$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a5b5b30-02bf-3f4e-aa1b-7ba0309c08ba.roa File: 5a5b5b30-02bf-3f4e-aa1b-7ba0309c08ba.roa (raw, json) Hash identifier: o5fOJHfVkyP8gMSw5ZRgucJnrHs4Sz6tksptjB9F+1I= Subject key identifier: 02:0A:7C:5E:6B:03:D7:88:72:42:3B:EA:55:F9:83:3E:A0:78:7B:65 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CFDEAA6749EF54DF3EAACA7A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a5b5b30-02bf-3f4e-aa1b-7ba0309c08ba.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 400175 IP address blocks: 66.253.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ea:a6:74:9e:f5:4d:f3:ea:ac:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=5d2c61ba-a137-46cb-8383-a6b80d9e6eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:11:45:5c:bc:da:44:e8:ab:2a:8f:c5:d7: 0d:c3:20:98:16:d1:83:e6:fc:85:ee:95:89:2e:a4: 61:f3:71:b3:75:6a:f7:18:10:17:d6:58:3b:94:e0: 8a:68:66:86:4a:51:80:fb:58:e2:ce:f7:35:85:f3: f8:d8:2c:24:47:51:59:c7:df:be:57:68:1a:32:1f: f3:ce:50:16:22:51:dd:24:d8:6a:53:ca:4a:95:8d: e3:d4:65:24:3f:8b:db:94:16:da:95:25:2b:c0:ed: 3c:33:90:55:df:33:d9:f5:5a:10:4f:70:69:d2:43: 76:9a:e1:7c:1a:a3:5c:c2:15:13:2a:c0:1c:29:89: 80:cb:67:b3:f8:d8:d8:0b:2c:dc:61:de:74:20:90: d9:b4:e0:ac:9b:2e:af:6b:6c:b6:c6:83:d2:8c:4e: 2a:53:80:d8:26:c2:75:1d:69:8e:14:1d:0c:01:4c: 62:0b:28:04:50:3a:29:fa:8e:40:bb:0e:60:c2:c7: bd:1e:b4:ff:1a:24:3e:ff:ea:22:a5:2f:1b:6c:cf: 85:33:5b:e3:cc:2d:66:30:38:67:42:bd:1c:14:0d: c6:d1:06:62:21:da:f8:f6:2b:62:40:be:d3:90:fa: b2:6f:39:4c:72:a7:7c:89:3e:61:23:5f:f2:d1:12: 55:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0A:7C:5E:6B:03:D7:88:72:42:3B:EA:55:F9:83:3E:A0:78:7B:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a5b5b30-02bf-3f4e-aa1b-7ba0309c08ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:47:16:d6:31:47:64:13:b5:14:8a:23:ea:6d:52:3a:2f:e3: 76:36:82:37:00:36:53:a8:ad:85:e1:c3:7c:2f:7b:f6:58:ef: bf:5d:04:c9:8f:c6:d3:37:ab:1c:12:35:dc:00:06:b1:da:cd: 55:6b:bf:78:12:8d:42:49:03:55:43:8b:9b:dc:f7:9e:ae:7a: 79:c9:89:85:8b:a7:5f:d5:ba:58:d4:fd:01:91:b8:91:8c:3a: bd:d0:32:d0:a8:0d:2d:62:cb:83:b4:f9:ff:32:55:74:9c:65: 01:d2:39:b0:15:50:ac:98:30:d1:08:57:79:bc:d3:6b:18:75: 60:f7:94:2c:e9:d3:65:ed:6b:6c:42:82:79:27:5d:cd:56:07: 5f:8a:02:bf:7e:17:ca:56:ca:bd:00:33:49:b4:c0:bc:0a:ec: 8b:8b:44:4c:2d:b1:23:83:fd:b7:ba:d2:42:0d:79:9e:10:c0: 12:4c:c6:be:1c:bf:43:61:70:9f:6a:1c:88:26:4e:f1:39:cf: 10:c1:f2:49:94:69:46:c8:cd:ce:45:73:43:dc:e8:74:e7:c6: 9a:d1:2b:46:e1:97:74:bf:5c:74:23:81:17:2c:6b:bf:20:a0: 8d:3b:e0:df:03:95:8c:0f:9a:cc:2d:21:53:d9:f6:e5:4b:d3: 09:5a:bd:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96qZ0nvVN8+qsp6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk NWQyYzYxYmEtYTEzNy00NmNiLTgzODMtYTZiODBkOWU2ZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMkRRVy82kToqyqPxdcNwyCYFtGD5vyF7pWJ LqRh83GzdWr3GBAX1lg7lOCKaGaGSlGA+1jizvc1hfP42CwkR1FZx9++V2gaMh/z zlAWIlHdJNhqU8pKlY3j1GUkP4vblBbalSUrwO08M5BV3zPZ9VoQT3Bp0kN2muF8 GqNcwhUTKsAcKYmAy2ez+NjYCyzcYd50IJDZtOCsmy6va2y2xoPSjE4qU4DYJsJ1 HWmOFB0MAUxiCygEUDop+o5Auw5gwse9HrT/GiQ+/+oipS8bbM+FM1vjzC1mMDhn Qr0cFA3G0QZiIdr49itiQL7TkPqybzlMcqd8iT5hI1/y0RJVLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIKfF5rA9eIckI76lX5gz6geHtlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWE1YjViMzAtMDJiZi0z ZjRlLWFhMWItN2JhMDMwOWMwOGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJHFtYxR2QTtRSKI+ptUjov43Y2gjcANlOorYXhw3wve/ZY779dBMmP xtM3qxwSNdwABrHazVVrv3gSjUJJA1VDi5vc956uennJiYWLp1/VuljU/QGRuJGM Or3QMtCoDS1iy4O0+f8yVXScZQHSObAVUKyYMNEIV3m802sYdWD3lCzp02Xta2xC gnknXc1WB1+KAr9+F8pWyr0AM0m0wLwK7IuLREwtsSOD/be60kINeZ4QwBJMxr4c v0NhcJ9qHIgmTvE5zxDB8kmUaUbIzc5Fc0Pc6HTnxprRK0bhl3S/XHQjgRcsa78g oI074N8DlYwPmswtIVPZ9uVL0wlavQo= -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:59 2026 by rpki-client