$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa File: be712c95-8da1-3462-9104-f7ad39bb722c.roa (raw, json) Hash identifier: c/iiE1LjU91ljRhrCzb5aHdUFUq5VlLzFz5kBhKOvq0= Subject key identifier: 32:DF:B4:DC:D0:A2:49:A2:8F:8F:05:B7:20:9F:DA:89:F9:36:B3:0E Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F4328584D04E23F7A22AFD722CC954D00 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 11758 IP address blocks: 66.85.43.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:3f:7a:22:af:d7:22:cc:95:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=0d927b3b-124a-4b8c-9f78-2ec1324e8fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:96:16:c9:5c:c1:2f:1b:b3:ec:02:7b:9b:cf: 67:b3:56:49:00:bf:8d:5d:3d:c7:d9:88:b7:4e:5b: 3d:7d:8b:74:4a:48:24:f4:d8:cd:a4:c6:b3:1e:d9: 5e:18:41:fa:36:b5:a4:a6:35:8b:5e:27:2b:58:f4: dd:a6:6d:97:00:95:70:63:84:4f:af:6e:70:a1:3e: 65:b1:d1:d5:1e:46:17:b1:61:42:c9:a8:0d:43:fc: 47:d3:d9:8d:17:76:75:59:f7:c6:be:41:6e:8b:bd: b2:28:7f:cf:f3:56:7e:28:35:2f:a3:52:fd:26:68: 49:cc:f7:6a:ae:e4:a2:ff:c0:48:89:8f:f2:e2:31: e4:70:a1:d4:65:1f:62:5c:f0:f9:4e:a0:49:88:41: 69:5c:95:e5:cc:24:21:1d:29:d0:e2:4f:f6:0c:25: 1b:d5:34:9e:5f:90:c2:34:f0:73:07:5b:ef:cd:82: d5:07:74:c4:d8:79:a4:ef:23:09:65:6d:b1:3c:38: c6:d8:cb:ae:86:30:e2:a4:00:35:a5:2e:d2:43:d4: 02:7e:fa:42:8a:3f:c1:36:5c:8a:77:ab:cc:73:6b: d4:db:45:0c:28:6e:df:55:3e:12:25:aa:b7:11:b5: a8:63:7f:37:05:8d:c8:5f:4e:f8:bb:ee:02:02:3b: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DF:B4:DC:D0:A2:49:A2:8F:8F:05:B7:20:9F:DA:89:F9:36:B3:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv4: 66.85.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:40:b1:e1:4c:9c:c0:d2:19:92:e5:c6:84:b9:0d:c1:e6:17: bf:fc:02:b9:d3:1f:c7:36:73:ab:9a:b8:07:df:d4:3f:d8:71: d1:a0:35:fd:33:7f:0a:bb:ff:d6:a5:69:0a:fd:23:36:15:2e: 90:98:c1:a0:41:3d:e5:5a:9b:64:04:2f:09:91:a7:5a:16:0a: f5:62:bf:f1:52:32:b9:7f:a9:a3:38:48:73:d8:d2:d9:4b:80: 42:03:06:d1:61:1f:4a:1b:6b:49:df:15:80:65:af:8b:c7:0b: c1:36:ec:0b:e0:ca:60:bc:ed:a0:d1:9c:c8:8a:98:f5:db:70: af:6f:ff:63:a6:86:e5:b1:a2:bc:34:f4:e2:96:34:f5:ee:bb: 07:c6:77:3e:69:70:90:40:5a:67:a9:36:30:9d:59:77:7c:da: 7c:f9:83:8c:96:4c:80:b1:25:90:8f:92:f6:22:4d:91:f8:5f: fb:6b:82:de:83:55:f9:be:24:76:d8:a4:59:fd:be:70:3b:30: 58:51:30:06:49:c6:4a:d4:11:6b:f6:2a:f0:85:d7:2d:3b:de: 49:46:ca:4f:5f:6d:88:20:d8:19:c3:a2:0f:6e:f3:ff:cc:6c: a0:cc:72:5e:2f:ff:93:57:8b:a5:6b:f3:16:78:cc:63:17:22: 76:06:d3:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4j96Iq/XIsyVTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk MGQ5MjdiM2ItMTI0YS00YjhjLTlmNzgtMmVjMTMyNGU4ZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JYWyVzBLxuz7AJ7m89ns1ZJAL+NXT3H2Yi3 Tls9fYt0Skgk9NjNpMazHtleGEH6NrWkpjWLXicrWPTdpm2XAJVwY4RPr25woT5l sdHVHkYXsWFCyagNQ/xH09mNF3Z1WffGvkFui72yKH/P81Z+KDUvo1L9JmhJzPdq ruSi/8BIiY/y4jHkcKHUZR9iXPD5TqBJiEFpXJXlzCQhHSnQ4k/2DCUb1TSeX5DC NPBzB1vvzYLVB3TE2Hmk7yMJZW2xPDjG2MuuhjDipAA1pS7SQ9QCfvpCij/BNlyK d6vMc2vU20UMKG7fVT4SJaq3EbWoY383BY3IX074u+4CAjvK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLftNzQokmij48FtyCf2on5NrMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvYmU3MTJjOTUtOGRhMS0z NDYyLTkxMDQtZjdhZDM5YmI3MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5AseFMnMDSGZLlxoS5DcHmF7/8ArnTH8c2c6uauAff1D/YcdGgNf0z fwq7/9alaQr9IzYVLpCYwaBBPeVam2QELwmRp1oWCvViv/FSMrl/qaM4SHPY0tlL gEIDBtFhH0oba0nfFYBlr4vHC8E27AvgymC87aDRnMiKmPXbcK9v/2OmhuWxorw0 9OKWNPXuuwfGdz5pcJBAWmepNjCdWXd82nz5g4yWTICxJZCPkvYiTZH4X/trgt6D Vfm+JHbYpFn9vnA7MFhRMAZJxkrUEWv2KvCF1y073klGyk9fbYgg2BnDog9u8//M bKDMcl4v/5NXi6Vr8xZ4zGMXInYG01s= -----END CERTIFICATE-----Generated at Mon Mar 2 16:52:12 2026 by rpki-client