$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0b33cf08-268d-3b07-8613-bc9a49c3894d.roa File: 0b33cf08-268d-3b07-8613-bc9a49c3894d.roa (raw, json) Hash identifier: ew0NWRnMpMnOb9BQ8MaiHIaSJfrKKtSc8ltIw21zF0E= Subject key identifier: 68:A4:5F:7F:FC:D2:A5:80:93:E7:79:1F:CF:53:23:6D:01:2C:1C:93 Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584D4D5A730F6AB75F96A5DB2EC0 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0b33cf08-268d-3b07-8613-bc9a49c3894d.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 66.178.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:73:0f:6a:b7:5f:96:a5:db:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=544a0d27-c358-403e-b179-39a38c6f26f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:20:87:06:6f:be:98:10:15:0d:de:41:5c: a4:03:9f:d0:59:04:6a:d2:ea:9a:01:97:fa:95:16: 2f:52:05:53:d5:98:84:c1:b1:1c:9b:cb:90:32:96: 2e:ec:75:e9:ce:8b:5d:0e:2b:c5:13:62:11:48:0c: a1:3f:56:f1:1f:2b:f6:9d:b2:0f:36:df:a9:b8:d2: fd:1e:77:a3:05:3b:af:84:d4:ea:45:37:07:5c:c0: 15:94:2f:7c:54:42:e1:70:be:54:6d:b7:3b:e3:59: 73:4c:69:41:bc:4e:7f:a7:ee:a3:02:f5:ad:05:fc: 21:a8:f3:19:29:3d:64:fb:42:7a:81:11:8a:40:89: 8e:a2:d7:40:9d:47:d6:2f:84:df:4b:23:68:24:70: 48:52:30:7f:0c:99:bc:5e:d2:83:ef:5f:ac:f2:e1: 47:d2:16:d1:06:38:96:90:a4:7b:29:18:28:de:a4: bc:48:02:24:45:2a:44:a0:13:bd:07:b0:fd:87:f7: 12:f3:35:55:6e:a1:11:b8:13:ea:3e:24:61:44:a6: 50:9a:53:4a:9e:8e:ee:cf:57:3f:68:09:48:37:7e: 7f:cd:3e:f5:70:90:fb:bc:41:e2:92:7f:e6:99:6c: 06:60:42:4c:aa:b9:61:c6:d9:e2:6d:99:e7:82:60: 0a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A4:5F:7F:FC:D2:A5:80:93:E7:79:1F:CF:53:23:6D:01:2C:1C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0b33cf08-268d-3b07-8613-bc9a49c3894d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 66.178.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:21:2c:c1:3d:00:e5:64:73:8a:aa:7b:3a:f4:05:67:0b:b9: 97:34:a8:b1:42:12:59:f9:dc:8a:66:66:88:9c:af:96:ae:53: a9:7f:44:f4:a4:f7:9c:fe:bb:c7:89:84:c1:b5:cb:b2:96:e5: f6:c4:a3:23:f6:be:09:ab:00:f1:20:4f:0a:88:b2:10:69:3a: 6f:0f:d5:c4:b7:14:07:05:a7:11:25:48:d2:a0:fe:bf:cf:4b: ed:3c:c5:96:36:ed:63:b3:6e:60:dc:18:a1:ef:36:4b:2f:42: cf:ef:a9:d9:5f:8a:a0:e0:1b:8f:a3:83:85:68:b9:ea:fc:b8: 3b:64:06:01:f3:79:d3:f8:1b:34:c2:e1:dc:fd:86:4a:13:49: 1d:d3:dd:17:72:24:bb:a0:12:57:75:9f:17:ba:51:a2:51:c2: 82:a4:f4:99:a5:50:1e:9a:5f:96:28:a1:4e:f7:4b:d9:e7:ec: 90:e7:e2:a0:0f:42:b8:b1:65:11:e5:0e:9e:4a:bb:81:1e:c3: 3b:43:25:11:3a:7c:e0:2a:3a:19:4f:85:bd:ef:2e:bc:49:21: cf:c2:12:11:05:5e:74:1a:39:8d:01:7b:33:52:c5:5d:c7:7f: 5e:0a:00:24:d0:85:b1:da:aa:15:1c:6c:13:cc:27:58:42:d0: ba:52:23:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnMPardflqXbLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NTQ0YTBkMjctYzM1OC00MDNlLWIxNzktMzlhMzhjNmYyNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqYghwZvvpgQFQ3eQVykA5/QWQRq0uqaAZf6 lRYvUgVT1ZiEwbEcm8uQMpYu7HXpzotdDivFE2IRSAyhP1bxHyv2nbIPNt+puNL9 HnejBTuvhNTqRTcHXMAVlC98VELhcL5Ubbc741lzTGlBvE5/p+6jAvWtBfwhqPMZ KT1k+0J6gRGKQImOotdAnUfWL4TfSyNoJHBIUjB/DJm8XtKD71+s8uFH0hbRBjiW kKR7KRgo3qS8SAIkRSpEoBO9B7D9h/cS8zVVbqERuBPqPiRhRKZQmlNKno7uz1c/ aAlIN35/zT71cJD7vEHikn/mmWwGYEJMqrlhxtnibZnngmAK5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGikX3/80qWAk+d5H89TI20BLByTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvMGIzM2NmMDgtMjY4ZC0z YjA3LTg2MTMtYmM5YTQ5YzM4OTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrKHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQhLME9AOVkc4qqezr0BWcLuZc0qLFCEln53IpmZoicr5auU6l/RPSk 95z+u8eJhMG1y7KW5fbEoyP2vgmrAPEgTwqIshBpOm8P1cS3FAcFpxElSNKg/r/P S+08xZY27WOzbmDcGKHvNksvQs/vqdlfiqDgG4+jg4Vouer8uDtkBgHzedP4GzTC 4dz9hkoTSR3T3RdyJLugEld1nxe6UaJRwoKk9JmlUB6aX5YooU73S9nn7JDn4qAP QrixZRHlDp5Ku4EewztDJRE6fOAqOhlPhb3vLrxJIc/CEhEFXnQaOY0BezNSxV3H f14KACTQhbHaqhUcbBPMJ1hC0LpSI5Y= -----END CERTIFICATE-----Generated at Tue Apr 7 10:36:13 2026 by rpki-client