$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa File: cfa20e25-bed2-3567-961a-5bbdbe881853.roa (raw, json) Hash identifier: FcfT0eJYH6nRjLs9QrDzPicspSVCqfUdCzNnTmbTsP0= Subject key identifier: C4:56:1D:D3:54:4E:BE:7F:2D:AE:2A:C2:21:6F:34:50:63:93:03:C1 Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Certificate serial: 010D0C9F4328584C4E068405D6116FC7AF784F80 Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 26703 IP address blocks: 66.102.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:84:05:d6:11:6f:c7:af:78:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=97a1190e-248f-4bee-ac4e-e0db573f8b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:93:b1:16:0a:19:e1:57:d2:94:62:69:36: 29:17:b3:c6:48:0f:2a:e3:e9:bf:3a:fc:b0:de:f4: 9b:ff:db:30:c6:64:0d:09:71:40:a6:f3:57:64:b8: 66:79:ff:88:26:84:e2:32:ab:9d:79:02:b0:4b:81: 75:31:ff:50:56:cb:11:fa:d3:cc:c3:af:11:b3:a8: ad:2f:43:27:9a:9d:6f:d9:b2:45:8f:d1:c8:5c:6e: 3c:38:60:10:89:3b:13:da:8a:6b:67:3b:7d:02:c6: 0d:5c:49:bd:1b:fe:d8:24:5c:30:a1:40:86:f8:a7: fb:55:88:5b:6a:51:e8:bb:28:b6:7d:32:fd:e1:fd: 16:6c:4d:79:68:8d:05:4c:11:27:77:02:0c:c7:a3: 9e:ec:32:d0:cc:e1:80:fc:ac:5d:3e:07:f3:24:20: 3f:f8:ae:78:69:28:61:9c:19:1d:73:39:d5:ff:19: 06:0c:97:9f:67:b5:eb:dc:75:91:95:97:e4:06:85: 00:10:55:15:53:d2:e6:be:f8:46:3e:48:37:42:8e: 59:a0:60:04:59:ca:49:19:4e:3d:8d:f8:42:28:80: 21:0e:09:1d:bd:58:1a:e2:39:73:f1:23:b2:1f:4c: 9c:32:2c:82:d1:89:bd:64:79:62:6c:9a:ee:f0:6b: 07:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:56:1D:D3:54:4E:BE:7F:2D:AE:2A:C2:21:6F:34:50:63:93:03:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl X509v3 Authority Key Identifier: keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer sbgp-ipAddrBlock: critical IPv4: 66.102.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:78:00:62:44:7d:5a:c3:28:64:1e:e9:77:57:b8:12:18:81: 79:51:8e:85:17:04:86:df:20:df:42:9d:38:34:99:7d:43:7f: 20:99:ea:e3:1b:41:82:e9:80:73:8f:e3:5e:4e:ea:13:ca:d9: 53:1e:b0:cf:5e:a4:44:26:2f:81:6b:bf:76:fa:ed:14:6a:18: 10:8b:7c:94:a6:64:fe:7b:09:7f:9b:f2:4d:cf:ae:26:8b:9b: 57:80:a4:e8:0a:8c:d5:42:85:af:f1:6e:5f:87:c9:dc:1d:20: 1b:43:58:fc:11:10:89:93:8b:f2:f2:eb:4e:a0:fd:c6:ce:c8: 8e:30:9f:c2:d6:8b:c3:9a:b5:80:eb:4b:cb:96:9e:57:d6:6b: 31:de:26:a6:31:09:a8:9f:dd:f4:4c:78:d3:ed:70:a3:b4:e5: 5c:69:8a:4f:45:98:f8:24:62:57:47:03:21:25:67:f5:77:17: b1:97:31:7c:6f:aa:75:e7:dc:b2:83:5b:c0:4b:a3:eb:0f:1f: 9e:31:32:8a:a6:db:37:03:02:03:04:b8:bf:10:87:14:c9:e5: 8f:85:95:f4:45:ce:b7:f1:00:c8:cb:9f:0f:3c:10:57:3f:54: da:48:08:0c:60:a3:84:3d:72:bb:48:e5:33:0c:bb:f6:a4:5f: dc:7d:59:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBoQF1hFvx694T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj ZTA4MB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk OTdhMTE5MGUtMjQ4Zi00YmVlLWFjNGUtZTBkYjU3M2Y4YjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsiTsRYKGeFX0pRiaTYpF7PGSA8q4+m/Ovyw 3vSb/9swxmQNCXFApvNXZLhmef+IJoTiMqudeQKwS4F1Mf9QVssR+tPMw68Rs6it L0Mnmp1v2bJFj9HIXG48OGAQiTsT2oprZzt9AsYNXEm9G/7YJFwwoUCG+Kf7VYhb alHouyi2fTL94f0WbE15aI0FTBEndwIMx6Oe7DLQzOGA/KxdPgfzJCA/+K54aShh nBkdcznV/xkGDJefZ7Xr3HWRlZfkBoUAEFUVU9LmvvhGPkg3Qo5ZoGAEWcpJGU49 jfhCKIAhDgkdvVga4jlz8SOyH0ycMiyC0Ym9ZHlibJru8GsHVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRWHdNUTr5/La4qwiFvNFBjkwPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4 M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvY2ZhMjBlMjUtYmVkMi0z NTY3LTk2MWEtNWJiZGJlODgxODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4 NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB4AGJEfVrDKGQe6XdXuBIYgXlRjoUXBIbfIN9CnTg0mX1DfyCZ6uMb QYLpgHOP415O6hPK2VMesM9epEQmL4Frv3b67RRqGBCLfJSmZP57CX+b8k3PriaL m1eApOgKjNVCha/xbl+HydwdIBtDWPwREImTi/Ly606g/cbOyI4wn8LWi8OatYDr S8uWnlfWazHeJqYxCaif3fRMeNPtcKO05Vxpik9FmPgkYldHAyElZ/V3F7GXMXxv qnXn3LKDW8BLo+sPH54xMoqm2zcDAgMEuL8QhxTJ5Y+FlfRFzrfxAMjLnw88EFc/ VNpICAxgo4Q9crtI5TMMu/akX9x9WQg= -----END CERTIFICATE-----Generated at Mon Mar 2 09:19:24 2026 by rpki-client