$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa File: ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa (raw, json) Hash identifier: 2M+gS9JbNpCqB9/NEOLDvTp3P6oeHmk1b7ZCQr29WUo= Subject key identifier: 78:1D:17:FC:C3:92:C2:78:4F:51:FF:1E:8E:CD:8D:D9:37:14:F8:81 Certificate issuer: /CN=654e0ef8-ac77-456b-9a63-98fdb228488b Certificate serial: 010D0C9F4328584CA5F709A7108D251E5148DC80 Authority key identifier: 20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 400404 IP address blocks: 66.71.208.0/21 maxlen: 24 96.45.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:09:a7:10:8d:25:1e:51:48:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654e0ef8-ac77-456b-9a63-98fdb228488b Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=b8e00e72-ffd2-4bff-ae0f-2be0638e1d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:12:ee:8d:13:a5:a4:b5:55:87:b3:ad:c8:ee: 42:e3:f2:b2:f7:cd:cd:d9:37:f3:28:7c:85:79:94: 5e:cb:5b:24:01:65:92:da:e1:45:3d:db:51:f4:bb: 9e:20:46:75:69:f0:09:f8:9b:f7:f1:35:74:d5:6a: 21:14:68:05:99:a5:0f:b3:07:28:60:4d:59:92:20: e5:47:66:3e:01:7c:09:1c:1c:a4:e1:01:42:d1:cb: 44:a5:f4:c7:25:ac:55:55:d4:e4:50:42:9e:7f:9a: bc:58:1a:26:a8:5b:54:29:5d:a9:ee:35:e8:6c:a0: 94:c1:13:3e:6f:a1:ff:3f:34:f5:16:5b:03:a4:61: 50:91:e6:13:45:3a:c8:06:c9:76:9d:08:cf:fa:98: 2b:85:ae:20:89:8b:a1:68:93:0e:52:fb:c6:9c:ed: 69:3f:ac:60:88:f9:c8:30:5a:cd:c0:19:3e:4b:5d: e5:14:5b:83:39:3b:96:9f:f7:f4:fc:92:e7:2b:a2: d3:be:48:52:2e:4f:84:f7:5e:d7:72:b2:65:c4:73: f5:35:cd:4f:e9:4a:09:63:53:2b:24:ae:18:90:5b: 8b:b8:31:80:46:d5:e3:03:4e:55:a9:46:75:04:c4: db:21:f3:a3:0a:eb:34:0a:a1:8b:64:6c:42:ed:51: 11:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1D:17:FC:C3:92:C2:78:4F:51:FF:1E:8E:CD:8D:D9:37:14:F8:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl X509v3 Authority Key Identifier: keyid:20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer sbgp-ipAddrBlock: critical IPv4: 66.71.208.0/21 96.45.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7c:16:44:37:fb:55:94:07:27:0a:13:78:24:0c:72:a4:f0: 95:a5:88:ee:52:38:34:40:b2:2b:f3:5d:5b:59:d0:32:32:a1: 94:de:08:5d:e1:5d:39:c8:b9:5b:2a:5b:10:bb:64:7b:55:4e: 82:ce:03:fc:38:3d:8a:17:5b:b0:d4:05:a7:8b:c0:78:96:0c: 32:00:3f:8e:0e:23:bc:62:4e:27:c7:49:64:a4:b2:0f:f2:c3: 19:b5:94:cc:68:4e:ff:87:39:a6:45:99:2c:6a:27:b1:70:03: c7:44:73:26:69:ae:80:d2:96:b1:82:c8:9e:cc:28:79:d4:33: 61:70:d1:cb:23:fe:76:52:cb:36:36:e7:07:86:07:9a:74:83: 4b:8c:b3:d0:ab:dd:cd:56:51:a3:7d:c8:ce:21:fc:b3:88:23: 1a:ad:cb:cf:c7:d9:ac:a3:43:c8:df:a8:df:41:bb:c7:5e:90: 3c:11:00:6e:f9:9d:1e:da:d9:95:39:44:3b:fd:0e:50:4c:4a: 5d:89:2f:da:25:4c:d7:67:de:2d:2b:ef:a2:17:55:b2:37:be: 81:fc:46:1c:e5:09:c2:8b:dd:48:4c:aa:9e:10:84:49:b2:ee: 41:bf:6e:8b:9c:8e:68:50:97:46:ef:40:a2:9d:87:58:64:0b: 58:6b:28:7f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyl9wmnEI0lHlFI3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU0ZTBlZjgtYWM3Ny00NTZiLTlhNjMtOThmZGIyMjg0 ODhiMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk YjhlMDBlNzItZmZkMi00YmZmLWFlMGYtMmJlMDYzOGUxZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hLujROlpLVVh7OtyO5C4/Ky983N2TfzKHyF eZRey1skAWWS2uFFPdtR9LueIEZ1afAJ+Jv38TV01WohFGgFmaUPswcoYE1ZkiDl R2Y+AXwJHByk4QFC0ctEpfTHJaxVVdTkUEKef5q8WBomqFtUKV2p7jXobKCUwRM+ b6H/PzT1FlsDpGFQkeYTRTrIBsl2nQjP+pgrha4giYuhaJMOUvvGnO1pP6xgiPnI MFrNwBk+S13lFFuDOTuWn/f0/JLnK6LTvkhSLk+E917XcrJlxHP1Nc1P6UoJY1Mr JK4YkFuLuDGARtXjA05VqUZ1BMTbIfOjCus0CqGLZGxC7VEREwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHgdF/zDksJ4T1H/Ho7Njdk3FPiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRl MGVmOC1hYzc3LTQ1NmItOWE2My05OGZkYjIyODQ4OGIvZmZhMzRlMTUtNGVjYS0z NDFiLWE1ZDEtOTZkNTE0M2IwNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjU0ZTBlZjgtYWM3Ny00NTZiLTlh NjMtOThmZGIyMjg0ODhiLzY1NGUwZWY4LWFjNzctNDU2Yi05YTYzLTk4ZmRiMjI4 NDg4Yi5jcmwwHwYDVR0jBBgwFoAUIIAKlrpCPOd9vFC7tCAnZ+KIXMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRlMGVmOC1hYzc3LTQ1NmItOWE2My05OGZk YjIyODQ4OGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQkfQAwQE YC2QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEl8FkQ3+1WUBycKE3gkDHKk8JWliO5SODRAsivzXVtZ0DIy oZTeCF3hXTnIuVsqWxC7ZHtVToLOA/w4PYoXW7DUBaeLwHiWDDIAP44OI7xiTifH SWSksg/ywxm1lMxoTv+HOaZFmSxqJ7FwA8dEcyZproDSlrGCyJ7MKHnUM2Fw0csj /nZSyzY25weGB5p0g0uMs9Cr3c1WUaN9yM4h/LOIIxqty8/H2ayjQ8jfqN9Bu8de kDwRAG75nR7a2ZU5RDv9DlBMSl2JL9olTNdn3i0r76IXVbI3voH8RhzlCcKL3UhM qp4QhEmy7kG/boucjmhQl0bvQKKdh1hkC1hrKH8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:27:18 2026 by rpki-client