$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f38b862-0f36-3a7b-a50c-8238d0633b2d.roa File: 0f38b862-0f36-3a7b-a50c-8238d0633b2d.roa (raw, json) Hash identifier: J4bo5Pg/hSLbDCl94BAEc98wfRNNhxYm8MuNULamVOU= Subject key identifier: 05:1B:1E:B1:28:51:CB:60:91:9C:89:C1:00:ED:2D:0B:42:5C:7D:C8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CA5F7489AA2F6C7FCF6865380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f38b862-0f36-3a7b-a50c-8238d0633b2d.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 6079 IP address blocks: 66.92.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:48:9a:a2:f6:c7:fc:f6:86:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=1defe6c3-1608-44ec-a4c9-d2ef9f88aada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:c5:34:99:d2:1f:c5:88:30:13:17:1f:11: 83:39:a7:a4:2e:e3:33:f4:a0:47:48:65:e7:bf:ff: bb:2a:7a:26:28:af:6a:61:91:48:0a:73:84:6a:b9: 75:8f:55:12:c9:6b:c0:0f:6f:a5:2b:b7:95:1a:49: a9:4c:11:41:2a:1c:1d:b9:62:aa:5a:e4:49:2e:43: 71:35:3b:62:f7:4e:4f:9a:c6:c3:51:c8:67:38:ff: 21:bd:cd:af:37:16:56:72:5e:23:85:c1:18:51:5d: c5:eb:b4:10:5a:8d:34:c5:a2:52:4c:50:a9:a0:57: 5b:e6:b7:b1:82:7d:48:42:bc:8c:ac:d4:55:de:d4: a1:22:a0:8e:ec:9e:67:69:41:34:34:12:89:cf:45: 85:75:7b:9e:b1:f0:c3:9d:2b:e0:17:b2:7f:ce:ec: d9:55:71:dc:6c:f8:7a:a9:b3:01:1c:fe:7e:fc:bc: de:23:88:b0:cc:70:80:26:20:9c:81:f6:c5:b9:05: d8:85:0e:32:04:30:a1:ec:fd:ee:54:4d:82:51:fc: 72:f5:08:c4:ac:3e:3b:0c:30:68:3f:29:2b:65:b4: ec:53:66:cf:0f:7d:b8:d6:21:af:19:93:a0:35:7c: 5e:43:45:59:30:94:88:5f:14:29:23:8c:75:65:ab: f1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1B:1E:B1:28:51:CB:60:91:9C:89:C1:00:ED:2D:0B:42:5C:7D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f38b862-0f36-3a7b-a50c-8238d0633b2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c7:e1:63:8b:5c:38:1f:be:89:19:cb:48:63:10:1a:6f:a6: 41:40:2a:e1:c6:70:84:8b:14:7c:a0:fe:27:7d:fa:c5:d5:0b: ad:e1:dc:74:cd:62:01:82:bc:b8:ae:70:d8:4b:9d:ae:22:d4: 8b:bd:66:38:85:e4:4a:b0:6f:eb:da:17:2f:f9:73:c5:ba:71: 4c:04:f3:95:4d:a4:cc:e7:f9:d0:d0:7f:68:a6:be:8d:46:a2: ea:d7:ce:93:a8:90:7b:27:50:67:e1:f2:49:46:9e:0d:ae:b9: 32:a5:52:ac:4e:2e:da:b7:fe:4b:c7:5c:b6:d5:e0:0f:2c:52: b6:9d:8d:65:6e:a9:bc:4d:1d:a5:58:7b:56:49:8f:9e:fc:24: 1c:57:1d:94:57:cb:98:df:17:16:b9:d0:29:27:67:5d:56:5d: 04:0a:eb:50:5e:7f:19:b8:ce:b9:ab:77:8e:ea:b3:b8:a1:0b: 51:7d:46:b0:e7:2b:67:26:93:66:fe:0e:76:7c:22:41:db:c5: 64:9a:d0:4f:bf:cf:16:01:79:79:18:07:59:4e:60:54:74:76: 9e:c8:b2:5a:69:db:77:97:45:3c:2d:43:65:47:32:14:c6:b5: e7:5a:1e:21:fe:46:46:ef:5b:90:63:70:b7:0b:29:22:91:a8: ae:78:dd:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90iaovbH/PaGU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MWRlZmU2YzMtMTYwOC00NGVjLWE0YzktZDJlZjlmODhhYWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIHFNJnSH8WIMBMXHxGDOaekLuMz9KBHSGXn v/+7KnomKK9qYZFICnOEarl1j1USyWvAD2+lK7eVGkmpTBFBKhwduWKqWuRJLkNx NTti905PmsbDUchnOP8hvc2vNxZWcl4jhcEYUV3F67QQWo00xaJSTFCpoFdb5rex gn1IQryMrNRV3tShIqCO7J5naUE0NBKJz0WFdXuesfDDnSvgF7J/zuzZVXHcbPh6 qbMBHP5+/LzeI4iwzHCAJiCcgfbFuQXYhQ4yBDCh7P3uVE2CUfxy9QjErD47DDBo PykrZbTsU2bPD3241iGvGZOgNXxeQ0VZMJSIXxQpI4x1Zavx9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUbHrEoUctgkZyJwQDtLQtCXH3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGYzOGI4NjItMGYzNi0z YTdiLWE1MGMtODIzOGQwNjMzYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjH4WOLXDgfvokZy0hjEBpvpkFAKuHGcISLFHyg/id9+sXVC63h3HTN YgGCvLiucNhLna4i1Iu9ZjiF5Eqwb+vaFy/5c8W6cUwE85VNpMzn+dDQf2imvo1G ourXzpOokHsnUGfh8klGng2uuTKlUqxOLtq3/kvHXLbV4A8sUradjWVuqbxNHaVY e1ZJj578JBxXHZRXy5jfFxa50CknZ11WXQQK61Befxm4zrmrd47qs7ihC1F9RrDn K2cmk2b+DnZ8IkHbxWSa0E+/zxYBeXkYB1lOYFR0dp7Islpp23eXRTwtQ2VHMhTG tedaHiH+RkbvW5BjcLcLKSKRqK543W0= -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:35 2026 by rpki-client