$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/c7b1674d-de58-3dcc-9f6e-7aa3cc103ff2.roa File: c7b1674d-de58-3dcc-9f6e-7aa3cc103ff2.roa (raw, json) Hash identifier: yc1VfPYdKGzWSLiGowdU1fgGl/uwjlGp56mM7MWsHAM= Subject key identifier: BE:EA:C0:C5:AB:A9:74:21:CC:55:1D:2D:07:13:A2:45:09:39:24:96 Certificate issuer: /CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a Certificate serial: 010D0C9F4328584CAA2709C357ADFF8CEAAA2900 Authority key identifier: 36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/c7b1674d-de58-3dcc-9f6e-7aa3cc103ff2.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 14618 IP address blocks: 66.187.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:09:c3:57:ad:ff:8c:ea:aa:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=90ed2036-1a17-4547-95a1-037d9ebf750d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:46:08:bb:47:73:37:17:f7:3d:ea:b7:ec: 10:64:f1:d5:dc:2d:eb:e0:74:25:69:43:9b:e1:5f: 2b:43:33:99:28:96:01:f1:23:58:fb:cd:46:0f:f4: 47:a8:51:aa:85:0d:49:0e:8c:55:87:ef:dc:a0:dd: 09:d0:4e:6b:b9:41:02:05:b5:3f:77:1b:0a:85:a0: 8c:66:63:50:e8:7e:a8:64:31:7a:b9:ce:31:04:19: b4:84:a2:ef:32:7c:9e:26:38:61:df:90:53:b4:bf: 56:76:32:64:ba:dd:21:f7:13:61:7b:66:ec:9b:f4: d3:e8:e9:20:68:18:53:46:fc:43:67:f8:85:28:9a: ae:bf:ad:b4:da:08:83:14:6e:71:d6:19:39:ab:8a: 80:c5:6d:43:d7:16:47:79:31:d8:ec:c0:ee:52:4a: aa:3a:42:df:cc:fd:81:af:49:ed:dd:91:63:a7:24: de:ec:17:0f:4d:cc:4e:a3:a8:6f:94:d8:b5:20:e4: 57:c5:63:e2:df:72:c0:9b:d4:88:23:ec:1e:e1:45: 49:f1:25:76:e7:b5:14:47:5e:a6:80:e2:f1:45:5f: 0f:fe:f6:83:ac:6c:6c:c0:2b:2b:e6:dd:3e:21:d7: e4:e9:f7:47:6c:33:1c:fc:f9:8a:eb:ff:84:da:68: 1a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EA:C0:C5:AB:A9:74:21:CC:55:1D:2D:07:13:A2:45:09:39:24:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/c7b1674d-de58-3dcc-9f6e-7aa3cc103ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl X509v3 Authority Key Identifier: keyid:36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer sbgp-ipAddrBlock: critical IPv4: 66.187.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:02:98:97:7b:fc:13:8b:e1:30:95:ad:cd:40:99:0e:db:1c: a3:eb:8b:d9:65:98:6b:33:ab:6f:d9:b6:d7:8b:cd:95:d3:92: 63:a0:be:83:6f:5c:ab:ce:bb:d4:0b:67:ed:fb:5c:73:22:09: fe:c4:87:a5:2a:1a:ab:8e:1c:82:cc:c2:75:ac:7f:df:47:5d: c7:36:84:c5:57:ea:41:df:70:d0:29:b1:15:16:00:a3:35:c5: 6b:a1:3f:72:0a:6a:eb:69:63:2c:1b:c9:db:04:6e:6f:6e:b6: c7:87:2d:37:df:48:4b:7e:50:46:27:84:cf:47:02:f9:e3:2c: fc:bb:d6:70:56:8d:9e:9a:90:2f:d6:00:dd:5a:4e:42:96:d4: d0:62:23:d1:09:ad:97:89:90:51:46:57:74:fb:87:64:81:5e: 62:f9:73:7c:45:12:c7:e2:95:33:fd:1f:18:f7:a7:f9:fa:de: e2:81:f8:cd:1a:9b:2e:52:8e:e3:bf:d8:f0:2c:1e:5c:6e:ab: fc:d4:29:e7:5a:3b:e8:ff:29:d5:3a:df:1b:80:7f:fd:aa:f2: 22:48:eb:19:94:66:01:e9:9c:23:34:59:11:89:01:25:5e:7f: 2c:a0:93:17:c6:62:bd:b2:b3:55:a3:3a:13:c8:69:53:62:f2: 26:e7:b8:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwnDV63/jOqqKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGQ3OGEtMDJjYi00NmVlLWFjZDEtNDY0ZjAzZjNl MTJhMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk OTBlZDIwMzYtMWExNy00NTQ3LTk1YTEtMDM3ZDllYmY3NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDRGCLtHczcX9z3qt+wQZPHV3C3r4HQlaUOb 4V8rQzOZKJYB8SNY+81GD/RHqFGqhQ1JDoxVh+/coN0J0E5ruUECBbU/dxsKhaCM ZmNQ6H6oZDF6uc4xBBm0hKLvMnyeJjhh35BTtL9WdjJkut0h9xNhe2bsm/TT6Okg aBhTRvxDZ/iFKJquv6202giDFG5x1hk5q4qAxW1D1xZHeTHY7MDuUkqqOkLfzP2B r0nt3ZFjpyTe7BcPTcxOo6hvlNi1IORXxWPi33LAm9SII+we4UVJ8SV257UUR16m gOLxRV8P/vaDrGxswCsr5t0+Idfk6fdHbDMc/PmK6/+E2mganwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7qwMWrqXQhzFUdLQcTokUJOSSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZGQ4 ZDc4YS0wMmNiLTQ2ZWUtYWNkMS00NjRmMDNmM2UxMmEvYzdiMTY3NGQtZGU1OC0z ZGNjLTlmNmUtN2FhM2NjMTAzZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWRkOGQ3OGEtMDJjYi00NmVlLWFj ZDEtNDY0ZjAzZjNlMTJhLzFkZDhkNzhhLTAyY2ItNDZlZS1hY2QxLTQ2NGYwM2Yz ZTEyYS5jcmwwHwYDVR0jBBgwFoAUNkhexZprzYeaeNoLWq65iRuYFGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZGQ4ZDc4YS0wMmNiLTQ2ZWUtYWNkMS00NjRm MDNmM2UxMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQCmJd7/BOL4TCVrc1AmQ7bHKPri9llmGszq2/ZtteLzZXTkmOgvoNv XKvOu9QLZ+37XHMiCf7Eh6UqGquOHILMwnWsf99HXcc2hMVX6kHfcNApsRUWAKM1 xWuhP3IKautpYywbydsEbm9utseHLTffSEt+UEYnhM9HAvnjLPy71nBWjZ6akC/W AN1aTkKW1NBiI9EJrZeJkFFGV3T7h2SBXmL5c3xFEsfilTP9Hxj3p/n63uKB+M0a my5SjuO/2PAsHlxuq/zUKedaO+j/KdU63xuAf/2q8iJI6xmUZgHpnCM0WRGJASVe fyygkxfGYr2ys1WjOhPIaVNi8ibnuOk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:43:43 2026 by rpki-client