$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/09bd9485-e750-3af8-b392-ad7716e4c8d3.roa File: 09bd9485-e750-3af8-b392-ad7716e4c8d3.roa (raw, json) Hash identifier: iOKtbyunfK5VMUCiY5UqQSj79POTjHxFMG4FvHby7Wc= Subject key identifier: 8F:1A:69:4C:3B:1F:BE:2A:FE:A8:8C:32:DF:28:CA:3A:06:90:66:3A Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584C969C490204BEE22E6B018580 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/09bd9485-e750-3af8-b392-ad7716e4c8d3.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 13576 IP address blocks: 66.128.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:49:02:04:be:e2:2e:6b:01:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=48b307c0-7af5-4e93-9469-d760d76b1279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9f:3a:db:e0:f4:02:5b:1b:39:b8:f4:b7:72: fa:0f:56:14:89:62:c5:d3:4f:3b:63:9f:c9:94:ca: ff:79:c3:fc:86:a2:a9:e9:c2:c8:64:76:dd:7e:04: 9b:f1:e4:24:2e:da:29:f3:44:37:d9:9c:1c:12:b0: 1a:ab:55:d0:75:bc:7b:f0:be:cc:5f:b8:5a:90:79: 96:fe:e2:88:fb:da:39:aa:8d:0e:c0:4e:34:c9:d7: 36:bf:6c:a3:b9:73:06:b5:cf:2b:2f:a3:c5:23:63: b7:4a:8d:d2:8c:59:17:87:9f:1a:66:16:71:38:20: 71:e4:67:44:3c:bd:a7:71:15:9e:c9:86:c2:cc:4b: 1d:06:6a:00:4a:05:ba:23:94:19:51:4e:09:33:c9: bf:62:88:eb:57:2f:64:14:6d:12:c7:ad:94:af:14: be:29:cb:14:2a:a6:59:be:e3:e0:b0:14:64:fe:38: 81:76:33:a9:ab:71:9d:2f:85:ed:82:64:e6:e5:f2: bf:bf:79:47:0c:c1:e5:4a:39:c3:49:40:f8:fa:24: 8b:7a:e7:e8:48:c5:cd:e3:f2:b6:14:db:74:c5:6a: 1c:c5:76:ab:0c:01:56:05:08:34:8e:9e:7c:06:44: 73:ac:88:6b:be:1e:9b:13:73:4b:de:a2:fe:8a:90: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1A:69:4C:3B:1F:BE:2A:FE:A8:8C:32:DF:28:CA:3A:06:90:66:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/09bd9485-e750-3af8-b392-ad7716e4c8d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:45:5d:7c:4e:81:15:33:5e:0d:58:e4:2f:3a:57:c4:69:d6: 65:a9:57:fa:91:86:91:7d:a6:8b:6c:ef:46:8f:bb:09:90:fe: fc:50:74:f2:fa:3b:8c:82:33:fb:69:d1:fa:7b:a0:65:46:0b: 64:f7:15:99:4e:b0:33:a3:73:9b:a6:bd:8f:62:3b:29:10:e5: 9e:ee:89:f5:11:de:8c:18:c2:2f:6a:7d:4a:d9:73:d1:2a:56: 31:dc:d1:35:10:a8:26:9f:f8:f2:6e:68:ea:6c:ff:42:59:c6: 1d:89:39:e6:1e:63:20:26:59:77:46:60:75:b3:db:3d:87:33: 1b:59:04:f6:c4:6b:51:c0:98:28:36:36:3f:92:2c:4c:6c:cf: 75:9c:e8:4e:92:9f:02:7a:c2:d3:40:ef:ce:a6:53:e5:79:eb: f6:1d:8f:f6:03:54:70:06:90:b2:75:a5:b3:72:c4:4a:a0:9b: f8:57:6c:88:c8:fe:56:51:cf:b4:d8:35:0b:b8:5a:51:ed:b4: 3f:97:f0:61:36:72:d5:d5:56:75:02:6d:ff:ba:f9:dd:a0:e7: b9:1b:f2:d1:19:09:1e:08:c6:6d:ba:f6:60:40:d9:da:cb:b9: b1:cf:fc:5c:ec:6b:85:b4:e3:51:9b:b2:2b:2c:c5:66:96:ef: 2e:6d:46:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnEkCBL7iLmsBhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk NDhiMzA3YzAtN2FmNS00ZTkzLTk0NjktZDc2MGQ3NmIxMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp862+D0AlsbObj0t3L6D1YUiWLF0087Y5/J lMr/ecP8hqKp6cLIZHbdfgSb8eQkLtop80Q32ZwcErAaq1XQdbx78L7MX7hakHmW /uKI+9o5qo0OwE40ydc2v2yjuXMGtc8rL6PFI2O3So3SjFkXh58aZhZxOCBx5GdE PL2ncRWeyYbCzEsdBmoASgW6I5QZUU4JM8m/YojrVy9kFG0Sx62UrxS+KcsUKqZZ vuPgsBRk/jiBdjOpq3GdL4XtgmTm5fK/v3lHDMHlSjnDSUD4+iSLeufoSMXN4/K2 FNt0xWocxXarDAFWBQg0jp58BkRzrIhrvh6bE3NL3qL+ipAepQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8aaUw7H74q/qiMMt8oyjoGkGY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDliZDk0ODUtZTc1MC0z YWY4LWIzOTItYWQ3NzE2ZTRjOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZFXXxOgRUzXg1Y5C86V8Rp1mWpV/qRhpF9pots70aPuwmQ/vxQdPL6 O4yCM/tp0fp7oGVGC2T3FZlOsDOjc5umvY9iOykQ5Z7uifUR3owYwi9qfUrZc9Eq VjHc0TUQqCaf+PJuaOps/0JZxh2JOeYeYyAmWXdGYHWz2z2HMxtZBPbEa1HAmCg2 Nj+SLExsz3Wc6E6SnwJ6wtNA786mU+V56/Ydj/YDVHAGkLJ1pbNyxEqgm/hXbIjI /lZRz7TYNQu4WlHttD+X8GE2ctXVVnUCbf+6+d2g57kb8tEZCR4Ixm269mBA2drL ubHP/Fzsa4W041GbsissxWaW7y5tRiA= -----END CERTIFICATE-----Generated at Mon Mar 2 07:13:33 2026 by rpki-client