$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa File: 066b4f4e-c861-3946-a26e-9e25c56e7451.roa (raw, json) Hash identifier: Px96+IqdwVcaqJA1HPF9JzsjfU+8y5jiuahU0QN8J0w= Subject key identifier: 72:99:70:7C:AA:E4:BB:DA:E6:FD:A9:0A:88:48:F7:E1:98:57:33:34 Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Certificate serial: 010D0C9F4328584D1F4A479772AC8D357462D080 Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 30041 IP address blocks: 67.211.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:47:97:72:ac:8d:35:74:62:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=be7f604d-7859-441b-bde9-14ad7128eef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:09:fe:d0:81:01:b0:c1:36:dc:fd:a6:b0: 04:e9:d3:ec:cb:73:90:2a:a4:32:b8:8a:56:81:85: 1c:f6:4d:d1:b6:b7:47:c6:c3:ea:e1:40:8d:5c:82: 6d:dc:34:98:16:bb:52:d3:af:a0:97:da:32:9f:f2: 08:e3:93:4c:a7:a0:0f:60:dd:74:55:7d:5b:69:39: 77:5a:af:5e:d7:81:02:24:e8:c7:ac:47:33:bb:1d: 8a:86:0f:10:b6:11:92:11:e7:66:cf:c6:15:b7:e2: 97:bf:de:fc:38:cf:fb:9e:cf:f7:ff:b7:62:8b:2b: 91:4f:d0:4d:ba:6a:86:9c:3d:21:28:f7:ac:2b:75: 79:86:33:1b:6e:bd:44:bf:45:5b:41:48:ff:0f:cc: 2f:35:51:17:24:70:e8:22:e6:7d:d7:22:86:f8:eb: 5d:60:bb:32:b8:b9:5b:d8:0f:78:5a:72:e9:c1:8f: bf:4a:45:b6:d0:30:b4:5e:de:ee:0d:a6:3e:4a:ff: 49:05:18:2c:03:6c:dd:27:2d:c3:8d:47:09:b7:99: 04:c8:62:08:69:f1:ec:76:21:d6:e9:0b:15:aa:bf: 19:01:57:e0:55:db:53:d7:89:4d:64:c3:67:29:70: 1d:40:f7:1c:7c:78:6c:45:06:94:7c:ce:78:3a:08: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:99:70:7C:AA:E4:BB:DA:E6:FD:A9:0A:88:48:F7:E1:98:57:33:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl X509v3 Authority Key Identifier: keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer sbgp-ipAddrBlock: critical IPv4: 67.211.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:57:14:23:52:85:33:7c:4e:33:81:94:f3:44:5c:36:6e:d2: 52:61:e7:e4:78:74:c3:21:4b:1f:3a:6d:43:4d:e5:86:52:31: d3:20:ad:54:75:54:bc:6f:9f:bc:cf:d7:da:95:a1:3b:5f:e4: 00:f7:a5:16:8f:7b:26:4c:a8:4c:1a:e5:3b:b2:fd:56:26:a9: 68:94:be:b7:2e:1c:4b:dc:6a:6a:fc:68:4b:16:38:a9:b0:79: e4:67:4d:58:e8:af:20:9d:0a:24:24:43:a7:52:e5:53:5f:d8: a7:73:49:b2:c9:ee:dc:43:15:55:71:dd:73:ff:6b:dc:00:45: af:fa:b0:7e:c6:ad:35:4a:86:18:62:05:11:a4:6e:28:2a:b0: 8a:06:1c:e2:13:3d:da:ea:9f:cb:af:a2:df:6d:a6:06:d7:23: 5d:4b:f4:93:eb:ff:a9:9a:65:d9:ac:85:75:7a:31:65:79:e4: 29:06:d4:cf:42:d1:4f:82:35:e4:1e:24:7f:b7:ad:2c:bf:63: f8:c7:c6:4d:10:1e:03:7c:17:12:e4:f7:39:af:3c:9b:a8:1b: 91:67:76:a6:38:89:3b:1c:4b:af:98:4b:09:a7:2c:f2:4c:9c: ad:ae:93:e8:db:42:0a:70:c8:4f:69:f9:5b:f5:21:f9:43:da: 53:ce:2f:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkeXcqyNNXRi0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJhOGJkZDAtNmM3Zi00N2I3LWI0MjctNmUyYjQ1NGZh MzQzMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YmU3ZjYwNGQtNzg1OS00NDFiLWJkZTktMTRhZDcxMjhlZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVYJ/tCBAbDBNtz9prAE6dPsy3OQKqQyuIpW gYUc9k3RtrdHxsPq4UCNXIJt3DSYFrtS06+gl9oyn/II45NMp6APYN10VX1baTl3 Wq9e14ECJOjHrEczux2Khg8QthGSEedmz8YVt+KXv978OM/7ns/3/7diiyuRT9BN umqGnD0hKPesK3V5hjMbbr1Ev0VbQUj/D8wvNVEXJHDoIuZ91yKG+OtdYLsyuLlb 2A94WnLpwY+/SkW20DC0Xt7uDaY+Sv9JBRgsA2zdJy3DjUcJt5kEyGIIafHsdiHW 6QsVqr8ZAVfgVdtT14lNZMNnKXAdQPccfHhsRQaUfM54OggjTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKZcHyq5Lva5v2pCohI9+GYVzM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4 YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJiNDU0ZmEzNDMvMDY2YjRmNGUtYzg2MS0z OTQ2LWEyNmUtOWUyNWM1NmU3NDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWJhOGJkZDAtNmM3Zi00N2I3LWI0 MjctNmUyYjQ1NGZhMzQzLzliYThiZGQwLTZjN2YtNDdiNy1iNDI3LTZlMmI0NTRm YTM0My5jcmwwHwYDVR0jBBgwFoAUsWj3t9BOo5ekclbjM5CgXUrxK0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJi NDU0ZmEzNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhXFCNShTN8TjOBlPNEXDZu0lJh5+R4dMMhSx86bUNN5YZSMdMgrVR1 VLxvn7zP19qVoTtf5AD3pRaPeyZMqEwa5Tuy/VYmqWiUvrcuHEvcamr8aEsWOKmw eeRnTVjoryCdCiQkQ6dS5VNf2KdzSbLJ7txDFVVx3XP/a9wARa/6sH7GrTVKhhhi BRGkbigqsIoGHOITPdrqn8uvot9tpgbXI11L9JPr/6maZdmshXV6MWV55CkG1M9C 0U+CNeQeJH+3rSy/Y/jHxk0QHgN8FxLk9zmvPJuoG5FndqY4iTscS6+YSwmnLPJM nK2uk+jbQgpwyE9p+Vv1IflD2lPOL00= -----END CERTIFICATE-----Generated at Tue Mar 24 17:00:11 2026 by rpki-client