$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa File: 1aab2dbe-d208-3e83-ad04-b139cc44c834.roa (raw, json) Hash identifier: zKkVcEC0VHLWsR+9xqMWgif8WKl8mXkot+gwZEITlJc= Subject key identifier: B9:3E:DD:44:8F:C9:4E:48:62:5F:D1:44:E3:AB:FC:55:70:51:B7:88 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584CFDEAA453D3699A3A996B0D40 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 40509 IP address blocks: 66.241.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ea:a4:53:d3:69:9a:3a:99:6b:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=b4f5d69b-6ef7-40ed-8015-114ec65cc5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:13:b1:82:c2:2d:41:6a:dd:22:46:a1:a5:0b: 7c:ec:2f:c4:d9:f2:61:79:52:d7:3a:9a:eb:43:59: 4b:6d:54:7e:17:52:6a:9a:99:03:ae:b2:78:50:e7: 46:ce:53:ae:4e:18:22:76:70:24:eb:8f:4b:e6:b1: 47:2d:87:ea:45:d5:40:99:3d:d3:e0:ba:56:05:50: 9b:ad:c4:c9:be:30:dc:be:33:e5:8d:bd:f1:8d:35: 05:ed:28:d7:01:c1:24:ed:02:b3:6e:2d:e0:05:fb: 73:31:9b:fa:cd:18:8f:66:1a:94:d1:02:f4:82:07: 2d:78:96:3e:2f:21:f9:dd:ea:2e:48:6c:3c:31:1f: b2:09:28:3c:52:6e:f9:3b:2d:35:9b:51:37:fa:8a: 20:a6:99:d8:bc:ec:bf:f2:6a:ba:06:b0:d1:53:35: 0b:20:e1:ba:42:b2:b3:b9:20:c7:7d:aa:5e:9c:50: 7e:4d:95:21:da:a5:e9:71:69:1e:72:14:97:c3:7d: e2:5a:29:7a:88:59:11:95:ee:a9:7f:35:28:6c:3d: 34:ea:42:be:0b:07:26:92:79:c9:4d:a7:09:ed:88: c7:bd:94:88:72:e4:91:4d:8e:fc:2e:8d:8a:10:29: 84:c8:ff:8b:b6:9d:fa:a0:25:46:cf:2a:8a:2e:a2: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3E:DD:44:8F:C9:4E:48:62:5F:D1:44:E3:AB:FC:55:70:51:B7:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 66.241.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5d:c9:01:ee:92:06:f9:21:3a:d4:e8:10:47:7d:87:b1:47: ab:b2:14:ad:c7:e2:a9:d9:9d:42:61:69:bb:ba:24:b6:b1:1c: 89:f1:5c:0a:cb:47:8b:76:b8:78:17:7e:ec:9b:27:ca:25:57: 96:e8:33:fe:df:12:14:52:74:e9:7f:93:e6:b6:7a:bd:19:96: 23:47:bf:62:40:e7:c6:05:d3:56:05:73:35:c6:db:47:41:ec: 66:ab:03:42:9d:1d:64:34:d2:83:48:72:8e:66:d8:d7:2c:32: 60:da:00:f7:c5:04:6b:e7:f5:4a:64:94:00:b2:9c:e8:ad:b9: b1:ae:04:50:e1:c6:1f:e5:c5:c8:11:28:19:bb:16:7f:aa:7a: 6f:9f:1b:e0:7a:3a:a0:d8:4e:38:e7:d9:95:d2:f5:ac:72:1c: 9f:e1:d1:2e:47:04:5b:30:b0:3f:e4:15:a1:bf:81:ec:91:d3: 67:40:ad:b2:97:b6:ba:62:bf:eb:a1:aa:08:b1:c1:4a:ec:78: 83:3f:20:30:f7:07:30:0f:44:97:b9:e1:15:7f:b8:4a:97:c5: 6f:7c:ff:54:76:31:70:f4:02:91:5a:c2:4c:72:73:7a:cc:f4: ab:cb:3d:e1:76:ee:6a:92:b9:c1:84:6a:c4:d5:af:4d:a5:1f: 73:27:89:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96qRT02maOplrDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YjRmNWQ2OWItNmVmNy00MGVkLTgwMTUtMTE0ZWM2NWNjNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixOxgsItQWrdIkahpQt87C/E2fJheVLXOprr Q1lLbVR+F1JqmpkDrrJ4UOdGzlOuThgidnAk649L5rFHLYfqRdVAmT3T4LpWBVCb rcTJvjDcvjPljb3xjTUF7SjXAcEk7QKzbi3gBftzMZv6zRiPZhqU0QL0ggcteJY+ LyH53eouSGw8MR+yCSg8Um75Oy01m1E3+oogppnYvOy/8mq6BrDRUzULIOG6QrKz uSDHfapenFB+TZUh2qXpcWkechSXw33iWil6iFkRle6pfzUobD006kK+CwcmknnJ TacJ7YjHvZSIcuSRTY78Lo2KECmEyP+Ltp36oCVGzyqKLqKonQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk+3USPyU5IYl/RROOr/FVwUbeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMWFhYjJkYmUtZDIwOC0z ZTgzLWFkMDQtYjEzOWNjNDRjODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQvFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACddyQHukgb5ITrU6BBHfYexR6uyFK3H4qnZnUJhabu6JLaxHInxXArL R4t2uHgXfuybJ8olV5boM/7fEhRSdOl/k+a2er0ZliNHv2JA58YF01YFczXG20dB 7GarA0KdHWQ00oNIco5m2NcsMmDaAPfFBGvn9UpklACynOitubGuBFDhxh/lxcgR KBm7Fn+qem+fG+B6OqDYTjjn2ZXS9axyHJ/h0S5HBFswsD/kFaG/geyR02dArbKX trpiv+uhqgixwUrseIM/IDD3BzAPRJe54RV/uEqXxW98/1R2MXD0ApFawkxyc3rM 9KvLPeF27mqSucGEasTVr02lH3MniWs= -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:16 2026 by rpki-client