$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/86bf25bf-90f6-30e8-b6e1-f6e6f4dea33b.roa File: 86bf25bf-90f6-30e8-b6e1-f6e6f4dea33b.roa (raw, json) Hash identifier: 2ZKi04KsiHG9Fa4GVhJwLinPDxjDm3vd6cK82xP/EU8= Subject key identifier: 8B:DD:1B:49:26:38:A0:16:AE:69:C1:41:C6:1C:0A:7A:C4:71:80:97 Certificate issuer: /CN=f5903ded-0596-4674-94c8-856dc82e8cbf Certificate serial: 010D0C9F4328584D2A74DA6D25C861C253D4AA00 Authority key identifier: 4D:B7:BF:96:97:9B:9D:62:73:B1:CC:01:5F:FE:4A:04:C5:4B:21:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/86bf25bf-90f6-30e8-b6e1-f6e6f4dea33b.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 18692 IP address blocks: 66.119.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:da:6d:25:c8:61:c2:53:d4:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5903ded-0596-4674-94c8-856dc82e8cbf Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=6f91062c-09c5-4c6d-b083-55ec9b41debf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0b:49:64:f1:10:db:ee:7a:50:42:13:44:6b: 7c:84:bd:75:34:27:0c:34:ad:85:9e:9d:5e:03:74: 1d:2b:81:2b:c2:a9:21:d1:17:3b:5c:4c:19:14:c2: b4:b1:79:5c:b0:0d:e8:22:17:25:b7:21:ba:d9:d1: b4:30:f3:32:8f:29:b8:e8:17:65:4d:25:8d:95:33: 34:96:c6:3f:1f:19:5a:d4:75:8b:c9:1c:d1:d0:82: 38:16:17:9d:ea:a5:11:0d:52:79:af:9b:3c:6b:33: d3:61:21:66:b3:b0:4e:32:dc:e9:1a:c0:fb:4e:60: cc:ed:52:62:c9:25:bc:59:f4:a1:b3:d2:d8:8a:37: bd:de:e3:cd:11:af:7f:65:c1:83:3c:35:44:55:18: 95:a5:9b:34:81:ae:d2:ed:f0:be:b1:c4:b2:44:74: 0e:92:a9:8d:20:e8:cb:53:f6:37:ab:eb:6e:d0:ad: fe:8b:81:7a:96:f6:e0:77:23:5c:ff:4f:ae:f7:d9: a3:00:8e:78:a7:1e:46:ca:db:a9:28:17:52:67:c4: 57:37:fa:8b:08:e0:a4:26:0a:b7:af:53:85:29:16: 22:d3:0f:d9:a2:b4:a3:0c:3c:e8:d4:7c:8e:37:30: 2c:32:3b:ed:54:1f:e0:3e:c3:5e:c8:6d:df:e2:ca: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DD:1B:49:26:38:A0:16:AE:69:C1:41:C6:1C:0A:7A:C4:71:80:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/86bf25bf-90f6-30e8-b6e1-f6e6f4dea33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.crl X509v3 Authority Key Identifier: keyid:4D:B7:BF:96:97:9B:9D:62:73:B1:CC:01:5F:FE:4A:04:C5:4B:21:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer sbgp-ipAddrBlock: critical IPv4: 66.119.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c8:88:f9:40:84:70:59:78:8f:9f:7a:56:d4:c7:39:d1:09: ed:95:29:1e:ad:2b:33:e1:98:cb:a5:d5:db:1c:14:06:0a:76: 58:dd:40:ad:10:7c:7d:8f:00:fd:08:e4:d0:9a:f1:a2:b0:8c: fc:da:1f:35:dd:97:0e:a4:89:75:9e:0a:05:be:2e:4c:3d:d8: cc:64:5d:80:74:9f:6f:29:d2:fd:41:8e:91:06:75:67:d0:88: c9:8d:46:2c:48:74:10:e6:e6:ff:e6:c2:83:41:c0:39:62:f9: f8:36:e2:0c:44:e2:cc:28:8f:bd:6b:d9:d4:fc:a7:e9:d8:ea: 37:36:61:40:da:24:37:2a:a9:ca:51:b4:68:49:9c:d9:5b:a8: 19:87:fd:a7:c8:87:c0:b3:dc:8b:59:62:ab:99:35:da:34:87: 0b:96:71:15:62:47:14:e6:91:40:e1:af:81:74:7f:ef:22:0a: 51:10:61:a5:fb:1c:68:67:8f:6f:5d:6c:31:0a:b0:8e:9f:20: d4:06:a2:84:67:5c:df:c6:2a:1e:27:72:6f:fa:c3:ce:7d:1d: 11:65:c8:ec:54:33:79:52:60:db:09:71:9f:9d:18:66:46:bd: 55:37:67:e5:cd:f9:1e:c5:15:9d:0f:c3:7b:d8:2b:41:84:0e: 9a:58:2b:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNptJchhwlPUqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU5MDNkZWQtMDU5Ni00Njc0LTk0YzgtODU2ZGM4MmU4 Y2JmMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NmY5MTA2MmMtMDljNS00YzZkLWIwODMtNTVlYzliNDFkZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wtJZPEQ2+56UEITRGt8hL11NCcMNK2Fnp1e A3QdK4Erwqkh0Rc7XEwZFMK0sXlcsA3oIhcltyG62dG0MPMyjym46BdlTSWNlTM0 lsY/Hxla1HWLyRzR0II4Fhed6qURDVJ5r5s8azPTYSFms7BOMtzpGsD7TmDM7VJi ySW8WfShs9LYije93uPNEa9/ZcGDPDVEVRiVpZs0ga7S7fC+scSyRHQOkqmNIOjL U/Y3q+tu0K3+i4F6lvbgdyNc/0+u99mjAI54px5GytupKBdSZ8RXN/qLCOCkJgq3 r1OFKRYi0w/ZorSjDDzo1HyONzAsMjvtVB/gPsNeyG3f4srYAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvdG0kmOKAWrmnBQcYcCnrEcYCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNTkw M2RlZC0wNTk2LTQ2NzQtOTRjOC04NTZkYzgyZThjYmYvODZiZjI1YmYtOTBmNi0z MGU4LWI2ZTEtZjZlNmY0ZGVhMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjU5MDNkZWQtMDU5Ni00Njc0LTk0 YzgtODU2ZGM4MmU4Y2JmL2Y1OTAzZGVkLTA1OTYtNDY3NC05NGM4LTg1NmRjODJl OGNiZi5jcmwwHwYDVR0jBBgwFoAUTbe/lpebnWJzscwBX/5KBMVLIYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNTkwM2RlZC0wNTk2LTQ2NzQtOTRjOC04NTZk YzgyZThjYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnd+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPIiPlAhHBZeI+felbUxznRCe2VKR6tKzPhmMul1dscFAYKdljdQK0Q fH2PAP0I5NCa8aKwjPzaHzXdlw6kiXWeCgW+Lkw92MxkXYB0n28p0v1BjpEGdWfQ iMmNRixIdBDm5v/mwoNBwDli+fg24gxE4swoj71r2dT8p+nY6jc2YUDaJDcqqcpR tGhJnNlbqBmH/afIh8Cz3ItZYquZNdo0hwuWcRViRxTmkUDhr4F0f+8iClEQYaX7 HGhnj29dbDEKsI6fINQGooRnXN/GKh4ncm/6w859HRFlyOxUM3lSYNsJcZ+dGGZG vVU3Z+XN+R7FFZ0Pw3vYK0GEDppYK8g= -----END CERTIFICATE-----Generated at Mon Mar 23 22:28:04 2026 by rpki-client