$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f4c01303-cca9-38d9-be17-e90b2354932e.roa File: f4c01303-cca9-38d9-be17-e90b2354932e.roa (raw, json) Hash identifier: mEVBB85k56rN5PMbUm6b0SxfhaAnZVRnsyeCVSImWQE= Subject key identifier: 0D:77:97:01:1D:A8:3E:C6:BD:CB:78:00:37:E3:28:6D:D2:E4:52:7F Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584CA491A7FDC19A7AD4DAE6ED60 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f4c01303-cca9-38d9-be17-e90b2354932e.roa Signing time: Sun 25 Jan 2026 14:00:40 +0000 ROA not before: Sun 25 Jan 2026 14:00:40 +0000 ROA not after: Sat 25 Apr 2026 13:00:40 +0000 asID: 400072 IP address blocks: 66.43.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:91:a7:fd:c1:9a:7a:d4:da:e6:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jan 25 14:00:40 2026 GMT Not After : Apr 25 13:00:40 2026 GMT Subject: CN=b6828d66-b6f7-43a1-b4c6-ce9e6d7e3e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5c:76:1b:87:5e:7b:64:29:69:1a:50:1a:ef: 8a:af:fd:43:03:02:d9:e1:15:b1:01:de:3a:fc:31: 02:80:3f:0f:21:c9:4f:07:9f:7d:41:b3:d2:2b:78: 90:e0:57:75:20:44:75:46:8b:39:ad:dc:1a:54:38: 63:1b:d8:a1:b7:20:43:0e:6b:ed:a5:dd:aa:8f:81: 81:3a:52:6a:7e:a8:d9:53:cc:fb:8c:3f:91:ea:45: e9:d6:dd:e7:82:0d:72:e3:90:46:3d:c3:11:44:a0: 6e:14:45:bc:10:49:92:53:5c:74:4b:d3:c8:58:18: ef:f4:2f:94:a7:e5:18:3f:2b:f6:76:95:2e:1a:21: 78:18:2a:a0:cf:ba:b5:11:fc:10:65:ef:40:c6:94: b9:80:35:4b:d9:0f:15:3c:6c:d2:1b:67:2f:33:35: 07:25:a0:e1:38:90:75:35:24:73:70:b4:2a:8f:f1: 1f:2b:3d:a8:b5:6b:6f:c4:11:56:b7:8e:6e:e1:07: ac:24:a8:e7:b5:9d:e4:b6:c4:29:65:8e:25:b2:c6: ac:77:2d:cf:61:c8:bc:a0:69:77:49:18:12:d0:0e: 19:cc:ba:b8:cf:24:cf:a2:16:53:54:68:fb:35:de: ed:3e:26:56:79:98:07:5d:3e:f4:7a:39:8f:33:f3: c1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:77:97:01:1D:A8:3E:C6:BD:CB:78:00:37:E3:28:6D:D2:E4:52:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f4c01303-cca9-38d9-be17-e90b2354932e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 66.43.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:7d:b7:8b:37:6c:78:b0:93:0f:5b:42:53:5e:b9:81:3c:86: 44:07:dd:a3:97:e3:ba:3e:5f:17:0d:93:4f:6f:a6:cc:93:1d: b0:89:42:a6:b1:50:d8:41:d6:ae:f0:0a:fd:23:66:0f:60:8a: 34:8f:b9:12:64:bd:b5:53:e5:37:8f:17:e0:c3:26:47:66:78: d5:5a:7f:28:18:d3:d4:15:2a:0b:9f:5b:ac:60:16:de:5f:7f: 62:b7:cf:26:48:a8:51:2f:38:e7:8a:06:55:5f:73:ac:36:6a: 91:29:8a:fc:cf:12:e6:d2:34:23:c2:90:e6:3a:4a:a8:64:38: 59:ae:bf:6b:f7:02:b9:19:d1:71:86:13:3c:80:50:c0:5e:6f: 71:30:fd:80:fb:aa:bd:81:ad:7e:b4:e3:c5:3f:c4:be:40:62: 7a:c9:6b:e5:dc:bd:7b:04:ce:2b:a2:bf:f7:96:81:50:8e:8a: 85:d6:61:90:58:12:c7:f6:33:0a:19:11:d0:89:03:f6:6c:66: 2a:6b:c5:69:b7:ab:1c:02:a2:78:fa:00:84:f1:30:ac:ac:53: 47:19:ed:a2:96:57:fb:7b:e4:2c:f5:cb:76:f3:d2:0d:03:78: b0:fd:4c:e3:1d:86:ba:ec:a3:03:31:fc:30:d4:be:35:55:c6: 7b:4b:e3:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEykkaf9wZp61Nrm7WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDEyNTE0MDA0MFoXDTI2MDQyNTEzMDA0MFowLzEtMCsGA1UEAxMk YjY4MjhkNjYtYjZmNy00M2ExLWI0YzYtY2U5ZTZkN2UzZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglx2G4dee2QpaRpQGu+Kr/1DAwLZ4RWxAd46 /DECgD8PIclPB599QbPSK3iQ4Fd1IER1Ros5rdwaVDhjG9ihtyBDDmvtpd2qj4GB OlJqfqjZU8z7jD+R6kXp1t3ngg1y45BGPcMRRKBuFEW8EEmSU1x0S9PIWBjv9C+U p+UYPyv2dpUuGiF4GCqgz7q1EfwQZe9AxpS5gDVL2Q8VPGzSG2cvMzUHJaDhOJB1 NSRzcLQqj/EfKz2otWtvxBFWt45u4QesJKjntZ3ktsQpZY4lssasdy3PYci8oGl3 SRgS0A4ZzLq4zyTPohZTVGj7Nd7tPiZWeZgHXT70ejmPM/PBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA13lwEdqD7Gvct4ADfjKG3S5FJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvZjRjMDEzMDMtY2NhOS0z OGQ5LWJlMTctZTkwYjIzNTQ5MzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQisEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt9t4s3bHiwkw9bQlNeuYE8hkQH3aOX47o+XxcNk09vpsyTHbCJQqax UNhB1q7wCv0jZg9gijSPuRJkvbVT5TePF+DDJkdmeNVafygY09QVKgufW6xgFt5f f2K3zyZIqFEvOOeKBlVfc6w2apEpivzPEubSNCPCkOY6SqhkOFmuv2v3ArkZ0XGG EzyAUMBeb3Ew/YD7qr2BrX6048U/xL5AYnrJa+XcvXsEziuiv/eWgVCOioXWYZBY Esf2MwoZEdCJA/ZsZiprxWm3qxwConj6AITxMKysU0cZ7aKWV/t75Cz1y3bz0g0D eLD9TOMdhrrsowMx/DDUvjVVxntL4/A= -----END CERTIFICATE-----Generated at Thu Feb 26 20:55:33 2026 by rpki-client