$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa File: d57c390c-9f0a-385c-a044-6ac60c35012d.roa (raw, json) Hash identifier: 1ewvsyNat2qqwW7G18a2hCIfasjuR8PD2nbpCmqsELE= Subject key identifier: 72:6B:D1:BC:A1:0F:CA:68:80:68:86:3D:C9:67:7E:8C:ED:FB:5D:16 Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584D2644B7FD6A27CFE149689300 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 399804 IP address blocks: 66.187.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b7:fd:6a:27:cf:e1:49:68:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=8c7254f8-f4a6-4a56-b13f-1bf5cdde28a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b6:42:6c:1c:5d:75:6c:a8:c4:93:52:48:0c: 05:e7:e4:65:2e:61:40:e0:00:f3:e5:da:78:b4:11: bc:e8:d2:a6:bf:cd:26:43:68:c0:75:77:f9:dd:98: 97:ce:29:0b:e6:3e:36:5e:35:5b:c5:70:e6:6e:ff: cd:61:37:f3:cc:5b:10:5f:5d:26:7c:bf:1a:b7:66: 70:2e:cb:a2:e4:1c:63:d3:75:54:1a:54:58:56:61: 9a:dc:80:c8:4e:48:f3:6b:c5:32:76:f5:83:b3:07: ae:79:40:3d:19:98:1a:6d:58:4a:b9:fe:cc:32:36: 1a:f5:23:47:5b:75:46:fe:ab:26:db:01:38:46:48: 34:af:2a:63:f5:4d:da:fa:46:54:18:f7:c1:48:3f: 63:da:01:16:48:04:67:8a:ad:2a:eb:c6:db:1e:6b: 0b:16:11:1a:d8:25:fb:7c:09:cd:36:8d:57:0b:99: 6e:81:c8:e3:c8:14:27:08:e6:fa:46:1d:d4:7c:b0: 41:11:75:61:a1:88:7a:d7:90:2b:32:b2:ef:fd:07: f6:81:de:27:80:90:af:29:6a:0f:1c:89:01:4a:47: 0b:8d:1e:a0:1f:0d:a9:09:4a:ce:9a:34:8c:b7:27: ba:fe:3b:5b:c1:98:c2:c6:3f:9f:87:b9:43:36:a7: 22:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6B:D1:BC:A1:0F:CA:68:80:68:86:3D:C9:67:7E:8C:ED:FB:5D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/d57c390c-9f0a-385c-a044-6ac60c35012d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv4: 66.187.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:94:5d:3d:20:50:56:01:f6:66:1f:be:cb:f8:d3:95:31:94: ca:46:1e:bf:2a:95:22:1e:fb:36:b5:63:30:9a:ad:2b:0b:7f: 7e:aa:07:68:3b:1c:7f:1f:63:08:55:44:20:3a:01:dd:77:cc: 81:98:59:85:6a:72:10:f5:b7:2b:96:18:9d:a9:81:9c:84:a7: fb:21:46:89:5b:a0:9b:e3:46:86:6e:85:8a:83:7a:9f:8b:2d: 63:27:7a:77:7d:71:d9:cc:7b:b3:c4:28:c8:c8:95:38:1f:7d: 2e:74:ca:61:3c:81:35:17:a2:c7:c2:e3:c5:9b:54:ca:ae:ef: 77:92:48:2c:00:68:27:ac:87:35:b0:ab:95:99:d9:fb:c0:b3: 5b:da:c1:bd:75:22:e8:5e:71:be:3d:ec:86:2a:b4:86:eb:6c: 95:b2:f1:47:7b:1a:31:9e:b8:5a:ad:11:98:0f:52:d8:6b:62: d0:6b:f0:09:19:ef:64:42:ad:9a:5e:f3:96:ae:27:f8:3e:19: 43:fa:d2:88:99:61:e2:79:c5:30:a8:a3:4f:ba:2e:98:20:6f: 38:a5:32:d2:69:d2:a9:6c:c1:a7:90:88:f4:c4:0d:89:6e:ef: 39:1e:ac:96:5c:31:8e:0a:87:fc:3b:af:5c:09:88:ff:d4:c0: 26:81:aa:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLf9aifP4UlokwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk OGM3MjU0ZjgtZjRhNi00YTU2LWIxM2YtMWJmNWNkZGUyOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLZCbBxddWyoxJNSSAwF5+RlLmFA4ADz5dp4 tBG86NKmv80mQ2jAdXf53ZiXzikL5j42XjVbxXDmbv/NYTfzzFsQX10mfL8at2Zw Lsui5Bxj03VUGlRYVmGa3IDITkjza8UydvWDsweueUA9GZgabVhKuf7MMjYa9SNH W3VG/qsm2wE4Rkg0rypj9U3a+kZUGPfBSD9j2gEWSARniq0q68bbHmsLFhEa2CX7 fAnNNo1XC5lugcjjyBQnCOb6Rh3UfLBBEXVhoYh615ArMrLv/Qf2gd4ngJCvKWoP HIkBSkcLjR6gHw2pCUrOmjSMtye6/jtbwZjCxj+fh7lDNqcipwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJr0byhD8pogGiGPclnfozt+10WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvZDU3YzM5MGMtOWYwYS0z ODVjLWEwNDQtNmFjNjBjMzUwMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrsHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqUXT0gUFYB9mYfvsv405UxlMpGHr8qlSIe+za1YzCarSsLf36qB2g7 HH8fYwhVRCA6Ad13zIGYWYVqchD1tyuWGJ2pgZyEp/shRolboJvjRoZuhYqDep+L LWMnend9cdnMe7PEKMjIlTgffS50ymE8gTUXosfC48WbVMqu73eSSCwAaCeshzWw q5WZ2fvAs1vawb11Iuhecb497IYqtIbrbJWy8Ud7GjGeuFqtEZgPUthrYtBr8AkZ 72RCrZpe85auJ/g+GUP60oiZYeJ5xTCoo0+6LpggbzilMtJp0qlswaeQiPTEDYlu 7zkerJZcMY4Kh/w7r1wJiP/UwCaBqi0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:36:33 2026 by rpki-client