$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa File: de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa (raw, json) Hash identifier: CgZNHJMKF6ZnYzTiRwiXc6cH1oqkHN9diCqZgjzb92s= Subject key identifier: 69:0E:E9:97:C0:5A:3E:19:B6:6E:D1:3F:F4:EE:B0:33:8B:B6:35:C0 Certificate issuer: /CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Certificate serial: 010D0C9F4328584D4A8F9BE92DD8C249AD5E9600 Authority key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 66.206.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9b:e9:2d:d8:c2:49:ad:5e:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=970b86b1-8481-4786-857f-df866dd3313d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4b:f8:f2:3f:9b:a3:83:bc:d4:d4:aa:09:4a: 54:7e:36:ff:78:b8:9d:d9:76:f9:93:62:f0:31:54: a9:b8:b5:ec:7d:1a:d5:4f:62:4c:f8:9e:b0:9b:9a: 14:0f:66:c3:8e:b7:66:51:be:2d:1f:ae:b3:f1:53: 91:59:c5:9f:10:56:e7:6f:8f:29:13:ce:51:96:bc: 67:65:bc:81:e0:0c:57:5f:ed:e1:b1:4d:17:a5:4d: 1c:95:35:3e:3c:46:74:82:1f:4f:e4:c1:21:39:91: 61:e9:0c:7a:87:07:1a:bb:b3:ff:cd:40:4a:c2:c6: 55:44:11:5d:2c:46:63:a4:6e:f1:8d:04:d0:21:bc: 28:9f:24:ab:09:91:eb:8b:d6:65:65:ba:08:57:da: b8:0d:67:4a:c6:be:23:82:0c:54:f7:e4:e3:d3:ee: de:07:48:34:3d:ac:55:bf:8e:78:a9:38:fb:de:42: 42:89:d1:63:74:c0:bc:ee:26:26:ac:29:81:19:1f: 18:8b:a5:f5:cc:4b:8d:77:fd:a4:83:7e:f6:4d:8b: 74:9d:61:90:6b:bf:e1:2c:f5:b8:6b:4f:61:67:35: 30:22:9a:ce:3f:b5:f5:7b:e4:53:5b:ee:da:50:a1: 76:c9:35:ac:51:31:9c:33:57:ce:e5:b6:b5:b5:a5: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0E:E9:97:C0:5A:3E:19:B6:6E:D1:3F:F4:EE:B0:33:8B:B6:35:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl X509v3 Authority Key Identifier: keyid:9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer sbgp-ipAddrBlock: critical IPv4: 66.206.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:2a:11:3a:e6:0e:df:04:0a:46:c2:af:87:cf:3b:dc:08:39: aa:84:c6:42:2e:be:ba:e9:01:b7:a1:1e:34:5a:4b:5f:76:ed: d1:e6:c3:6c:d5:bd:c6:a6:c6:ed:eb:9d:b7:ba:d3:5c:90:0f: 80:49:de:79:44:59:d5:8e:3a:cc:dd:92:7d:c8:5a:3a:01:46: 3f:94:f5:67:a4:04:88:13:c7:4b:95:ee:ac:fa:df:5f:51:91: 82:94:6e:44:39:1c:a0:86:dc:9a:40:86:7c:ed:cf:73:e4:e4: e5:28:cd:85:14:ba:84:5f:f5:65:96:27:ba:f2:73:24:0b:45: a1:0e:d5:63:69:b8:88:69:08:0a:56:67:1a:72:75:d0:0b:b4: 25:df:c8:3b:2c:4a:b2:9c:8a:37:07:f5:65:29:af:0c:3a:a6: ab:48:a3:e0:bd:a0:46:3e:21:2e:51:d3:b9:c4:3c:1c:dc:68: e7:21:17:e3:b0:36:c0:4e:c5:28:e3:53:14:28:db:de:f6:69: 40:80:e9:9f:c8:f4:c1:6f:4d:66:b6:57:e6:3a:e9:99:45:42: dd:d8:26:dc:c1:db:cc:4f:13:8e:2a:e2:f1:b1:d5:81:d6:47: 59:20:70:4e:7c:22:ec:b2:d8:a4:b7:2b:80:c4:cf:1c:18:83: 4e:71:f9:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5vpLdjCSa1elgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1 YjhiMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk OTcwYjg2YjEtODQ4MS00Nzg2LTg1N2YtZGY4NjZkZDMzMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0v48j+bo4O81NSqCUpUfjb/eLid2Xb5k2Lw MVSpuLXsfRrVT2JM+J6wm5oUD2bDjrdmUb4tH66z8VORWcWfEFbnb48pE85Rlrxn ZbyB4AxXX+3hsU0XpU0clTU+PEZ0gh9P5MEhOZFh6Qx6hwcau7P/zUBKwsZVRBFd LEZjpG7xjQTQIbwonySrCZHri9ZlZboIV9q4DWdKxr4jggxU9+Tj0+7eB0g0PaxV v454qTj73kJCidFjdMC87iYmrCmBGR8Yi6X1zEuNd/2kg372TYt0nWGQa7/hLPW4 a09hZzUwIprOP7X1e+RTW+7aUKF2yTWsUTGcM1fO5ba1taWLxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkO6ZfAWj4Ztm7RP/TusDOLtjXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMx ZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvZGU4ZTc5OTYtYmZhOC0z NGI4LWIyYjgtYTAyNWI2YWRjOGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDEzMWZmYWEtODVmMi00YmQ1LTg5 NjEtOWRjOGFkZjE1YjhiL2QxMzFmZmFhLTg1ZjItNGJkNS04OTYxLTlkYzhhZGYx NWI4Yi5jcmwwHwYDVR0jBBgwFoAUnxc+xPRbxWcgps2BFQ3CS2MpTvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4 YWRmMTViOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs6tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgqETrmDt8ECkbCr4fPO9wIOaqExkIuvrrpAbehHjRaS1927dHmw2zV vcamxu3rnbe601yQD4BJ3nlEWdWOOszdkn3IWjoBRj+U9WekBIgTx0uV7qz6319R kYKUbkQ5HKCG3JpAhnztz3Pk5OUozYUUuoRf9WWWJ7rycyQLRaEO1WNpuIhpCApW ZxpyddALtCXfyDssSrKcijcH9WUprww6pqtIo+C9oEY+IS5R07nEPBzcaOchF+Ow NsBOxSjjUxQo2972aUCA6Z/I9MFvTWa2V+Y66ZlFQt3YJtzB28xPE44q4vGx1YHW R1kgcE58Iuyy2KS3K4DEzxwYg05x+Y4= -----END CERTIFICATE-----Generated at Tue Apr 7 10:33:03 2026 by rpki-client