucYNV1zj7xZjNqKQAZraCdTjumIWTw4tDmTMxojb X/XldsMGuRCpP2Bx60lvqaBc9fkaX4+xe/9gwMSa5cPaKw6KOJIHvVzwF3kyrgX0 nmcgi2BfFRMWKzK/RgmIO328kn23f3rPThEs4K2l5P3trEZgP+mBziW7o9t3Rnq/ qKJYl15QaUruHsu/e9WvQwCc5tKSEUCk0WaaaKe5Q2NeRQnFBVBqrR70xpjchDw4 wo39dbr6qTARvd2sFFUgA+u/oBx//htVVQDczxRk65zPIbzy5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCpP1ll4QTpvf4V2pp60goACc3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNGI2ODY3OGUtMDIxZi0z NTM2LWFjZDYtODRmNjFlZDdlMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQifeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6rYnHpp/xb4axdJk+qUAVcWbmkE7KeF52VrwdyxlNzi5tiA/pNl9Bo khMkN8ngzf6WdzPFrQ8phQjApjBjO0Yg+RGjv8MEEX6Z8B5sAu9N2ScZjBgPnanZ 4xHwxasJRjgT9eEG2qS75x2biTDlyjkrH1RAUtnK14rKlSCcaVPnvcfLIr8yCHsb LLfqLp3gekUFFsKlR5XcFBjqJHmb+oS+xUVwu5aCvHuPviKkvCnNfQALSEC7u0rn UXwllDGVWFiUJkVQuiDN+0N4n0wt35V2pQRZF2+/bKoDlgxHtahNuMGt1wKf++vn nyRjpEAPWGYnLP43Aym9VjwG6WRnmbA= -----END CERTIFICATE-----Generated at Thu Mar 26 09:18:47 2026 by rpki-client