$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/3d0cc7c8-a51f-3f83-9c84-3e72362f4b6a.roa File: 3d0cc7c8-a51f-3f83-9c84-3e72362f4b6a.roa (raw, json) Hash identifier: yMV1PRjoWOwgh4w5OVxZkH7hvFtlryImZRTLcXx0FtQ= Subject key identifier: 55:97:C5:B8:9E:64:A9:39:81:FF:53:92:CF:87:CA:48:22:32:2A:07 Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f Certificate serial: 010D0C9F4328584D5243485A0C0E7654ACA15F80 Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/3d0cc7c8-a51f-3f83-9c84-3e72362f4b6a.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 62537 IP address blocks: 66.85.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:48:5a:0c:0e:76:54:ac:a1:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=8d7e8bf0-c074-45ff-968b-be23b720a62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:e0:23:58:8a:3f:c4:71:c1:a7:9b:c0:44: 25:7e:fc:46:f8:f9:25:26:95:cc:95:62:b1:0b:c3: 5f:1a:49:82:bd:38:99:a2:b3:ff:9b:70:55:a1:8e: 49:4a:1e:c0:4b:8f:44:14:9f:70:c5:05:15:80:83: a3:28:02:3a:77:af:1b:1e:3d:fe:86:b6:c3:ee:7a: 47:a4:32:09:53:3b:8b:b8:49:3b:8d:ac:c3:b9:70: a8:f7:85:6c:c0:9f:05:31:e9:e5:74:53:43:46:12: 2a:93:a6:16:23:3b:91:bb:6f:69:2b:15:e9:7c:a1: 5d:a2:b1:7b:cd:0f:f2:22:da:8a:08:f1:a1:6a:30: d2:e5:c7:56:84:86:e6:bc:33:85:50:a4:a9:b3:00: 9c:a1:6a:4a:39:0e:83:44:44:d3:01:e1:db:1d:1e: 31:1b:b8:c4:9b:0c:4f:75:6e:92:52:3d:de:70:e1: 57:83:d7:f7:d5:38:7c:0a:4c:79:ef:55:a8:58:a0: 67:98:2e:4d:31:27:5f:3a:9e:33:b9:1d:e8:25:f7: f3:d6:dc:89:65:6f:cc:06:ca:ab:8f:2e:34:7e:b5: bd:15:bb:cf:e7:1e:a3:3f:1a:76:38:9a:47:2e:fe: b9:b6:25:70:54:9b:89:c8:cf:34:03:be:f7:e8:d4: 07:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:97:C5:B8:9E:64:A9:39:81:FF:53:92:CF:87:CA:48:22:32:2A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/3d0cc7c8-a51f-3f83-9c84-3e72362f4b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl X509v3 Authority Key Identifier: keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer sbgp-ipAddrBlock: critical IPv4: 66.85.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c5:66:e0:c7:76:86:f8:9e:44:56:8c:91:d3:9b:e9:ed:58: c3:8c:1b:da:7b:9c:f2:45:e8:04:37:47:19:bf:ea:2b:5a:21: 21:92:3c:c2:61:fc:79:95:94:1d:d6:3d:c1:44:d8:cc:6e:ac: ab:55:cd:64:a8:a3:83:c6:c4:44:a6:96:ff:e4:06:13:dc:c1: 3c:c9:15:6e:c6:8b:06:20:ab:a9:56:30:c2:49:e4:59:f9:bb: 11:e6:ec:92:b9:73:41:f1:b7:8f:21:3b:e3:a3:7f:62:5b:f7: 60:e3:47:0d:6a:93:67:a1:02:20:d4:d6:ae:d7:c9:fe:a6:27: e7:9f:73:6c:26:ac:1b:01:e0:aa:c8:5c:d0:45:f2:39:f7:11: b9:36:d3:88:cf:8f:18:71:41:33:bc:07:8c:01:c1:af:27:12: f3:68:84:81:d7:6b:d9:80:c7:d1:fd:60:b7:bb:61:f6:71:e9: 36:b1:c8:b5:e4:a4:21:07:27:77:60:68:27:c9:41:ea:38:c5: 19:e8:2f:68:8f:15:f1:92:85:bf:9a:18:e7:75:8d:41:6c:47: e3:3f:f6:94:ff:8f:c0:10:bf:6c:b7:6e:9e:25:a0:96:51:77: 9a:cc:43:fe:2f:b5:32:1c:c5:ea:e0:d2:0c:e3:1a:94:c4:56: 1b:df:6f:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0haDA52VKyhX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3Y2E3OWEtZjhmNS00MDhhLTg2ZmItNDcyZDYzZWQx NTZmMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OGQ3ZThiZjAtYzA3NC00NWZmLTk2OGItYmUyM2I3MjBhNjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKTgI1iKP8RxwaebwEQlfvxG+PklJpXMlWKx C8NfGkmCvTiZorP/m3BVoY5JSh7AS49EFJ9wxQUVgIOjKAI6d68bHj3+hrbD7npH pDIJUzuLuEk7jazDuXCo94VswJ8FMenldFNDRhIqk6YWIzuRu29pKxXpfKFdorF7 zQ/yItqKCPGhajDS5cdWhIbmvDOFUKSpswCcoWpKOQ6DRETTAeHbHR4xG7jEmwxP dW6SUj3ecOFXg9f31Th8Ckx571WoWKBnmC5NMSdfOp4zuR3oJffz1tyJZW/MBsqr jy40frW9FbvP5x6jPxp2OJpHLv65tiVwVJuJyM80A7736NQHMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWXxbieZKk5gf9Tks+HykgiMioHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdj YTc5YS1mOGY1LTQwOGEtODZmYi00NzJkNjNlZDE1NmYvM2QwY2M3YzgtYTUxZi0z ZjgzLTljODQtM2U3MjM2MmY0YjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGY3Y2E3OWEtZjhmNS00MDhhLTg2 ZmItNDcyZDYzZWQxNTZmL2RmN2NhNzlhLWY4ZjUtNDA4YS04NmZiLTQ3MmQ2M2Vk MTU2Zi5jcmwwHwYDVR0jBBgwFoAUzSXSHbTlO8LOT0VcD3Q2TcqiRZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdjYTc5YS1mOGY1LTQwOGEtODZmYi00NzJk NjNlZDE1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQlU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbFZuDHdob4nkRWjJHTm+ntWMOMG9p7nPJF6AQ3Rxm/6itaISGSPMJh /HmVlB3WPcFE2MxurKtVzWSoo4PGxESmlv/kBhPcwTzJFW7GiwYgq6lWMMJJ5Fn5 uxHm7JK5c0Hxt48hO+Ojf2Jb92DjRw1qk2ehAiDU1q7Xyf6mJ+efc2wmrBsB4KrI XNBF8jn3Ebk204jPjxhxQTO8B4wBwa8nEvNohIHXa9mAx9H9YLe7YfZx6TaxyLXk pCEHJ3dgaCfJQeo4xRnoL2iPFfGShb+aGOd1jUFsR+M/9pT/j8AQv2y3bp4loJZR d5rMQ/4vtTIcxerg0gzjGpTEVhvfb8c= -----END CERTIFICATE-----Generated at Sun Mar 29 20:46:53 2026 by rpki-client