$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa File: 89707528-a4b0-3570-9d8a-88acb7809bc6.roa (raw, json) Hash identifier: KX41TSooWqbpFxWOsukzcYrripXUhPl+NIroZG6n6c8= Subject key identifier: C1:91:58:E8:0D:C1:E6:25:80:36:E3:2D:A9:87:85:35:AE:FF:11:0C Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584D1F4A2649412F0F02F7D95360 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 54113 IP address blocks: 172.111.66.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:26:49:41:2f:0f:02:f7:d9:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=4d614a47-1f77-4e2b-a7b7-3dc3e24d8d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:bb:00:c8:7b:2b:35:7e:6e:dd:72:59:57: 99:99:75:8d:4a:af:e4:87:cd:ac:1b:fe:9a:69:dc: 41:b8:8e:8f:35:27:66:5b:7f:40:73:a1:45:ca:13: 30:c7:b2:b0:ce:d5:c0:f5:8c:75:af:6c:f6:9b:44: 6d:2d:d6:21:d0:c5:77:51:b8:d5:7a:34:96:bb:05: fe:90:d5:62:f4:b0:01:d2:53:08:81:3f:c6:9c:b9: 84:a5:e7:6e:e5:f2:b7:25:88:8c:0e:a8:87:2f:f0: 1b:62:50:18:ab:f7:24:ef:90:0b:13:5e:1e:a0:10: d0:ec:27:a1:40:78:f3:a4:a6:ca:41:48:e7:ce:59: ed:c2:c3:02:5e:53:6c:37:e0:81:30:26:b8:54:34: 90:c6:fb:d1:98:92:6f:40:2c:bd:e3:15:1d:f2:c9: 3f:23:fd:cb:a4:25:5c:37:ed:0e:02:2d:5d:f5:96: 02:a5:dc:3f:1f:2b:1e:e2:01:01:2e:89:53:ec:d6: 77:17:8d:65:89:46:d3:77:55:31:e0:ac:ac:75:cd: a7:b8:55:49:64:0d:38:81:f9:e0:d7:87:28:4c:a9: f7:18:c8:5b:74:43:6e:59:07:ab:0c:3c:fb:41:80: c4:77:7d:76:13:cd:b2:d4:eb:6d:71:81:a6:91:6a: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:91:58:E8:0D:C1:E6:25:80:36:E3:2D:A9:87:85:35:AE:FF:11:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.66.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d0:39:ba:0c:75:13:4f:65:d8:89:aa:ea:ed:c3:68:19:3e: 00:f4:60:b9:b3:88:fd:fa:59:c3:09:65:b0:8f:6b:cd:9d:c1: 20:ef:b3:68:98:92:2c:8d:6f:c2:6c:98:d0:de:06:2c:34:47: 86:8c:42:84:9c:a9:29:ad:19:72:f6:55:79:c6:17:e7:85:99: e3:03:0d:bf:3c:39:51:5c:91:a5:0b:c8:ff:ba:05:c2:a2:07: b8:e2:28:e8:9f:f9:6b:73:b8:1b:c4:d8:0b:51:ad:27:5f:b1: 98:f6:ea:ec:c6:0e:41:28:8b:66:f3:b7:31:47:26:8e:ee:57: de:68:d5:71:dc:d5:f0:77:5b:14:82:a0:ad:b3:05:0c:86:0b: 01:73:61:2a:12:05:48:36:50:7c:da:25:70:31:97:5b:93:53: e4:69:3d:83:18:5c:8d:bc:14:1b:e5:76:ac:65:66:e7:3e:17: 21:51:51:0a:b5:9b:1c:2a:c7:a2:a7:0a:ba:1e:47:70:b3:9b: c8:11:10:e2:d3:06:b9:db:fb:7e:27:38:ec:d8:96:3a:1a:15: 47:bf:1a:4f:0e:2c:08:5b:7d:bd:c2:4d:a3:2f:c6:37:1b:c1: 2f:cd:44:a4:bb:fe:31:dd:61:28:80:1f:02:ba:ae:1b:2b:13: e4:d3:d9:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0fSiZJQS8PAvfZU2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NGQ2MTRhNDctMWY3Ny00ZTJiLWE3YjctM2RjM2UyNGQ4ZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRq7AMh7KzV+bt1yWVeZmXWNSq/kh82sG/6a adxBuI6PNSdmW39Ac6FFyhMwx7KwztXA9Yx1r2z2m0RtLdYh0MV3UbjVejSWuwX+ kNVi9LAB0lMIgT/GnLmEpedu5fK3JYiMDqiHL/AbYlAYq/ck75ALE14eoBDQ7Ceh QHjzpKbKQUjnzlntwsMCXlNsN+CBMCa4VDSQxvvRmJJvQCy94xUd8sk/I/3LpCVc N+0OAi1d9ZYCpdw/Hyse4gEBLolT7NZ3F41liUbTd1Ux4Kysdc2nuFVJZA04gfng 14coTKn3GMhbdENuWQerDDz7QYDEd312E82y1OttcYGmkWpSJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMGRWOgNweYlgDbjLamHhTWu/xEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvODk3MDc1MjgtYTRiMC0z NTcwLTlkOGEtODhhY2I3ODA5YmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9CADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJ0Dm6DHUTT2XYiarq7cNoGT4A9GC5s4j9+lnDCWWwj2vNncEg77No mJIsjW/CbJjQ3gYsNEeGjEKEnKkprRly9lV5xhfnhZnjAw2/PDlRXJGlC8j/ugXC oge44ijon/lrc7gbxNgLUa0nX7GY9ursxg5BKItm87cxRyaO7lfeaNVx3NXwd1sU gqCtswUMhgsBc2EqEgVINlB82iVwMZdbk1PkaT2DGFyNvBQb5XasZWbnPhchUVEK tZscKseipwq6Hkdws5vIERDi0wa52/t+Jzjs2JY6GhVHvxpPDiwIW329wk2jL8Y3 G8EvzUSku/4x3WEogB8Cuq4bKxPk09nk -----END CERTIFICATE-----Generated at Wed Mar 18 17:59:30 2026 by rpki-client