$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/af90bffe-7547-31d9-9cfe-98c0501cfdba.roa File: af90bffe-7547-31d9-9cfe-98c0501cfdba.roa (raw, json) Hash identifier: O9EXHuo9HbIhfkGgzAg5ymGTRxEOZ0ZS1Rdbp1ySKsg= Subject key identifier: 87:C4:EF:B5:29:5C:79:48:45:74:6D:17:F8:D4:91:2B:1C:00:97:CA Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F4328584D3B34E1390925B5182DD651C0 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/af90bffe-7547-31d9-9cfe-98c0501cfdba.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 400610 IP address blocks: 66.219.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e1:39:09:25:b5:18:2d:d6:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=90bc31b0-ae89-4a37-92ee-f94dcac9337d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fb:3a:16:49:46:28:03:fe:56:58:57:3c:7a: 45:d1:93:73:a1:18:e0:09:3f:a9:02:5d:59:67:a4: 20:c9:86:09:ed:ee:02:f1:94:96:d0:d0:48:8a:bc: a3:9e:b1:29:9d:e5:68:ac:77:89:ba:8c:56:8c:1c: 89:68:59:a6:cb:e0:f3:ef:38:b5:ae:b6:dd:b8:d2: a1:3c:94:32:16:ef:45:09:fd:ec:13:8c:51:14:24: 72:58:4f:7d:ab:aa:26:22:35:25:e1:df:2d:99:c0: db:59:e5:c2:e8:bc:b5:2c:c8:d4:ba:de:e0:cb:16: ba:9d:b4:cf:d9:5c:7d:d6:66:83:d4:f4:80:ef:5c: 35:5a:61:bd:80:98:7e:e2:60:c1:bd:b1:2e:10:ce: 50:8a:6f:3a:fb:3b:f3:f6:03:a4:cb:53:df:52:44: 4d:f1:63:4e:37:e3:60:61:1e:ac:d0:b7:07:af:88: 51:b3:36:bb:9a:aa:32:e0:20:d4:d0:7f:05:a0:1a: 86:77:e2:49:28:14:e3:26:67:32:f1:9b:0c:24:e1: c8:3e:78:64:67:41:e0:e9:ef:bb:d1:77:ee:2b:de: 89:20:92:0f:5b:5c:bd:95:a5:c8:ec:60:77:8a:b2: 0e:ee:bd:a6:c1:96:83:64:2e:80:5f:80:c0:f5:ff: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C4:EF:B5:29:5C:79:48:45:74:6D:17:F8:D4:91:2B:1C:00:97:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/af90bffe-7547-31d9-9cfe-98c0501cfdba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3f:67:ce:0c:a7:41:13:63:ec:ea:76:1c:f8:65:9b:f5:8f: 56:f2:a4:25:46:aa:7a:6c:a3:4c:6a:fc:26:ab:ab:e5:21:ed: 72:50:76:08:ac:b7:aa:eb:9a:5a:47:e9:88:38:35:7f:87:d5: 5e:95:4c:1c:7e:c6:97:9f:65:c9:a8:0b:8b:00:06:21:b7:88: 92:dc:28:05:61:72:ec:ec:4f:b1:92:a4:9f:db:cb:9c:40:07: b4:63:d1:ec:cc:a1:34:95:b2:ed:b5:e7:ed:4b:9b:76:5d:63: 06:a0:ed:9e:1b:19:16:92:f2:f2:14:79:4e:d2:e6:56:0f:f8: 38:90:c8:4f:3d:da:e1:20:8f:60:9c:9d:fa:c7:92:01:c2:b2: 6a:30:b2:a8:5f:25:9e:2d:e1:11:65:b2:f9:61:4d:3a:c6:e5: 16:d1:7a:15:b5:01:43:13:ff:79:f0:ef:a4:a6:8f:b7:ba:69: 60:46:65:18:ba:cc:0e:41:09:e8:7b:5b:89:db:64:33:8f:eb: 71:a8:36:39:27:ff:e9:58:2c:d5:6c:63:61:d6:76:6a:fb:3c: 35:10:72:6e:0f:2e:4e:18:0d:7e:ea:fc:40:ee:c1:e1:72:a7: d2:54:6b:9a:e2:44:94:a9:99:a5:d5:2a:63:04:bf:ae:dd:06: b7:2e:68:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOE5CSW1GC3WUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk OTBiYzMxYjAtYWU4OS00YTM3LTkyZWUtZjk0ZGNhYzkzMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvs6FklGKAP+VlhXPHpF0ZNzoRjgCT+pAl1Z Z6QgyYYJ7e4C8ZSW0NBIiryjnrEpneVorHeJuoxWjByJaFmmy+Dz7zi1rrbduNKh PJQyFu9FCf3sE4xRFCRyWE99q6omIjUl4d8tmcDbWeXC6Ly1LMjUut7gyxa6nbTP 2Vx91maD1PSA71w1WmG9gJh+4mDBvbEuEM5Qim86+zvz9gOky1PfUkRN8WNON+Ng YR6s0LcHr4hRsza7mqoy4CDU0H8FoBqGd+JJKBTjJmcy8ZsMJOHIPnhkZ0Hg6e+7 0XfuK96JIJIPW1y9laXI7GB3irIO7r2mwZaDZC6AX4DA9f/SpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfE77UpXHlIRXRtF/jUkSscAJfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvYWY5MGJmZmUtNzU0Ny0z MWQ5LTljZmUtOThjMDUwMWNmZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0/Z84Mp0ETY+zqdhz4ZZv1j1bypCVGqnpso0xq/Carq+Uh7XJQdgis t6rrmlpH6Yg4NX+H1V6VTBx+xpefZcmoC4sABiG3iJLcKAVhcuzsT7GSpJ/by5xA B7Rj0ezMoTSVsu215+1Lm3ZdYwag7Z4bGRaS8vIUeU7S5lYP+DiQyE892uEgj2Cc nfrHkgHCsmowsqhfJZ4t4RFlsvlhTTrG5RbRehW1AUMT/3nw76Smj7e6aWBGZRi6 zA5BCeh7W4nbZDOP63GoNjkn/+lYLNVsY2HWdmr7PDUQcm4PLk4YDX7q/EDuweFy p9JUa5riRJSpmaXVKmMEv67dBrcuaHc= -----END CERTIFICATE-----Generated at Sun Mar 22 09:57:04 2026 by rpki-client