$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa File: 10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa (raw, json) Hash identifier: VbYY8bHcRJ3+7ARWHq2OeP01WPeDILYQ/LzeuglXRuA= Subject key identifier: 01:AD:68:03:7E:25:08:A3:06:33:30:D4:5E:80:84:66:59:EF:7B:A2 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584D3F64ED46C74932FDE4D04700 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 33139 IP address blocks: 66.49.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:ed:46:c7:49:32:fd:e4:d0:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=280b289b-d3a0-4320-a5bd-19cf30840d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:e9:a3:97:61:15:ec:7a:e0:85:34:ea:98: 88:c0:32:0f:e1:42:59:98:59:b8:83:4d:47:1c:8c: 51:f2:fe:1b:de:65:f9:21:10:4a:70:5a:55:4b:c0: a4:29:3d:6e:46:62:53:82:e9:39:59:f4:b0:a4:b6: 01:3c:16:23:a8:05:85:ae:c8:bf:ac:5f:8b:29:51: 9c:85:db:a9:bc:67:c5:38:65:47:e0:0a:f7:13:d8: 9b:2f:6d:b8:8f:54:a5:16:5d:56:14:bb:6e:9c:0a: 16:74:c0:00:14:58:21:a9:3e:d8:a5:b7:1f:bf:23: 0d:b1:bb:c3:47:d3:7a:e0:94:28:39:7d:67:b6:85: 76:c5:c3:db:20:e8:17:4b:bd:d8:34:82:08:88:37: ef:c4:e3:64:57:c4:b3:11:4a:ce:08:3e:5c:3e:f4: 67:a1:af:63:99:cb:e7:30:f0:2e:cf:05:67:ce:eb: 30:e3:53:a4:0c:b2:d6:40:49:b9:30:fd:d9:98:38: 9a:05:95:37:2b:ad:28:45:d5:f6:fc:03:8c:58:6e: d1:0f:9d:89:e5:98:bc:e5:6e:49:6c:a5:62:7b:01: 01:a4:f7:02:d7:c3:f9:f3:6b:70:8b:ab:45:94:2f: fa:9a:a6:b0:16:ac:00:4f:01:ba:63:97:6c:17:62: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AD:68:03:7E:25:08:A3:06:33:30:D4:5E:80:84:66:59:EF:7B:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:38:c7:2f:0a:2b:1c:23:f0:75:f2:90:3b:5b:3f:c4:90:41: 4a:32:bb:65:6b:9c:1a:74:fb:b6:f7:66:02:09:29:1d:0d:9d: 5b:73:cb:90:2b:49:cc:26:9c:4d:01:88:fd:83:7b:5a:70:da: 5d:c6:06:a3:34:62:44:e4:c4:09:21:b7:41:88:0d:3a:c8:d1: 7f:d0:b8:00:07:08:f4:6a:42:d1:27:56:74:aa:84:43:34:ce: 6a:06:d5:1e:b0:24:41:e5:aa:d3:e0:ea:f5:03:7e:fb:63:84: 64:9c:a3:94:c6:ea:b7:ee:49:e1:b7:6b:fa:9a:87:15:03:ec: 7d:7f:58:b6:91:09:f4:58:5f:0e:54:14:94:16:fc:65:61:1f: 8d:58:f9:fc:61:01:c0:1b:39:e3:9d:c7:54:1d:c1:bc:96:84: 34:79:98:c2:80:47:79:2d:b7:ec:4a:ba:eb:26:0f:12:97:ce: 8b:99:21:3b:e2:c6:06:2b:04:7e:9a:d6:f7:cf:fc:e5:7a:4d: c9:91:5e:d6:4a:0f:70:5d:e2:61:3c:58:31:2d:7c:3b:cd:e4: dc:46:5b:3c:4c:74:1b:ff:83:74:ac:91:de:97:dd:a3:3c:4d: 15:98:c2:54:61:36:3a:7c:8f:ba:2c:c4:c7:88:23:a4:46:c4: c8:f5:f0:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZO1Gx0ky/eTQRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MjgwYjI4OWItZDNhMC00MzIwLWE1YmQtMTljZjMwODQwZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNHpo5dhFex64IU06piIwDIP4UJZmFm4g01H HIxR8v4b3mX5IRBKcFpVS8CkKT1uRmJTguk5WfSwpLYBPBYjqAWFrsi/rF+LKVGc hdupvGfFOGVH4Ar3E9ibL224j1SlFl1WFLtunAoWdMAAFFghqT7YpbcfvyMNsbvD R9N64JQoOX1ntoV2xcPbIOgXS73YNIIIiDfvxONkV8SzEUrOCD5cPvRnoa9jmcvn MPAuzwVnzusw41OkDLLWQEm5MP3ZmDiaBZU3K60oRdX2/AOMWG7RD52J5Zi85W5J bKViewEBpPcC18P582twi6tFlC/6mqawFqwATwG6Y5dsF2JtpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGtaAN+JQijBjMw1F6AhGZZ73uiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvMTBiMzY1OWItOGE5My0z YTg0LTliYTQtYWM3NjdjMmJhNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC44xy8KKxwj8HXykDtbP8SQQUoyu2VrnBp0+7b3ZgIJKR0NnVtzy5Ar ScwmnE0BiP2De1pw2l3GBqM0YkTkxAkht0GIDTrI0X/QuAAHCPRqQtEnVnSqhEM0 zmoG1R6wJEHlqtPg6vUDfvtjhGSco5TG6rfuSeG3a/qahxUD7H1/WLaRCfRYXw5U FJQW/GVhH41Y+fxhAcAbOeOdx1QdwbyWhDR5mMKAR3ktt+xKuusmDxKXzouZITvi xgYrBH6a1vfP/OV6TcmRXtZKD3Bd4mE8WDEtfDvN5NxGWzxMdBv/g3Sskd6X3aM8 TRWYwlRhNjp8j7osxMeII6RGxMj18Nk= -----END CERTIFICATE-----Generated at Sun Mar 22 12:37:00 2026 by rpki-client