$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa File: 2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa (raw, json) Hash identifier: CmtS1llT53K9vNCgk8qHInrHLBsumXRMY9MWetEtpYQ= Subject key identifier: E5:41:C6:D5:12:A0:57:AE:B9:37:5C:C0:70:CD:65:48:84:0A:9D:1B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77A4BB7626CAD26C89BB80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 203 IP address blocks: 66.54.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a4:bb:76:26:ca:d2:6c:89:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=21a9f290-2151-4ae8-8196-a8f22df490fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:68:7f:48:81:40:02:f6:b9:ee:8b:38:a8: c5:98:64:cb:68:28:3f:7d:f6:62:8e:01:07:91:bb: 2e:b9:df:0d:ba:bb:6a:3c:5f:e1:5b:cd:17:25:87: 2b:b7:aa:c2:bc:e1:7f:b2:78:d8:7d:6f:81:15:cf: b2:37:a8:03:a8:c0:78:7a:85:7b:25:e7:89:b7:ad: 75:90:4a:22:dc:e4:0f:73:c6:fa:b8:d4:70:f3:71: b8:e6:f2:a4:3e:c4:c1:7b:3a:4f:be:5a:04:fe:be: 65:d8:5b:d1:64:c8:ce:52:7f:90:b8:d0:d3:c4:93: 4d:5d:74:0b:1a:a2:92:73:03:4d:c4:0f:78:98:77: c2:69:37:3a:a8:97:5d:a8:61:1e:14:8f:ce:e6:9e: 2c:ab:f3:8a:6a:b3:54:17:31:f8:35:38:b7:c9:e6: 80:ff:95:7a:b8:1e:65:a8:eb:cc:7d:c7:df:10:c3: c1:8f:83:a7:cf:59:3d:34:7d:c8:d7:e0:f2:cc:d5: d5:4c:f3:9e:c9:71:32:2e:bb:90:20:6f:2e:14:6c: a0:19:5d:56:4e:0d:7c:6d:f6:cc:d9:a9:6d:b3:cc: 2f:1b:5b:27:6d:27:25:3f:da:fe:1d:76:fc:a2:38: 95:66:b6:1a:8a:df:0f:f7:c7:b3:21:57:6f:0f:f5: 67:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:41:C6:D5:12:A0:57:AE:B9:37:5C:C0:70:CD:65:48:84:0A:9D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:05:1e:0f:80:74:cb:44:de:2c:cc:b7:21:b2:ef:c4:08:86: 20:c5:f1:f9:34:34:62:b2:16:cb:bc:70:ee:67:c5:52:da:d9: fa:01:04:6a:2e:94:bf:04:2a:58:65:17:0b:8c:c2:65:45:99: 54:46:e8:ff:d9:c8:3a:98:12:de:59:25:f2:9e:ea:19:d3:29: f8:5d:68:0e:3c:55:13:cb:72:28:ec:49:33:03:ad:61:3e:65: 6f:55:1d:3f:de:03:1f:a3:df:08:13:04:c8:aa:53:aa:f5:ce: f7:7a:2b:40:a6:8b:00:bb:52:44:f5:7b:24:7b:70:79:43:40: 43:88:a5:ec:87:54:93:4b:42:98:40:6c:4b:be:6d:51:c4:36: e9:dc:30:b2:13:7f:4b:d6:7a:2b:fe:f6:76:11:c1:51:99:0d: 9a:d8:87:88:51:5f:24:77:ee:88:c6:48:98:a3:71:2e:fb:d9: 37:c2:73:4a:77:fc:b7:33:97:6c:79:f5:6d:67:ce:fb:66:cc: 6b:db:43:d6:cf:f1:b3:af:ca:dc:c1:6f:89:1b:37:62:31:9b: 66:39:ca:6a:dc:b0:54:93:1a:52:3b:01:89:db:6e:e2:e1:4c: fc:2a:ef:7c:a2:37:7f:2a:3b:0c:f5:fb:dc:5a:0c:95:27:7d: 72:23:9d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6S7dibK0myJu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk MjFhOWYyOTAtMjE1MS00YWU4LTgxOTYtYThmMjJkZjQ5MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Zof0iBQAL2ue6LOKjFmGTLaCg/ffZijgEH kbsuud8NurtqPF/hW80XJYcrt6rCvOF/snjYfW+BFc+yN6gDqMB4eoV7JeeJt611 kEoi3OQPc8b6uNRw83G45vKkPsTBezpPvloE/r5l2FvRZMjOUn+QuNDTxJNNXXQL GqKScwNNxA94mHfCaTc6qJddqGEeFI/O5p4sq/OKarNUFzH4NTi3yeaA/5V6uB5l qOvMfcffEMPBj4Onz1k9NH3I1+DyzNXVTPOeyXEyLruQIG8uFGygGV1WTg18bfbM 2alts8wvG1snbSclP9r+HXb8ojiVZrYait8P98ezIVdvD/VnXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVBxtUSoFeuuTdcwHDNZUiECp0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmFhNDFhYzEtNjA2NS0z ZTE4LTk2MmQtYjU1OWNhMWYxYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoFHg+AdMtE3izMtyGy78QIhiDF8fk0NGKyFsu8cO5nxVLa2foBBGou lL8EKlhlFwuMwmVFmVRG6P/ZyDqYEt5ZJfKe6hnTKfhdaA48VRPLcijsSTMDrWE+ ZW9VHT/eAx+j3wgTBMiqU6r1zvd6K0CmiwC7UkT1eyR7cHlDQEOIpeyHVJNLQphA bEu+bVHENuncMLITf0vWeiv+9nYRwVGZDZrYh4hRXyR37ojGSJijcS772TfCc0p3 /Lczl2x59W1nzvtmzGvbQ9bP8bOvytzBb4kbN2Ixm2Y5ymrcsFSTGlI7AYnbbuLh TPwq73yiN38qOwz1+9xaDJUnfXIjnSE= -----END CERTIFICATE-----Generated at Tue Mar 10 05:41:56 2026 by rpki-client