$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/1a6b350d-413d-3535-b410-8172ceaf133d.roa File: 1a6b350d-413d-3535-b410-8172ceaf133d.roa (raw, json) Hash identifier: fxS9p+TlW4As+PxyvsQhVnQk6PNXSgVT9n4kY7KGNFI= Subject key identifier: BA:3B:CF:17:6C:7E:B3:6A:D9:F4:43:D8:98:09:8F:DE:D2:5A:66:D0 Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F4328584D3B34E12696F94C4F42014500 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/1a6b350d-413d-3535-b410-8172ceaf133d.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 400610 IP address blocks: 66.219.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e1:26:96:f9:4c:4f:42:01:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=a2b32b32-689c-486e-ab61-02a184de3eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:be:54:9e:c0:6e:79:9e:fa:16:2f:3e:22:b3: 99:b3:a1:ba:18:09:f5:03:50:87:e7:2e:ef:b8:4f: bb:04:60:02:bd:1b:cc:40:cf:eb:a7:51:38:1a:39: 05:a9:83:67:6d:86:bc:99:9e:68:91:b8:84:3f:ce: 46:7b:a7:0b:a1:07:d1:86:51:80:d3:a7:cd:ff:d5: 15:b3:82:a1:1e:9b:35:97:64:3d:95:e7:36:4c:ec: b7:30:e5:de:b4:12:3d:d7:48:ff:97:3e:dc:9a:ff: c6:d8:0b:95:84:a5:2e:f8:6a:b8:90:e1:fe:4c:b3: 21:e2:6d:02:f1:84:e3:8c:14:02:58:69:30:70:fb: 06:55:9c:dc:2f:af:41:ab:05:3b:a3:d8:b3:9a:a6: 92:8f:87:39:e4:02:f2:8c:dd:95:66:85:b6:7b:13: 71:8e:d8:95:bd:74:f3:21:bb:55:ca:4c:e4:84:d8: 54:4e:06:b2:54:45:49:de:6a:ff:91:8b:8a:bf:e0: b9:f7:6a:04:16:f8:b6:42:24:fd:8e:0e:ca:41:44: 16:47:56:34:7e:d1:4d:99:75:b6:a8:42:0e:c3:79: f6:d9:9d:1a:3f:c2:1d:e2:42:67:90:e4:ca:be:01: 71:5f:ee:e9:20:91:a6:10:7b:f9:27:49:ec:f7:b1: d9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3B:CF:17:6C:7E:B3:6A:D9:F4:43:D8:98:09:8F:DE:D2:5A:66:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/1a6b350d-413d-3535-b410-8172ceaf133d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:95:03:0b:e6:24:a0:6f:d9:48:e4:d8:f4:c3:47:88:df:43: 76:67:4e:3c:3b:5f:1e:fe:3d:5a:3f:cd:be:9e:c3:71:e7:e6: 2d:7b:98:b9:fe:c0:8a:a2:bf:90:f4:5e:bd:9f:00:b6:eb:9a: f7:f0:17:d6:92:58:54:84:b4:be:91:57:90:7e:eb:3f:04:d6: ee:1a:ac:ad:5e:23:f9:42:5e:4d:86:bc:dd:6e:2d:c5:dd:f2: 7b:1f:be:f2:58:7d:9c:b3:2f:44:8d:25:f1:54:7e:db:c9:bf: 3d:d8:14:20:4d:80:1c:c6:f1:e2:3f:b1:4f:82:97:86:8b:3d: fe:b2:68:5a:c3:8a:0e:f1:0c:6a:ca:a9:bb:98:49:96:1f:d7: 28:1e:07:cd:13:9d:65:6e:50:f7:58:38:b8:ff:fd:75:b8:58: fb:25:dc:d4:53:4a:e1:26:73:ce:57:01:0c:d6:86:b6:04:74: 47:ef:f5:50:9d:6d:a8:40:e2:a0:f2:23:a6:d9:37:38:42:0b: 67:3d:05:3f:af:d4:f7:b9:b7:f2:f2:9c:9a:e8:21:b5:11:8f: 61:d5:6d:57:7c:09:00:eb:7e:ad:22:eb:8e:f0:f5:d2:db:5e: f8:1c:46:21:73:52:4f:33:94:d8:33:7d:8f:3f:e0:70:cd:bb: 6e:b8:5c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOEmlvlMT0IBRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk YTJiMzJiMzItNjg5Yy00ODZlLWFiNjEtMDJhMTg0ZGUzZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb5UnsBueZ76Fi8+IrOZs6G6GAn1A1CH5y7v uE+7BGACvRvMQM/rp1E4GjkFqYNnbYa8mZ5okbiEP85Ge6cLoQfRhlGA06fN/9UV s4KhHps1l2Q9lec2TOy3MOXetBI910j/lz7cmv/G2AuVhKUu+Gq4kOH+TLMh4m0C 8YTjjBQCWGkwcPsGVZzcL69BqwU7o9izmqaSj4c55ALyjN2VZoW2exNxjtiVvXTz IbtVykzkhNhUTgayVEVJ3mr/kYuKv+C592oEFvi2QiT9jg7KQUQWR1Y0ftFNmXW2 qEIOw3n22Z0aP8Id4kJnkOTKvgFxX+7pIJGmEHv5J0ns97HZ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo7zxdsfrNq2fRD2JgJj97SWmbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvMWE2YjM1MGQtNDEzZC0z NTM1LWI0MTAtODE3MmNlYWYxMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGVAwvmJKBv2Ujk2PTDR4jfQ3ZnTjw7Xx7+PVo/zb6ew3Hn5i17mLn+ wIqiv5D0Xr2fALbrmvfwF9aSWFSEtL6RV5B+6z8E1u4arK1eI/lCXk2GvN1uLcXd 8nsfvvJYfZyzL0SNJfFUftvJvz3YFCBNgBzG8eI/sU+Cl4aLPf6yaFrDig7xDGrK qbuYSZYf1ygeB80TnWVuUPdYOLj//XW4WPsl3NRTSuEmc85XAQzWhrYEdEfv9VCd bahA4qDyI6bZNzhCC2c9BT+v1Pe5t/LynJroIbURj2HVbVd8CQDrfq0i647w9dLb XvgcRiFzUk8zlNgzfY8/4HDNu264XEA= -----END CERTIFICATE-----Generated at Sun Mar 22 09:59:40 2026 by rpki-client