$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f605a850-6882-3ff4-8e5a-22633ce98113.roa File: f605a850-6882-3ff4-8e5a-22633ce98113.roa (raw, json) Hash identifier: OoN0DUSGgnGU+TKUyOqFJBmpBmxRMXs2MI7C/VT9lIc= Subject key identifier: 54:5C:78:1A:39:3A:CB:BA:82:36:4B:46:31:7F:11:B0:83:90:F9:64 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CB33C9BF79AEEB3B993258D80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f605a850-6882-3ff4-8e5a-22633ce98113.roa Signing time: Fri 30 Jan 2026 20:06:27 +0000 ROA not before: Fri 30 Jan 2026 20:06:27 +0000 ROA not after: Thu 30 Apr 2026 19:06:27 +0000 asID: 402159 IP address blocks: 66.128.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b3:3c:9b:f7:9a:ee:b3:b9:93:25:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 30 20:06:27 2026 GMT Not After : Apr 30 19:06:27 2026 GMT Subject: CN=9b43e26d-01b3-4d59-b20c-910527fe27c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a0:12:3d:4f:3c:47:28:94:6b:28:28:56:17: 60:80:0b:55:a9:d2:2a:cb:05:a7:4a:d1:4f:9b:f9: 1c:8c:02:9d:c9:17:01:50:68:ff:fd:de:88:f6:f2: 03:c5:79:cd:9a:30:cf:79:78:c3:a5:28:5b:58:64: 62:89:c6:97:26:45:56:99:65:c0:82:24:2e:26:95: 54:dd:92:66:ae:26:25:12:e8:e5:06:a2:11:cf:04: 74:8d:f1:27:86:41:59:2e:8a:bb:92:29:a7:a3:3d: 9d:b9:93:bd:2b:b6:2f:c3:e0:1e:d7:71:03:bc:19: 91:57:19:56:d8:bc:b3:9e:9d:4e:9d:33:49:09:3d: ab:ec:b5:78:67:2b:1a:d0:d0:59:01:0b:85:dc:9d: ca:38:20:af:f7:ad:13:25:14:fb:c9:dd:60:71:1b: f3:6e:5b:cb:57:1d:77:56:6a:10:13:dd:f9:89:a6: e9:a0:01:4b:92:0f:0e:75:f9:e6:7b:4a:f3:36:ed: aa:09:36:53:e9:26:e1:82:27:c3:46:0d:ed:b9:7e: d2:37:d3:18:c1:d2:8b:d9:ba:09:6a:4f:d2:c4:32: c9:e5:2d:ae:8f:1b:9f:11:fa:31:53:32:23:e9:41: 78:ad:0e:ba:8d:4a:18:78:4a:00:94:b1:69:19:f4: 6a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5C:78:1A:39:3A:CB:BA:82:36:4B:46:31:7F:11:B0:83:90:F9:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f605a850-6882-3ff4-8e5a-22633ce98113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:95:40:c1:ad:79:9c:5b:d5:37:41:0c:5b:c4:4e:76:55:d3: 84:6d:ac:75:e4:ef:59:ff:d5:d6:7d:4c:5a:01:e6:cf:21:37: 1c:f8:ac:2f:6e:29:17:05:26:fa:59:89:06:12:ce:83:27:a8: 9a:03:65:09:fc:a2:7d:26:6c:9a:b2:c2:42:0c:88:72:8d:a3: a7:8f:1b:5d:4f:7b:9a:8b:4e:06:e1:e6:6f:02:37:7d:d3:fc: 98:2b:3f:a5:6a:1f:fd:bf:96:63:6e:b8:c5:cb:9b:dd:1d:60: 71:e1:cc:a8:61:aa:61:98:16:72:9d:01:fd:07:3a:35:3f:1e: 50:3a:64:6f:fb:6d:e3:57:fd:8f:a0:d6:15:af:40:2a:9b:ed: 24:e1:00:43:d5:fe:38:10:93:9d:dd:35:9c:d8:7b:fa:7a:54: 93:14:83:2e:fb:b9:e2:67:2e:25:6d:b6:7f:68:06:25:4f:18: 12:cb:e2:43:55:1c:b3:d3:5a:72:59:40:89:95:98:51:77:e7: ae:49:fe:99:e6:59:2d:b5:f4:76:49:e4:2b:af:f5:03:44:a4: 06:a9:64:de:b8:5f:dc:a6:d8:e0:36:9c:c1:00:b4:98:77:d0: 12:e6:22:93:07:7c:31:dc:8d:f9:62:ef:d0:33:0b:a9:d4:9b: 45:12:c5:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyzPJv3mu6zuZMljYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEzMDIwMDYyN1oXDTI2MDQzMDE5MDYyN1owLzEtMCsGA1UEAxMk OWI0M2UyNmQtMDFiMy00ZDU5LWIyMGMtOTEwNTI3ZmUyN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqASPU88RyiUaygoVhdggAtVqdIqywWnStFP m/kcjAKdyRcBUGj//d6I9vIDxXnNmjDPeXjDpShbWGRiicaXJkVWmWXAgiQuJpVU 3ZJmriYlEujlBqIRzwR0jfEnhkFZLoq7kimnoz2duZO9K7Yvw+Ae13EDvBmRVxlW 2Lyznp1OnTNJCT2r7LV4Zysa0NBZAQuF3J3KOCCv960TJRT7yd1gcRvzblvLVx13 VmoQE935iabpoAFLkg8Odfnme0rzNu2qCTZT6SbhgifDRg3tuX7SN9MYwdKL2boJ ak/SxDLJ5S2ujxufEfoxUzIj6UF4rQ66jUoYeEoAlLFpGfRq2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRceBo5Osu6gjZLRjF/EbCDkPlkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjYwNWE4NTAtNjg4Mi0z ZmY0LThlNWEtMjI2MzNjZTk4MTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOVQMGteZxb1TdBDFvETnZV04RtrHXk71n/1dZ9TFoB5s8hNxz4rC9u KRcFJvpZiQYSzoMnqJoDZQn8on0mbJqywkIMiHKNo6ePG11Pe5qLTgbh5m8CN33T /JgrP6VqH/2/lmNuuMXLm90dYHHhzKhhqmGYFnKdAf0HOjU/HlA6ZG/7beNX/Y+g 1hWvQCqb7SThAEPV/jgQk53dNZzYe/p6VJMUgy77ueJnLiVttn9oBiVPGBLL4kNV HLPTWnJZQImVmFF3565J/pnmWS219HZJ5Cuv9QNEpAapZN64X9ym2OA2nMEAtJh3 0BLmIpMHfDHcjfli79AzC6nUm0USxVE= -----END CERTIFICATE-----Generated at Mon Mar 2 17:36:29 2026 by rpki-client