$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa File: db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa (raw, json) Hash identifier: QXPPzKIi+apMVQbVwJCLnqLcx0zFozlnKjLVR3T8w4s= Subject key identifier: 9A:F6:03:DE:CD:C9:F0:01:A1:C1:FD:7F:27:33:F0:DF:F9:98:3E:5B Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584CC611E636672821504353E800 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 22808 IP address blocks: 66.112.128.8/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:e6:36:67:28:21:50:43:53:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=2dabd397-02e8-41a0-93f4-16219b629b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:e9:f8:cd:44:39:70:4e:9c:51:9d:09:5b: 78:61:17:55:e4:c1:75:48:84:f7:22:80:2f:05:cd: 0a:bb:38:82:61:ef:9b:ca:48:09:74:a4:c5:cc:50: 52:e7:0a:ca:99:34:98:a0:78:c5:ee:63:65:f2:93: 09:97:9e:da:d3:c1:a0:84:1c:fd:0f:f6:34:f6:a7: 05:0f:b2:2a:d4:36:4f:4f:92:4a:14:a1:fb:d9:59: eb:c0:67:8a:f7:00:67:1d:28:f3:ae:9d:69:f4:44: 01:96:e5:17:b0:33:55:85:10:79:12:2b:57:e3:fe: dd:7d:85:4e:3e:d0:aa:fb:97:2a:ee:66:91:54:c9: 9c:11:cd:0c:22:c1:66:73:fb:f2:4e:4c:43:53:15: e8:45:64:16:95:07:d5:80:30:89:6e:8c:d5:7f:f6: b5:80:e6:cd:6d:d4:c1:31:ff:c2:8c:65:92:70:62: 18:15:12:ad:27:9f:2b:d2:72:b7:eb:43:b0:df:4e: d5:38:90:af:67:94:c9:4d:d4:2b:32:a3:86:80:a0: ce:fb:45:37:6c:9d:db:f1:53:b0:8a:14:25:e0:38: af:0a:78:c8:28:a8:a9:93:65:0e:05:b0:ce:26:ae: 22:cd:bc:40:28:26:ef:5c:ad:73:ad:fa:ab:31:b5: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F6:03:DE:CD:C9:F0:01:A1:C1:FD:7F:27:33:F0:DF:F9:98:3E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.8/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:88:7c:5b:a4:6b:09:6c:73:ad:25:6b:2b:7d:a6:61:51:ae: ac:7f:01:f0:36:65:8e:66:a6:b8:c4:68:a2:f4:fc:46:a7:4e: cc:ae:89:90:71:be:8e:41:e4:c7:e3:e6:9a:0c:c2:86:cf:7b: b5:48:2a:36:63:67:50:78:70:27:7d:3c:f8:d5:eb:ed:bb:80: 66:43:ff:dd:10:cf:02:5d:7f:54:df:d8:41:40:b0:ba:19:82: 70:68:85:53:96:d4:64:12:73:8d:e4:40:33:61:fb:c5:e7:66: 5a:d4:11:f2:61:47:29:af:3b:b3:8a:26:a3:1f:d5:15:d4:b5: ca:10:ac:1f:af:3d:b5:4d:1e:90:ee:e0:e2:a5:73:19:2f:78: ea:a9:d5:03:8e:df:7f:ef:e6:90:fe:70:ea:43:91:72:fa:72: 75:3b:60:7d:c9:ce:ca:27:ca:0a:80:c8:e8:86:d0:8c:4c:12: 31:7d:b4:07:1e:df:fb:f0:2c:48:13:97:1c:85:6e:c2:b9:bb: 80:8c:26:3b:13:c8:5d:4c:af:41:eb:6f:87:21:fc:6e:fd:60: 88:55:2f:e3:37:1b:18:41:cb:46:77:12:42:8d:f4:f6:71:86: 78:4d:ae:63:5e:a6:67:c7:9a:1d:aa:20:66:e3:4a:b8:79:03: ad:7c:f2:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzGEeY2ZyghUENT6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk MmRhYmQzOTctMDJlOC00MWEwLTkzZjQtMTYyMTliNjI5YjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOrp+M1EOXBOnFGdCVt4YRdV5MF1SIT3IoAv Bc0KuziCYe+bykgJdKTFzFBS5wrKmTSYoHjF7mNl8pMJl57a08GghBz9D/Y09qcF D7Iq1DZPT5JKFKH72VnrwGeK9wBnHSjzrp1p9EQBluUXsDNVhRB5EitX4/7dfYVO PtCq+5cq7maRVMmcEc0MIsFmc/vyTkxDUxXoRWQWlQfVgDCJbozVf/a1gObNbdTB Mf/CjGWScGIYFRKtJ58r0nK360Ow307VOJCvZ5TJTdQrMqOGgKDO+0U3bJ3b8VOw ihQl4DivCnjIKKipk2UOBbDOJq4izbxAKCbvXK1zrfqrMbXIuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJr2A97NyfABocH9fycz8N/5mD5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZGIwYmUzNmMtZGJiYi0z NWIyLWFhODEtZTg0MjE2M2EyYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQnCACDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyiHxbpGsJbHOtJWsrfaZhUa6sfwHwNmWOZqa4xGii9PxGp07MromQ cb6OQeTH4+aaDMKGz3u1SCo2Y2dQeHAnfTz41evtu4BmQ//dEM8CXX9U39hBQLC6 GYJwaIVTltRkEnON5EAzYfvF52Za1BHyYUcprzuziiajH9UV1LXKEKwfrz21TR6Q 7uDipXMZL3jqqdUDjt9/7+aQ/nDqQ5Fy+nJ1O2B9yc7KJ8oKgMjohtCMTBIxfbQH Ht/78CxIE5cchW7CubuAjCY7E8hdTK9B62+HIfxu/WCIVS/jNxsYQctGdxJCjfT2 cYZ4Ta5jXqZnx5odqiBm40q4eQOtfPLk -----END CERTIFICATE-----Generated at Mon Mar 2 06:19:16 2026 by rpki-client