$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8cbd8a79-76c6-3b13-8998-2367b0e99279.roa File: 8cbd8a79-76c6-3b13-8998-2367b0e99279.roa (raw, json) Hash identifier: NS6pnGewqh++WaIAexkVoLC/LjISPjiU7DKA1NmEsGc= Subject key identifier: 63:00:2C:2F:68:0C:BF:42:9A:44:09:5A:B6:7F:AF:30:E3:D2:A0:FC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0A77A53F31B35CC80652F380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8cbd8a79-76c6-3b13-8998-2367b0e99279.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 202 IP address blocks: 66.54.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a5:3f:31:b3:5c:c8:06:52:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=d960cc4d-7ecb-4fd5-b557-3fe622d0bc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f5:24:c9:63:e3:08:f0:07:91:3e:c8:c8:19: 68:d3:9d:b3:55:89:eb:1d:27:36:b7:21:c0:a3:9a: cf:0f:94:4f:56:57:4d:ac:63:eb:c5:a2:7d:73:d9: 0c:71:b3:c1:20:fb:35:d7:13:c0:16:79:bd:0c:9f: 9d:ac:bc:58:c3:40:df:1e:7a:a5:98:10:4c:4b:c2: 7a:35:f0:9c:f1:59:49:70:c1:18:93:a2:4b:d2:a2: 35:9b:38:64:66:a3:d4:9b:7a:72:d5:e8:92:4e:f0: 72:45:08:13:72:78:bc:21:ae:32:ab:c9:c9:fb:6c: 51:c2:f8:d0:55:41:aa:20:87:e7:eb:9f:a6:61:06: ae:02:ef:3f:94:a2:dc:1f:a6:af:e3:dc:48:a0:00: 02:36:97:03:6f:9c:8c:61:80:fb:de:ad:18:88:e8: b2:eb:d1:6a:13:a6:fb:be:fe:0d:55:22:a2:ba:68: 2e:e5:92:63:ca:a0:cc:a9:49:84:d0:a2:f6:5d:aa: 50:ba:ff:29:d7:44:4b:05:74:0b:8a:26:62:81:a1: 57:e7:9f:9b:05:64:1a:33:03:38:68:82:32:b6:01: d3:61:6a:5a:74:8e:4e:6a:11:76:8e:11:74:6c:d9: b2:9a:a6:0c:a4:b9:d7:ab:d1:57:ce:0f:af:78:a0: b8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:00:2C:2F:68:0C:BF:42:9A:44:09:5A:B6:7F:AF:30:E3:D2:A0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8cbd8a79-76c6-3b13-8998-2367b0e99279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4a:f2:d9:14:1a:bf:e6:dc:52:4d:c2:dd:be:f0:35:e8:91: c5:e2:f9:18:78:a2:85:f4:a5:83:dd:7f:50:e2:2b:b5:6e:20: 7f:f3:15:07:ac:fa:db:47:d6:07:a3:65:67:c7:32:be:51:88: a7:4c:8b:1d:8e:76:59:50:10:af:88:30:6f:d6:90:d1:0a:f9: 31:af:75:f4:d6:0b:69:ad:86:bb:f1:a3:2b:a6:f7:69:24:22: eb:e6:84:d3:8d:16:e0:43:6c:5b:78:34:5c:8d:38:fe:12:18: 5e:bc:b3:ae:85:84:1f:dd:a5:a6:e0:b7:7e:af:ed:3b:b2:73: d4:41:d7:b2:16:0f:bb:fd:62:df:a6:3f:44:f0:4b:6a:de:7c: d6:d0:46:83:c7:85:6b:1b:85:25:fa:3f:2a:0c:62:c4:8c:87: 83:c1:b4:4e:c8:45:1c:b2:56:7c:d1:c9:55:63:61:bf:d1:04: 01:4c:dd:74:f1:5c:f7:a8:f8:fb:68:e4:cc:57:3b:44:de:13: 70:4a:aa:6d:0d:f8:2f:32:6d:75:90:f3:65:01:19:d1:98:76: 6f:c3:6a:22:7a:49:77:36:c2:a0:65:1a:2f:90:ca:94:07:bc: 43:14:e5:41:78:1d:bb:94:f7:26:85:0b:cb:de:39:58:37:8c: ee:15:6b:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6U/MbNcyAZS84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZDk2MGNjNGQtN2VjYi00ZmQ1LWI1NTctM2ZlNjIyZDBiYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvUkyWPjCPAHkT7IyBlo052zVYnrHSc2tyHA o5rPD5RPVldNrGPrxaJ9c9kMcbPBIPs11xPAFnm9DJ+drLxYw0DfHnqlmBBMS8J6 NfCc8VlJcMEYk6JL0qI1mzhkZqPUm3py1eiSTvByRQgTcni8Ia4yq8nJ+2xRwvjQ VUGqIIfn65+mYQauAu8/lKLcH6av49xIoAACNpcDb5yMYYD73q0YiOiy69FqE6b7 vv4NVSKiumgu5ZJjyqDMqUmE0KL2XapQuv8p10RLBXQLiiZigaFX55+bBWQaMwM4 aIIytgHTYWpadI5OahF2jhF0bNmymqYMpLnXq9FXzg+veKC4PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMALC9oDL9CmkQJWrZ/rzDj0qD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGNiZDhhNzktNzZjNi0z YjEzLTg5OTgtMjM2N2IwZTk5Mjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5K8tkUGr/m3FJNwt2+8DXokcXi+Rh4ooX0pYPdf1DiK7VuIH/zFQes +ttH1gejZWfHMr5RiKdMix2OdllQEK+IMG/WkNEK+TGvdfTWC2mthrvxoyum92kk IuvmhNONFuBDbFt4NFyNOP4SGF68s66FhB/dpabgt36v7Tuyc9RB17IWD7v9Yt+m P0TwS2refNbQRoPHhWsbhSX6PyoMYsSMh4PBtE7IRRyyVnzRyVVjYb/RBAFM3XTx XPeo+Pto5MxXO0TeE3BKqm0N+C8ybXWQ82UBGdGYdm/DaiJ6SXc2wqBlGi+QypQH vEMU5UF4HbuU9yaFC8veOVg3jO4Va1g= -----END CERTIFICATE-----Generated at Wed Mar 11 20:54:41 2026 by rpki-client