$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa File: 14949f9b-6dc4-3f59-ac26-e099378e8cef.roa (raw, json) Hash identifier: WxK/z6YnaW/wiNJRGQ84AouA3Uz+11CK0seopbv3b7Y= Subject key identifier: BA:3D:BA:34:54:D0:4F:9A:23:3B:70:3B:F2:B0:E0:06:8C:27:5C:E8 Certificate issuer: /CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a Certificate serial: 010D0C9F4328584CAA2709D422E18332A9F39580 Authority key identifier: 36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 16509 IP address blocks: 66.187.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:09:d4:22:e1:83:32:a9:f3:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=a0ce54b0-b3b2-44f3-8513-843fe247e247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:2d:26:60:e9:b9:cb:09:9f:ca:a1:bb:40: d4:c2:be:86:5d:b8:66:fa:75:75:02:a6:16:80:a5: fa:5f:96:5e:29:d5:12:97:2d:b6:68:35:d1:4e:7c: 96:3d:ce:7b:34:76:aa:4a:a4:0c:d3:7a:2a:af:fd: 23:f9:c1:f4:99:c0:2d:93:76:ca:5e:fd:16:34:f8: f9:86:76:45:8e:0e:d1:67:8e:92:25:32:50:97:d1: 73:14:f3:e6:e5:e7:90:5b:d8:d6:8a:7c:9b:59:5b: a0:59:75:5c:34:a2:5b:f0:24:cb:a2:5d:28:8c:1b: 39:49:3e:a4:f9:c5:a0:7c:08:98:d2:ed:2a:c0:14: dc:3d:f8:7a:b3:e7:82:ff:84:d6:e6:5b:df:02:bc: 38:6b:a6:3a:34:4c:09:78:43:9c:ce:dc:15:92:4d: 09:20:98:0c:54:47:a4:10:59:0a:cf:68:19:be:ea: 3b:be:3d:42:dd:db:1b:0a:3e:cd:2b:d0:85:df:99: 1e:c1:2a:e1:12:03:42:c1:84:41:bd:b0:83:3a:56: f8:70:2b:5d:f5:69:cf:46:0c:f6:68:4d:e3:39:b1: 37:1e:d1:90:87:20:0d:83:83:bf:77:bb:03:90:f8: b6:97:6e:e4:8b:66:d5:9a:2f:94:00:e1:47:b3:c4: b6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3D:BA:34:54:D0:4F:9A:23:3B:70:3B:F2:B0:E0:06:8C:27:5C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl X509v3 Authority Key Identifier: keyid:36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer sbgp-ipAddrBlock: critical IPv4: 66.187.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:33:09:ec:b6:b1:3e:bd:c8:e2:99:65:5c:14:dd:bc:88:bc: 1a:2f:ea:59:84:c3:31:ee:8e:37:92:b6:d7:9b:31:3b:21:23: cf:f1:c4:65:65:28:1e:28:a4:5e:78:04:35:71:d7:b7:91:a9: 03:01:bc:ef:7e:67:42:63:f9:a6:19:55:63:e6:0c:e1:b7:66: 8b:73:22:a4:8d:6e:ff:2b:31:29:86:7a:73:6b:ce:63:1a:2e: e9:f9:8b:9d:85:59:36:c0:92:85:44:5e:b3:13:d2:9c:33:4e: 61:41:90:09:54:02:36:01:e9:46:9b:3f:d8:b7:56:c6:48:94: 03:8b:47:3e:c1:ce:e0:1f:00:74:56:50:b3:c1:11:8b:c8:10: ce:04:79:39:fe:54:96:49:ff:01:f0:7f:98:99:62:bb:fb:79: 25:89:f5:7a:4a:ae:83:97:d8:06:6c:2d:f8:00:0f:0d:d7:c8: 80:ed:d9:cf:0d:48:7f:09:99:38:87:eb:f8:51:30:e0:24:b4: e3:cd:0d:b4:96:2e:09:dc:ff:4c:c0:01:fd:16:c1:26:9d:22: ef:f1:40:e9:b9:75:c0:42:1e:fc:1a:32:b0:4e:f8:79:01:96: 28:06:39:c0:ad:52:b3:29:62:14:2b:08:56:4f:0a:4f:d6:99: b2:9e:d1:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwnUIuGDMqnzlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGQ3OGEtMDJjYi00NmVlLWFjZDEtNDY0ZjAzZjNl MTJhMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk YTBjZTU0YjAtYjNiMi00NGYzLTg1MTMtODQzZmUyNDdlMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+AtJmDpucsJn8qhu0DUwr6GXbhm+nV1AqYW gKX6X5ZeKdUSly22aDXRTnyWPc57NHaqSqQM03oqr/0j+cH0mcAtk3bKXv0WNPj5 hnZFjg7RZ46SJTJQl9FzFPPm5eeQW9jWinybWVugWXVcNKJb8CTLol0ojBs5ST6k +cWgfAiY0u0qwBTcPfh6s+eC/4TW5lvfArw4a6Y6NEwJeEOcztwVkk0JIJgMVEek EFkKz2gZvuo7vj1C3dsbCj7NK9CF35kewSrhEgNCwYRBvbCDOlb4cCtd9WnPRgz2 aE3jObE3HtGQhyANg4O/d7sDkPi2l27ki2bVmi+UAOFHs8S2eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo9ujRU0E+aIztwO/Kw4AaMJ1zoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZGQ4 ZDc4YS0wMmNiLTQ2ZWUtYWNkMS00NjRmMDNmM2UxMmEvMTQ5NDlmOWItNmRjNC0z ZjU5LWFjMjYtZTA5OTM3OGU4Y2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWRkOGQ3OGEtMDJjYi00NmVlLWFj ZDEtNDY0ZjAzZjNlMTJhLzFkZDhkNzhhLTAyY2ItNDZlZS1hY2QxLTQ2NGYwM2Yz ZTEyYS5jcmwwHwYDVR0jBBgwFoAUNkhexZprzYeaeNoLWq65iRuYFGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZGQ4ZDc4YS0wMmNiLTQ2ZWUtYWNkMS00NjRm MDNmM2UxMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrvNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQzCey2sT69yOKZZVwU3byIvBov6lmEwzHujjeSttebMTshI8/xxGVl KB4opF54BDVx17eRqQMBvO9+Z0Jj+aYZVWPmDOG3ZotzIqSNbv8rMSmGenNrzmMa Lun5i52FWTbAkoVEXrMT0pwzTmFBkAlUAjYB6UabP9i3VsZIlAOLRz7BzuAfAHRW ULPBEYvIEM4EeTn+VJZJ/wHwf5iZYrv7eSWJ9XpKroOX2AZsLfgADw3XyIDt2c8N SH8JmTiH6/hRMOAktOPNDbSWLgnc/0zAAf0WwSadIu/xQOm5dcBCHvwaMrBO+HkB ligGOcCtUrMpYhQrCFZPCk/WmbKe0ZM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:47:09 2026 by rpki-client