$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa File: 209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa (raw, json) Hash identifier: itUV7xM4QDvYsq9rSE13e31KooPCXpdajcpnVU6iECU= Subject key identifier: D3:23:79:C2:DA:5A:E9:81:5F:3B:EE:B6:CA:3F:AB:BB:C8:CE:01:83 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF5546A6AC4CD07091AF80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 931 IP address blocks: 66.118.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:55:46:a6:ac:4c:d0:70:91:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=f09b41e0-82bf-4d5c-b8fc-8bee783550af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:5f:76:f1:eb:16:97:dd:c0:b8:ee:d8:c1: f9:77:d0:e9:59:e5:63:ed:95:1c:33:39:1e:3f:a7: de:2b:83:1c:f2:ba:ad:d6:92:3e:ed:fe:87:9b:73: 3b:8e:a5:71:74:69:dd:3b:35:27:f9:d7:a7:64:8f: 7b:5a:ba:bf:f3:90:1b:00:40:33:80:04:79:13:15: 44:30:71:e6:2b:34:63:69:a0:3b:59:1d:f8:4c:50: 6c:3c:e5:d7:3d:13:39:01:ab:0a:38:08:31:00:51: a1:a4:5f:3a:30:ed:0d:9d:d7:54:91:95:bc:1c:40: 44:d2:24:13:51:a8:7c:ef:e1:3a:f9:e3:1c:ec:5c: 45:eb:6d:4e:c5:92:14:25:2a:2d:4a:14:ac:61:a9: 17:8e:87:c5:bb:f4:a1:f5:8a:0c:03:1a:47:14:15: 86:03:9f:82:a1:29:b7:8c:7b:9f:19:00:8f:30:f0: 17:8e:bf:44:65:a8:fb:c6:a7:f1:69:ae:68:f9:95: ef:62:06:ce:df:3b:6e:19:3e:72:3b:c4:a7:2b:2e: 94:40:d2:a7:e2:56:69:aa:96:ee:64:a4:02:42:ad: 0e:ba:dc:50:4e:f5:9c:96:9c:ba:9c:ff:b9:d0:6c: 3d:76:fe:87:3f:98:94:cc:ca:70:39:47:37:9d:08: 3b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:23:79:C2:DA:5A:E9:81:5F:3B:EE:B6:CA:3F:AB:BB:C8:CE:01:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:26:8d:0b:c2:c3:6b:54:c3:40:5e:44:15:72:76:e2:04:6e: 5e:95:d7:9d:31:81:cf:61:b7:d0:d6:9a:e8:8b:0b:f9:55:86: d3:24:4c:56:c1:19:19:f2:ce:e8:82:ee:03:8e:17:e6:a8:52: 33:88:e1:8c:69:36:dd:94:6f:31:19:4a:db:6c:1a:c3:d1:57: 4d:5a:ca:9a:1b:be:e3:29:f2:10:12:d5:26:11:86:1a:6e:63: 0e:13:39:76:4c:65:23:37:36:1f:40:07:61:fa:dd:96:d4:60: 43:c3:77:2e:57:a0:a3:cd:58:d8:6d:a8:ff:88:6a:86:51:0f: 1d:3d:20:92:ad:e5:b6:8b:e9:56:21:b6:5e:40:29:5f:5b:76: 9a:f0:d4:18:7c:de:3a:e3:c9:be:9f:b6:42:c4:17:dc:c8:55: 7c:10:12:60:ce:1f:92:a8:02:fd:74:f2:3a:26:65:50:94:57: 04:31:26:3a:67:9e:44:7e:51:a3:97:0b:b2:75:cb:ce:dc:b2: 9d:70:55:a4:45:f8:5c:21:a9:55:24:03:6a:de:32:83:0b:3c: 45:05:89:8d:ef:a3:31:ba:bd:73:e5:24:62:e7:db:18:f7:fe: d6:da:6d:49:ba:18:75:93:dc:5a:eb:aa:cf:1b:7a:11:96:e4: fc:c0:63:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1VGpqxM0HCRr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjA5YjQxZTAtODJiZi00ZDVjLWI4ZmMtOGJlZTc4MzU1MGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm5fdvHrFpfdwLju2MH5d9DpWeVj7ZUcMzke P6feK4Mc8rqt1pI+7f6Hm3M7jqVxdGndOzUn+denZI97Wrq/85AbAEAzgAR5ExVE MHHmKzRjaaA7WR34TFBsPOXXPRM5AasKOAgxAFGhpF86MO0NnddUkZW8HEBE0iQT Uah87+E6+eMc7FxF621OxZIUJSotShSsYakXjofFu/Sh9YoMAxpHFBWGA5+CoSm3 jHufGQCPMPAXjr9EZaj7xqfxaa5o+ZXvYgbO3ztuGT5yO8SnKy6UQNKn4lZpqpbu ZKQCQq0OutxQTvWclpy6nP+50Gw9dv6HP5iUzMpwOUc3nQg7fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMjecLaWumBXzvutso/q7vIzgGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMjA5ZTUyYTktN2FkMC0z ZDNkLThlYTktOWVjOTZjNjkwOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsmjQvCw2tUw0BeRBVyduIEbl6V150xgc9ht9DWmuiLC/lVhtMkTFbB GRnyzuiC7gOOF+aoUjOI4YxpNt2UbzEZSttsGsPRV01aypobvuMp8hAS1SYRhhpu Yw4TOXZMZSM3Nh9AB2H63ZbUYEPDdy5XoKPNWNhtqP+IaoZRDx09IJKt5baL6VYh tl5AKV9bdprw1Bh83jrjyb6ftkLEF9zIVXwQEmDOH5KoAv108jomZVCUVwQxJjpn nkR+UaOXC7J1y87csp1wVaRF+FwhqVUkA2reMoMLPEUFiY3vozG6vXPlJGLn2xj3 /tbabUm6GHWT3Frrqs8behGW5PzAY/k= -----END CERTIFICATE-----Generated at Fri Mar 13 10:58:03 2026 by rpki-client