$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/1f997c12-50db-3e69-8eeb-5a9137c21344.roa File: 1f997c12-50db-3e69-8eeb-5a9137c21344.roa (raw, json) Hash identifier: OQUE3iMgDd6bHgSX/P2uO38iA3WhaNgwP4opreqC7kw= Subject key identifier: D2:8D:A3:C2:D8:3C:C6:4C:01:D9:0A:15:7C:E0:E2:C9:2C:36:D1:9B Certificate issuer: /CN=60a936c7-4a19-44a9-b75d-cc22c274db26 Certificate serial: 010D0C9F4328584C7D7C48634A20BC82A41D9600 Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/1f997c12-50db-3e69-8eeb-5a9137c21344.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 18875 IP address blocks: 66.97.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:48:63:4a:20:bc:82:a4:1d:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=f8a0f753-c8ac-4dc6-85e9-d743b8d75777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:62:31:23:89:ea:9e:55:d1:09:04:df:69:f6: 28:36:5a:dc:07:16:e1:15:ca:98:69:0b:b8:cd:f5: 14:4a:ac:7b:26:1e:a0:8a:e2:61:5a:e0:4c:70:ca: de:93:ce:32:46:18:b7:e6:85:84:1e:77:5b:3e:b5: 41:ab:7b:70:7a:17:14:e1:3e:5f:3b:11:95:9b:76: 5a:c3:d3:27:45:16:dc:b5:ce:20:a4:69:26:d6:ad: c4:ae:9d:54:ec:19:d5:be:06:8d:4c:b3:d3:38:d7: b2:88:46:61:e3:d4:88:aa:cf:6c:a3:e0:ab:01:7e: 8b:33:2a:27:51:7f:a0:19:7b:e2:3a:f1:48:cf:a8: 6a:2c:5d:30:15:6e:11:8e:55:c5:1b:25:c8:56:d6: 62:5c:06:3d:4c:fc:44:a0:10:c6:12:92:ae:77:18: 22:c5:8c:51:e3:5e:26:fc:2f:c3:7e:2d:76:a1:7a: 1e:c8:78:c5:0d:9b:aa:73:6a:95:91:05:cb:51:0c: 6f:9f:cc:12:af:57:f9:ba:90:7c:ae:b1:e8:7b:6d: d2:5a:f1:9a:1a:43:6b:da:5e:a5:84:f8:9e:6e:63: fe:60:58:31:02:e8:02:c5:e4:44:8d:9d:8e:08:bf: 67:bf:28:6e:f5:0b:01:e2:68:46:21:92:c5:23:21: 43:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8D:A3:C2:D8:3C:C6:4C:01:D9:0A:15:7C:E0:E2:C9:2C:36:D1:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/1f997c12-50db-3e69-8eeb-5a9137c21344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl X509v3 Authority Key Identifier: keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer sbgp-ipAddrBlock: critical IPv4: 66.97.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:29:91:49:22:a2:42:de:3c:62:db:2f:16:15:9e:0c:ee:8a: 37:8b:15:7b:e6:b8:1d:9b:4d:4f:18:e7:5e:19:c5:e3:ba:01: 68:34:ba:33:f1:e5:24:08:77:76:51:a1:36:f3:1e:8c:4a:12: 81:01:f4:21:ef:d5:c5:97:5e:ff:64:c1:a4:a9:64:5e:3a:8b: 74:de:48:4f:5a:8d:66:93:18:ca:52:20:cf:10:73:b4:2a:9b: 28:0a:72:01:73:15:32:8f:1a:ac:9b:dc:56:91:a9:c8:75:78: 8c:fb:c7:3a:a0:3c:6c:7e:79:86:e5:15:a0:b7:71:37:b4:c1: 2e:2c:4c:14:a4:8b:79:55:03:e7:5d:c4:e3:bd:fb:5e:d0:18: 99:aa:ee:2d:54:79:af:6a:f7:83:0e:6e:fd:f7:de:e6:a7:ca: be:11:cc:df:8a:b5:68:c3:99:cd:13:89:9d:83:67:bc:7a:71: 37:c4:67:ba:70:43:87:a3:8d:bd:e5:08:53:cc:9d:72:fc:c6: 75:6c:76:b9:f6:90:23:8f:9f:f8:2e:77:42:6e:06:b7:0f:dd: 90:50:6c:5d:36:60:5f:e9:5b:67:f0:51:f6:d0:16:13:e1:3b: 6d:4a:88:9d:0d:f1:66:3c:aa:a7:0d:3a:93:03:f3:68:fc:2a: c4:5d:2f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fEhjSiC8gqQdlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhOTM2YzctNGExOS00NGE5LWI3NWQtY2MyMmMyNzRk YjI2MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk ZjhhMGY3NTMtYzhhYy00ZGM2LTg1ZTktZDc0M2I4ZDc1Nzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mIxI4nqnlXRCQTfafYoNlrcBxbhFcqYaQu4 zfUUSqx7Jh6giuJhWuBMcMrek84yRhi35oWEHndbPrVBq3twehcU4T5fOxGVm3Za w9MnRRbctc4gpGkm1q3Erp1U7BnVvgaNTLPTONeyiEZh49SIqs9so+CrAX6LMyon UX+gGXviOvFIz6hqLF0wFW4RjlXFGyXIVtZiXAY9TPxEoBDGEpKudxgixYxR414m /C/Dfi12oXoeyHjFDZuqc2qVkQXLUQxvn8wSr1f5upB8rrHoe23SWvGaGkNr2l6l hPiebmP+YFgxAugCxeREjZ2OCL9nvyhu9QsB4mhGIZLFIyFDoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKNo8LYPMZMAdkKFXzg4sksNtGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5 MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIyYzI3NGRiMjYvMWY5OTdjMTItNTBkYi0z ZTY5LThlZWItNWE5MTM3YzIxMzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjBhOTM2YzctNGExOS00NGE5LWI3 NWQtY2MyMmMyNzRkYjI2LzYwYTkzNmM3LTRhMTktNDRhOS1iNzVkLWNjMjJjMjc0 ZGIyNi5jcmwwHwYDVR0jBBgwFoAUXsGx+knOv7rYWgzeKmEsO+5yM+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIy YzI3NGRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQmG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkpkUkiokLePGLbLxYVngzuijeLFXvmuB2bTU8Y514ZxeO6AWg0ujPx 5SQId3ZRoTbzHoxKEoEB9CHv1cWXXv9kwaSpZF46i3TeSE9ajWaTGMpSIM8Qc7Qq mygKcgFzFTKPGqyb3FaRqch1eIz7xzqgPGx+eYblFaC3cTe0wS4sTBSki3lVA+dd xOO9+17QGJmq7i1Uea9q94MObv333uanyr4RzN+KtWjDmc0TiZ2DZ7x6cTfEZ7pw Q4ejjb3lCFPMnXL8xnVsdrn2kCOPn/gud0JuBrcP3ZBQbF02YF/pW2fwUfbQFhPh O21KiJ0N8WY8qqcNOpMD82j8KsRdL3M= -----END CERTIFICATE-----Generated at Mon Mar 2 17:11:54 2026 by rpki-client