$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e170db98-dbc5-34bf-81ac-0ddf841100e7.roa File: e170db98-dbc5-34bf-81ac-0ddf841100e7.roa (raw, json) Hash identifier: 1F3keBRg4albCJ+3koBkNJ7QVN6TCRqztrZXOn3Xa0g= Subject key identifier: AA:D7:EE:C8:13:E4:76:89:02:D7:AE:51:6C:24:48:82:E1:BD:45:AB Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584C8A0C3A6C55CC41520AF05480 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e170db98-dbc5-34bf-81ac-0ddf841100e7.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 11693 IP address blocks: 66.216.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:3a:6c:55:cc:41:52:0a:f0:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=a24820bc-2ec1-459c-825e-5e60e786dcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f3:64:9f:d7:61:0e:f9:c2:9c:41:b2:ed:10: 99:ca:04:d0:fd:50:46:12:12:50:7d:50:e1:f2:59: 43:23:4d:c1:e8:d4:b9:0e:c4:e9:5f:be:38:fc:f3: 13:8b:6f:2c:27:ed:92:e9:65:7a:c1:7a:94:df:af: 8e:67:fa:d4:ea:93:42:f5:bb:23:a1:99:7c:bf:4c: 97:21:f8:97:02:8d:d6:dd:29:d5:8a:08:9a:e1:fc: 3e:09:49:50:96:66:df:38:74:67:c2:75:59:6b:fa: 1e:85:89:a2:2b:80:1e:90:cc:31:48:1d:2f:19:99: a1:b8:5f:3c:5a:83:ad:57:47:ab:bf:9d:52:3b:2d: 6b:f0:75:66:61:95:c4:37:ce:3f:13:48:16:7c:b3: 20:07:33:6e:8a:4d:88:e7:54:1c:b4:c1:40:68:48: dc:6e:88:ab:48:9f:17:ab:ed:b1:2c:f2:41:0f:80: 9d:7c:62:c6:1b:f1:36:fe:ad:bf:dd:9f:a2:b0:17: 5f:40:13:91:22:bb:f9:9c:e3:cf:d3:6e:eb:b0:35: d0:82:87:1f:0b:79:ce:55:0a:a1:28:9d:6c:bb:2c: 61:45:81:01:19:69:73:42:8d:8d:13:66:65:e5:19: 5f:ec:57:54:ac:52:0f:9a:f0:f2:4d:ac:a3:c9:fd: 25:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:EE:C8:13:E4:76:89:02:D7:AE:51:6C:24:48:82:E1:BD:45:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e170db98-dbc5-34bf-81ac-0ddf841100e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 66.216.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:10:a1:eb:63:73:a8:d5:d6:bd:fb:3f:30:ca:c0:1f:12:fd: 5d:24:d6:cd:c9:e5:8e:78:7f:52:fd:1d:2c:fc:58:49:f8:20: f1:0f:f2:1b:78:85:df:b8:17:03:7f:b8:d1:c9:25:b8:48:75: 3c:1b:a6:46:51:9d:d0:3d:49:bb:68:a2:aa:36:e0:5d:cc:a5: 3b:c8:7c:cf:2c:44:c7:fd:22:72:44:ab:d4:9f:dc:ba:e7:ef: c8:b5:86:89:1e:b7:f4:e1:1c:63:ee:65:60:b1:9d:a2:7d:2e: fd:65:8a:ca:6f:9d:e7:c5:6d:89:34:ad:5f:46:4d:ca:b0:f2: 12:62:7d:85:8e:91:a1:84:6b:98:09:ae:a9:3a:5d:62:cb:96: 55:6e:8b:33:af:b1:0e:f7:36:ce:18:b7:1c:a1:08:bb:38:20: a3:df:76:06:21:fc:7b:cb:f2:38:ad:74:cf:fa:8a:96:f4:f2: 44:34:b0:54:01:ba:d0:32:c2:04:38:44:4d:03:5e:b8:3a:55: 4c:03:82:d3:09:99:5c:9c:35:68:91:3c:6d:76:13:fb:e0:6a: 88:cf:17:9e:9b:ce:67:59:17:7f:22:7b:cf:38:f1:7d:1a:46: 4c:6e:f6:ed:e3:73:eb:66:7b:02:bc:68:62:bf:38:63:a9:08: 44:cd:87:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDDpsVcxBUgrwVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk YTI0ODIwYmMtMmVjMS00NTljLTgyNWUtNWU2MGU3ODZkY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfNkn9dhDvnCnEGy7RCZygTQ/VBGEhJQfVDh 8llDI03B6NS5DsTpX744/PMTi28sJ+2S6WV6wXqU36+OZ/rU6pNC9bsjoZl8v0yX IfiXAo3W3SnVigia4fw+CUlQlmbfOHRnwnVZa/oehYmiK4AekMwxSB0vGZmhuF88 WoOtV0erv51SOy1r8HVmYZXEN84/E0gWfLMgBzNuik2I51QctMFAaEjcboirSJ8X q+2xLPJBD4CdfGLGG/E2/q2/3Z+isBdfQBORIrv5nOPP027rsDXQgocfC3nOVQqh KJ1suyxhRYEBGWlzQo2NE2Zl5Rlf7FdUrFIPmvDyTayjyf0lDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrX7sgT5HaJAteuUWwkSILhvUWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZTE3MGRiOTgtZGJjNS0z NGJmLTgxYWMtMGRkZjg0MTEwMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsQoetjc6jV1r37PzDKwB8S/V0k1s3J5Y54f1L9HSz8WEn4IPEP8ht4 hd+4FwN/uNHJJbhIdTwbpkZRndA9Sbtooqo24F3MpTvIfM8sRMf9InJEq9Sf3Lrn 78i1hoket/ThHGPuZWCxnaJ9Lv1lispvnefFbYk0rV9GTcqw8hJifYWOkaGEa5gJ rqk6XWLLllVuizOvsQ73Ns4YtxyhCLs4IKPfdgYh/HvL8jitdM/6ipb08kQ0sFQB utAywgQ4RE0DXrg6VUwDgtMJmVycNWiRPG12E/vgaojPF56bzmdZF38ie8848X0a Rkxu9u3jc+tmewK8aGK/OGOpCETNh80= -----END CERTIFICATE-----Generated at Thu Feb 26 15:18:26 2026 by rpki-client