$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa File: 7d7dc10a-737a-3507-8608-457a37bc28a2.roa (raw, json) Hash identifier: tHzTsNhyc4aZKLhvE1BJEv2bQQgso+anb2zgbPhfbg4= Subject key identifier: 0F:5E:C5:16:3C:62:EA:12:EB:20:2A:39:45:0F:53:BB:60:C1:78:08 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584D091267A4C441CCBF0BE90E78 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 23525 IP address blocks: 66.152.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:67:a4:c4:41:cc:bf:0b:e9:0e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=9d3a3c47-929f-46ee-810b-0cc8b5348d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:4f:83:97:bf:75:38:d2:87:fc:77:02:11: 13:dd:ce:87:08:0a:b2:5e:74:1f:04:fe:5c:08:b5: f7:b2:00:75:d6:5f:98:1b:0d:a1:68:ad:38:34:0d: c4:3c:40:e9:7e:00:b4:d6:e2:4a:69:ea:a7:f7:b6: fa:01:0d:dc:36:54:15:40:2e:9f:d9:8e:21:40:fd: 76:83:d1:0b:24:41:ba:ea:a6:c1:12:7d:8c:c8:4f: 21:f8:91:d6:31:7b:a7:bc:b2:6d:b1:4b:56:87:aa: 83:41:5c:85:f7:bb:a6:70:81:c0:fa:b5:e5:20:3c: cd:9f:2d:72:27:30:80:20:6f:45:7c:50:b8:d7:7d: 07:f4:a0:71:85:d5:8f:68:38:a6:ec:78:94:76:e7: ce:78:69:c0:7c:6e:5d:e9:41:07:48:73:ce:32:a3: 8a:da:00:d8:04:42:6e:ea:fa:03:7e:18:1f:3f:0b: 36:b2:ef:55:cd:1d:95:d4:10:df:f3:31:d9:b1:03: 67:19:32:fe:3e:bd:be:77:d3:be:11:54:03:03:94: a5:6a:9b:7c:44:01:85:1b:d0:ca:1d:9f:3f:40:93: e9:2d:2a:52:cf:e6:ad:0f:41:d7:31:fc:4d:1b:ea: eb:e0:3c:87:db:51:9a:0d:fd:8e:08:ee:22:be:63: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5E:C5:16:3C:62:EA:12:EB:20:2A:39:45:0F:53:BB:60:C1:78:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.152.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:2d:67:3d:59:46:a9:73:45:f9:95:ba:6d:71:c0:41:ca:34: 36:ea:15:42:40:fb:75:4c:f6:84:fb:33:c0:c2:de:cf:ae:2a: 88:76:42:e6:72:8c:38:47:c4:06:d1:df:b9:36:25:77:73:ef: d9:8e:00:fe:f8:0e:d3:cc:9e:fd:6e:c2:e5:18:95:1a:f5:0d: 14:d3:d3:73:cd:98:0f:d1:c7:87:ad:7f:1e:c8:13:db:8f:84: ca:ed:eb:2a:19:62:20:8f:b5:62:96:62:00:95:b5:1d:51:8f: 8a:55:58:b2:8f:26:ef:18:b8:b1:88:14:56:fa:85:e9:4d:aa: d0:27:f3:73:5d:55:1d:ca:9b:56:c5:5c:f5:75:bc:bb:00:95: be:12:72:dd:f6:11:b1:79:db:a8:55:4c:0b:ad:ff:2a:27:d1: 76:80:08:b9:7b:c9:49:4b:35:e1:9f:13:e6:f6:00:5b:00:93: 9e:e0:3e:74:fa:78:15:e0:47:ea:4f:ef:d1:9f:76:d6:b0:f1: a0:41:37:da:6f:b1:1d:93:5b:12:45:3f:d9:97:14:1e:66:11: e8:5c:99:2b:0c:5b:c0:0b:7e:8e:89:d5:2b:13:97:2e:60:30: 5b:42:4f:d9:35:3a:c9:e1:b1:1f:e9:a2:eb:ab:7c:e4:d4:7f: 65:25:24:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmekxEHMvwvpDngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk OWQzYTNjNDctOTI5Zi00NmVlLTgxMGItMGNjOGI1MzQ4ZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhpPg5e/dTjSh/x3AhET3c6HCAqyXnQfBP5c CLX3sgB11l+YGw2haK04NA3EPEDpfgC01uJKaeqn97b6AQ3cNlQVQC6f2Y4hQP12 g9ELJEG66qbBEn2MyE8h+JHWMXunvLJtsUtWh6qDQVyF97umcIHA+rXlIDzNny1y JzCAIG9FfFC4130H9KBxhdWPaDim7HiUdufOeGnAfG5d6UEHSHPOMqOK2gDYBEJu 6voDfhgfPws2su9VzR2V1BDf8zHZsQNnGTL+Pr2+d9O+EVQDA5Slapt8RAGFG9DK HZ8/QJPpLSpSz+atD0HXMfxNG+rr4DyH21GaDf2OCO4ivmMF1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9exRY8YuoS6yAqOUUPU7tgwXgIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvN2Q3ZGMxMGEtNzM3YS0z NTA3LTg2MDgtNDU3YTM3YmMyOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQph+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4tZz1ZRqlzRfmVum1xwEHKNDbqFUJA+3VM9oT7M8DC3s+uKoh2QuZy jDhHxAbR37k2JXdz79mOAP74DtPMnv1uwuUYlRr1DRTT03PNmA/Rx4etfx7IE9uP hMrt6yoZYiCPtWKWYgCVtR1Rj4pVWLKPJu8YuLGIFFb6helNqtAn83NdVR3Km1bF XPV1vLsAlb4Sct32EbF526hVTAut/yon0XaACLl7yUlLNeGfE+b2AFsAk57gPnT6 eBXgR+pP79Gfdtaw8aBBN9pvsR2TWxJFP9mXFB5mEehcmSsMW8ALfo6J1SsTly5g MFtCT9k1OsnhsR/pouurfOTUf2UlJGc= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:25 2026 by rpki-client