$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa File: fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa (raw, json) Hash identifier: kxkwPuP4hb5zDs7ZRqycArxyrm4al76KWRUi6HSYzYk= Subject key identifier: 3C:3F:84:BC:D6:C9:48:2C:79:18:42:D6:9C:DB:38:44:B1:28:A2:1C Certificate issuer: /CN=0f27cf1f-c7c6-435c-a313-992cc63104f9 Certificate serial: 010D0C9F4328584CF8523ECFB578712BFAF52700 Authority key identifier: A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 30528 IP address blocks: 66.96.16.0/20 maxlen: 20 72.0.64.0/20 maxlen: 20 2001:1928::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:3e:cf:b5:78:71:2b:fa:f5:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f27cf1f-c7c6-435c-a313-992cc63104f9 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=08785442-aafa-4010-ae78-dfc8e5879f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8c:cb:63:30:d7:91:c5:72:a7:69:27:9d:61: 68:f8:c5:97:e4:c6:65:9a:87:01:43:86:69:af:5e: a6:28:70:9e:24:4d:a0:47:51:11:f1:05:e7:8c:3d: 8c:8c:21:56:11:7e:0e:02:df:54:ff:d2:42:2c:c1: 3a:19:e5:5c:92:85:71:cd:8a:c6:48:d7:4e:50:1e: 46:26:e5:23:80:65:32:38:7d:e1:37:b0:19:f8:8d: 12:10:60:72:01:9e:57:09:cb:78:b8:ee:af:3e:9b: dd:f5:63:a6:3b:81:77:6d:e8:2f:1d:d0:ae:b2:d5: e3:00:8d:69:dd:58:42:64:15:ce:ea:0f:a1:52:86: 16:81:3a:01:c7:f8:fe:f1:f0:df:86:19:20:cd:d1: ee:10:88:ac:51:fb:95:bc:c1:45:ca:9a:8a:cb:be: 07:e0:92:9b:f3:89:62:da:98:cf:89:5a:8b:a2:0d: 16:37:d0:4b:73:e1:48:6a:e4:5f:7e:45:4a:0b:89: ac:8e:2b:03:43:be:f7:19:6f:2e:22:32:06:8c:15: 07:98:4a:8d:6e:2b:7e:ff:3b:e8:b2:0f:0c:61:bf: 91:e7:bd:ae:d9:ca:6e:f4:88:50:8a:a1:64:5f:de: fd:7f:a5:22:64:51:ac:27:85:be:09:0b:3d:20:b3: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3F:84:BC:D6:C9:48:2C:79:18:42:D6:9C:DB:38:44:B1:28:A2:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl X509v3 Authority Key Identifier: keyid:A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer sbgp-ipAddrBlock: critical IPv4: 66.96.16.0/20 72.0.64.0/20 IPv6: 2001:1928::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6a:75:ca:94:50:90:d0:76:01:61:1a:fc:13:fc:7d:3c:89: af:f1:f9:1a:9e:1b:32:2f:41:f9:40:2d:74:7b:e9:5f:83:8a: 6d:33:5c:67:5c:48:48:a5:ed:28:68:7e:78:39:c1:f0:d8:e3: 32:f2:d9:e2:d0:73:3f:91:2b:c4:2b:1b:1b:40:ba:a2:04:12: d8:e8:89:86:23:20:81:79:c9:14:5f:e8:e8:13:8a:e1:03:ef: de:6b:96:b3:b8:7d:f6:d4:83:b9:da:64:d2:41:3a:37:79:19: 52:f7:f3:56:de:81:82:18:28:4c:30:de:b3:dc:83:69:5c:0e: 80:7d:95:42:69:d7:eb:e6:7b:e4:36:10:28:66:d2:35:06:3e: 97:49:5c:34:fc:43:4b:c0:f2:e5:cf:61:1f:d1:53:0c:3b:8c: b2:8c:c6:41:bd:54:b7:71:23:59:c6:6b:1e:a9:17:03:74:26: 93:ab:85:53:52:5e:dc:21:a4:a9:ac:0b:40:24:bb:73:f9:6c: 3f:43:e1:6f:82:15:8e:a5:46:73:c0:4f:63:1d:84:d3:9c:5a: b9:74:a1:29:9a:49:28:b3:1d:70:6c:a4:e5:cc:95:e3:74:5c: 05:48:95:da:ad:e0:45:c9:17:24:37:25:76:9d:7d:f8:96:70: 1b:c6:f4:51 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEz4Uj7PtXhxK/r1JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYyN2NmMWYtYzdjNi00MzVjLWEzMTMtOTkyY2M2MzEw NGY5MB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk MDg3ODU0NDItYWFmYS00MDEwLWFlNzgtZGZjOGU1ODc5ZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgozLYzDXkcVyp2knnWFo+MWX5MZlmocBQ4Zp r16mKHCeJE2gR1ER8QXnjD2MjCFWEX4OAt9U/9JCLME6GeVckoVxzYrGSNdOUB5G JuUjgGUyOH3hN7AZ+I0SEGByAZ5XCct4uO6vPpvd9WOmO4F3begvHdCustXjAI1p 3VhCZBXO6g+hUoYWgToBx/j+8fDfhhkgzdHuEIisUfuVvMFFypqKy74H4JKb84li 2pjPiVqLog0WN9BLc+FIauRffkVKC4msjisDQ773GW8uIjIGjBUHmEqNbit+/zvo sg8MYb+R572u2cpu9IhQiqFkX979f6UiZFGsJ4W+CQs9ILOhiwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFDw/hLzWyUgseRhC1pzbOESxKKIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3 Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJjYzYzMTA0ZjkvZmI1NjlkNDktYTNkNS0z NmI3LTlkNWEtMzkwMGNhOWYwZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGYyN2NmMWYtYzdjNi00MzVjLWEz MTMtOTkyY2M2MzEwNGY5LzBmMjdjZjFmLWM3YzYtNDM1Yy1hMzEzLTk5MmNjNjMx MDRmOS5jcmwwHwYDVR0jBBgwFoAUo152Mp1514H4Ylc1CoZ/eeY9K4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJj YzYzMTA0ZjkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQmAQAwQE SABAMA0EAgACMAcDBQAgARkoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACpqdcqUUJDQdgFhGvwT/H08ia/x +RqeGzIvQflALXR76V+Dim0zXGdcSEil7Shofng5wfDY4zLy2eLQcz+RK8QrGxtA uqIEEtjoiYYjIIF5yRRf6OgTiuED795rlrO4ffbUg7naZNJBOjd5GVL381begYIY KEww3rPcg2lcDoB9lUJp1+vme+Q2EChm0jUGPpdJXDT8Q0vA8uXPYR/RUww7jLKM xkG9VLdxI1nGax6pFwN0JpOrhVNSXtwhpKmsC0Aku3P5bD9D4W+CFY6lRnPAT2Md hNOcWrl0oSmaSSizHXBspOXMleN0XAVIldqt4EXJFyQ3JXadffiWcBvG9FE= -----END CERTIFICATE-----Generated at Mon Mar 2 06:19:07 2026 by rpki-client