$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa File: c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa (raw, json) Hash identifier: qcqOGNX6Ee5FIN38qA2WB59sYPIsM4x163tLTcQyXZo= Subject key identifier: 84:1F:D1:78:7E:70:17:E2:C1:C4:30:81:EF:A0:B0:C7:BF:2A:33:97 Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F4328584D3B34E173067DCF5A46885FF0 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 400610 IP address blocks: 66.219.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e1:73:06:7d:cf:5a:46:88:5f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=9eb173d8-4f6a-445f-9686-02ca8d46bdf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:37:be:a5:0d:df:72:dd:84:97:e9:61:9e: 3f:da:94:63:db:a9:31:ca:82:43:42:f4:96:a2:a6: d7:a8:f8:3b:12:2e:97:f0:12:cb:00:90:3c:b8:e8: e8:13:d7:35:4c:5b:5b:24:b3:6a:24:1a:56:06:c0: 54:9d:6b:0a:b3:8d:38:4d:08:d2:1d:23:ee:24:89: e4:26:68:f2:ea:68:3b:ae:31:e4:e3:ee:a2:3d:04: 43:cd:24:5f:6c:f5:51:13:7a:13:ba:e7:31:d4:52: 53:3f:fc:a5:22:f8:b2:91:43:0e:0a:22:54:a1:98: 06:b2:69:40:13:15:2d:9c:9f:07:48:d9:ca:2e:a5: bd:16:6d:13:69:de:08:46:5e:7d:a7:a2:4c:ac:2c: e6:45:ea:d8:ce:b2:ef:1a:dc:6e:00:40:32:f0:b2: 94:3d:cf:c3:af:34:eb:f3:8f:52:de:61:8d:93:a8: ca:a8:24:62:fc:be:e4:96:c3:49:12:5b:53:db:4d: a7:6a:f8:aa:35:42:d5:46:e5:07:6f:15:d1:41:a3: dc:60:03:06:95:34:2e:a4:39:be:72:40:4d:3b:82: 67:b3:cc:12:f3:55:64:21:41:3f:54:99:61:0c:7f: 30:99:d4:d7:ef:73:09:4a:28:e2:e5:ff:66:19:12: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1F:D1:78:7E:70:17:E2:C1:C4:30:81:EF:A0:B0:C7:BF:2A:33:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b0:67:24:05:c6:e9:94:0c:12:bf:c9:8a:38:28:e4:ad:b3: fc:61:9e:13:ee:89:3e:15:8f:e0:cd:39:e9:a5:f2:1d:d6:c8: 21:39:50:c5:0e:d2:96:a4:43:55:c9:4d:71:af:ea:5a:74:4e: cb:d3:df:46:ba:e0:1b:85:dd:13:02:95:88:be:8c:74:8c:37: b3:18:8f:d7:4e:b4:48:c2:91:f1:6f:61:9d:75:f8:01:70:57: 25:5a:c4:d0:27:dd:4c:82:f2:ef:9a:2d:c3:5e:3e:40:33:f6: b4:bd:9e:e6:73:5e:25:63:25:2a:21:cf:16:76:f7:fa:53:d1: 19:94:84:e2:b6:0f:32:f2:45:42:41:12:52:0c:9d:05:e3:70: 82:fb:48:c8:13:2e:6e:24:b7:e3:34:ed:77:c1:e0:c1:80:67: 17:50:07:04:a9:3f:06:a6:94:71:a8:d8:23:b3:66:0f:53:cb: c1:49:4d:45:48:04:86:fe:6d:c0:ab:71:08:d7:7f:09:c5:59: 4d:a9:9e:e2:f7:0f:80:80:05:96:bb:0a:4c:c7:04:98:7f:b6: 7a:68:c6:f0:3c:7e:cd:24:5e:83:72:2a:16:d5:ff:5b:33:b4: 46:3c:06:67:36:af:d4:25:f4:01:5e:d9:df:6a:19:11:35:bc: e6:c2:f3:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOFzBn3PWkaIX/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk OWViMTczZDgtNGY2YS00NDVmLTk2ODYtMDJjYThkNDZiZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweM3vqUN33LdhJfpYZ4/2pRj26kxyoJDQvSW oqbXqPg7Ei6X8BLLAJA8uOjoE9c1TFtbJLNqJBpWBsBUnWsKs404TQjSHSPuJInk Jmjy6mg7rjHk4+6iPQRDzSRfbPVRE3oTuucx1FJTP/ylIviykUMOCiJUoZgGsmlA ExUtnJ8HSNnKLqW9Fm0Tad4IRl59p6JMrCzmRerYzrLvGtxuAEAy8LKUPc/DrzTr 849S3mGNk6jKqCRi/L7klsNJEltT202naviqNULVRuUHbxXRQaPcYAMGlTQupDm+ ckBNO4Jns8wS81VkIUE/VJlhDH8wmdTX73MJSiji5f9mGRImUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQf0Xh+cBfiwcQwge+gsMe/KjOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvYzY1NmEwM2QtNjRhNC0z OGFhLWIwZDQtNzk1NGMxZTdlMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADawZyQFxumUDBK/yYo4KOSts/xhnhPuiT4Vj+DNOeml8h3WyCE5UMUO 0pakQ1XJTXGv6lp0TsvT30a64BuF3RMClYi+jHSMN7MYj9dOtEjCkfFvYZ11+AFw VyVaxNAn3UyC8u+aLcNePkAz9rS9nuZzXiVjJSohzxZ29/pT0RmUhOK2DzLyRUJB ElIMnQXjcIL7SMgTLm4kt+M07XfB4MGAZxdQBwSpPwamlHGo2COzZg9Ty8FJTUVI BIb+bcCrcQjXfwnFWU2pnuL3D4CABZa7CkzHBJh/tnpoxvA8fs0kXoNyKhbV/1sz tEY8Bmc2r9Ql9AFe2d9qGRE1vObC84M= -----END CERTIFICATE-----Generated at Sun Mar 22 09:57:07 2026 by rpki-client