$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/581d2215-b7ba-34d5-ab39-b96228a02055.roa File: 581d2215-b7ba-34d5-ab39-b96228a02055.roa (raw, json) Hash identifier: jpaEByr4uGOkfqDAzO/h0yfk7EWtE5/rDVSfsrioLqQ= Subject key identifier: A3:34:55:12:CA:B5:3D:4B:B3:68:D1:44:05:6B:C6:A5:0C:1D:62:FA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D237A3D2E87FD839B7AA5F880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/581d2215-b7ba-34d5-ab39-b96228a02055.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 398781 IP address blocks: 66.95.0.0/17 maxlen: 24 68.165.0.0/18 maxlen: 24 68.166.0.0/17 maxlen: 24 68.166.192.0/18 maxlen: 24 69.3.0.0/17 maxlen: 24 216.175.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3d:2e:87:fd:83:9b:7a:a5:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=156b5c05-a97e-4ec7-a554-12ef39ec2ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:24:8b:59:25:8b:18:19:fa:aa:22:5c:5e:a4: 98:14:00:e8:5e:5b:5f:dc:84:22:7a:0d:3d:17:5a: f9:88:cf:19:97:17:81:53:1e:26:98:c0:9c:15:e3: 52:53:7f:dc:cc:1c:cb:7c:75:e1:6c:36:57:80:42: 2b:42:f1:d8:eb:d5:a2:67:0f:3c:27:74:cb:6e:ed: d7:40:41:e5:bc:ac:32:5a:db:16:cf:01:7a:1d:e7: d6:99:9a:83:50:c6:bd:47:4b:b2:15:0f:d2:5a:cb: 7d:86:71:ef:e6:bb:ce:21:d6:7e:d3:79:09:00:19: 4d:28:01:78:c7:4d:3f:0d:e7:fe:8d:88:91:d2:d3: 14:31:ea:88:27:77:73:b9:e3:01:0c:4a:36:07:5d: bf:71:30:e5:0e:8e:4c:63:49:19:80:95:cc:18:b7: 8c:14:7b:75:b4:4d:07:09:7d:40:55:27:93:40:5b: c5:d3:0e:f0:53:89:5d:e7:55:19:dd:69:15:09:fc: 81:cf:73:b1:bf:18:d6:7a:0f:b5:e1:7a:8d:2a:76: 71:29:9d:70:e6:f7:23:6b:38:26:8e:bd:a6:f7:ba: 13:77:be:f1:c3:aa:19:f3:c6:c3:20:58:ed:00:e2: a3:d6:aa:29:d6:1e:1b:69:47:77:90:c5:1c:81:d6: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:34:55:12:CA:B5:3D:4B:B3:68:D1:44:05:6B:C6:A5:0C:1D:62:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/581d2215-b7ba-34d5-ab39-b96228a02055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.95.0.0/17 68.165.0.0/18 68.166.0.0/17 68.166.192.0/18 69.3.0.0/17 216.175.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:76:97:5c:9a:73:7e:3b:22:bc:5e:cb:2a:8f:b9:b1:49:29: ba:2b:1c:d0:f2:4e:8f:0d:5e:56:ee:8c:bf:23:50:60:9f:b8: 40:47:8c:80:9e:ce:96:7d:43:23:70:09:f6:ed:bd:fb:ff:b0: eb:ec:70:0b:61:32:03:9e:01:dd:cd:37:0e:58:28:ef:c9:b6: 03:32:c6:c8:cc:6e:e3:b9:5e:34:2d:26:fd:b6:29:e1:1b:09: e5:c4:9e:d9:ff:ea:fc:47:51:9d:1c:5a:36:0b:17:e7:cf:8e: 6c:10:15:4a:4c:57:dc:0b:82:dd:cd:11:10:89:8c:e5:ba:aa: e2:52:c3:f5:d0:c3:0a:f1:13:d2:30:30:85:63:96:cf:ae:f8: 73:c8:6c:ee:5c:fc:3f:75:59:06:ce:e8:83:ee:01:a9:f7:cb: 5e:88:64:19:ec:e9:3c:41:0a:45:44:c9:28:cd:a9:4c:b9:b8: b0:c1:a2:05:92:4c:da:5c:46:da:59:96:65:ce:c5:fe:b7:29: 3a:b8:cd:8a:98:75:87:ee:52:0d:05:24:27:dd:c0:d0:e9:f3: 08:91:06:45:51:1b:0a:af:b1:d8:14:1b:3f:2a:72:e1:e9:6b: cd:e8:9f:7b:c5:dd:95:6b:07:33:3a:0a:42:50:f9:94:e6:6d: 0e:ac:d8:77 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE0jej0uh/2Dm3ql+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTU2YjVjMDUtYTk3ZS00ZWM3LWE1NTQtMTJlZjM5ZWMyZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiSLWSWLGBn6qiJcXqSYFADoXltf3IQieg09 F1r5iM8ZlxeBUx4mmMCcFeNSU3/czBzLfHXhbDZXgEIrQvHY69WiZw88J3TLbu3X QEHlvKwyWtsWzwF6HefWmZqDUMa9R0uyFQ/SWst9hnHv5rvOIdZ+03kJABlNKAF4 x00/Def+jYiR0tMUMeqIJ3dzueMBDEo2B12/cTDlDo5MY0kZgJXMGLeMFHt1tE0H CX1AVSeTQFvF0w7wU4ld51UZ3WkVCfyBz3OxvxjWeg+14XqNKnZxKZ1w5vcjazgm jr2m97oTd77xw6oZ88bDIFjtAOKj1qop1h4baUd3kMUcgdYq/wIDAQABo4IDczCC A28wHQYDVR0OBBYEFKM0VRLKtT1Ls2jRRAVrxqUMHWL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTgxZDIyMTUtYjdiYS0z NGQ1LWFiMzktYjk2MjI4YTAyMDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQHQl8AAwQG RKUAAwQHRKYAAwQGRKbAAwQHRQMAAwQG2K+AMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAJ2l1yac347Irxe yyqPubFJKborHNDyTo8NXlbujL8jUGCfuEBHjICezpZ9QyNwCfbtvfv/sOvscAth MgOeAd3NNw5YKO/JtgMyxsjMbuO5XjQtJv22KeEbCeXEntn/6vxHUZ0cWjYLF+fP jmwQFUpMV9wLgt3NERCJjOW6quJSw/XQwwrxE9IwMIVjls+u+HPIbO5c/D91WQbO 6IPuAan3y16IZBns6TxBCkVEySjNqUy5uLDBogWSTNpcRtpZlmXOxf63KTq4zYqY dYfuUg0FJCfdwNDp8wiRBkVRGwqvsdgUGz8qcuHpa83on3vF3ZVrBzM6CkJQ+ZTm bQ6s2Hc= -----END CERTIFICATE-----Generated at Mon Mar 23 18:54:11 2026 by rpki-client