$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d37294ee-a7af-3742-acf7-729e4b9e2378.roa File: d37294ee-a7af-3742-acf7-729e4b9e2378.roa (raw, json) Hash identifier: ubUx+HBBgmQdpaU5wM/0idT5dsSM9KOqvvxI2wsj2a8= Subject key identifier: D3:42:6B:C3:AD:7D:FC:35:D4:28:50:77:3D:F9:F8:B3:30:B7:8D:D8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CE4C7B05126006B644581E500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d37294ee-a7af-3742-acf7-729e4b9e2378.roa Signing time: Tue 17 Feb 2026 14:00:41 +0000 ROA not before: Tue 17 Feb 2026 14:00:41 +0000 ROA not after: Mon 18 May 2026 13:00:41 +0000 asID: 5650 IP address blocks: 66.253.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:c7:b0:51:26:00:6b:64:45:81:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 17 14:00:41 2026 GMT Not After : May 18 13:00:41 2026 GMT Subject: CN=4d32b8e1-4856-41ac-82d9-8abfb6dfee51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:0f:80:2b:ac:2e:5e:9c:72:77:0e:18:ae: 7f:56:82:78:89:b5:c4:a8:97:fb:28:19:d9:05:fb: d8:d6:00:b1:6f:d3:16:13:86:5b:98:f5:7b:d9:da: 56:c3:f1:6f:55:3c:ad:c5:de:b6:a7:0c:91:53:72: e2:41:06:85:6a:a3:78:34:6a:e8:c1:4f:fc:40:ce: eb:31:d0:e8:e8:f7:99:5d:e5:10:b2:ed:48:14:51: ad:0a:b3:86:55:33:76:45:11:43:5e:52:dc:92:a7: f3:59:8a:fd:79:31:77:bb:cd:61:79:a6:be:9e:2f: 60:e7:66:5c:72:ad:0e:c9:cd:85:7a:69:be:1c:5e: 9f:68:d5:44:fb:17:b5:4a:64:a5:ea:3c:b3:6f:55: ea:0a:f3:a0:64:2e:5d:b8:dd:ae:92:57:a6:1f:49: f1:b0:44:59:2f:47:d7:98:83:1d:3b:be:af:6c:7c: 9f:45:9b:2a:40:c3:56:c7:56:84:d7:e8:6b:fc:51: 34:cf:13:57:fb:b9:b5:e6:72:04:99:fd:af:99:90: 49:36:94:70:39:f9:38:29:d1:5b:5f:bf:fa:67:23: 59:69:52:2c:74:c8:ff:a0:a8:07:05:d0:6b:4a:ee: 89:d0:a6:f4:56:2e:bd:8e:03:5b:a1:df:7e:85:b1: fa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:42:6B:C3:AD:7D:FC:35:D4:28:50:77:3D:F9:F8:B3:30:B7:8D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d37294ee-a7af-3742-acf7-729e4b9e2378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1e:6b:9c:fa:dd:f8:51:2c:79:6f:2b:32:f3:36:cc:e0:5d: e7:f7:7b:02:d9:0e:94:ba:19:2f:8a:37:17:ae:20:70:b8:83: 05:60:01:2f:52:1e:25:b0:fd:7c:88:09:c7:42:b4:7a:2d:9b: 80:9f:ba:2e:f4:45:9b:5a:b1:f4:ca:0d:cc:d7:03:64:b6:e1: 80:1b:a6:c0:82:ac:c7:bc:7f:19:89:29:62:49:94:68:55:eb: f4:af:ee:2b:dc:df:05:eb:58:dc:21:d4:03:a7:0d:1e:f6:5b: 5c:a8:57:54:10:38:63:04:f7:c6:be:29:65:ad:f1:aa:a6:5f: 96:60:3c:44:ea:db:5d:38:9f:ea:90:a0:77:5c:7f:83:e0:fe: be:07:59:83:ac:97:33:b1:e2:2d:f5:cd:f5:e4:6d:1f:f5:54: 17:81:ed:e2:57:71:1d:f1:2e:0b:73:20:a0:a5:19:1f:95:39: 9f:fe:4c:35:3c:a9:da:5d:45:46:63:83:ec:1a:d7:2f:fe:ea: 7c:c7:76:98:a6:bd:a8:3c:13:13:c0:3a:c8:77:72:71:01:1c: d1:ae:fa:f2:90:aa:b2:20:3a:89:6a:65:19:09:9d:ee:2b:af: cf:e6:7c:d2:28:86:15:22:e4:f7:56:b0:23:63:06:c5:56:29: 8b:6d:0b:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzkx7BRJgBrZEWB5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk NGQzMmI4ZTEtNDg1Ni00MWFjLTgyZDktOGFiZmI2ZGZlZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3kPgCusLl6ccncOGK5/VoJ4ibXEqJf7KBnZ BfvY1gCxb9MWE4ZbmPV72dpWw/FvVTytxd62pwyRU3LiQQaFaqN4NGrowU/8QM7r MdDo6PeZXeUQsu1IFFGtCrOGVTN2RRFDXlLckqfzWYr9eTF3u81heaa+ni9g52Zc cq0Oyc2Femm+HF6faNVE+xe1SmSl6jyzb1XqCvOgZC5duN2uklemH0nxsERZL0fX mIMdO76vbHyfRZsqQMNWx1aE1+hr/FE0zxNX+7m15nIEmf2vmZBJNpRwOfk4KdFb X7/6ZyNZaVIsdMj/oKgHBdBrSu6J0Kb0Vi69jgNbod9+hbH6ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNCa8Otffw11ChQdz35+LMwt43YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDM3Mjk0ZWUtYTdhZi0z NzQyLWFjZjctNzI5ZTRiOWUyMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8ea5z63fhRLHlvKzLzNszgXef3ewLZDpS6GS+KNxeuIHC4gwVgAS9S HiWw/XyICcdCtHotm4Cfui70RZtasfTKDczXA2S24YAbpsCCrMe8fxmJKWJJlGhV 6/Sv7ivc3wXrWNwh1AOnDR72W1yoV1QQOGME98a+KWWt8aqmX5ZgPETq2104n+qQ oHdcf4Pg/r4HWYOslzOx4i31zfXkbR/1VBeB7eJXcR3xLgtzIKClGR+VOZ/+TDU8 qdpdRUZjg+wa1y/+6nzHdpimvag8ExPAOsh3cnEBHNGu+vKQqrIgOolqZRkJne4r r8/mfNIohhUi5PdWsCNjBsVWKYttC1w= -----END CERTIFICATE-----Generated at Mon Mar 2 13:06:53 2026 by rpki-client