$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/56a1b704-2db0-3a0a-babf-ffbb16294219.roa File: 56a1b704-2db0-3a0a-babf-ffbb16294219.roa (raw, json) Hash identifier: 0AC3rRMvic7ZV3dNr6rsWMuc9TpDp+x9ifO1jVxMcGw= Subject key identifier: DB:71:DF:B4:DF:E6:93:ED:A0:EE:9D:2B:82:0E:95:E9:A7:D4:89:F2 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D36C0E1E7D0879D49BEF6C8C0 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/56a1b704-2db0-3a0a-babf-ffbb16294219.roa Signing time: Wed 18 Mar 2026 22:43:52 +0000 ROA not before: Wed 18 Mar 2026 22:43:52 +0000 ROA not after: Tue 16 Jun 2026 22:43:52 +0000 asID: 16740 IP address blocks: 66.39.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:c0:e1:e7:d0:87:9d:49:be:f6:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 18 22:43:52 2026 GMT Not After : Jun 16 22:43:52 2026 GMT Subject: CN=178923f1-c962-4edc-acd3-02cb67d43c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:58:f8:c8:04:12:3c:81:30:d6:53:83:71:d5: 6d:d8:80:11:c8:a3:88:88:da:82:44:87:b8:54:43: 29:12:28:3f:61:55:ff:fe:99:e0:5e:0f:4f:b7:f9: 24:5e:b6:56:72:92:be:6e:1f:4b:23:c4:9b:b4:f0: b0:d3:e3:61:8d:d2:ec:0a:f9:bf:c5:fd:08:fb:22: a2:8b:03:bb:bf:62:9c:7d:65:f1:fb:55:d0:7c:b8: d8:37:7d:4a:81:a3:a0:0e:55:8d:aa:e9:74:ec:8a: 85:68:75:04:f4:f8:1b:d5:df:c2:82:a1:ff:ad:51: 10:c9:13:7b:96:94:67:50:6d:27:19:ee:e6:91:3e: 88:89:a3:80:db:8c:7d:b4:10:1c:c3:29:57:86:2f: 3b:f1:6c:d8:57:09:e5:5a:c5:d6:39:3b:63:8e:e1: e5:03:b7:13:ca:8e:a8:7a:9f:0a:f0:e2:45:99:37: 6b:99:56:7b:55:07:49:b7:52:e5:89:70:35:9a:b8: 82:79:d1:ed:fe:89:30:37:60:df:6d:4b:b7:9b:c7: 4b:f0:d5:de:c2:8c:f9:40:dc:13:8a:24:b0:c1:4b: b7:72:6a:ef:92:49:82:42:78:90:55:ca:be:62:d0: 1a:16:5e:e3:e7:04:d1:ea:43:b7:fc:4f:f1:7d:13: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:71:DF:B4:DF:E6:93:ED:A0:EE:9D:2B:82:0E:95:E9:A7:D4:89:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/56a1b704-2db0-3a0a-babf-ffbb16294219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 66.39.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9f:23:1a:7e:dc:21:e7:a6:59:e0:b6:4a:d3:af:3e:b2:e9: 49:44:7a:ee:fa:cd:5f:99:24:a7:50:67:4d:0e:f9:6a:85:15: eb:c5:da:9a:50:83:f0:84:5e:b9:6f:bf:02:78:df:d6:af:ca: 2d:8b:8f:4f:07:f7:0c:4e:81:92:3a:5c:1b:75:29:87:8d:cb: d8:89:81:25:1c:f3:69:e9:e1:72:dc:33:db:5e:00:e5:38:bb: cb:76:65:4d:28:aa:6a:4f:79:49:ff:ef:95:4a:77:ee:38:75: e1:09:e8:eb:46:5d:85:a0:6a:db:2b:c3:57:90:fd:d9:bd:44: 35:40:e4:e4:93:b0:37:87:c6:17:d2:3e:8d:45:f9:3c:e7:3c: d5:68:8b:82:9d:38:03:41:ea:d2:81:11:ad:96:8b:28:8a:68: c6:2d:ef:02:a5:bf:7e:a8:c1:b9:d2:c4:ae:11:31:0b:cd:dc: 20:5c:89:68:8a:b2:30:47:d4:a5:2a:84:b1:cb:2a:66:28:20: 27:80:bd:5a:f1:4b:07:1f:5b:23:fe:6a:12:40:29:42:62:12: 92:c7:70:ec:21:f1:f4:d0:0d:c7:4c:1f:f0:41:b5:20:91:03: 04:85:ed:bd:50:62:a3:52:49:14:b5:93:5a:ba:0e:f2:c5:45: 46:f5:50:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02wOHn0IedSb72yMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMxODIyNDM1MloXDTI2MDYxNjIyNDM1MlowLzEtMCsGA1UEAxMk MTc4OTIzZjEtYzk2Mi00ZWRjLWFjZDMtMDJjYjY3ZDQzYzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Vj4yAQSPIEw1lODcdVt2IARyKOIiNqCRIe4 VEMpEig/YVX//pngXg9Pt/kkXrZWcpK+bh9LI8SbtPCw0+NhjdLsCvm/xf0I+yKi iwO7v2KcfWXx+1XQfLjYN31KgaOgDlWNqul07IqFaHUE9Pgb1d/CgqH/rVEQyRN7 lpRnUG0nGe7mkT6IiaOA24x9tBAcwylXhi878WzYVwnlWsXWOTtjjuHlA7cTyo6o ep8K8OJFmTdrmVZ7VQdJt1LliXA1mriCedHt/okwN2DfbUu3m8dL8NXewoz5QNwT iiSwwUu3cmrvkkmCQniQVcq+YtAaFl7j5wTR6kO3/E/xfRP30wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtx37Tf5pPtoO6dK4IOlemn1InyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNTZhMWI3MDQtMmRiMC0z YTBhLWJhYmYtZmZiYjE2Mjk0MjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQifQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSfIxp+3CHnplngtkrTrz6y6UlEeu76zV+ZJKdQZ00O+WqFFevF2ppQ g/CEXrlvvwJ439avyi2Lj08H9wxOgZI6XBt1KYeNy9iJgSUc82np4XLcM9teAOU4 u8t2ZU0oqmpPeUn/75VKd+44deEJ6OtGXYWgatsrw1eQ/dm9RDVA5OSTsDeHxhfS Po1F+TznPNVoi4KdOANB6tKBEa2WiyiKaMYt7wKlv36owbnSxK4RMQvN3CBciWiK sjBH1KUqhLHLKmYoICeAvVrxSwcfWyP+ahJAKUJiEpLHcOwh8fTQDcdMH/BBtSCR AwSF7b1QYqNSSRS1k1q6DvLFRUb1UEk= -----END CERTIFICATE-----Generated at Thu Mar 26 09:18:45 2026 by rpki-client