$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa File: 9b36560a-9f38-3318-a869-aa0d360ca5c4.roa (raw, json) Hash identifier: IsxURFmNtSThO3LuMxrMEP52uXBySODfWYU2hAmgNKY= Subject key identifier: 37:0B:31:61:D4:2A:83:CA:BD:AB:C3:AD:C4:BC:1E:40:F5:6C:C0:65 Certificate issuer: /CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Certificate serial: 010D0C9F4328584CC611EC1F680209C4C8BBD280 Authority key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 955 IP address blocks: 66.118.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:ec:1f:68:02:09:c4:c8:bb:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=2bfc7e5b-e999-423f-a894-967294dae174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5a:b0:e8:7d:1e:64:ae:d3:a2:7d:61:0b:6d: 68:73:fd:85:d3:15:2b:48:64:7e:61:18:7a:04:83: 32:4d:4f:b9:f2:4a:53:f2:db:cf:c5:fd:f2:ef:b6: bd:db:34:a5:c3:df:fc:a8:82:c3:53:50:b1:cd:4e: 50:54:40:2e:c2:1e:a8:14:ea:39:fc:72:7f:ce:e6: 17:94:fc:60:35:4c:9f:c2:3d:a1:d6:b1:c3:7f:2a: 6b:e8:cb:ef:86:21:f5:5d:02:f9:db:2f:8a:cf:7d: 6f:91:f4:3c:8d:ec:23:1f:11:24:7d:84:46:8d:0a: 39:d9:14:ef:25:49:3f:34:91:3b:22:ad:02:10:46: c6:90:62:54:d9:86:8f:55:64:8a:61:ca:1c:08:84: 41:17:6a:b0:2e:4c:da:13:d4:98:00:c3:d3:e4:e4: 5c:5e:5c:9b:85:62:94:15:18:7d:3b:a7:cc:75:eb: 2f:60:60:5f:4a:0c:9b:2a:1e:7f:7c:7b:ac:0f:7d: 30:5e:f0:0a:21:f6:1c:3b:e6:99:6f:cb:92:55:34: c0:f1:f0:d4:d2:99:7a:c3:32:1b:94:0b:11:60:8a: c6:fc:9e:7d:0c:63:ab:fe:69:6e:34:7b:b4:53:ad: 0c:3b:ae:22:87:59:ee:26:c7:3b:4d:c4:f8:b1:8d: 47:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0B:31:61:D4:2A:83:CA:BD:AB:C3:AD:C4:BC:1E:40:F5:6C:C0:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/9b36560a-9f38-3318-a869-aa0d360ca5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl X509v3 Authority Key Identifier: keyid:DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer sbgp-ipAddrBlock: critical IPv4: 66.118.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f4:7f:64:f2:76:5c:2c:82:e3:d3:89:42:76:d4:2e:07:18: 3d:9f:71:7c:f5:3a:1e:ba:5c:a8:cf:0d:ab:54:c2:cc:91:10: a8:3f:96:de:5b:d6:83:ec:36:9c:20:be:e5:cc:2e:49:76:a3: a6:de:48:76:bc:66:19:cc:68:79:a9:f8:85:9f:fa:86:9a:cc: b0:e3:dd:26:c3:76:91:b7:2e:7b:c4:25:16:f2:1c:48:1f:b5: b1:45:77:8d:c6:ad:a0:67:58:f1:3e:1e:f5:4e:23:f9:d3:f3: 8b:7a:e5:81:bd:70:74:27:1a:80:62:e7:2d:9e:a4:55:24:a6: 04:26:50:47:44:f3:91:63:db:e2:db:33:3b:e5:6f:d0:0d:a9: 95:be:e5:b7:1d:7c:eb:dc:40:ca:1c:05:d4:dd:c5:0d:4a:ab: 8e:3f:52:7e:43:6f:fa:59:9f:22:2b:cc:0b:ad:c6:2a:c0:e4: 4d:5e:13:97:f0:be:ba:71:5a:8c:ca:ef:a9:1f:ec:40:ff:3e: ba:26:75:a0:b3:bd:0e:7e:fd:67:35:3c:88:07:bc:be:cc:c4: 0d:8c:b7:35:c0:b9:da:3f:e5:3d:89:57:9d:46:8f:39:49:28: f0:dd:57:f6:29:8f:92:34:40:18:72:54:1d:f5:49:92:28:7c: 8d:8c:95:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEewfaAIJxMi70oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiNmUwOTMtZjYzNi00ZTI1LTkzNmItNmZjNjIzMmY1 MGM1MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk MmJmYzdlNWItZTk5OS00MjNmLWE4OTQtOTY3Mjk0ZGFlMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+lqw6H0eZK7Ton1hC21oc/2F0xUrSGR+YRh6 BIMyTU+58kpT8tvPxf3y77a92zSlw9/8qILDU1CxzU5QVEAuwh6oFOo5/HJ/zuYX lPxgNUyfwj2h1rHDfypr6MvvhiH1XQL52y+Kz31vkfQ8jewjHxEkfYRGjQo52RTv JUk/NJE7Iq0CEEbGkGJU2YaPVWSKYcocCIRBF2qwLkzaE9SYAMPT5ORcXlybhWKU FRh9O6fMdesvYGBfSgybKh5/fHusD30wXvAKIfYcO+aZb8uSVTTA8fDU0pl6wzIb lAsRYIrG/J59DGOr/mluNHu0U60MO64ih1nuJsc7TcT4sY1HOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcLMWHUKoPKvavDrcS8HkD1bMBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2 ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2MjMyZjUwYzUvOWIzNjU2MGEtOWYzOC0z MzE4LWE4NjktYWEwZDM2MGNhNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDJiNmUwOTMtZjYzNi00ZTI1LTkz NmItNmZjNjIzMmY1MGM1LzQyYjZlMDkzLWY2MzYtNGUyNS05MzZiLTZmYzYyMzJm NTBjNS5jcmwwHwYDVR0jBBgwFoAU3yUdEw9M5iucaaNOwOaqFJ5YHjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2 MjMyZjUwYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACX0f2TydlwsguPTiUJ21C4HGD2fcXz1Oh66XKjPDatUwsyREKg/lt5b 1oPsNpwgvuXMLkl2o6beSHa8ZhnMaHmp+IWf+oaazLDj3SbDdpG3LnvEJRbyHEgf tbFFd43GraBnWPE+HvVOI/nT84t65YG9cHQnGoBi5y2epFUkpgQmUEdE85Fj2+Lb Mzvlb9ANqZW+5bcdfOvcQMocBdTdxQ1Kq44/Un5Db/pZnyIrzAutxirA5E1eE5fw vrpxWozK76kf7ED/PromdaCzvQ5+/Wc1PIgHvL7MxA2MtzXAudo/5T2JV51GjzlJ KPDdV/Ypj5I0QBhyVB31SZIofI2Mlc0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:15:55 2026 by rpki-client