$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/854f8298-32f1-3ea4-910e-0bed477faff2.roa File: 854f8298-32f1-3ea4-910e-0bed477faff2.roa (raw, json) Hash identifier: d+Y/9/f784qf/d3qCNUflWrNgZY6oUty+c/gUFLBOkE= Subject key identifier: 11:40:DF:8A:DB:61:15:D7:31:A5:58:29:4D:87:BD:71:E0:9E:73:C9 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584D3E001ED4DFD0CBE63E0E2F40 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/854f8298-32f1-3ea4-910e-0bed477faff2.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 21928 IP address blocks: 66.94.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:1e:d4:df:d0:cb:e6:3e:0e:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7fa539f4-e227-4922-90d6-b64f62e04fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:f5:88:4d:44:3d:c0:a4:d5:db:9c:c0:15: 30:96:0a:d2:9c:d0:2b:ef:43:fb:24:d5:ab:3b:9d: 17:1c:9a:00:10:5f:75:ae:26:b7:a3:99:bc:06:52: 83:6a:f3:3e:f8:02:1b:7a:2c:e7:d8:2c:4f:1d:6c: a3:dd:5c:e4:64:86:10:6f:40:5f:58:33:14:9c:ea: 3a:7f:84:bb:c8:1d:7c:3b:b6:f1:07:35:ce:bf:6d: 85:3a:22:05:89:82:b8:e7:37:02:43:f5:4d:4c:90: 7a:d6:18:08:1a:2f:12:c9:de:38:00:22:9c:64:cc: e9:53:2a:40:6b:a6:68:ee:4a:6d:27:21:6a:54:15: 4a:7e:7e:97:b0:ea:92:02:9b:c6:e6:f3:ee:c4:a0: cf:23:17:d0:c6:56:35:c4:ae:d4:98:6b:88:ff:85: cc:09:39:59:58:72:88:e6:40:78:5d:69:db:0c:af: ca:c9:39:7d:94:39:d6:a8:28:39:ad:47:25:46:2d: b6:7b:2f:05:db:50:14:61:b9:50:29:72:c2:18:8b: 95:42:9a:63:28:90:cc:c8:1d:1b:d2:dc:a0:42:d8: 7f:2d:30:c7:9b:89:1f:43:ad:1b:98:6c:8f:a4:ac: 40:c3:88:e6:23:77:2f:05:58:8c:e1:63:7f:b0:29: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:40:DF:8A:DB:61:15:D7:31:A5:58:29:4D:87:BD:71:E0:9E:73:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/854f8298-32f1-3ea4-910e-0bed477faff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 66.94.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5c:64:88:2c:c9:20:45:00:1d:14:89:a5:72:f8:d3:51:a7: db:8d:c0:a2:fe:ba:66:eb:e7:45:46:46:2b:fd:b7:8f:c0:c0: cb:cb:95:15:ab:e2:ea:ff:f0:83:ce:7b:af:67:c5:37:90:1c: 7f:8f:3e:3d:dd:0b:ec:59:b9:cb:1f:a3:a4:51:dc:67:08:aa: e0:0f:54:60:c6:d4:d2:88:da:31:43:ed:f2:18:cb:a1:79:58: 16:38:7c:83:93:7d:7f:a5:fe:2b:b1:7f:50:8f:07:e2:1e:d0: ff:ad:d6:a5:8d:ec:cc:96:85:29:40:f0:09:32:97:ba:21:28: 15:bf:e4:e3:eb:f3:fe:bc:2c:a9:8d:eb:b4:26:0b:d8:44:7d: da:22:cb:51:07:88:fd:41:66:a3:e2:80:56:71:d7:2d:ef:4d: d1:9e:10:f4:ec:21:8f:3f:a5:de:36:80:eb:59:79:eb:26:09: c6:b4:9e:1e:ca:11:34:ce:a6:d4:3c:24:b7:b4:33:73:87:42: 1d:58:ba:28:27:2a:2e:37:bc:56:ac:1c:2d:ce:08:53:46:08: 4f:44:d9:a6:81:ac:7e:a0:79:7b:26:4e:d5:a8:80:e3:15:4d: 51:73:e3:1a:81:01:33:7d:d6:6c:0a:cb:1f:04:7e:36:79:be: 7a:9a:13:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AB7U39DL5j4OL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2ZhNTM5ZjQtZTIyNy00OTIyLTkwZDYtYjY0ZjYyZTA0ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstr1iE1EPcCk1ducwBUwlgrSnNAr70P7JNWr O50XHJoAEF91ria3o5m8BlKDavM++AIbeizn2CxPHWyj3VzkZIYQb0BfWDMUnOo6 f4S7yB18O7bxBzXOv22FOiIFiYK45zcCQ/VNTJB61hgIGi8Syd44ACKcZMzpUypA a6Zo7kptJyFqVBVKfn6XsOqSApvG5vPuxKDPIxfQxlY1xK7UmGuI/4XMCTlZWHKI 5kB4XWnbDK/KyTl9lDnWqCg5rUclRi22ey8F21AUYblQKXLCGIuVQppjKJDMyB0b 0tygQth/LTDHm4kfQ60bmGyPpKxAw4jmI3cvBViM4WN/sClyDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFA34rbYRXXMaVYKU2HvXHgnnPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvODU0ZjgyOTgtMzJmMS0z ZWE0LTkxMGUtMGJlZDQ3N2ZhZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQl4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9cZIgsySBFAB0UiaVy+NNRp9uNwKL+umbr50VGRiv9t4/AwMvLlRWr 4ur/8IPOe69nxTeQHH+PPj3dC+xZucsfo6RR3GcIquAPVGDG1NKI2jFD7fIYy6F5 WBY4fIOTfX+l/iuxf1CPB+Ie0P+t1qWN7MyWhSlA8Akyl7ohKBW/5OPr8/68LKmN 67QmC9hEfdoiy1EHiP1BZqPigFZx1y3vTdGeEPTsIY8/pd42gOtZeesmCca0nh7K ETTOptQ8JLe0M3OHQh1YuignKi43vFasHC3OCFNGCE9E2aaBrH6geXsmTtWogOMV TVFz4xqBATN91mwKyx8EfjZ5vnqaE1o= -----END CERTIFICATE-----Generated at Sat Mar 21 17:54:42 2026 by rpki-client