$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a27957f7-abee-30d3-bf91-a801977d45db.roa File: a27957f7-abee-30d3-bf91-a801977d45db.roa (raw, json) Hash identifier: aYB9nhzBe4US2OOHCLsYG0gtF7/I4HCfN3w7IO0dhS8= Subject key identifier: E9:DE:B2:FF:D3:A6:7A:5E:CC:E3:3E:3B:9D:3D:23:EE:88:F1:E4:75 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CCBA741A1A4DC4CDD7399C480 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a27957f7-abee-30d3-bf91-a801977d45db.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 9304 IP address blocks: 66.92.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:41:a1:a4:dc:4c:dd:73:99:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=b97b189b-b352-4680-ae4f-34c415aa6286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:ca:82:3a:d2:f8:4e:ed:61:2b:f2:0d:0e: 25:cf:c0:be:21:b4:3f:42:c2:36:e7:a9:3d:98:5f: 2d:54:ea:f4:c2:0d:37:0c:de:ff:29:02:c4:38:7e: 0b:11:1e:ee:a7:91:fb:17:46:9d:7e:27:95:65:db: 43:c3:10:59:cf:2b:2d:59:6c:6b:02:83:0b:b5:5a: d3:9a:3d:c1:99:29:4d:ac:2e:ad:99:84:bf:3e:98: 17:18:1b:25:21:9b:a6:56:89:6b:7e:c4:4f:3a:4d: 86:03:35:6d:b5:0d:e4:46:db:66:46:e6:3a:ef:34: c2:71:2f:de:dd:3c:42:97:20:18:5a:75:3a:ed:16: 63:cc:9a:10:64:df:af:88:92:19:d0:b6:17:47:26: f5:4f:28:ac:74:f6:d9:1e:ee:67:86:c1:0a:30:16: 7b:e4:08:ea:01:0c:b2:e3:b4:64:92:0b:d2:fa:c6: b6:82:bc:d2:08:18:f6:42:6a:ab:88:bd:af:d9:ae: 63:5b:c0:75:bb:52:cc:a6:66:77:8d:d4:b4:59:74: 28:70:ee:cc:a7:73:9a:09:99:a9:7a:63:69:4a:8c: 6b:01:68:7b:50:1f:5b:a3:4f:c6:10:df:93:8d:ea: a5:11:6e:47:2a:3e:24:fe:0e:fd:12:82:d3:b4:95: 02:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DE:B2:FF:D3:A6:7A:5E:CC:E3:3E:3B:9D:3D:23:EE:88:F1:E4:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a27957f7-abee-30d3-bf91-a801977d45db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2e:f6:00:38:6f:70:f3:74:77:96:93:d1:3b:16:7d:1c:9e: 25:15:27:55:fd:d3:2f:f0:36:86:3f:4f:e7:c5:53:5a:5e:99: e0:05:1c:27:b1:65:27:9d:5f:32:74:36:0e:67:12:53:6b:b7: b9:9a:12:b1:b6:a8:77:e3:c4:f9:41:2c:d6:1d:f7:fe:34:e8: 28:b1:c2:b7:5d:dd:64:4a:a5:03:6c:08:d9:e0:e2:d1:23:6b: 22:fb:9c:79:92:11:79:72:78:c1:f8:a0:a8:53:e0:ee:a8:04: 3c:54:12:e0:53:62:da:2b:86:f3:46:75:76:3d:e9:a9:d4:46: da:43:d6:ee:be:8d:8e:ea:ea:f5:9e:32:a9:e7:fd:31:fd:b3: bf:10:e6:0a:d5:b6:58:6e:bf:06:85:c5:60:20:82:b7:f0:1c: 06:01:3e:30:93:87:03:97:fc:d4:6b:77:29:b5:88:5a:e0:ad: 1a:2b:51:e8:b1:e7:be:00:f9:3a:a5:a2:97:26:d6:0f:08:72: 86:66:94:e5:5d:e2:e0:60:2f:8d:22:11:17:9e:9c:9b:c7:f1: c1:6d:1e:d0:e9:22:92:db:25:20:a2:7b:89:bf:a3:b3:ba:77: 41:0a:bb:18:5d:60:f3:b4:eb:91:27:be:26:a7:7d:01:39:d5: 34:54:78:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp0GhpNxM3XOZxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk Yjk3YjE4OWItYjM1Mi00NjgwLWFlNGYtMzRjNDE1YWE2Mjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCTKgjrS+E7tYSvyDQ4lz8C+IbQ/QsI256k9 mF8tVOr0wg03DN7/KQLEOH4LER7up5H7F0adfieVZdtDwxBZzystWWxrAoMLtVrT mj3BmSlNrC6tmYS/PpgXGBslIZumVolrfsRPOk2GAzVttQ3kRttmRuY67zTCcS/e 3TxClyAYWnU67RZjzJoQZN+viJIZ0LYXRyb1TyisdPbZHu5nhsEKMBZ75AjqAQyy 47RkkgvS+sa2grzSCBj2QmqriL2v2a5jW8B1u1LMpmZ3jdS0WXQocO7Mp3OaCZmp emNpSoxrAWh7UB9bo0/GEN+TjeqlEW5HKj4k/g79EoLTtJUC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnesv/TpnpezOM+O509I+6I8eR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTI3OTU3ZjctYWJlZS0z MGQzLWJmOTEtYTgwMTk3N2Q0NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlz1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUu9gA4b3DzdHeWk9E7Fn0cniUVJ1X90y/wNoY/T+fFU1pemeAFHCex ZSedXzJ0Ng5nElNrt7maErG2qHfjxPlBLNYd9/406Cixwrdd3WRKpQNsCNng4tEj ayL7nHmSEXlyeMH4oKhT4O6oBDxUEuBTYtorhvNGdXY96anURtpD1u6+jY7q6vWe Mqnn/TH9s78Q5grVtlhuvwaFxWAggrfwHAYBPjCThwOX/NRrdym1iFrgrRorUeix 574A+Tqlopcm1g8IcoZmlOVd4uBgL40iEReenJvH8cFtHtDpIpLbJSCie4m/o7O6 d0EKuxhdYPO065EnvianfQE51TRUeIA= -----END CERTIFICATE-----Generated at Sun Mar 1 21:08:13 2026 by rpki-client