$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa File: 432aa5cf-74c1-3d95-9174-41f56abbc60b.roa (raw, json) Hash identifier: Nm6o79hJdVZoatMqy1YG1JSmE9NOOlyQ6xuPfNCwI8s= Subject key identifier: 24:5E:5D:7D:B7:5C:BC:ED:E9:82:EA:48:67:B1:B0:C3:C7:B3:48:01 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584D3F64EE235CF2D196F7833528 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 33139 IP address blocks: 66.49.199.0/24 maxlen: 24 66.49.200.0/24 maxlen: 24 66.49.201.0/24 maxlen: 24 66.49.202.0/24 maxlen: 24 66.49.203.0/24 maxlen: 24 66.49.204.0/24 maxlen: 24 66.49.206.0/24 maxlen: 24 66.49.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:ee:23:5c:f2:d1:96:f7:83:35:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=4c70d5dc-0bcb-4d0c-93a0-da6fbd46e643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:45:c8:ce:80:10:1a:f0:f0:42:d2:b4:f6: 69:a6:67:7a:ac:39:30:3b:d7:99:cd:c7:ad:ed:71: 9d:cb:ad:d3:82:89:0a:f4:36:bb:16:35:ba:54:ba: e4:47:66:61:99:d5:74:63:68:70:a5:f0:12:46:4c: cf:96:7e:af:5f:de:df:44:2f:f8:d1:99:81:53:eb: 6f:58:77:05:19:5f:cd:7c:7c:c8:0f:f1:09:de:7c: f4:5c:61:e2:86:87:38:2f:7a:cb:37:f3:26:6c:ff: 83:c1:36:04:14:45:29:49:71:74:20:c5:63:b4:5c: 51:fc:d0:f4:8d:1e:25:4c:31:0d:15:09:64:ab:36: 6d:14:46:42:4d:30:26:70:a4:73:f2:e2:cb:ed:c3: d4:4b:47:85:3a:f5:d8:be:85:6d:31:e8:c5:d4:bf: 4a:04:e2:0d:46:80:30:95:3e:e4:c0:b5:5f:eb:53: 1f:17:8b:08:51:18:76:23:f3:05:e2:ef:6d:0f:0b: 3b:fd:f3:5e:22:bb:ac:11:7c:bf:36:a7:50:1b:41: 3d:92:76:8a:00:10:66:b7:55:99:0f:61:34:44:d1: d6:22:59:50:a7:71:5d:89:27:34:9b:ae:55:37:fc: 98:d3:65:7c:bd:20:c6:71:9b:2d:f6:e0:46:af:6c: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5E:5D:7D:B7:5C:BC:ED:E9:82:EA:48:67:B1:B0:C3:C7:B3:48:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.199.0-66.49.204.255 66.49.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ce:87:f1:35:fc:97:51:57:a3:d0:e2:99:df:25:b0:29:db: 63:e2:23:b3:f6:f5:8e:b1:70:fb:0d:2d:84:0c:81:69:c6:e5: f3:aa:5f:c7:53:ff:fd:93:79:0d:a2:1f:e4:41:54:2e:39:f6: 42:b5:18:af:7e:15:0f:ec:6b:ff:53:0b:70:6d:a5:24:3c:c6: c6:21:79:4c:a4:c6:6d:db:9b:22:fa:e6:2b:7f:be:32:44:1b: 28:09:42:8f:46:7d:69:85:49:22:c5:ad:6f:6a:d3:df:27:fb: ee:df:ca:ca:0d:31:bd:6f:52:3f:3a:68:97:11:83:44:d7:3f: d3:10:19:85:43:ce:71:bb:4d:c0:7c:9d:27:c2:7c:c1:30:f9: 66:a7:9e:e2:28:9a:a4:30:76:47:06:db:7e:21:cb:2e:6d:94: 93:e7:73:43:a9:43:0c:3b:0b:7c:68:10:b7:11:84:21:3c:65: b7:34:36:4c:53:09:9e:01:d7:e7:7f:db:76:1a:51:ed:bd:25: dd:b2:b3:f4:61:a1:f2:a9:da:6c:2c:33:dc:c1:a2:a4:77:a6: 8e:d3:3b:78:bf:19:c7:40:7e:7c:73:73:f3:a9:43:ee:4a:ad: ce:3b:ad:f9:f2:23:2e:31:ea:b4:b1:b5:4e:af:28:b7:86:0e: 51:bf:d3:e5 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE0/ZO4jXPLRlveDNSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NGM3MGQ1ZGMtMGJjYi00ZDBjLTkzYTAtZGE2ZmJkNDZlNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw1FyM6AEBrw8ELStPZppmd6rDkwO9eZzcet 7XGdy63TgokK9Da7FjW6VLrkR2ZhmdV0Y2hwpfASRkzPln6vX97fRC/40ZmBU+tv WHcFGV/NfHzID/EJ3nz0XGHihoc4L3rLN/MmbP+DwTYEFEUpSXF0IMVjtFxR/ND0 jR4lTDENFQlkqzZtFEZCTTAmcKRz8uLL7cPUS0eFOvXYvoVtMejF1L9KBOINRoAw lT7kwLVf61MfF4sIURh2I/MF4u9tDws7/fNeIrusEXy/NqdQG0E9knaKABBmt1WZ D2E0RNHWIllQp3FdiSc0m65VN/yY02V8vSDGcZst9uBGr2xTgwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFCReXX23XLzt6YLqSGexsMPHs0gBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvNDMyYWE1Y2YtNzRjMS0z ZDk1LTkxNzQtNDFmNTZhYmJjNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABCMccD BABCMcwDBAFCMc4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAl86H8TX8l1FXo9Dimd8lsCnbY+Ijs/b1jrFw +w0thAyBacbl86pfx1P//ZN5DaIf5EFULjn2QrUYr34VD+xr/1MLcG2lJDzGxiF5 TKTGbdubIvrmK3++MkQbKAlCj0Z9aYVJIsWtb2rT3yf77t/Kyg0xvW9SPzpolxGD RNc/0xAZhUPOcbtNwHydJ8J8wTD5Zqee4iiapDB2RwbbfiHLLm2Uk+dzQ6lDDDsL fGgQtxGEITxltzQ2TFMJngHX53/bdhpR7b0l3bKz9GGh8qnabCwz3MGipHemjtM7 eL8Zx0B+fHNz86lD7kqtzjut+fIjLjHqtLG1Tq8ot4YOUb/T5Q== -----END CERTIFICATE-----Generated at Sun Mar 22 12:38:15 2026 by rpki-client