$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa File: ea5b8a17-465e-3806-935e-87cb1d092488.roa (raw, json) Hash identifier: HXJFaSuyUKNNHFUuc3Eu49uK81aE2uw++u9sMzGEbUY= Subject key identifier: 5C:49:5D:99:4B:E9:0B:61:62:CC:FD:BC:C5:0B:88:B3:00:F6:48:AB Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584D0912678E8E8B15EE09E61AC0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 13536 IP address blocks: 66.152.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:67:8e:8e:8b:15:ee:09:e6:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=d26101a6-83c7-4c54-93a7-2a4c6f0381ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:c4:6b:02:00:b0:a8:59:35:dd:fa:a7:ed: 09:e4:ea:60:be:3a:3d:33:23:25:1d:57:aa:00:18: bf:99:e8:f4:e9:01:2c:04:05:ec:b8:e2:ba:8a:5f: fc:aa:bb:ec:89:e7:31:b1:07:6a:04:c6:44:d2:c9: 6b:bc:ca:8b:11:87:6e:84:9d:49:98:1a:ce:34:0a: 69:7d:59:1f:df:96:14:7a:c3:8d:c0:6a:8e:7f:0f: 9b:28:fc:02:82:ae:1a:67:6e:6e:98:f2:84:6d:2c: 38:b3:6f:aa:e5:c7:b4:e9:a6:d3:6b:1c:78:48:90: 55:45:d5:40:19:d4:4f:87:a5:5f:33:eb:46:7d:28: 64:77:da:88:41:13:20:a2:8d:1d:52:d9:a2:12:de: 46:e7:fd:01:ba:98:f2:c2:28:58:1b:a5:d6:f9:b2: 86:3f:69:fb:2c:1b:c5:0b:73:3b:27:6b:80:d4:2a: 62:94:0b:2f:34:4b:63:4a:40:f3:21:3d:6c:ff:0e: 30:67:77:2e:00:c1:44:72:6d:18:be:5b:21:94:bc: 10:4b:7e:a7:48:58:73:c8:cb:55:e0:eb:b2:a3:74: 5f:50:ea:ca:a5:17:67:8c:a0:78:b3:ce:cd:ff:63: df:7c:76:4c:0a:66:44:86:66:9f:2a:82:e7:dd:a5: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:49:5D:99:4B:E9:0B:61:62:CC:FD:BC:C5:0B:88:B3:00:F6:48:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.152.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:4f:0c:05:19:ae:2c:b3:0c:17:54:b2:f1:ff:55:2d:55:42: 48:c0:ba:b4:b4:c8:7e:fa:d5:3e:4a:0b:9c:9e:c5:2f:af:f2: a8:54:de:5d:c6:42:18:81:a5:04:1e:91:a6:fa:cd:a4:0c:1c: b5:8a:50:37:6e:3f:cd:06:03:f0:86:bc:84:9f:de:89:23:a2: e2:91:3e:bd:33:c1:a8:dd:2b:a2:de:0f:47:15:62:46:e0:ce: 17:b2:d6:eb:b3:d3:c4:f8:6b:2c:11:c7:71:90:fc:11:e8:9d: 1b:38:64:fc:d7:d7:cd:97:bb:14:89:f4:d9:c2:cc:da:4d:ab: 18:ec:d8:e7:ce:fd:5c:01:21:59:ea:eb:d7:5e:0c:25:f7:fc: 8c:a9:87:1a:42:ac:2f:88:1f:17:a2:8e:c5:a4:19:4a:79:75: 47:3a:1e:bf:7c:f1:92:05:8a:ee:3b:3b:9e:0e:a1:c2:62:d0: 78:6e:17:e1:33:47:a5:58:e3:41:08:a4:65:da:08:92:f2:25: 3d:57:dc:fa:13:ca:ab:ea:40:ca:91:b3:f9:46:7b:6e:40:7b: 62:43:c6:79:bb:f9:5f:1c:c8:5d:38:a2:2f:86:0d:ca:32:d1: 70:39:76:c3:d7:55:e7:5e:6f:93:bf:73:e0:8c:6a:30:1c:5e: 42:f6:59:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmeOjosV7gnmGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDI2MTAxYTYtODNjNy00YzU0LTkzYTctMmE0YzZmMDM4MWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ofEawIAsKhZNd36p+0J5Opgvjo9MyMlHVeq ABi/mej06QEsBAXsuOK6il/8qrvsiecxsQdqBMZE0slrvMqLEYduhJ1JmBrONApp fVkf35YUesONwGqOfw+bKPwCgq4aZ25umPKEbSw4s2+q5ce06abTaxx4SJBVRdVA GdRPh6VfM+tGfShkd9qIQRMgoo0dUtmiEt5G5/0BupjywihYG6XW+bKGP2n7LBvF C3M7J2uA1CpilAsvNEtjSkDzIT1s/w4wZ3cuAMFEcm0YvlshlLwQS36nSFhzyMtV 4Ouyo3RfUOrKpRdnjKB4s87N/2PffHZMCmZEhmafKoLn3aX6kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxJXZlL6QthYsz9vMULiLMA9kirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZWE1YjhhMTctNDY1ZS0z ODA2LTkzNWUtODdjYjFkMDkyNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQph/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBPDAUZriyzDBdUsvH/VS1VQkjAurS0yH761T5KC5yexS+v8qhU3l3G QhiBpQQekab6zaQMHLWKUDduP80GA/CGvISf3okjouKRPr0zwajdK6LeD0cVYkbg zhey1uuz08T4aywRx3GQ/BHonRs4ZPzX182XuxSJ9NnCzNpNqxjs2OfO/VwBIVnq 69deDCX3/IyphxpCrC+IHxeijsWkGUp5dUc6Hr988ZIFiu47O54OocJi0HhuF+Ez R6VY40EIpGXaCJLyJT1X3PoTyqvqQMqRs/lGe25Ae2JDxnm7+V8cyF04oi+GDcoy 0XA5dsPXVedeb5O/c+CMajAcXkL2WXw= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:59 2026 by rpki-client