$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa File: cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa (raw, json) Hash identifier: YCD30YcqfZX/7IelUowlgWYNdPZGeX0mp6ydxSwXjTU= Subject key identifier: 75:2D:49:55:5F:A9:98:A1:67:DD:0D:61:C1:E3:43:32:8E:0F:96:54 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D237A31EBA1AF31D61154C080 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 399114 IP address blocks: 66.118.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:31:eb:a1:af:31:d6:11:54:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=9363eba3-237a-402b-ae72-d2c531a081ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:26:1b:46:aa:b3:38:55:6a:0f:ef:87:db: 7a:6b:66:05:a4:5f:36:28:62:ab:7f:50:0f:92:c3: 89:eb:9d:46:b8:b6:87:db:90:9a:75:d1:2a:f0:26: 25:71:64:b5:f0:4d:3d:30:2d:5d:de:cc:11:04:67: fb:b6:8e:ae:5f:49:6f:b0:ae:7a:26:44:8a:46:fa: 28:2f:63:27:de:63:dd:ee:b5:81:a1:05:c7:09:c4: af:f8:a0:e4:01:71:53:64:1d:7d:2b:f9:95:06:b1: 3c:e9:4f:27:c9:cf:8c:27:86:c3:cf:48:14:e7:e2: b3:96:3f:3a:32:96:c8:84:9e:57:0c:be:68:03:df: 5c:07:94:ba:4e:43:fb:7b:e9:9b:d2:6f:54:73:eb: 2b:88:24:09:a9:a0:17:5e:89:8a:38:ef:6e:f0:fd: a6:54:28:94:68:2a:c1:a9:f8:83:3d:27:67:c6:52: 14:f4:22:ff:5d:e0:22:ca:57:54:8f:52:b3:35:61: af:23:de:4e:8c:c9:2b:2c:08:27:03:42:d9:ca:11: ac:86:12:a4:da:2d:7e:dc:6f:01:c3:5e:05:d1:27: ae:55:8b:8e:1b:d0:cd:5c:b9:c2:b1:55:61:e5:fb: ac:de:58:48:28:84:4f:33:23:92:f7:2d:00:f2:97: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2D:49:55:5F:A9:98:A1:67:DD:0D:61:C1:E3:43:32:8E:0F:96:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:de:10:0e:ed:0b:20:62:53:c5:30:e6:8a:11:8f:67:d8:46: c8:ba:0e:91:88:8a:c0:20:bc:e3:83:be:5c:27:b4:db:07:54: 44:b1:ad:c0:63:c6:36:89:1c:cf:21:db:80:b8:02:82:b1:63: 2b:b8:03:82:fe:60:d2:5c:0a:11:b6:32:a3:d8:07:33:93:38: 62:a6:72:e0:2c:ba:f6:e6:54:79:7c:f3:c4:e1:c3:34:26:69: 73:5b:ee:ac:6f:d2:21:f1:3b:1e:65:2c:ee:a7:13:2a:bf:29: 2b:c2:af:c2:38:e8:7f:39:2c:2a:5a:e7:30:03:03:69:cd:0a: 16:bc:c4:04:97:23:8e:cb:16:b0:4f:8e:a6:8b:65:ba:e6:2b: 9f:ae:15:ca:31:60:82:16:e1:4f:e3:b7:d0:f6:ed:95:35:62: e7:79:e5:75:00:a9:a4:1c:2f:de:2f:dd:fd:dc:9b:9c:ce:79: ff:b1:ef:be:3a:91:9d:32:5e:0c:f5:75:10:00:c3:9d:e4:d1: 57:04:5c:8c:8e:f2:46:07:f3:e9:15:e9:94:4e:a2:91:da:99: 2d:a8:19:1e:05:4a:03:54:bd:9e:a6:35:27:9b:3f:da:4a:13: 32:f6:e3:a6:c1:68:c5:95:21:7e:4a:8e:48:1a:dc:0c:b4:78: 78:56:e8:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejHroa8x1hFUwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTM2M2ViYTMtMjM3YS00MDJiLWFlNzItZDJjNTMxYTA4MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJImG0aqszhVag/vh9t6a2YFpF82KGKrf1AP ksOJ651GuLaH25CaddEq8CYlcWS18E09MC1d3swRBGf7to6uX0lvsK56JkSKRvoo L2Mn3mPd7rWBoQXHCcSv+KDkAXFTZB19K/mVBrE86U8nyc+MJ4bDz0gU5+Kzlj86 MpbIhJ5XDL5oA99cB5S6TkP7e+mb0m9Uc+sriCQJqaAXXomKOO9u8P2mVCiUaCrB qfiDPSdnxlIU9CL/XeAiyldUj1KzNWGvI95OjMkrLAgnA0LZyhGshhKk2i1+3G8B w14F0SeuVYuOG9DNXLnCsVVh5fus3lhIKIRPMyOS9y0A8peiOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUtSVVfqZihZ90NYcHjQzKOD5ZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvY2I3ZGJhZjEtNGEwOC0z NWFjLTgzOGMtZDUyZTFjYzE4MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAreEA7tCyBiU8Uw5ooRj2fYRsi6DpGIisAgvOODvlwntNsHVESxrcBj xjaJHM8h24C4AoKxYyu4A4L+YNJcChG2MqPYBzOTOGKmcuAsuvbmVHl888ThwzQm aXNb7qxv0iHxOx5lLO6nEyq/KSvCr8I46H85LCpa5zADA2nNCha8xASXI47LFrBP jqaLZbrmK5+uFcoxYIIW4U/jt9D27ZU1Yud55XUAqaQcL94v3f3cm5zOef+x7746 kZ0yXgz1dRAAw53k0VcEXIyO8kYH8+kV6ZROopHamS2oGR4FSgNUvZ6mNSebP9pK EzL246bBaMWVIX5Kjkga3Ay0eHhW6Ag= -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:50 2026 by rpki-client