$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21c2d3c0-3695-3576-9074-9435e7b42723.roa File: 21c2d3c0-3695-3576-9074-9435e7b42723.roa (raw, json) Hash identifier: v3BvRU3zRZ72Pcm1eRGrIRD1hVV9VlW3q+VM3OVq3N0= Subject key identifier: 3E:4C:A6:67:D3:7E:5B:68:7B:A2:60:0E:A9:DC:8F:7B:D3:F3:36:F5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D4D5A36F83B5F0C0509C32A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21c2d3c0-3695-3576-9074-9435e7b42723.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 5065 IP address blocks: 66.93.75.0/24 maxlen: 24 66.93.249.0/24 maxlen: 24 69.17.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:36:f8:3b:5f:0c:05:09:c3:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=ea60cd02-f85e-40e0-b3b0-e48286f42ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:03:1b:38:3f:e1:2c:21:06:25:2b:11:01:41: ea:70:01:55:e8:81:ce:9c:fe:11:25:b3:14:14:c3: 60:f2:40:e4:11:91:21:9e:b3:a6:3f:69:01:d5:3c: 03:4b:65:a3:df:39:85:76:92:8d:59:cd:33:6d:79: cd:bc:b3:cb:f5:d2:54:66:4c:9d:c1:29:c4:4f:41: 82:99:7f:44:a3:cc:31:1d:02:8e:48:88:c2:d2:1c: 15:ae:23:23:7d:c5:ea:5a:ff:0a:95:06:3b:3f:6b: 98:98:45:11:5f:93:7c:16:e4:44:6c:f6:f3:24:72: 03:86:d6:2b:34:62:88:66:5c:00:a3:fe:a8:14:38: ac:ec:a8:ad:54:1c:6e:72:2a:f6:a2:84:e4:da:70: 5c:20:a4:fd:9b:ed:38:40:3e:9c:bf:ac:0b:9b:01: 89:c1:03:fa:d2:88:9f:f3:ac:6b:c5:93:2e:fd:24: 86:2a:06:8f:21:05:87:30:d5:ac:8b:cd:d7:2d:65: a1:7d:28:6b:66:ed:40:69:4f:29:aa:a9:f3:f2:12: ab:f6:01:84:3f:eb:d0:12:b5:c9:fb:2c:cd:ee:fc: 56:cd:1d:68:23:55:3d:c6:16:84:83:f3:1e:51:5f: 0e:c1:e5:b0:bd:7b:a0:8d:ba:99:ae:7a:f4:69:d4: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4C:A6:67:D3:7E:5B:68:7B:A2:60:0E:A9:DC:8F:7B:D3:F3:36:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21c2d3c0-3695-3576-9074-9435e7b42723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.93.75.0/24 66.93.249.0/24 69.17.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:55:15:07:19:2d:32:6d:5c:e6:58:5a:2b:a8:2b:34:56:f1: 11:f2:97:a7:12:97:70:f0:b1:e1:b6:d3:c4:62:7b:d1:0d:f5: 5c:a2:94:f8:ef:3e:3a:33:8f:57:4c:8a:ce:ec:66:90:9d:a7: ad:b3:1a:da:e6:19:47:d4:e3:14:f2:6e:f9:51:f5:94:eb:e0: 3d:2c:62:cd:cb:28:d5:dd:84:5a:b8:bd:44:11:05:37:9c:24: 3e:3c:c7:f7:9a:d8:d0:7d:99:59:f7:85:8a:65:24:00:24:6e: d5:7d:24:28:8c:7c:fc:11:85:ee:af:6c:3c:61:34:a7:53:0a: 39:39:31:4e:31:00:2d:87:41:e5:92:0e:44:f9:e5:f7:90:91: ba:03:ff:de:58:94:95:b7:d0:2e:3d:ca:47:19:90:3d:ff:62: 7b:85:da:28:eb:56:0a:3c:6c:ce:bb:6b:8a:aa:a8:e2:e6:20: 87:e5:03:b4:25:fc:26:6e:40:18:da:51:87:cb:54:97:cb:58: 96:75:f9:02:fe:70:2e:8a:5d:78:7a:24:ab:c2:b1:51:91:75: aa:5d:64:43:b6:01:68:3e:99:19:77:d9:9a:5d:57:e5:eb:65: af:88:d9:f1:50:36:eb:2a:72:82:fa:41:51:ab:7e:6e:7e:12: 38:6d:f0:cc -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1NWjb4O18MBQnDKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZWE2MGNkMDItZjg1ZS00MGUwLWIzYjAtZTQ4Mjg2ZjQyZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AMbOD/hLCEGJSsRAUHqcAFV6IHOnP4RJbMU FMNg8kDkEZEhnrOmP2kB1TwDS2Wj3zmFdpKNWc0zbXnNvLPL9dJUZkydwSnET0GC mX9Eo8wxHQKOSIjC0hwVriMjfcXqWv8KlQY7P2uYmEURX5N8FuREbPbzJHIDhtYr NGKIZlwAo/6oFDis7KitVBxucir2ooTk2nBcIKT9m+04QD6cv6wLmwGJwQP60oif 86xrxZMu/SSGKgaPIQWHMNWsi83XLWWhfShrZu1AaU8pqqnz8hKr9gGEP+vQErXJ +yzN7vxWzR1oI1U9xhaEg/MeUV8OweWwvXugjbqZrnr0adQEeQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFD5MpmfTfltoe6JgDqncj3vT8zb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjFjMmQzYzAtMzY5NS0z NTc2LTkwNzQtOTQzNWU3YjQyNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQl1LAwQA Ql35AwQARRFiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAL5VFQcZLTJtXOZYWiuoKzRW8RHyl6cSl3DwseG2 08Rie9EN9VyilPjvPjozj1dMis7sZpCdp62zGtrmGUfU4xTybvlR9ZTr4D0sYs3L KNXdhFq4vUQRBTecJD48x/ea2NB9mVn3hYplJAAkbtV9JCiMfPwRhe6vbDxhNKdT Cjk5MU4xAC2HQeWSDkT55feQkboD/95YlJW30C49ykcZkD3/YnuF2ijrVgo8bM67 a4qqqOLmIIflA7Ql/CZuQBjaUYfLVJfLWJZ1+QL+cC6KXXh6JKvCsVGRdapdZEO2 AWg+mRl32ZpdV+XrZa+I2fFQNusqcoL6QVGrfm5+Ejht8Mw= -----END CERTIFICATE-----Generated at Fri Apr 17 19:46:47 2026 by rpki-client