$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa File: 3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa (raw, json) Hash identifier: J1M75s6sbAOU7DbjU5b8xcArFqiOW5D16iWdv8Qyeps= Subject key identifier: BE:CB:B9:D8:D8:EF:92:BB:39:DE:13:F9:08:42:95:B4:8B:D1:00:A6 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CEE8CE2765EEF0AF00B9FC710 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa Signing time: Sat 21 Feb 2026 02:00:32 +0000 ROA not before: Sat 21 Feb 2026 02:00:32 +0000 ROA not after: Fri 22 May 2026 01:00:32 +0000 asID: 18785 IP address blocks: 66.231.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ee:8c:e2:76:5e:ef:0a:f0:0b:9f:c7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 21 02:00:32 2026 GMT Not After : May 22 01:00:32 2026 GMT Subject: CN=0220560a-22d5-4889-80d3-850e13e17fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:0f:1b:69:dd:25:c9:2f:4e:a7:2d:83:0f: bd:e4:29:34:7d:5e:4e:c7:f8:92:9f:1f:ec:1d:d2: 56:b8:9e:23:8f:fa:54:ea:90:35:01:23:b5:9b:e8: 9e:eb:2a:19:c1:9a:6e:35:ac:c5:36:f2:d5:42:d4: 21:83:6e:db:29:2e:85:a1:9d:b6:33:af:58:97:aa: 2d:3b:48:ba:c0:ae:f1:5e:1b:a3:22:72:51:a7:e2: 1b:55:32:59:47:d7:98:c0:36:7d:24:47:b3:ae:24: d9:91:3a:ec:08:eb:93:4f:da:a7:39:07:92:6a:48: 4c:ac:84:5b:65:52:02:a6:1e:c9:1f:c3:10:cf:82: 06:e6:63:fc:b3:ad:92:3b:32:5b:33:18:cb:b8:8e: a1:6f:cf:e9:94:e4:0f:83:b6:c5:cf:f6:e6:14:54: 03:7c:ae:d7:be:68:ae:c0:13:56:96:f4:75:ae:be: 41:a1:f3:d1:11:1f:80:01:9c:7a:28:fc:3b:14:ab: 1b:d6:9d:13:e3:74:ca:6e:91:7f:b3:c8:f9:1d:19: 8c:26:59:f2:a1:1c:00:6e:45:50:8a:26:94:d6:5b: a2:37:e3:75:1f:7f:e4:fa:2d:67:a0:22:31:58:d0: a2:e8:b7:cb:30:c8:70:36:32:3c:cc:49:41:b1:09: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CB:B9:D8:D8:EF:92:BB:39:DE:13:F9:08:42:95:B4:8B:D1:00:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:be:ad:93:41:fc:4f:e7:d0:30:01:da:9f:89:08:0d:5f:c9: bd:ed:fb:10:9a:76:23:03:9c:69:91:e7:01:43:8d:f9:dc:43: 41:45:d5:38:0a:0b:f6:16:3c:af:47:06:1a:86:a9:58:77:09: ea:98:0a:ec:fa:af:65:66:06:a9:ca:ea:3d:51:44:de:19:9e: 8c:f9:4c:9c:4f:28:9b:95:07:87:a3:8e:3b:b2:ca:c4:b6:84: 09:b9:9e:28:7c:f3:46:00:1f:41:1c:b1:78:df:3a:e8:0f:9c: 0e:e5:89:f3:14:7d:c5:ee:7a:cc:e3:81:7e:db:5a:d8:a4:a7: fd:1a:ee:36:79:96:43:53:89:88:cd:f1:df:ae:18:81:c3:f2: d7:25:e9:b6:22:8d:f2:5d:2b:30:55:e0:2f:05:ac:7f:6d:bf: d0:58:5b:ae:de:db:92:fc:80:de:dd:0d:23:35:b6:59:c6:0e: e3:8b:03:bb:16:37:d2:c6:ad:9f:2f:3a:15:7b:0f:7a:bc:44: 23:e7:71:60:2c:30:a7:10:cf:4a:3b:78:7b:6a:27:02:1b:a4: 9f:18:2f:86:77:92:7e:d5:d9:e1:b0:1b:fb:1d:d3:66:44:cb: 9a:1b:71:6c:7e:7d:36:32:34:0d:cd:e5:57:f9:44:44:fb:58: 25:d5:b4:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzujOJ2Xu8K8AufxxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk MDIyMDU2MGEtMjJkNS00ODg5LTgwZDMtODUwZTEzZTE3ZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryMPG2ndJckvTqctgw+95Ck0fV5Ox/iSnx/s HdJWuJ4jj/pU6pA1ASO1m+ie6yoZwZpuNazFNvLVQtQhg27bKS6FoZ22M69Yl6ot O0i6wK7xXhujInJRp+IbVTJZR9eYwDZ9JEezriTZkTrsCOuTT9qnOQeSakhMrIRb ZVICph7JH8MQz4IG5mP8s62SOzJbMxjLuI6hb8/plOQPg7bFz/bmFFQDfK7Xvmiu wBNWlvR1rr5BofPRER+AAZx6KPw7FKsb1p0T43TKbpF/s8j5HRmMJlnyoRwAbkVQ iiaU1luiN+N1H3/k+i1noCIxWNCi6LfLMMhwNjI8zElBsQkzEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7LudjY75K7Od4T+QhClbSL0QCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvM2M0MmNmMTItNjFkMS0z ZTI2LWI3NGItMzU0NzJjNWUwY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi+rZNB/E/n0DAB2p+JCA1fyb3t+xCadiMDnGmR5wFDjfncQ0FF1TgK C/YWPK9HBhqGqVh3CeqYCuz6r2VmBqnK6j1RRN4Znoz5TJxPKJuVB4ejjjuyysS2 hAm5nih880YAH0EcsXjfOugPnA7lifMUfcXueszjgX7bWtikp/0a7jZ5lkNTiYjN 8d+uGIHD8tcl6bYijfJdKzBV4C8FrH9tv9BYW67e25L8gN7dDSM1tlnGDuOLA7sW N9LGrZ8vOhV7D3q8RCPncWAsMKcQz0o7eHtqJwIbpJ8YL4Z3kn7V2eGwG/sd02ZE y5obcWx+fTYyNA3N5Vf5RET7WCXVtBo= -----END CERTIFICATE-----Generated at Mon Mar 2 17:45:33 2026 by rpki-client