$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa File: 8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa (raw, json) Hash identifier: V1OQ1XSA07O5KZG5A3hV6UbRaN+r/99tf/CsDZf0Dyg= Subject key identifier: F0:D9:6E:4C:D0:F7:EE:E2:AF:D0:3B:74:A5:15:2B:21:88:E6:04:F1 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF552FD8E3F99D05F133E0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 931 IP address blocks: 66.118.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:55:2f:d8:e3:f9:9d:05:f1:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=bb489c04-87ba-48d8-ac82-71a246d1d0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:ed:97:4c:29:1d:22:37:26:bf:15:df:3f: 06:45:66:fb:93:42:5d:b1:98:7f:bb:71:b1:e5:9f: e1:c0:5f:97:37:5e:13:32:11:3d:65:00:1f:ca:b3: 7e:22:aa:ed:a1:14:82:03:47:99:2e:a2:0c:30:82: 98:6e:f2:38:f4:72:3f:aa:40:0b:35:64:b4:0b:50: aa:ac:77:01:c1:f8:0f:10:6b:bc:67:26:74:8f:8a: af:93:5f:63:64:61:a4:7f:94:eb:32:1f:df:43:b4: 43:51:a5:e1:8a:27:54:a7:17:24:c5:ff:59:e3:77: ac:8c:99:6f:96:1f:4d:fa:c5:05:63:d9:27:41:28: 21:31:76:34:02:18:14:1d:be:0c:38:0d:34:28:c9: 4f:eb:4d:a1:f8:30:90:61:cb:f5:89:15:46:47:9d: 77:e3:89:c5:5c:9a:04:b8:72:f5:30:d3:83:31:57: 3e:cc:30:f2:99:f8:d8:9d:34:cd:db:f3:33:53:cd: 19:e4:e1:f0:0f:fd:f1:0e:92:88:0b:2b:8f:a3:48: fc:fa:bb:ec:7e:d7:4b:37:3a:d8:00:be:0e:49:3a: 1d:5f:74:2c:55:59:e0:41:51:3d:ec:2d:10:d1:46: 0f:d9:1c:1d:b8:f9:7b:25:c2:d7:cd:d1:34:ee:0b: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D9:6E:4C:D0:F7:EE:E2:AF:D0:3B:74:A5:15:2B:21:88:E6:04:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7c:e1:d8:88:65:22:b6:25:19:63:92:59:e4:39:5d:8c:f2: c1:77:4f:0e:1e:5f:ee:b3:89:e3:10:49:84:b0:ef:ad:cd:af: 7f:c6:7e:06:55:7e:1d:db:03:a1:0b:46:59:ec:cf:79:72:d5: 73:03:34:ab:5d:a7:09:0b:f6:68:fa:d8:f0:df:f6:cb:36:54: 83:91:43:bc:e3:95:71:a0:6c:2b:d9:fe:05:e5:75:34:3b:3a: 60:47:2a:66:23:66:8c:8a:ca:93:5a:17:0e:57:75:2b:49:35: c6:0c:42:b5:ee:d1:56:d7:c3:25:82:64:93:52:11:82:7f:8a: 9d:b7:ba:76:9c:37:15:b4:c0:3b:1d:4e:23:a4:ad:9f:78:53: 9c:fe:58:e1:44:43:d1:e6:65:02:c8:a9:e1:83:9f:e3:7c:6d: 13:3e:ad:ed:e4:ca:ac:5f:20:cd:d6:a4:77:fe:ba:ac:c6:52: 0d:47:00:78:f2:82:de:08:39:52:bb:30:07:50:ac:43:0c:13: 7a:c0:c0:2d:99:01:72:9a:d1:7a:66:5d:c5:4f:d4:1b:eb:69: 34:6d:5b:37:f6:60:da:29:0d:2d:9b:3c:1e:8d:e8:ca:2c:ef: 32:4b:9f:4f:04:65:8e:5d:e4:2f:1f:f2:62:dd:12:be:56:ce: 82:1c:fa:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1Uv2OP5nQXxM+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk YmI0ODljMDQtODdiYS00OGQ4LWFjODItNzFhMjQ2ZDFkMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8ztl0wpHSI3Jr8V3z8GRWb7k0JdsZh/u3Gx 5Z/hwF+XN14TMhE9ZQAfyrN+IqrtoRSCA0eZLqIMMIKYbvI49HI/qkALNWS0C1Cq rHcBwfgPEGu8ZyZ0j4qvk19jZGGkf5TrMh/fQ7RDUaXhiidUpxckxf9Z43esjJlv lh9N+sUFY9knQSghMXY0AhgUHb4MOA00KMlP602h+DCQYcv1iRVGR51344nFXJoE uHL1MNODMVc+zDDymfjYnTTN2/MzU80Z5OHwD/3xDpKICyuPo0j8+rvsftdLNzrY AL4OSTodX3QsVVngQVE97C0Q0UYP2RwduPl7JcLXzdE07gurpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDZbkzQ9+7ir9A7dKUVKyGI5gTxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODQyMGY1NzAtMDRiYy0z ODdkLTliYjYtZDVmN2E0M2U3NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV84diIZSK2JRljklnkOV2M8sF3Tw4eX+6zieMQSYSw763Nr3/GfgZV fh3bA6ELRlnsz3ly1XMDNKtdpwkL9mj62PDf9ss2VIORQ7zjlXGgbCvZ/gXldTQ7 OmBHKmYjZoyKypNaFw5XdStJNcYMQrXu0VbXwyWCZJNSEYJ/ip23unacNxW0wDsd TiOkrZ94U5z+WOFEQ9HmZQLIqeGDn+N8bRM+re3kyqxfIM3WpHf+uqzGUg1HAHjy gt4IOVK7MAdQrEMME3rAwC2ZAXKa0XpmXcVP1BvraTRtWzf2YNopDS2bPB6N6Mos 7zJLn08EZY5d5C8f8mLdEr5WzoIc+sk= -----END CERTIFICATE-----Generated at Fri Mar 13 10:59:40 2026 by rpki-client