$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/fdff9be1-69c5-30d8-b567-66fb0f24a21f.roa File: fdff9be1-69c5-30d8-b567-66fb0f24a21f.roa (raw, json) Hash identifier: GX82SIkHjAjNGVT8KvHaqlvEY8m/J5yu9QJd4NciTwE= Subject key identifier: 0A:D5:B1:7C:91:51:61:0A:09:CC:16:69:E0:70:3A:A9:B9:73:9D:22 Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Certificate serial: 010D0C9F4328584CAE571A791AE6F8BB458FE700 Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/fdff9be1-69c5-30d8-b567-66fb0f24a21f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 10439 IP address blocks: 66.240.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:1a:79:1a:e6:f8:bb:45:8f:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=fef35150-4387-45ef-8c89-ad030e488a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2a:22:e8:c4:30:e9:be:9a:14:dd:b6:94:85: fe:7a:71:d1:bd:90:82:9a:3f:6a:fb:c6:dd:6c:55: cc:98:12:54:eb:2d:fc:86:a1:f5:fb:77:e3:89:53: 92:f0:f6:b8:85:07:e5:62:15:b9:a9:c0:96:7f:7a: 6e:df:4a:66:d6:ee:fa:ce:75:59:c8:95:92:4b:09: 36:1a:9b:b0:b8:68:ae:56:d2:bd:f1:42:97:1f:3e: 12:4a:12:23:06:6c:9d:6a:04:28:5a:36:b8:39:19: 4c:4e:ae:7d:86:c0:7a:70:dd:73:40:a0:1e:e2:36: 60:d7:f4:d9:30:33:8b:9f:fb:23:da:52:f3:17:f0: c7:16:d9:75:c8:86:73:27:e2:5b:6b:66:e2:98:e5: c0:89:72:a3:d9:9e:8b:66:90:24:bd:4c:4b:a4:21: 34:46:ff:e3:e5:40:19:80:c4:f3:7a:86:34:24:18: 1b:01:ab:29:74:6b:84:30:9c:09:02:25:3b:e4:51: da:bf:59:20:b7:35:fa:99:f2:ab:cb:a6:3e:7f:a0: ed:18:8d:33:94:51:96:da:94:a4:d4:9e:1b:3e:c6: 73:a8:b9:b0:31:55:e9:1b:70:0f:68:e4:32:d8:0e: 34:85:9a:05:f3:c9:13:cd:27:9b:fd:92:81:c2:38: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D5:B1:7C:91:51:61:0A:09:CC:16:69:E0:70:3A:A9:B9:73:9D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/fdff9be1-69c5-30d8-b567-66fb0f24a21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl X509v3 Authority Key Identifier: keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer sbgp-ipAddrBlock: critical IPv4: 66.240.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:14:7f:36:ee:4a:ac:7e:e3:6b:89:e7:cb:05:8d:35:ad:7f: 98:28:62:cb:cb:b4:da:30:a8:f4:b1:44:36:16:cc:b8:15:83: 8f:55:17:a9:43:61:ab:4d:70:89:7d:d8:fa:17:cf:a4:aa:f8: b7:54:c7:b5:36:f2:65:90:48:23:64:0e:be:e9:60:bd:93:49: 90:39:db:91:68:43:9f:fb:22:46:c6:d6:d4:15:53:59:9c:f2: 29:03:c7:41:97:4b:bc:ad:45:78:24:25:f2:e9:0d:10:84:fe: b0:c6:d1:ca:a8:41:4e:c1:b0:f6:53:ba:40:a8:e9:7e:a6:93: 61:d6:d8:c7:d8:60:25:97:6b:f2:98:5f:12:81:b0:11:f8:ca: 63:02:e9:83:cc:3a:72:fb:d1:31:52:41:41:99:f5:30:c8:22: 05:b8:7b:56:5b:70:56:35:86:87:9e:fa:26:08:69:1c:d1:d4: 9f:11:63:49:a8:d9:c4:2d:96:d8:01:08:09:a9:15:a1:4f:cf: 4a:26:a2:16:03:3e:8c:48:1e:64:e0:6d:39:bd:65:5f:88:0a: 03:39:8c:a7:32:3c:b9:87:9e:9d:26:68:97:3d:80:b1:a2:4c: 06:3d:e2:ba:1f:4d:b4:3d:13:a2:5a:a2:fb:ce:b5:a8:ac:7b: 9d:73:fb:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxp5Gub4u0WP5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEz ZjY1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmVmMzUxNTAtNDM4Ny00NWVmLThjODktYWQwMzBlNDg4YTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yoi6MQw6b6aFN22lIX+enHRvZCCmj9q+8bd bFXMmBJU6y38hqH1+3fjiVOS8Pa4hQflYhW5qcCWf3pu30pm1u76znVZyJWSSwk2 GpuwuGiuVtK98UKXHz4SShIjBmydagQoWja4ORlMTq59hsB6cN1zQKAe4jZg1/TZ MDOLn/sj2lLzF/DHFtl1yIZzJ+Jba2bimOXAiXKj2Z6LZpAkvUxLpCE0Rv/j5UAZ gMTzeoY0JBgbAaspdGuEMJwJAiU75FHav1kgtzX6mfKry6Y+f6DtGI0zlFGW2pSk 1J4bPsZzqLmwMVXpG3APaOQy2A40hZoF88kTzSeb/ZKBwjhCPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArVsXyRUWEKCcwWaeBwOqm5c50iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJl ZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvZmRmZjliZTEtNjljNS0z MGQ4LWI1NjctNjZmYjBmMjRhMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmYyZWQ4N2UtMjdmOS00MTRjLWE3 YWYtMmI1YjVmZmEzZjY1LzJmMmVkODdlLTI3ZjktNDE0Yy1hN2FmLTJiNWI1ZmZh M2Y2NS5jcmwwHwYDVR0jBBgwFoAU/vz7pQfj5FlRiYJFDoOE89rVKHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjVi NWZmYTNmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQvDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkUfzbuSqx+42uJ58sFjTWtf5goYsvLtNowqPSxRDYWzLgVg49VF6lD YatNcIl92PoXz6Sq+LdUx7U28mWQSCNkDr7pYL2TSZA525FoQ5/7IkbG1tQVU1mc 8ikDx0GXS7ytRXgkJfLpDRCE/rDG0cqoQU7BsPZTukCo6X6mk2HW2MfYYCWXa/KY XxKBsBH4ymMC6YPMOnL70TFSQUGZ9TDIIgW4e1ZbcFY1hoee+iYIaRzR1J8RY0mo 2cQtltgBCAmpFaFPz0omohYDPoxIHmTgbTm9ZV+ICgM5jKcyPLmHnp0maJc9gLGi TAY94rofTbQ9E6JaovvOtaise51z+w8= -----END CERTIFICATE-----Generated at Mon Mar 2 02:16:05 2026 by rpki-client