$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa File: dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa (raw, json) Hash identifier: w18u7WDmV+qLP9RhjtDWnbeJmMoVLExUs19Y4Lxz81U= Subject key identifier: 0D:D8:49:21:A9:F2:0B:A1:D6:22:3F:43:8F:2D:07:BA:D7:CC:F0:7C Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b Certificate serial: 010D0C9F4328584D15A263C3E4AAB1F31AD19B80 Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 198949 IP address blocks: 66.187.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:63:c3:e4:aa:b1:f3:1a:d1:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=137db7f7-af71-4ad9-9453-97fcd1d75bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:58:54:93:71:46:cf:9e:03:41:fc:7a:a5: 26:4d:b3:7b:ac:74:de:df:7b:8f:63:52:b3:01:7c: e6:4f:55:e3:b5:f0:f4:dd:5b:24:24:a4:c5:c8:10: ad:4c:92:50:cb:69:1b:f6:99:21:07:85:b0:e7:a8: 64:01:93:0a:10:38:82:66:c7:c2:42:17:84:dd:29: 8d:9f:6e:92:df:29:6d:22:c5:04:07:f9:49:82:7f: 0c:6a:7c:9c:a3:eb:da:f6:ed:25:8e:15:79:a0:72: 4d:41:4c:bc:13:e0:af:16:38:64:68:9d:27:7c:d6: 0f:ce:60:65:ae:db:90:82:ca:b1:1f:b1:86:5e:a5: c8:44:be:3b:2d:ad:aa:4d:a1:9e:79:eb:87:39:1d: 8c:d5:4f:cc:cd:2c:c9:75:87:d5:5b:0b:0d:49:b5: ec:ee:04:22:da:cd:98:d2:ac:45:e5:4e:da:d4:1b: d1:4f:21:47:68:67:18:12:c6:0b:9f:d2:e0:68:12: 4b:9d:db:2c:ae:cf:e4:44:dd:f5:5b:0a:f1:78:13: 2c:10:3c:3b:5d:97:09:a8:49:68:ba:1b:73:48:8e: cd:95:cb:30:ba:da:d6:37:d2:41:30:ed:10:47:46: 21:06:e8:1e:e7:62:1e:f8:91:a1:22:e4:b2:48:19: 4c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D8:49:21:A9:F2:0B:A1:D6:22:3F:43:8F:2D:07:BA:D7:CC:F0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl X509v3 Authority Key Identifier: keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer sbgp-ipAddrBlock: critical IPv4: 66.187.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6c:97:19:72:54:f5:0b:fb:a1:d8:00:04:47:37:82:1f:c3: 13:00:46:f7:19:ce:d4:2b:80:c9:38:29:78:b2:53:63:c8:07: bc:d6:be:87:86:12:5f:32:50:8a:16:db:30:41:58:b0:7c:4b: 7e:48:f2:cf:21:5d:e1:1a:b3:f3:94:35:51:98:6f:14:b0:4e: 7e:92:87:2b:02:e6:01:ed:7b:86:b5:9c:98:0e:ad:ad:66:26: da:ef:7b:8c:e8:61:1d:10:b8:9b:7f:cd:59:94:4c:d1:f5:1c: 9b:62:25:86:7e:46:b9:95:05:71:4e:d9:31:58:c6:96:db:a2: 26:39:b7:5f:22:80:0b:3a:06:43:8c:3f:02:9a:2b:69:a9:e9: 7f:29:b3:a6:3d:d6:f6:43:27:bd:fd:fe:32:ab:14:0b:c6:a3: 46:e5:16:97:a5:d2:f3:b4:c8:8b:10:4b:dc:c5:dd:f1:30:52: b1:f0:e3:01:ea:68:3a:61:4a:f3:0e:49:d7:28:e4:76:da:31: 3a:c6:83:5a:fb:86:da:60:de:07:2d:94:79:f7:c2:85:02:48: 01:85:96:97:de:35:06:9b:a3:a5:4a:0b:89:a7:6e:6e:fd:b5: 19:00:26:51:cb:11:33:81:4c:0f:e4:4a:9e:50:eb:97:9b:21: c4:15:43:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomPD5Kqx8xrRm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy MDZiMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk MTM3ZGI3ZjctYWY3MS00YWQ5LTk0NTMtOTdmY2QxZDc1YmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp5YVJNxRs+eA0H8eqUmTbN7rHTe33uPY1Kz AXzmT1XjtfD03VskJKTFyBCtTJJQy2kb9pkhB4Ww56hkAZMKEDiCZsfCQheE3SmN n26S3yltIsUEB/lJgn8Manyco+va9u0ljhV5oHJNQUy8E+CvFjhkaJ0nfNYPzmBl rtuQgsqxH7GGXqXIRL47La2qTaGeeeuHOR2M1U/MzSzJdYfVWwsNSbXs7gQi2s2Y 0qxF5U7a1BvRTyFHaGcYEsYLn9LgaBJLndssrs/kRN31WwrxeBMsEDw7XZcJqElo uhtzSI7NlcswutrWN9JBMO0QR0YhBuge52Ie+JGhIuSySBlMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3YSSGp8guh1iI/Q48tB7rXzPB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5 NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvZGNkMGJmZTYtMjUzNy0z OGI0LWE5YTQtMmRjNTUwZjNkYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1 M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0 NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVslxlyVPUL+6HYAARHN4IfwxMARvcZztQrgMk4KXiyU2PIB7zWvoeG El8yUIoW2zBBWLB8S35I8s8hXeEas/OUNVGYbxSwTn6ShysC5gHte4a1nJgOra1m Jtrve4zoYR0QuJt/zVmUTNH1HJtiJYZ+RrmVBXFO2TFYxpbboiY5t18igAs6BkOM PwKaK2mp6X8ps6Y91vZDJ739/jKrFAvGo0blFpel0vO0yIsQS9zF3fEwUrHw4wHq aDphSvMOSdco5HbaMTrGg1r7htpg3gctlHn3woUCSAGFlpfeNQabo6VKC4mnbm79 tRkAJlHLETOBTA/kSp5Q65ebIcQVQ+E= -----END CERTIFICATE-----Generated at Thu Mar 19 15:41:22 2026 by rpki-client