$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/cf165495-2cde-31b4-b3a7-d9bcaaa8db08.roa File: cf165495-2cde-31b4-b3a7-d9bcaaa8db08.roa (raw, json) Hash identifier: rLtWsNlhtylcWnG2vaM669IKIXSZdaInsnet1l/sg1s= Subject key identifier: 1F:A2:F8:98:BF:DB:73:BE:03:26:B5:50:9F:01:87:F5:19:F4:FA:97 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D36C0E6C6228E0258A9529E80 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/cf165495-2cde-31b4-b3a7-d9bcaaa8db08.roa Signing time: Wed 18 Mar 2026 22:43:54 +0000 ROA not before: Wed 18 Mar 2026 22:43:54 +0000 ROA not after: Tue 16 Jun 2026 22:43:54 +0000 asID: 16740 IP address blocks: 66.39.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:c0:e6:c6:22:8e:02:58:a9:52:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 18 22:43:54 2026 GMT Not After : Jun 16 22:43:54 2026 GMT Subject: CN=7eda726d-5f52-470f-91c0-744046e63833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3a:fe:33:d9:b7:a4:cd:14:d3:83:9a:b3:d0: 9b:3e:b4:f6:c0:65:8b:3c:54:08:02:61:26:1d:9e: 79:2e:1b:86:3c:4e:3a:a6:32:69:1c:34:3a:e7:a4: be:5c:01:38:82:06:0f:2c:42:8b:41:a0:ca:36:b2: 9f:9d:0b:fb:ca:e9:19:fe:07:c7:15:52:ee:b7:91: c1:44:d0:b0:1d:69:fb:38:25:de:be:16:0c:b8:6f: 66:03:80:e9:90:62:db:b0:01:26:2e:d0:cd:c0:14: bc:b1:fe:f7:75:7f:25:79:de:32:35:59:44:38:9b: 41:e0:4c:2a:2f:8b:7d:a1:c1:67:d1:28:c2:30:c9: 5b:a4:9f:c5:fd:ae:81:2d:2c:82:11:3d:77:27:25: 59:d1:e4:96:45:1a:0d:3f:63:58:18:ea:a8:39:65: 73:4b:25:c3:ad:40:d6:f6:2d:6a:50:89:27:51:e3: 5b:2c:46:fb:2f:12:42:c1:30:9c:bc:18:e1:0e:b1: e5:fb:f3:e1:81:e4:7d:55:27:38:a0:77:c4:ee:bc: 5d:2c:08:ef:04:66:71:51:84:78:05:c1:44:f3:1a: 4b:f4:e1:b2:e0:17:23:c4:dc:8d:ca:ec:f1:11:a7: ff:46:c2:09:98:6c:d9:9e:3d:01:d2:bd:de:27:d0: 25:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A2:F8:98:BF:DB:73:BE:03:26:B5:50:9F:01:87:F5:19:F4:FA:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/cf165495-2cde-31b4-b3a7-d9bcaaa8db08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 66.39.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:b4:76:84:3a:2c:84:81:1d:a4:dc:e6:0f:83:d5:96:4f:da: 72:03:99:dc:e4:5f:1f:0c:37:31:95:71:45:bf:e7:b6:a1:e1: 96:06:67:cc:d1:ae:21:aa:ad:47:7f:be:d6:98:43:d3:a2:78: 6a:dc:fb:c8:da:28:43:55:46:41:c1:a0:9d:8f:c1:90:8c:12: e2:37:c1:37:fc:46:7b:82:ef:30:a4:66:13:f5:f1:c1:d2:f6: be:fa:2c:89:8f:bd:c0:c3:85:5a:e5:80:76:74:c3:69:1f:52: 5f:c0:87:c8:25:d2:bd:e1:9e:be:a0:3d:ad:cd:1c:f0:39:63: 3b:70:16:b8:e8:fc:c8:ae:c9:9b:8d:3d:60:11:58:60:e7:58: 87:e5:ff:5b:ea:08:09:3e:da:80:66:84:ff:eb:ff:2a:79:35: b4:9e:90:97:e3:47:e4:4d:ac:59:ba:e6:e6:e8:da:e9:07:65: c9:5b:90:f9:a1:cf:95:f5:ca:cd:81:b2:bc:18:13:46:ed:74: ac:c2:b9:6e:73:92:94:01:14:6c:73:ff:33:be:9d:b3:91:46: 20:e4:15:62:dd:5d:72:ef:e3:c9:70:65:6b:c4:45:18:66:6b: ed:5a:85:b0:4f:30:27:ab:e1:cf:b6:26:47:45:aa:fc:61:bd: 87:0a:54:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02wObGIo4CWKlSnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMxODIyNDM1NFoXDTI2MDYxNjIyNDM1NFowLzEtMCsGA1UEAxMk N2VkYTcyNmQtNWY1Mi00NzBmLTkxYzAtNzQ0MDQ2ZTYzODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDr+M9m3pM0U04Oas9CbPrT2wGWLPFQIAmEm HZ55LhuGPE46pjJpHDQ656S+XAE4ggYPLEKLQaDKNrKfnQv7yukZ/gfHFVLut5HB RNCwHWn7OCXevhYMuG9mA4DpkGLbsAEmLtDNwBS8sf73dX8led4yNVlEOJtB4Ewq L4t9ocFn0SjCMMlbpJ/F/a6BLSyCET13JyVZ0eSWRRoNP2NYGOqoOWVzSyXDrUDW 9i1qUIknUeNbLEb7LxJCwTCcvBjhDrHl+/PhgeR9VSc4oHfE7rxdLAjvBGZxUYR4 BcFE8xpL9OGy4BcjxNyNyuzxEaf/RsIJmGzZnj0B0r3eJ9Al2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+i+Ji/23O+Aya1UJ8Bh/UZ9PqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvY2YxNjU0OTUtMmNkZS0z MWI0LWIzYTctZDliY2FhYThkYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQifVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL20doQ6LISBHaTc5g+D1ZZP2nIDmdzkXx8MNzGVcUW/57ah4ZYGZ8zR riGqrUd/vtaYQ9OieGrc+8jaKENVRkHBoJ2PwZCMEuI3wTf8RnuC7zCkZhP18cHS 9r76LImPvcDDhVrlgHZ0w2kfUl/Ah8gl0r3hnr6gPa3NHPA5YztwFrjo/MiuyZuN PWARWGDnWIfl/1vqCAk+2oBmhP/r/yp5NbSekJfjR+RNrFm65ubo2ukHZclbkPmh z5X1ys2BsrwYE0btdKzCuW5zkpQBFGxz/zO+nbORRiDkFWLdXXLv48lwZWvERRhm a+1ahbBPMCer4c+2JkdFqvxhvYcKVAs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:35:45 2026 by rpki-client