$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/72016e7f-3aa6-391b-8024-3697c967554c.roa File: 72016e7f-3aa6-391b-8024-3697c967554c.roa (raw, json) Hash identifier: 07CpusWIYVfh9diiR+Lkff8/CBglNOmZlbSD+7tEy9I= Subject key identifier: 5D:D9:18:A3:A5:90:55:0F:B1:43:7D:3C:A8:95:DD:AC:7E:C1:1D:F3 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CA5F715B176B47468B7F83B00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/72016e7f-3aa6-391b-8024-3697c967554c.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 13576 IP address blocks: 66.231.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:15:b1:76:b4:74:68:b7:f8:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=1b4ba6b4-873c-4f0e-b410-5610a745edf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:0d:7b:1a:be:e2:fe:18:3c:2e:64:b7:b7: 98:52:a5:b6:25:b1:54:ee:ea:7a:32:40:e8:c2:26: 52:db:82:7b:c3:56:4a:36:18:bf:7e:1d:1e:cc:3d: 5e:30:d2:e0:f8:26:6b:80:d1:bd:6e:56:46:87:53: b0:09:b9:13:24:36:1a:bf:58:3d:97:73:1e:3b:79: 71:69:c4:f4:6d:69:69:d4:77:5f:b8:e3:7e:6d:c4: ce:10:c0:8e:3d:9e:bf:84:f0:37:f5:e1:5f:ec:8f: 5f:7b:c5:90:23:72:23:bd:aa:bf:b4:91:84:b1:c1: 40:d8:0e:bd:2e:1e:5b:07:5d:3d:33:c2:1f:48:21: f1:82:03:a8:17:ae:93:c8:37:95:14:43:18:c4:6d: 09:ca:e8:67:49:6f:dc:21:01:3d:d6:a8:79:59:75: 6c:62:0a:d3:05:2c:b8:e5:b1:f5:a8:ab:7b:d9:60: 5c:f4:a1:61:ab:6d:7d:de:a7:44:30:a6:67:87:7a: 47:dd:e1:6d:be:7b:5c:9e:d4:18:3e:68:6f:4c:3b: 21:27:fe:1f:0c:51:98:e2:2d:6e:56:9b:a9:00:62: db:b4:16:a7:7b:5d:6b:98:65:fa:b5:47:dc:df:cd: e9:82:a1:31:49:37:d5:4b:d9:d4:47:7f:e8:3f:16: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D9:18:A3:A5:90:55:0F:B1:43:7D:3C:A8:95:DD:AC:7E:C1:1D:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/72016e7f-3aa6-391b-8024-3697c967554c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:ac:06:28:cb:7f:fd:5f:cd:82:6f:4f:a8:92:9f:25:f6:1c: 8c:05:b4:0e:0b:db:1e:5d:6e:1c:3e:9a:ab:c6:f0:c7:45:1b: 89:92:bf:fe:23:18:a2:3c:48:e1:72:6c:f8:e3:0f:5c:9b:2a: 8a:ca:04:dc:56:b1:ad:5f:a9:a8:9f:49:ea:f3:41:3f:d0:61: c5:72:2a:03:55:7a:1c:c6:55:c6:a7:3c:11:ad:3c:97:5f:22: 2d:41:32:48:f0:e7:11:7f:3c:53:bf:e0:66:db:36:89:48:7d: 7e:c2:69:15:78:51:1d:04:ae:8d:a4:85:c2:6d:03:a9:94:f6: 8f:1d:ab:2c:71:d2:08:c0:51:77:c1:89:ea:0c:1f:b3:68:60: 51:58:40:e7:4f:32:58:1b:74:4e:75:64:ee:9c:6b:32:27:cf: 7f:9f:40:1f:41:c0:61:2e:a5:3f:58:9f:33:0a:c0:e7:f7:ad: 2c:d8:a9:66:f1:90:2f:cb:3d:02:22:ad:38:37:11:4e:65:b3: 5d:d5:ca:8e:00:2e:18:97:dc:dd:14:cd:23:c3:2b:a6:a2:07: e8:7b:8c:d6:d9:fc:a8:56:78:97:b5:de:67:15:c3:d0:0b:89: 02:02:a0:19:c5:3d:24:f2:5b:f7:40:72:4f:25:19:f2:60:bd: 48:26:5f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9xWxdrR0aLf4OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MWI0YmE2YjQtODczYy00ZjBlLWI0MTAtNTYxMGE3NDVlZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywANexq+4v4YPC5kt7eYUqW2JbFU7up6MkDo wiZS24J7w1ZKNhi/fh0ezD1eMNLg+CZrgNG9blZGh1OwCbkTJDYav1g9l3MeO3lx acT0bWlp1HdfuON+bcTOEMCOPZ6/hPA39eFf7I9fe8WQI3Ijvaq/tJGEscFA2A69 Lh5bB109M8IfSCHxggOoF66TyDeVFEMYxG0JyuhnSW/cIQE91qh5WXVsYgrTBSy4 5bH1qKt72WBc9KFhq2193qdEMKZnh3pH3eFtvntcntQYPmhvTDshJ/4fDFGY4i1u VpupAGLbtBane11rmGX6tUfc383pgqExSTfVS9nUR3/oPxZNFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3ZGKOlkFUPsUN9PKiV3ax+wR3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNzIwMTZlN2YtM2FhNi0z OTFiLTgwMjQtMzY5N2M5Njc1NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL6sBijLf/1fzYJvT6iSnyX2HIwFtA4L2x5dbhw+mqvG8MdFG4mSv/4j GKI8SOFybPjjD1ybKorKBNxWsa1fqaifSerzQT/QYcVyKgNVehzGVcanPBGtPJdf Ii1BMkjw5xF/PFO/4GbbNolIfX7CaRV4UR0Ero2khcJtA6mU9o8dqyxx0gjAUXfB ieoMH7NoYFFYQOdPMlgbdE51ZO6cazInz3+fQB9BwGEupT9YnzMKwOf3rSzYqWbx kC/LPQIirTg3EU5ls13Vyo4ALhiX3N0UzSPDK6aiB+h7jNbZ/KhWeJe13mcVw9AL iQICoBnFPSTyW/dAck8lGfJgvUgmX3U= -----END CERTIFICATE-----Generated at Mon Mar 2 07:15:29 2026 by rpki-client