$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa File: a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa (raw, json) Hash identifier: gacHN5Ob3lgBe2TAMsQwjXlpFg19qqqzgsvUMgP1SBY= Subject key identifier: 45:B6:AD:25:32:6D:C6:54:65:8E:05:B2:4A:DE:37:06:16:25:92:15 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF573360E2524A2707B540 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 213122 IP address blocks: 66.118.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:57:33:60:e2:52:4a:27:07:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=46baa534-1c77-414c-8ed7-bd7abe81e353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:63:eb:ab:a9:47:a1:6d:6d:0b:11:de:0d: 00:13:d6:b8:fa:a0:71:c9:36:14:fd:14:38:c0:e0: 6b:77:28:3d:23:cb:30:b5:58:ac:49:91:9c:e5:32: bf:cb:df:08:c4:68:50:5d:26:dd:0c:3d:18:89:f3: cd:db:a7:27:c2:f3:6d:59:3a:5d:af:df:cc:c1:dc: af:1f:2c:1c:31:fc:fb:c7:8e:7c:a8:81:9e:b0:a0: 6d:cf:0d:bc:1b:86:65:23:b8:de:46:0d:62:92:49: 6a:42:28:1f:c2:bc:a1:42:6d:ec:03:0d:08:ac:13: a0:60:98:d4:1e:0f:1b:64:e5:13:4a:c8:63:24:4e: ff:9b:e0:48:a8:8b:a5:87:2c:9e:e0:09:16:59:e7: f4:50:c2:0a:43:ec:32:de:cb:76:08:bf:c9:37:17: f4:38:ab:8e:10:bd:0a:2c:32:6a:2a:92:1c:c2:a4: 82:43:29:c7:dc:4b:74:69:b9:08:f8:89:98:74:87: 74:ef:ef:c2:8b:24:0d:6c:93:72:7a:a9:57:a3:1d: 85:a3:12:c4:1a:b2:1a:5a:53:b3:94:aa:5e:7a:6e: 85:eb:c2:44:a8:6f:f6:78:0c:d0:4a:52:35:fd:82: 47:99:f4:04:76:f3:bf:91:ca:15:10:d8:43:b0:ec: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B6:AD:25:32:6D:C6:54:65:8E:05:B2:4A:DE:37:06:16:25:92:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e4:4c:93:6e:5b:4f:2c:c4:ad:c0:6e:b5:0a:7f:d9:ce:b6: cb:ad:90:96:eb:ea:4f:19:c2:da:5f:43:c6:0b:ee:18:72:9a: a5:e4:27:93:71:40:49:66:3f:f2:29:ab:aa:f5:cb:98:7c:3a: 5f:aa:a5:05:b2:76:9a:a5:9f:65:4c:b3:bb:ad:e8:b8:54:72: f0:ee:b2:41:db:81:cc:20:e1:19:08:19:c9:da:38:aa:e0:40: 64:b7:92:cc:21:1b:60:29:8a:5e:df:89:b1:27:62:ea:24:0d: ed:ac:ee:a0:7a:81:3c:d0:eb:bf:aa:ff:27:88:ee:e8:b7:d8: 87:80:64:75:fa:d8:62:a8:fd:82:4c:9b:93:a4:be:97:92:3b: 2b:1e:86:77:38:b4:49:c0:e6:f8:f4:f2:50:38:74:81:e7:e8: 2b:46:39:01:a1:b8:ce:78:15:84:b8:0e:5c:0e:84:f5:08:9e: 35:5e:7f:d2:56:4c:a6:51:12:64:9a:fc:a2:e1:6f:d2:30:93: 93:a9:f0:76:4d:1c:3c:25:f4:0f:d2:3f:1a:08:2a:ac:06:a3: cc:56:d3:a0:8f:92:68:4e:67:bc:bc:95:e0:70:19:2a:47:15: 02:15:e0:a4:5b:19:0f:3d:72:52:c9:8f:54:e9:70:ca:30:d6: 4e:a0:c9:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1czYOJSSicHtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk NDZiYWE1MzQtMWM3Ny00MTRjLThlZDctYmQ3YWJlODFlMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDlj66upR6FtbQsR3g0AE9a4+qBxyTYU/RQ4 wOBrdyg9I8swtVisSZGc5TK/y98IxGhQXSbdDD0YifPN26cnwvNtWTpdr9/Mwdyv HywcMfz7x458qIGesKBtzw28G4ZlI7jeRg1ikklqQigfwryhQm3sAw0IrBOgYJjU Hg8bZOUTSshjJE7/m+BIqIulhyye4AkWWef0UMIKQ+wy3st2CL/JNxf0OKuOEL0K LDJqKpIcwqSCQynH3Et0abkI+ImYdId07+/CiyQNbJNyeqlXox2FoxLEGrIaWlOz lKpeem6F68JEqG/2eAzQSlI1/YJHmfQEdvO/kcoVENhDsOwqDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEW2rSUybcZUZY4FskreNwYWJZIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTAwZTVkMGEtOGQ1Yi0z N2Y1LTk3NTktYjJlOWE4OTg3OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzkTJNuW08sxK3AbrUKf9nOtsutkJbr6k8ZwtpfQ8YL7hhymqXkJ5Nx QElmP/Ipq6r1y5h8Ol+qpQWydpqln2VMs7ut6LhUcvDuskHbgcwg4RkIGcnaOKrg QGS3kswhG2Apil7fibEnYuokDe2s7qB6gTzQ67+q/yeI7ui32IeAZHX62GKo/YJM m5OkvpeSOysehnc4tEnA5vj08lA4dIHn6CtGOQGhuM54FYS4DlwOhPUInjVef9JW TKZREmSa/KLhb9Iwk5Op8HZNHDwl9A/SPxoIKqwGo8xW06CPkmhOZ7y8leBwGSpH FQIV4KRbGQ89clLJj1TpcMow1k6gyaM= -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:05 2026 by rpki-client