$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa File: 5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa (raw, json) Hash identifier: 4L49Ssi3ygWux43O0t0XPNmJfxXGvSDQV3Fcbx+dtlI= Subject key identifier: 77:08:BE:A7:4D:9C:07:0C:0F:5D:B6:6A:22:EB:00:A3:2A:D5:6C:00 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584C8476CA0FB20AD1667FFCD400 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 23522 IP address blocks: 66.252.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:ca:0f:b2:0a:d1:66:7f:fc:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=9fc0addf-c1af-471c-a817-a66a8dea8737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:62:af:b2:89:30:c0:28:0b:6e:76:9e:ac:af: 90:45:0b:22:5d:ad:43:db:84:85:c3:40:8c:37:ff: b2:13:27:99:22:33:d8:7f:18:e1:22:ac:d2:19:77: 5c:c3:0d:3c:00:2c:a0:76:ff:2c:8d:b1:6f:04:77: 29:c2:29:f0:0f:3a:bb:62:b2:e3:2e:3f:29:51:a2: 0e:49:55:de:a0:7b:72:ee:95:d9:af:2b:04:58:82: 3c:3d:2b:00:52:da:32:ca:00:ea:b9:c0:4d:30:ae: 32:61:58:6c:ca:5b:0a:18:0a:47:74:00:2c:e3:01: b9:c0:cd:99:87:7b:1c:e6:89:e5:1b:aa:86:48:ca: 8b:a0:c4:fd:6e:44:8e:2c:16:a1:bc:d9:06:7c:2d: bc:2e:e2:d7:54:56:47:e2:2f:21:5d:32:7b:f9:9d: ce:cf:a3:c5:d5:df:0e:e6:ed:b2:87:00:f4:8e:23: 06:00:4a:13:20:cb:93:34:d2:a2:e4:12:b2:70:ed: 55:78:c4:08:31:a2:8b:48:58:28:86:dd:61:7e:9d: 34:57:93:e4:e9:88:54:18:5e:6e:ab:74:7a:b5:1f: bc:82:f0:15:db:86:3b:ac:04:9b:1b:78:d8:06:fb: 12:0e:7c:d1:6a:6d:c0:6a:3b:78:9f:b7:ed:e5:c9: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:08:BE:A7:4D:9C:07:0C:0F:5D:B6:6A:22:EB:00:A3:2A:D5:6C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:63:39:03:2d:91:e8:05:e8:05:27:2d:47:a3:8c:78:d8:67: 03:27:4a:fd:d6:b3:84:79:c9:5f:7b:fa:ba:c8:fa:ee:bc:8c: bf:8e:25:17:c2:0c:26:db:7b:94:d1:ff:79:da:1d:96:f6:ca: ec:05:8c:9f:e6:44:74:7d:9b:98:c4:e7:3d:df:e6:63:df:be: 64:a2:d4:19:31:fa:f7:76:32:e5:ee:fc:21:11:50:f3:26:1a: 9f:2b:16:4b:7c:71:b7:5c:f7:75:17:01:b1:4c:b4:6d:30:ad: 89:40:b3:b2:35:ee:ef:f9:95:d6:e9:0d:05:ae:b5:ca:dd:61: 9e:8b:76:29:75:f6:00:74:81:27:4f:4e:b9:a4:cd:fd:3b:73: ee:71:f2:d7:57:ef:f8:02:fc:34:38:3b:c1:cf:1e:b6:e0:b7: 36:e2:39:af:ce:6e:81:24:ed:0b:75:78:c6:68:a8:16:2f:35: 77:b2:fe:d8:ba:f2:74:86:fd:62:bd:37:45:c7:e7:aa:b6:32: 68:07:d3:91:f5:f8:35:f1:67:98:2c:50:a8:29:84:cb:e6:29: 21:52:79:57:f9:a9:72:f8:c0:93:8d:58:40:1f:98:f5:48:bd: 1e:87:09:bf:57:2e:b1:c4:0b:da:8d:9f:4b:eb:c4:97:e3:4f: c0:1f:7f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdsoPsgrRZn/81AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk OWZjMGFkZGYtYzFhZi00NzFjLWE4MTctYTY2YThkZWE4NzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2KvsokwwCgLbnaerK+QRQsiXa1D24SFw0CM N/+yEyeZIjPYfxjhIqzSGXdcww08ACygdv8sjbFvBHcpwinwDzq7YrLjLj8pUaIO SVXeoHty7pXZrysEWII8PSsAUtoyygDqucBNMK4yYVhsylsKGApHdAAs4wG5wM2Z h3sc5onlG6qGSMqLoMT9bkSOLBahvNkGfC28LuLXVFZH4i8hXTJ7+Z3Oz6PF1d8O 5u2yhwD0jiMGAEoTIMuTNNKi5BKycO1VeMQIMaKLSFgoht1hfp00V5Pk6YhUGF5u q3R6tR+8gvAV24Y7rASbG3jYBvsSDnzRam3Aajt4n7ft5ckd0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcIvqdNnAcMD122aiLrAKMq1WwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNWQ3MDhlYjItYjdiYy0z ZWExLWE3ZDUtMmUxOGYwZjY2ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpjOQMtkegF6AUnLUejjHjYZwMnSv3Ws4R5yV97+rrI+u68jL+OJRfC DCbbe5TR/3naHZb2yuwFjJ/mRHR9m5jE5z3f5mPfvmSi1Bkx+vd2MuXu/CERUPMm Gp8rFkt8cbdc93UXAbFMtG0wrYlAs7I17u/5ldbpDQWutcrdYZ6Ldil19gB0gSdP Trmkzf07c+5x8tdX7/gC/DQ4O8HPHrbgtzbiOa/OboEk7Qt1eMZoqBYvNXey/ti6 8nSG/WK9N0XH56q2MmgH05H1+DXxZ5gsUKgphMvmKSFSeVf5qXL4wJONWEAfmPVI vR6HCb9XLrHEC9qNn0vrxJfjT8Aff1I= -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:23 2026 by rpki-client