$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/398349ea-751a-379a-ab7e-eb1e16ab038a.roa File: 398349ea-751a-379a-ab7e-eb1e16ab038a.roa (raw, json) Hash identifier: z1hgr5HJ2QQLgueMGe9GXJtX+0pAjtsjHXilq6Qg3Uk= Subject key identifier: 23:94:A4:4E:F0:58:BB:E5:41:DA:07:3A:F7:0E:CF:54:D1:47:9B:88 Certificate issuer: /CN=61fc01db-d7e6-47d1-ad4d-7612a325805c Certificate serial: 010D0C9F4328584D0217B3748DE2DC8C50AD7C80 Authority key identifier: 81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/398349ea-751a-379a-ab7e-eb1e16ab038a.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 16509 IP address blocks: 66.118.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b3:74:8d:e2:dc:8c:50:ad:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61fc01db-d7e6-47d1-ad4d-7612a325805c Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=48ea697d-b819-4ce5-80e7-1cd1a1c4eee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:4e:6e:31:67:fe:85:c7:61:ba:8b:0e:a0: 13:70:d0:ad:a6:01:b1:f4:45:e0:82:d7:f5:8b:a5: 6f:ef:ef:87:c0:8c:f0:65:2f:94:c3:2d:fc:5f:de: 1b:10:67:29:e2:dd:0b:13:12:a8:89:1e:11:1c:5e: 00:22:88:21:5f:a9:89:16:f2:2c:bc:52:00:2b:17: b0:3d:8c:4c:10:28:d6:92:89:21:61:78:6c:1c:5c: c7:e4:8f:7b:77:5f:70:84:3d:e4:6b:b2:4f:a7:b3: 1b:6c:b9:2a:fb:7e:7e:95:42:c4:bd:2d:ae:cd:61: 94:0c:d3:43:07:94:10:ff:99:d9:f0:e6:22:0f:75: ee:24:0b:aa:6d:4f:9b:32:9c:7d:8b:00:1a:fc:c9: 98:c3:8d:cd:d6:04:96:85:f1:b5:3b:53:f2:44:2f: f8:84:7d:3a:76:2f:46:a9:6e:64:19:b2:62:c2:b1: 37:69:db:d7:bd:a9:64:27:06:4d:f9:ab:a7:1b:f3: 15:5c:d9:1d:b6:63:5f:6c:d2:89:a0:88:79:07:93: fa:a7:c3:ac:a3:2a:42:eb:dd:1b:8f:81:c3:4f:4c: d6:9a:52:ea:bb:58:8d:85:56:d4:be:a4:68:be:55: fc:aa:0c:13:04:bd:29:ac:09:71:ad:e9:09:fe:67: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:94:A4:4E:F0:58:BB:E5:41:DA:07:3A:F7:0E:CF:54:D1:47:9B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/398349ea-751a-379a-ab7e-eb1e16ab038a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl X509v3 Authority Key Identifier: keyid:81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer sbgp-ipAddrBlock: critical IPv4: 66.118.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f1:00:98:38:5b:94:59:41:38:c0:d2:3f:ea:ab:28:10:b8: 39:17:31:22:5b:ca:e4:0b:f3:ac:e4:8c:63:17:c7:42:b8:ff: 0a:e6:de:cd:84:c6:ea:b1:69:eb:96:05:65:94:9a:d1:af:ce: c8:a8:a4:6b:a7:f6:fe:ca:a0:88:85:0c:90:ac:11:3a:aa:b0: c8:e5:49:86:dc:b7:a4:2b:e8:ce:65:4a:da:42:c3:bd:cb:00: 02:9a:91:b4:29:46:f1:d1:58:3f:61:d3:4d:ab:a3:69:6e:00: 05:31:bb:3f:1b:ef:f1:2b:e8:ae:2f:1e:d8:cf:11:4d:5b:65: 35:fd:ae:4c:63:38:05:ca:7d:1e:94:e2:60:4d:b2:fd:df:64: 87:e1:10:34:57:6f:ad:eb:83:76:2c:46:73:6c:98:e6:e6:58: 87:e3:33:5b:fc:5f:86:39:33:f8:d6:11:f1:fb:de:5a:05:91: 43:59:72:49:ca:42:36:3c:a5:42:1a:69:8c:6c:c1:86:61:e2: 4a:42:42:fb:6f:e5:c7:4d:d0:7b:61:9b:90:55:a9:4e:be:60: 2c:5f:6b:6d:1f:b3:84:ef:f8:ea:bb:e4:da:40:25:08:73:7d: 44:d1:cf:9f:83:92:45:ea:10:b2:58:b4:48:61:c4:3d:67:b9: de:95:12:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF7N0jeLcjFCtfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmYzAxZGItZDdlNi00N2QxLWFkNGQtNzYxMmEzMjU4 MDVjMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDhlYTY5N2QtYjgxOS00Y2U1LTgwZTctMWNkMWExYzRlZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGdObjFn/oXHYbqLDqATcNCtpgGx9EXggtf1 i6Vv7++HwIzwZS+Uwy38X94bEGcp4t0LExKoiR4RHF4AIoghX6mJFvIsvFIAKxew PYxMECjWkokhYXhsHFzH5I97d19whD3ka7JPp7MbbLkq+35+lULEvS2uzWGUDNND B5QQ/5nZ8OYiD3XuJAuqbU+bMpx9iwAa/MmYw43N1gSWhfG1O1PyRC/4hH06di9G qW5kGbJiwrE3advXvalkJwZN+aunG/MVXNkdtmNfbNKJoIh5B5P6p8OsoypC690b j4HDT0zWmlLqu1iNhVbUvqRovlX8qgwTBL0prAlxrekJ/mfKMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOUpE7wWLvlQdoHOvcOz1TRR5uIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWZj MDFkYi1kN2U2LTQ3ZDEtYWQ0ZC03NjEyYTMyNTgwNWMvMzk4MzQ5ZWEtNzUxYS0z NzlhLWFiN2UtZWIxZTE2YWIwMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFmYzAxZGItZDdlNi00N2QxLWFk NGQtNzYxMmEzMjU4MDVjLzYxZmMwMWRiLWQ3ZTYtNDdkMS1hZDRkLTc2MTJhMzI1 ODA1Yy5jcmwwHwYDVR0jBBgwFoAUgZu/FDKVcC6B9/0YnZ6paVfbUEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWZjMDFkYi1kN2U2LTQ3ZDEtYWQ0ZC03NjEy YTMyNTgwNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnb+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvxAJg4W5RZQTjA0j/qqygQuDkXMSJbyuQL86zkjGMXx0K4/wrm3s2E xuqxaeuWBWWUmtGvzsiopGun9v7KoIiFDJCsETqqsMjlSYbct6Qr6M5lStpCw73L AAKakbQpRvHRWD9h002ro2luAAUxuz8b7/Er6K4vHtjPEU1bZTX9rkxjOAXKfR6U 4mBNsv3fZIfhEDRXb63rg3YsRnNsmObmWIfjM1v8X4Y5M/jWEfH73loFkUNZcknK QjY8pUIaaYxswYZh4kpCQvtv5cdN0Hthm5BVqU6+YCxfa20fs4Tv+Oq75NpAJQhz fUTRz5+DkkXqELJYtEhhxD1nud6VEm0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:49 2026 by rpki-client