$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa File: 5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa (raw, json) Hash identifier: vhEUz8526I8PipO/THwaqP091pQZtyXFz81az2S7lUE= Subject key identifier: 98:C0:F2:3A:82:82:2C:7A:71:28:CC:CB:57:4D:5E:1F:2A:73:8C:96 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584D0D425A9A9E735453D7E7C880 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 36298 IP address blocks: 209.166.148.0/24 maxlen: 24 209.166.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:5a:9a:9e:73:54:53:d7:e7:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=87c8370d-310b-4f00-a7a2-a4bcf753a02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:41:fc:1c:84:9c:b8:8d:7b:53:40:2b:48: 34:71:02:83:a4:60:e9:52:d1:b7:ae:5b:c2:e3:50: 53:ae:50:3e:09:4d:1a:02:66:93:af:51:70:a6:f2: ad:da:f7:db:ca:06:a4:42:12:a3:2b:10:52:93:c2: 17:bf:a6:8e:53:20:36:3c:8a:6b:cd:4c:51:67:19: ac:0c:aa:e2:a1:90:b3:bf:5c:16:74:ed:df:34:c6: dd:1a:96:e1:ba:d8:52:3c:67:7a:ed:52:b4:3e:e3: 5a:54:65:78:18:ce:0a:0d:11:c0:22:bf:07:41:c8: 24:e8:92:71:7d:92:e5:19:00:6f:80:a2:3c:0b:82: c2:8d:cb:07:07:1d:10:0b:47:98:2d:ab:83:6f:e0: 48:70:79:16:c4:aa:8e:96:89:41:fd:65:35:b8:ea: ce:0f:62:3a:14:0a:a7:84:88:64:cd:93:eb:79:1c: 74:c6:50:2c:44:c2:d2:10:89:96:f1:12:0d:91:12: ad:90:06:65:94:a7:ec:e2:fc:9e:11:c1:89:10:8e: 46:9e:11:02:7f:0e:28:d1:29:f3:60:09:e4:ed:6d: cd:6b:10:06:ae:55:6c:ed:91:52:1c:fa:77:ac:67: 7b:cc:5f:7b:76:47:f4:77:7c:11:ac:91:0d:9a:e9: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C0:F2:3A:82:82:2C:7A:71:28:CC:CB:57:4D:5E:1F:2A:73:8C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c8:99:fb:55:f0:58:cf:68:11:05:f6:ed:0f:83:8b:98:5f: 3d:d9:b0:88:ea:ab:a8:26:fd:c7:cc:ca:2c:71:12:1d:98:ba: 22:7b:b1:25:31:8a:89:58:e4:b5:46:cc:54:74:ae:89:4b:c2: 89:05:31:4c:eb:d3:9c:d5:1d:ef:59:88:1c:db:91:cb:55:a5: 63:7e:94:36:5e:a8:35:6e:70:cb:7f:ba:58:7c:e8:ee:e4:8a: ae:1b:68:96:91:ff:6f:2f:49:11:f8:5f:bc:6e:8c:7c:49:0a: de:81:e2:1b:ef:3b:dc:71:50:91:40:73:0e:f9:0a:24:fa:12: 38:0f:74:d7:2e:e3:77:a0:55:8a:98:11:0d:a1:d2:1f:4a:73: 90:77:c9:b6:4e:f3:90:4e:28:3b:01:03:4a:8e:13:67:b1:9a: a0:e3:95:db:37:df:4f:a6:1b:f5:c2:37:05:ef:65:88:89:d4: 71:02:e6:e9:35:f5:9c:5a:1a:dd:42:52:19:96:0b:ed:f3:00: 0f:33:00:b7:d8:cd:1a:a6:ed:67:44:75:bd:99:b2:69:66:4a: 56:e1:04:ee:21:22:70:b3:09:60:bd:cd:6f:f3:44:46:07:35: 59:ef:bb:1f:e9:24:2e:37:50:e2:73:c6:0e:9e:33:41:a3:81: 30:71:d6:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQlqannNUU9fnyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ODdjODM3MGQtMzEwYi00ZjAwLWE3YTItYTRiY2Y3NTNhMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GRB/ByEnLiNe1NAK0g0cQKDpGDpUtG3rlvC 41BTrlA+CU0aAmaTr1FwpvKt2vfbygakQhKjKxBSk8IXv6aOUyA2PIprzUxRZxms DKrioZCzv1wWdO3fNMbdGpbhuthSPGd67VK0PuNaVGV4GM4KDRHAIr8HQcgk6JJx fZLlGQBvgKI8C4LCjcsHBx0QC0eYLauDb+BIcHkWxKqOlolB/WU1uOrOD2I6FAqn hIhkzZPreRx0xlAsRMLSEImW8RINkRKtkAZllKfs4vyeEcGJEI5GnhECfw4o0Snz YAnk7W3NaxAGrlVs7ZFSHPp3rGd7zF97dkf0d3wRrJENmumh7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjA8jqCgix6cSjMy1dNXh8qc4yWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNWNjNGQ2YzEtZWZmMi0z YTQwLTg2MTktNWY2MTZmOGFmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0aaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDImftV8FjPaBEF9u0Pg4uYXz3ZsIjqq6gm/cfMyixxEh2YuiJ7sSUx iolY5LVGzFR0rolLwokFMUzr05zVHe9ZiBzbkctVpWN+lDZeqDVucMt/ulh86O7k iq4baJaR/28vSRH4X7xujHxJCt6B4hvvO9xxUJFAcw75CiT6EjgPdNcu43egVYqY EQ2h0h9Kc5B3ybZO85BOKDsBA0qOE2exmqDjlds330+mG/XCNwXvZYiJ1HEC5uk1 9ZxaGt1CUhmWC+3zAA8zALfYzRqm7WdEdb2ZsmlmSlbhBO4hInCzCWC9zW/zREYH NVnvux/pJC43UOJzxg6eM0GjgTBx1hk= -----END CERTIFICATE-----Generated at Fri Mar 13 13:15:43 2026 by rpki-client