$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/9b2c6c8c-5808-3e93-99c4-ca1823759356.roa File: 9b2c6c8c-5808-3e93-99c4-ca1823759356.roa (raw, json) Hash identifier: k+3ChdtLJB47IGaZ2N34LnFwqinApIl2JYHvhCkbNd0= Subject key identifier: F6:1A:C8:8D:69:88:C1:DD:77:7C:98:75:46:99:39:6A:6B:E6:B3:4D Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584D143D47F820868A1FAFBB9040 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/9b2c6c8c-5808-3e93-99c4-ca1823759356.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 10430 IP address blocks: 66.96.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:47:f8:20:86:8a:1f:af:bb:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=7f683035-64f8-47fb-b68d-e51ee9a6e96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:eb:47:ea:36:3f:7a:a3:8c:b2:60:a8:bc: b1:7e:57:87:f4:22:64:77:70:84:a3:96:c0:67:25: a5:ef:6c:f4:74:0c:25:44:0f:55:ea:5d:02:2d:47: 96:3c:99:04:a4:3c:fd:53:27:57:dc:c9:34:e2:94: 2b:f1:5c:cf:cc:32:d6:82:0d:8f:99:6e:df:f8:3f: 02:ac:27:9f:05:fb:9f:4e:43:99:a3:c3:0e:f3:97: 1a:d0:e2:16:3c:b0:54:52:76:50:25:ed:3c:49:7e: 98:b5:74:c4:49:b6:cb:e7:c0:19:4e:50:bf:10:ec: 2d:1e:cc:57:45:a7:ca:85:e1:7c:26:5c:7a:70:ba: 65:a2:52:15:10:0e:56:b8:51:4a:b4:8f:c0:7b:8c: 98:98:e7:8f:82:17:e3:e2:fe:e4:10:65:f6:ea:d8: cf:61:f7:be:1e:15:51:d2:66:ec:7f:eb:f9:c1:5d: 2f:2a:ee:8b:b9:73:db:68:90:5b:7f:e4:a0:6c:3f: 72:58:d5:04:d3:dc:f9:36:6c:8d:18:cb:81:f9:cc: 2c:c7:b0:67:f6:19:17:8d:91:f3:28:d9:1b:52:bf: 9d:65:f6:ec:af:54:27:c7:c2:ba:bc:1d:c0:1f:61: 82:5d:f3:25:4b:8f:d4:81:95:99:c2:8d:6c:09:2f: 39:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1A:C8:8D:69:88:C1:DD:77:7C:98:75:46:99:39:6A:6B:E6:B3:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/9b2c6c8c-5808-3e93-99c4-ca1823759356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 66.96.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:8d:d5:26:2a:a3:1d:99:81:7b:1b:24:f9:9f:61:73:72:45: 8b:86:59:6f:8c:c8:b2:3c:cb:74:71:37:8f:5a:c0:38:02:01: e3:af:4b:2a:fc:b8:67:f3:0c:b1:0f:ad:e9:77:85:5f:e5:89: ac:cf:a5:51:71:37:2e:42:61:6d:6e:6f:0d:93:94:98:47:06: 2a:a8:ab:83:9e:d0:c8:fd:ff:5e:be:e7:f6:ed:49:86:33:3d: b9:23:16:e1:c9:a4:bd:30:ea:15:1f:1f:fe:f2:58:c9:1d:09: 43:97:d5:78:53:d2:00:0b:ce:9c:44:82:27:78:10:94:08:45: 60:b1:8c:9e:55:25:b6:d1:b1:c9:b8:0f:97:9a:14:34:8b:78: 33:15:ca:85:26:b5:92:5f:46:9f:58:dc:26:69:6b:22:2c:44: f2:cb:f5:23:ff:7c:9d:4d:97:88:98:c5:d0:ad:dd:38:4f:d4: fc:ce:67:a2:82:8d:30:3e:e0:5b:25:35:b1:8d:15:92:8f:5a: 18:a4:b7:37:c1:9b:84:96:71:26:cf:63:47:f7:e2:55:87:9a: f4:75:79:2c:78:ef:49:76:4f:ca:be:2c:4c:12:78:ca:39:46: 6e:eb:e0:50:58:3f:d1:79:16:10:9b:c2:a8:cc:03:b4:33:60: 79:c6:4a:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUf4IIaKH6+7kEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk N2Y2ODMwMzUtNjRmOC00N2ZiLWI2OGQtZTUxZWU5YTZlOTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2HrR+o2P3qjjLJgqLyxfleH9CJkd3CEo5bA ZyWl72z0dAwlRA9V6l0CLUeWPJkEpDz9UydX3Mk04pQr8VzPzDLWgg2PmW7f+D8C rCefBfufTkOZo8MO85ca0OIWPLBUUnZQJe08SX6YtXTESbbL58AZTlC/EOwtHsxX RafKheF8Jlx6cLplolIVEA5WuFFKtI/Ae4yYmOePghfj4v7kEGX26tjPYfe+HhVR 0mbsf+v5wV0vKu6LuXPbaJBbf+SgbD9yWNUE09z5NmyNGMuB+cwsx7Bn9hkXjZHz KNkbUr+dZfbsr1Qnx8K6vB3AH2GCXfMlS4/UgZWZwo1sCS85XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYayI1piMHdd3yYdUaZOWpr5rNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvOWIyYzZjOGMtNTgwOC0z ZTkzLTk5YzQtY2ExODIzNzU5MzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQmBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2N1SYqox2ZgXsbJPmfYXNyRYuGWW+MyLI8y3RxN49awDgCAeOvSyr8 uGfzDLEPrel3hV/liazPpVFxNy5CYW1ubw2TlJhHBiqoq4Oe0Mj9/16+5/btSYYz PbkjFuHJpL0w6hUfH/7yWMkdCUOX1XhT0gALzpxEgid4EJQIRWCxjJ5VJbbRscm4 D5eaFDSLeDMVyoUmtZJfRp9Y3CZpayIsRPLL9SP/fJ1Nl4iYxdCt3ThP1PzOZ6KC jTA+4FslNbGNFZKPWhiktzfBm4SWcSbPY0f34lWHmvR1eSx470l2T8q+LEwSeMo5 Rm7r4FBYP9F5FhCbwqjMA7QzYHnGSm0= -----END CERTIFICATE-----Generated at Fri Mar 13 13:21:36 2026 by rpki-client