$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa File: 66b96ba3-a619-320e-96a1-c3dfb3782abd.roa (raw, json) Hash identifier: LO3anovph7kyyzcHyI7jATjirREgSvpATa7NZJbNQho= Subject key identifier: 64:D3:37:AF:4D:EF:07:80:45:5E:55:3E:27:93:91:1C:23:D7:6E:56 Certificate issuer: /CN=1f7f3ed0-ca8e-409b-b6ad-4f431743c90a Certificate serial: 010D0C9F4328584D5E1A5147954CB625A50ABEC0 Authority key identifier: 2E:79:3C:7C:B8:7B:88:21:61:19:74:23:68:9E:39:59:15:D0:E0:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 398982 IP address blocks: 172.99.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:51:47:95:4c:b6:25:a5:0a:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7f3ed0-ca8e-409b-b6ad-4f431743c90a Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=5a3969d0-1eb2-4446-b573-d8ea37a75cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:cf:08:a2:83:01:cf:8d:3e:2b:8b:4e:e3: b3:76:f5:27:8e:98:30:a8:f9:5f:68:d9:d0:c8:e6: 82:06:c1:eb:bb:07:26:f6:22:73:fb:eb:83:a7:ea: 0f:95:54:dc:72:ba:d7:fd:a9:0d:2e:2c:77:21:0e: b2:a6:69:bc:70:e1:ec:ec:11:26:10:0c:f6:bf:1d: ad:ce:4d:6b:29:45:1b:82:ad:90:e0:87:34:f6:0f: 11:dd:22:fe:22:9f:4b:13:a3:9f:af:37:19:a9:19: 25:79:a4:99:01:2d:8a:38:93:ca:fc:c5:eb:5c:6a: df:fc:cf:95:58:6a:42:d3:4c:0a:51:11:8f:46:04: f9:06:4e:72:e9:6c:0a:5b:51:a6:7f:fa:b6:26:0d: d7:c4:19:64:60:b6:db:ad:76:ee:40:b5:c9:d2:76: 95:81:e0:8f:c9:b9:a3:8f:a0:64:6e:42:6a:ea:ea: 68:34:fc:3c:68:ad:68:50:7f:bd:da:fc:2c:af:01: 46:c4:9a:a2:1a:30:86:16:05:69:9a:75:24:62:40: dd:6b:69:7d:03:7e:2d:65:bf:9c:cf:69:83:3e:0a: 0a:4f:7a:86:29:48:87:0c:f5:45:19:a0:9f:76:41: 50:b8:21:7e:13:bc:ca:bd:32:01:96:ee:b2:db:ae: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D3:37:AF:4D:EF:07:80:45:5E:55:3E:27:93:91:1C:23:D7:6E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.crl X509v3 Authority Key Identifier: keyid:2E:79:3C:7C:B8:7B:88:21:61:19:74:23:68:9E:39:59:15:D0:E0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer sbgp-ipAddrBlock: critical IPv4: 172.99.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:cf:92:f0:2c:19:7d:d2:8d:4a:2f:39:68:05:86:f8:a7:ac: 23:26:65:52:40:98:97:a0:b0:3b:3c:b0:48:85:6a:90:6e:0a: d2:3a:38:bc:94:bb:79:99:cc:b0:f9:6a:87:0e:74:cb:86:c0: a6:c7:a8:09:68:56:37:09:09:a8:f0:e8:aa:99:d9:52:bc:68: b1:01:bf:e5:28:37:fd:51:d2:4a:47:22:b8:9e:53:5b:81:39: 10:b3:62:98:2c:e2:15:d4:80:fe:77:91:ad:08:55:2b:2d:b9: 11:01:69:8a:35:74:1d:3f:43:cc:ef:b2:f8:7e:9f:fe:fe:d5: 66:25:89:62:2b:3d:46:83:0a:2c:66:c2:83:83:cf:21:ca:36: 10:a9:2e:84:ab:55:76:a4:1e:d3:72:31:28:43:d8:0b:26:85: 2f:38:af:88:e0:f3:75:2a:33:df:22:c4:85:19:94:e0:65:51: e8:6b:95:b1:f2:4c:fe:7c:44:4d:0d:79:08:80:e6:2a:ba:f9: 84:c9:88:be:d2:ed:ba:59:a6:f9:d5:c2:3f:46:89:0e:9a:69: 3d:dd:fb:2d:54:25:2e:17:ab:b4:3e:dc:ca:df:ba:b0:59:3b: 71:06:3c:5f:e0:58:33:af:1b:48:b6:e0:7f:76:25:13:39:f3: b5:f4:2d:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGlFHlUy2JaUKvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY3ZjNlZDAtY2E4ZS00MDliLWI2YWQtNGY0MzE3NDNj OTBhMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NWEzOTY5ZDAtMWViMi00NDQ2LWI1NzMtZDhlYTM3YTc1Y2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSDPCKKDAc+NPiuLTuOzdvUnjpgwqPlfaNnQ yOaCBsHruwcm9iJz++uDp+oPlVTccrrX/akNLix3IQ6ypmm8cOHs7BEmEAz2vx2t zk1rKUUbgq2Q4Ic09g8R3SL+Ip9LE6OfrzcZqRkleaSZAS2KOJPK/MXrXGrf/M+V WGpC00wKURGPRgT5Bk5y6WwKW1Gmf/q2Jg3XxBlkYLbbrXbuQLXJ0naVgeCPybmj j6BkbkJq6upoNPw8aK1oUH+92vwsrwFGxJqiGjCGFgVpmnUkYkDda2l9A34tZb+c z2mDPgoKT3qGKUiHDPVFGaCfdkFQuCF+E7zKvTIBlu6y2675dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTTN69N7weARV5VPieTkRwj125WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjdm M2VkMC1jYThlLTQwOWItYjZhZC00ZjQzMTc0M2M5MGEvNjZiOTZiYTMtYTYxOS0z MjBlLTk2YTEtYzNkZmIzNzgyYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY3ZjNlZDAtY2E4ZS00MDliLWI2 YWQtNGY0MzE3NDNjOTBhLzFmN2YzZWQwLWNhOGUtNDA5Yi1iNmFkLTRmNDMxNzQz YzkwYS5jcmwwHwYDVR0jBBgwFoAULnk8fLh7iCFhGXQjaJ45WRXQ4PwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjdmM2VkMC1jYThlLTQwOWItYjZhZC00ZjQz MTc0M2M5MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrPkvAsGX3SjUovOWgFhvinrCMmZVJAmJegsDs8sEiFapBuCtI6OLyU u3mZzLD5aocOdMuGwKbHqAloVjcJCajw6KqZ2VK8aLEBv+UoN/1R0kpHIrieU1uB ORCzYpgs4hXUgP53ka0IVSstuREBaYo1dB0/Q8zvsvh+n/7+1WYliWIrPUaDCixm woODzyHKNhCpLoSrVXakHtNyMShD2AsmhS84r4jg83UqM98ixIUZlOBlUehrlbHy TP58RE0NeQiA5iq6+YTJiL7S7bpZpvnVwj9GiQ6aaT3d+y1UJS4Xq7Q+3MrfurBZ O3EGPF/gWDOvG0i24H92JRM587X0LbY= -----END CERTIFICATE-----Generated at Sun Apr 19 15:32:33 2026 by rpki-client