$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa File: 66b96ba3-a619-320e-96a1-c3dfb3782abd.roa (raw, json) Hash identifier: 1xOBLb0+dOO6doEQBgqPABddb0tbMGEG6WzHiBWFuIs= Subject key identifier: 55:57:EF:3E:01:2A:BA:71:14:B7:72:B5:69:E5:5C:6C:5F:E1:EB:B1 Certificate issuer: /CN=1f7f3ed0-ca8e-409b-b6ad-4f431743c90a Certificate serial: 010D0C9F4328584C7D7C47B53C68F543CEF4EC16 Authority key identifier: 2E:79:3C:7C:B8:7B:88:21:61:19:74:23:68:9E:39:59:15:D0:E0:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 398982 IP address blocks: 172.99.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:47:b5:3c:68:f5:43:ce:f4:ec:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7f3ed0-ca8e-409b-b6ad-4f431743c90a Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=9f7fc069-f526-49b9-a591-bcc040989dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:68:a6:f1:50:02:b8:07:6d:94:55:02:4b:97: c6:fe:b1:70:3a:98:cc:f6:21:c2:04:c7:6c:60:e1: e0:53:4e:c6:80:35:42:bd:2d:dd:6e:09:04:d4:8c: da:b2:ff:5b:26:aa:47:51:01:5c:a5:b4:15:a5:d1: 8b:e3:05:e9:6f:53:75:76:9b:54:75:79:85:85:3d: 8a:f6:fa:d7:a9:97:29:76:ff:8b:01:3e:4a:cf:15: c7:8c:b7:1a:44:8b:f8:76:da:84:a0:88:68:9a:fc: cb:33:53:8c:fc:87:96:29:3d:16:ff:57:fa:f3:22: 68:84:b7:51:1d:84:97:04:af:33:10:61:45:ab:ed: eb:22:d7:61:11:1b:00:a2:91:d1:62:2a:50:54:e5: 18:57:53:00:d7:49:b8:3e:b8:12:95:8e:6a:76:ee: a2:cf:bb:5e:ab:c0:0a:74:2a:6e:85:0b:81:27:d3: b4:d6:87:da:04:42:01:6e:b6:da:a8:f5:86:ed:aa: bd:c6:07:40:db:94:b1:90:8b:17:b8:63:b8:bf:5c: 8a:82:65:f0:9e:c7:33:ac:60:83:dd:61:1e:dc:e5: 93:96:83:64:bd:13:c1:dc:7c:fe:0b:4d:dd:75:78: c0:bf:37:f9:c3:cf:cf:81:f5:b6:42:a7:16:ac:0d: 4b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:57:EF:3E:01:2A:BA:71:14:B7:72:B5:69:E5:5C:6C:5F:E1:EB:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.crl X509v3 Authority Key Identifier: keyid:2E:79:3C:7C:B8:7B:88:21:61:19:74:23:68:9E:39:59:15:D0:E0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer sbgp-ipAddrBlock: critical IPv4: 172.99.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:47:33:b2:c6:8d:c8:cd:c5:10:e8:72:ee:65:bc:e4:30:07: d8:56:b1:28:fa:2b:c3:f4:7e:f2:7d:3d:ec:2d:87:1d:83:23: ce:d0:21:6a:74:57:c0:22:0d:80:a7:7b:23:ef:9e:7d:40:09: 56:d3:9f:5a:85:4d:fd:f7:36:91:53:93:b8:70:83:e7:79:9a: 69:98:69:5a:ec:8e:7f:0c:81:15:2f:de:97:d4:d0:96:6c:00: 1c:99:6f:99:6c:68:f7:95:d4:4f:33:8b:38:5b:6d:43:d5:5d: 7c:2e:f5:cf:69:e9:93:79:ec:b9:72:7f:f8:99:2e:3b:fb:14: e9:39:38:41:97:00:8d:8e:21:d1:1a:95:74:27:b3:3d:40:23: 4c:c3:85:3c:4a:ea:c4:f7:d6:41:b2:72:e0:b7:26:af:d7:80: 1f:ac:15:b3:96:0b:2a:08:b0:1b:b2:93:85:d8:ea:87:70:fc: e0:bc:3f:09:9e:0e:43:68:fb:7d:17:8a:5f:b5:98:44:eb:89: aa:37:cd:a7:38:f6:60:de:be:e2:47:89:15:e9:75:c1:32:5b: 5f:05:38:2e:7d:cb:d0:32:ea:c5:ed:dd:bc:2d:9f:e4:ee:5c: 9e:f6:c8:d4:9d:4a:d6:53:af:f2:a1:48:ab:6a:73:a6:f3:04: 9b:00:c4:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fEe1PGj1Q8707BYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY3ZjNlZDAtY2E4ZS00MDliLWI2YWQtNGY0MzE3NDNj OTBhMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk OWY3ZmMwNjktZjUyNi00OWI5LWE1OTEtYmNjMDQwOTg5ZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmim8VACuAdtlFUCS5fG/rFwOpjM9iHCBMds YOHgU07GgDVCvS3dbgkE1Izasv9bJqpHUQFcpbQVpdGL4wXpb1N1dptUdXmFhT2K 9vrXqZcpdv+LAT5KzxXHjLcaRIv4dtqEoIhomvzLM1OM/IeWKT0W/1f68yJohLdR HYSXBK8zEGFFq+3rItdhERsAopHRYipQVOUYV1MA10m4PrgSlY5qdu6iz7teq8AK dCpuhQuBJ9O01ofaBEIBbrbaqPWG7aq9xgdA25SxkIsXuGO4v1yKgmXwnsczrGCD 3WEe3OWTloNkvRPB3Hz+C03ddXjAvzf5w8/PgfW2QqcWrA1LtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVX7z4BKrpxFLdytWnlXGxf4euxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjdm M2VkMC1jYThlLTQwOWItYjZhZC00ZjQzMTc0M2M5MGEvNjZiOTZiYTMtYTYxOS0z MjBlLTk2YTEtYzNkZmIzNzgyYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY3ZjNlZDAtY2E4ZS00MDliLWI2 YWQtNGY0MzE3NDNjOTBhLzFmN2YzZWQwLWNhOGUtNDA5Yi1iNmFkLTRmNDMxNzQz YzkwYS5jcmwwHwYDVR0jBBgwFoAULnk8fLh7iCFhGXQjaJ45WRXQ4PwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjdmM2VkMC1jYThlLTQwOWItYjZhZC00ZjQz MTc0M2M5MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVHM7LGjcjNxRDocu5lvOQwB9hWsSj6K8P0fvJ9Pewthx2DI87QIWp0 V8AiDYCneyPvnn1ACVbTn1qFTf33NpFTk7hwg+d5mmmYaVrsjn8MgRUv3pfU0JZs AByZb5lsaPeV1E8zizhbbUPVXXwu9c9p6ZN57Llyf/iZLjv7FOk5OEGXAI2OIdEa lXQnsz1AI0zDhTxK6sT31kGycuC3Jq/XgB+sFbOWCyoIsBuyk4XY6odw/OC8Pwme DkNo+30Xil+1mETriao3zac49mDevuJHiRXpdcEyW18FOC59y9Ay6sXt3bwtn+Tu XJ72yNSdStZTr/KhSKtqc6bzBJsAxIw= -----END CERTIFICATE-----Generated at Mon Mar 2 06:51:34 2026 by rpki-client