$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8568d632-f283-3040-a96b-7e1db65fc91c.roa File: 8568d632-f283-3040-a96b-7e1db65fc91c.roa (raw, json) Hash identifier: XRmagvve5fvZn3KhynJ0GlPxYX0WEtqQ8QBp2+gerZQ= Subject key identifier: 71:DB:D0:17:0F:8D:41:8B:7A:00:74:4B:91:77:2A:2F:67:45:36:2F Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584D6AAA891D6400D6D033A95800 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8568d632-f283-3040-a96b-7e1db65fc91c.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 66.178.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:89:1d:64:00:d6:d0:33:a9:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=b942733e-0c84-4818-a485-b3e41128564f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:d3:77:6a:16:59:e2:2f:65:40:30:14:cf: ad:6e:e9:1b:25:df:cf:7f:7f:a5:5c:38:c1:5b:49: 99:a7:11:bc:7d:e4:e5:d1:da:18:38:19:48:1e:1c: 9b:ee:b4:d7:40:26:93:a6:12:c7:79:af:29:b5:cd: f9:f8:0f:d1:15:f4:51:3e:6b:66:b9:51:6a:49:a4: ef:cf:43:ba:65:6e:ea:65:b1:44:40:21:00:80:ed: 91:7e:84:97:7a:e5:83:76:e4:57:e1:7d:14:74:f7: 15:e6:18:71:e9:6f:03:bb:d3:81:43:60:c6:18:44: fc:92:66:fa:87:cd:cd:bd:65:50:44:0f:89:4b:87: 67:31:9e:c1:6d:29:7d:01:bf:b2:c3:61:cb:1b:41: c8:39:e0:ce:04:de:b8:d8:af:dd:15:03:21:0a:52: 78:9f:24:bd:dd:3a:91:8f:a5:fb:5d:9c:a9:02:a5: 07:80:dc:43:b1:2d:f7:91:b3:3b:99:bd:14:a9:96: f9:60:71:cb:c7:9c:10:5c:4e:46:77:24:1d:84:6f: a0:fd:75:60:20:cb:bd:4a:bd:b5:5b:53:49:da:7c: 31:dc:76:76:f7:b9:18:15:ea:35:5f:ae:6b:db:45: 68:6d:63:4e:2d:45:4e:16:2b:e8:71:fa:5a:8a:12: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DB:D0:17:0F:8D:41:8B:7A:00:74:4B:91:77:2A:2F:67:45:36:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8568d632-f283-3040-a96b-7e1db65fc91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 66.178.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c5:d4:d0:70:9a:50:38:b9:89:16:db:b2:55:06:ea:d8:0e: 56:21:be:e6:15:bc:1c:2d:ed:f9:03:a9:fa:50:94:d5:e0:37: ca:23:7c:e7:e2:a0:da:23:2c:67:9c:9f:44:86:5a:96:86:9d: a3:bc:2b:46:a2:cf:9f:48:a4:76:18:82:00:95:44:cb:55:ef: 5d:dc:28:7d:99:85:f5:a9:ae:1a:a2:38:11:c8:dd:20:cf:1b: db:4f:19:7c:60:7b:4c:c2:50:b7:e5:2c:93:73:4e:6c:f2:02: 51:17:86:b4:21:fc:7f:db:ea:d7:86:b4:19:c7:4a:48:88:af: 58:9f:7d:27:04:f1:42:97:f5:6b:08:c3:95:1b:47:7d:a2:20: 78:33:61:42:80:4c:be:95:e0:d9:ac:59:32:6e:39:f8:3a:6d: 5b:59:92:cb:01:8c:dc:e4:e7:5d:c3:a3:d1:e7:30:02:b4:cb: a6:b2:af:d0:f5:98:d9:b0:5c:28:10:09:cd:28:c7:54:de:35: 77:4b:c7:32:de:07:35:a7:fd:66:3b:7c:3a:70:6e:46:4d:74: 39:62:9e:be:f5:d5:1b:58:9e:5b:01:50:21:94:30:f3:ab:38: 1a:a4:b8:d4:be:36:9b:e8:a0:e9:2b:8a:23:17:70:0c:1b:96: 84:16:bc:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqokdZADW0DOpWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk Yjk0MjczM2UtMGM4NC00ODE4LWE0ODUtYjNlNDExMjg1NjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJvTd2oWWeIvZUAwFM+tbukbJd/Pf3+lXDjB W0mZpxG8feTl0doYOBlIHhyb7rTXQCaTphLHea8ptc35+A/RFfRRPmtmuVFqSaTv z0O6ZW7qZbFEQCEAgO2RfoSXeuWDduRX4X0UdPcV5hhx6W8Du9OBQ2DGGET8kmb6 h83NvWVQRA+JS4dnMZ7BbSl9Ab+yw2HLG0HIOeDOBN642K/dFQMhClJ4nyS93TqR j6X7XZypAqUHgNxDsS33kbM7mb0UqZb5YHHLx5wQXE5GdyQdhG+g/XVgIMu9Sr21 W1NJ2nwx3HZ297kYFeo1X65r20VobWNOLUVOFivocfpaihKVMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHb0BcPjUGLegB0S5F3Ki9nRTYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvODU2OGQ2MzItZjI4My0z MDQwLWE5NmItN2UxZGI2NWZjOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/F1NBwmlA4uYkW27JVBurYDlYhvuYVvBwt7fkDqfpQlNXgN8ojfOfi oNojLGecn0SGWpaGnaO8K0aiz59IpHYYggCVRMtV713cKH2ZhfWprhqiOBHI3SDP G9tPGXxge0zCULflLJNzTmzyAlEXhrQh/H/b6teGtBnHSkiIr1iffScE8UKX9WsI w5UbR32iIHgzYUKATL6V4NmsWTJuOfg6bVtZkssBjNzk513Do9HnMAK0y6ayr9D1 mNmwXCgQCc0ox1TeNXdLxzLeBzWn/WY7fDpwbkZNdDlinr711RtYnlsBUCGUMPOr OBqkuNS+NpvooOkriiMXcAwbloQWvMM= -----END CERTIFICATE-----Generated at Tue Apr 7 10:36:48 2026 by rpki-client