$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/422eb3dd-2af0-3bf0-8904-43695ea6e58a.roa File: 422eb3dd-2af0-3bf0-8904-43695ea6e58a.roa (raw, json) Hash identifier: HR1pM9c1clOaAgWh8n6ahmejeA+EUM7zZTiSIRwU3DU= Subject key identifier: 38:BD:56:CB:B3:30:1E:56:21:0A:83:1A:DA:31:43:47:8A:96:DD:F1 Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584D4F0EDDE38355D64195835380 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/422eb3dd-2af0-3bf0-8904-43695ea6e58a.roa Signing time: Fri 27 Mar 2026 15:40:23 +0000 ROA not before: Fri 27 Mar 2026 15:40:23 +0000 ROA not after: Thu 25 Jun 2026 15:40:23 +0000 asID: 26496 IP address blocks: 66.248.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:0e:dd:e3:83:55:d6:41:95:83:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Mar 27 15:40:23 2026 GMT Not After : Jun 25 15:40:23 2026 GMT Subject: CN=9d886da4-4cdf-48ce-b3fb-7a29eab9afe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:50:40:f3:56:c2:45:fa:29:c1:08:bc:c2:34: fe:e3:25:73:5e:11:ce:36:09:e6:c8:37:89:0f:ee: f1:50:a3:91:88:c0:d2:89:75:77:dc:bb:eb:88:89: c8:dc:5f:c5:f8:cf:bf:1a:df:b6:02:a1:07:5e:0c: 15:86:fe:85:f5:37:4f:49:e5:ca:de:47:5a:b3:e1: aa:e8:09:7c:a9:b3:a4:05:48:c3:e1:6e:a9:ac:12: 3c:61:78:d2:a4:5f:3c:72:9f:1a:1e:b0:22:9b:1c: c5:8f:b9:1c:ea:0c:a3:bf:59:62:94:36:f2:35:f0: 45:5d:1a:d7:e8:c8:bf:7a:13:71:31:cd:9e:70:66: cd:33:71:97:81:12:c4:b5:7f:74:b4:11:c1:6e:8a: b3:23:cc:a6:1e:a8:14:f3:11:2a:df:aa:c9:91:16: 3d:5e:f3:db:7e:c8:c7:29:e7:ca:85:17:c9:96:dc: cd:16:31:6e:a7:ed:9f:65:57:77:ac:8e:1c:31:93: 38:31:4b:01:15:ad:1d:17:aa:d4:0b:23:23:2e:5d: 76:ff:93:a2:5d:b7:27:85:87:46:c7:d7:82:d3:2a: 95:e4:5a:09:8b:ee:47:08:f4:6d:ad:c1:dd:b9:7b: 58:44:ba:7d:27:36:c3:14:4c:0c:31:a0:c3:30:2f: 2d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BD:56:CB:B3:30:1E:56:21:0A:83:1A:DA:31:43:47:8A:96:DD:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/422eb3dd-2af0-3bf0-8904-43695ea6e58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 66.248.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:08:54:99:6a:6c:e8:54:34:7b:80:e5:85:19:1e:97:45:97: e6:9e:26:42:65:77:16:b3:25:e1:cb:e8:39:61:72:02:68:e9: b0:a1:6f:0a:5c:94:0e:7c:f6:6c:bd:4c:6d:13:77:fb:a2:0e: 1a:ea:db:68:41:1e:b6:12:35:1b:ff:dc:30:69:a0:3e:d2:e3: b4:56:65:78:59:a3:ff:3b:d8:35:af:df:4c:d5:c0:89:fe:2e: 99:81:35:20:ab:d2:a6:f7:5c:a5:05:a4:af:f7:8e:a5:29:10: 4d:20:1d:54:7f:49:26:30:c1:e1:b8:43:b7:4e:37:b1:9b:bd: 88:fd:09:2d:54:12:06:0d:e8:d5:ac:c0:6e:d0:51:f7:72:89: cb:41:17:72:85:96:48:23:8f:ab:66:98:6f:08:84:be:c8:3d: c2:70:1e:20:42:17:a9:4f:f5:b0:ff:f4:a7:8b:ec:69:b1:7b: b1:d0:2c:7c:2a:fb:e7:87:83:34:5e:62:86:37:ca:23:74:1c: 23:ef:17:15:9f:5b:d5:90:4b:d9:26:5b:7a:f6:20:4b:a4:32: eb:50:6d:73:50:bc:3f:e7:b5:47:be:83:da:15:6e:53:06:e6: 5c:1a:24:8f:d1:d4:a1:4f:a3:dd:21:a1:49:2a:86:f5:ba:68: 50:70:21:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1PDt3jg1XWQZWDU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI2MDMyNzE1NDAyM1oXDTI2MDYyNTE1NDAyM1owLzEtMCsGA1UEAxMk OWQ4ODZkYTQtNGNkZi00OGNlLWIzZmItN2EyOWVhYjlhZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlBA81bCRfopwQi8wjT+4yVzXhHONgnmyDeJ D+7xUKORiMDSiXV33LvriInI3F/F+M+/Gt+2AqEHXgwVhv6F9TdPSeXK3kdas+Gq 6Al8qbOkBUjD4W6prBI8YXjSpF88cp8aHrAimxzFj7kc6gyjv1lilDbyNfBFXRrX 6Mi/ehNxMc2ecGbNM3GXgRLEtX90tBHBboqzI8ymHqgU8xEq36rJkRY9XvPbfsjH KefKhRfJltzNFjFup+2fZVd3rI4cMZM4MUsBFa0dF6rUCyMjLl12/5OiXbcnhYdG x9eC0yqV5FoJi+5HCPRtrcHduXtYRLp9JzbDFEwMMaDDMC8tJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi9VsuzMB5WIQqDGtoxQ0eKlt3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvNDIyZWIzZGQtMmFmMC0z YmYwLTg5MDQtNDM2OTVlYTZlNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUIVJlqbOhUNHuA5YUZHpdFl+aeJkJldxazJeHL6DlhcgJo6bChbwpc lA589my9TG0Td/uiDhrq22hBHrYSNRv/3DBpoD7S47RWZXhZo/872DWv30zVwIn+ LpmBNSCr0qb3XKUFpK/3jqUpEE0gHVR/SSYwweG4Q7dON7GbvYj9CS1UEgYN6NWs wG7QUfdyictBF3KFlkgjj6tmmG8IhL7IPcJwHiBCF6lP9bD/9KeL7Gmxe7HQLHwq ++eHgzReYoY3yiN0HCPvFxWfW9WQS9kmW3r2IEukMutQbXNQvD/ntUe+g9oVblMG 5lwaJI/R1KFPo90hoUkqhvW6aFBwISw= -----END CERTIFICATE-----Generated at Sun Mar 29 23:56:35 2026 by rpki-client