$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff971885-7bcb-333a-88cf-2a63fe664d3a.roa File: ff971885-7bcb-333a-88cf-2a63fe664d3a.roa (raw, json) Hash identifier: XsXu3F2Jct4W3rW+zRQsVArpy0KIydwtOM8rrkR5Zo4= Subject key identifier: 43:0B:88:3A:76:7C:D0:1E:5B:F0:2D:D0:9F:07:65:45:DF:BD:8B:9F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CA5F74B9C6E06D63375FB3B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff971885-7bcb-333a-88cf-2a63fe664d3a.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 6079 IP address blocks: 66.92.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:4b:9c:6e:06:d6:33:75:fb:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=b5dd0c02-45b3-46b8-bb1a-9e4b6436a8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:e9:fa:70:44:f5:37:12:e4:68:22:21:ed: d7:68:06:09:62:aa:cc:f4:35:f4:b8:85:06:b4:d5: b0:01:b2:4d:4e:2a:fd:16:42:67:da:22:e8:99:1b: 4c:7c:f3:3e:b5:2c:8a:f5:0b:7b:a6:5a:6a:35:c3: 50:01:e9:97:97:95:32:c5:a7:1c:73:29:a2:9e:99: 7f:2e:11:b9:76:50:0c:11:8f:d3:1e:c6:ce:b8:ac: 3a:87:82:7d:07:65:df:cf:40:3d:f9:8a:ba:e7:8e: 22:05:f8:58:f2:09:6a:76:99:37:21:67:d8:bb:d4: d4:cd:41:91:70:fe:e0:5c:99:c1:22:72:b9:5d:ff: 5c:cc:66:48:2f:ac:3c:15:07:68:3f:4a:b6:bf:73: 8c:85:ae:36:dd:50:04:6d:d9:d0:52:a2:95:50:64: d5:56:16:a4:fd:c6:85:a5:b0:bc:03:ec:e7:e5:97: 16:98:dd:fe:e6:3c:f6:ff:87:d0:96:6c:b0:a2:27: cc:48:5e:f7:27:80:ac:6f:30:4b:0a:43:9c:ff:3b: 57:2e:eb:1e:c9:ce:28:ed:32:23:e8:40:0f:96:78: 4b:61:5c:bd:0f:05:a3:c9:94:96:38:7c:48:06:72: af:c4:a7:8a:89:55:cb:32:84:17:3f:f1:35:a8:3e: e2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0B:88:3A:76:7C:D0:1E:5B:F0:2D:D0:9F:07:65:45:DF:BD:8B:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff971885-7bcb-333a-88cf-2a63fe664d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:af:71:be:83:25:0f:59:0b:ce:fc:d6:2b:1d:b1:33:6b:c5: ff:7f:f9:2e:86:9a:ed:3a:2a:9e:18:bf:da:8d:6a:21:dd:37: c8:a6:f7:a8:b0:01:08:5d:4e:02:d4:c0:01:72:50:29:70:83: 79:6e:82:cc:59:b7:00:cd:c1:03:35:74:11:6a:09:ef:71:fa: 22:28:3f:e7:55:c9:56:b8:69:b8:22:6d:d7:53:4f:60:f8:54: 50:d8:fb:31:bc:fe:c2:5d:4b:1e:e3:57:fc:76:b0:97:1e:42: 20:6c:65:e9:3a:2c:21:92:3b:b4:7e:05:08:59:a7:08:79:91: 41:2f:29:63:f4:38:d0:94:03:aa:56:1d:cb:1f:af:a5:2e:f2: b9:9f:44:12:11:cb:be:51:13:f4:02:19:aa:82:16:b9:a1:84: 5e:bd:48:89:65:4b:be:e2:79:41:f5:95:93:4c:09:59:77:fc: ed:aa:4a:d8:cd:5e:72:46:7a:c2:07:00:02:96:db:0d:a3:48: 55:fd:bc:97:7c:c5:3f:13:ec:60:3d:7b:d9:83:31:c3:6b:87: 55:9c:a4:c1:29:aa:59:ba:45:e8:74:d1:55:ec:ff:45:af:c4: db:e0:ec:64:2c:aa:f6:96:f6:2a:35:ea:1c:74:f4:bb:48:c0: 9e:fd:28:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90ucbgbWM3X7O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk YjVkZDBjMDItNDViMy00NmI4LWJiMWEtOWU0YjY0MzZhOGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PTp+nBE9TcS5GgiIe3XaAYJYqrM9DX0uIUG tNWwAbJNTir9FkJn2iLomRtMfPM+tSyK9Qt7plpqNcNQAemXl5Uyxacccyminpl/ LhG5dlAMEY/THsbOuKw6h4J9B2Xfz0A9+Yq6544iBfhY8glqdpk3IWfYu9TUzUGR cP7gXJnBInK5Xf9czGZIL6w8FQdoP0q2v3OMha423VAEbdnQUqKVUGTVVhak/caF pbC8A+zn5ZcWmN3+5jz2/4fQlmywoifMSF73J4CsbzBLCkOc/ztXLuseyc4o7TIj 6EAPlnhLYVy9DwWjyZSWOHxIBnKvxKeKiVXLMoQXP/E1qD7iXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMLiDp2fNAeW/At0J8HZUXfvYufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmY5NzE4ODUtN2JjYi0z MzNhLTg4Y2YtMmE2M2ZlNjY0ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6vcb6DJQ9ZC8781isdsTNrxf9/+S6Gmu06Kp4Yv9qNaiHdN8im96iw AQhdTgLUwAFyUClwg3lugsxZtwDNwQM1dBFqCe9x+iIoP+dVyVa4abgibddTT2D4 VFDY+zG8/sJdSx7jV/x2sJceQiBsZek6LCGSO7R+BQhZpwh5kUEvKWP0ONCUA6pW Hcsfr6Uu8rmfRBIRy75RE/QCGaqCFrmhhF69SIllS77ieUH1lZNMCVl3/O2qStjN XnJGesIHAAKW2w2jSFX9vJd8xT8T7GA9e9mDMcNrh1WcpMEpqlm6Reh00VXs/0Wv xNvg7GQsqvaW9io16hx09LtIwJ79KKI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:24 2026 by rpki-client