$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa File: d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa (raw, json) Hash identifier: kU+ZhQlsAtND2H52bwr7zg5CfarGOcpbQXdtxrtUMWY= Subject key identifier: 7F:06:B0:C4:28:5B:3A:FD:EE:17:1C:DB:FF:80:AD:2D:1B:22:41:B1 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584CAE5EAA9398B299D38AB46EC0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 30058 IP address blocks: 66.90.72.0/23 maxlen: 24 66.90.74.0/24 maxlen: 24 66.90.123.0/24 maxlen: 24 2001:49f0:d0fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:aa:93:98:b2:99:d3:8a:b4:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=fffd6669-532b-4a7b-a46b-6918b08963e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:79:1d:f8:9d:44:62:73:1c:68:39:0b:3d: 88:29:21:e8:d4:b6:ee:e4:ae:fe:15:10:92:34:07: 4b:d4:06:7a:d8:9b:99:6d:64:60:d5:97:9d:5f:43: b6:5a:c3:ca:e5:db:fe:70:57:18:3f:99:91:1e:4e: bf:5e:66:a1:5b:44:93:f3:bc:a7:32:67:cf:91:29: 10:38:7c:a4:29:df:1f:0a:d5:8d:86:14:8c:77:c3: d1:0f:1b:c7:a9:c7:4b:76:17:b1:86:87:95:b5:ce: 1a:2b:ac:7e:8d:d8:f0:ad:87:21:84:06:84:83:39: 5a:3f:ee:84:53:8d:38:da:c7:52:db:2a:34:fb:eb: 1a:c5:7a:07:13:9c:23:3a:c5:8f:5e:13:ac:77:ef: bc:0b:68:50:4f:fb:80:2c:a5:9f:f1:6c:26:9f:c0: 26:60:6c:17:68:1d:e7:a3:5e:51:02:1e:38:07:ff: 23:c1:c3:9c:87:e9:e7:f0:d1:73:ba:c8:be:e7:04: cb:0f:4f:f4:62:fb:29:26:ff:c8:73:65:d6:5b:77: 92:b1:bd:22:41:d3:34:7a:96:d7:00:72:30:d6:08: c9:9d:9a:8d:15:e2:28:c0:11:4d:61:17:39:34:e1: 6c:53:2c:1a:41:35:04:0e:5f:b2:ac:ea:4b:7d:a5: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:06:B0:C4:28:5B:3A:FD:EE:17:1C:DB:FF:80:AD:2D:1B:22:41:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 66.90.72.0-66.90.74.255 66.90.123.0/24 IPv6: 2001:49f0:d0fe::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:4e:82:0d:58:eb:79:16:72:88:c1:d0:36:06:0a:47:a1:22: f2:75:35:b7:96:95:66:c8:d1:0a:d5:2d:fb:97:4b:aa:18:a3: c5:4d:14:07:20:ed:84:a1:82:49:98:23:97:43:9b:92:cd:86: cf:f8:51:bb:59:03:df:82:f9:a7:23:ed:21:fb:11:e9:98:69: 49:29:59:b2:40:8e:55:54:59:0a:b9:c3:8c:0f:96:8b:8d:8c: 8f:ec:71:a9:49:3d:74:72:00:22:4e:b2:4f:1c:f8:cc:c5:9a: 16:da:64:d1:a2:1f:f0:4a:cb:34:f7:61:5f:ec:4a:b6:27:a3: 35:7b:99:4f:a4:22:dd:df:04:d5:12:47:40:3a:4e:aa:2e:5d: 75:78:25:dd:32:be:4e:de:b5:b7:fb:0c:5f:75:9c:38:c8:aa: 23:79:3c:f9:74:3a:32:74:34:7c:50:19:51:c1:12:e7:d7:33: 96:47:57:22:a5:2c:29:66:fa:b0:27:dc:26:36:62:59:54:4a: 28:6e:52:ea:b3:06:a4:a9:4f:98:24:c5:6b:f5:ca:65:92:89: 02:9e:66:b2:e0:7e:69:c5:d5:b4:14:0f:11:18:e7:7f:78:ed: d6:3c:cb:bd:4f:eb:0d:e6:73:bd:4f:fb:8f:98:f0:6c:23:88: 75:cc:87:ce -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWEyuXqqTmLKZ04q0bsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmZmZDY2NjktNTMyYi00YTdiLWE0NmItNjkxOGIwODk2M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo495HfidRGJzHGg5Cz2IKSHo1Lbu5K7+FRCS NAdL1AZ62JuZbWRg1ZedX0O2WsPK5dv+cFcYP5mRHk6/XmahW0ST87ynMmfPkSkQ OHykKd8fCtWNhhSMd8PRDxvHqcdLdhexhoeVtc4aK6x+jdjwrYchhAaEgzlaP+6E U4042sdS2yo0++saxXoHE5wjOsWPXhOsd++8C2hQT/uALKWf8Wwmn8AmYGwXaB3n o15RAh44B/8jwcOch+nn8NFzusi+5wTLD0/0YvspJv/Ic2XWW3eSsb0iQdM0epbX AHIw1gjJnZqNFeIowBFNYRc5NOFsUywaQTUEDl+yrOpLfaVeQwIDAQABo4IDdDCC A3AwHQYDVR0OBBYEFH8GsMQoWzr97hcc2/+ArS0bIkGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZDM2ZGVmN2ItZmI0Yi0z M2NiLWJkYjAtNzE5NWUyYWJhYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBANCWkgD BABCWkoDBABCWnswDwQCAAIwCQMHACABSfDQ/jBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPToINWOt5FnKI wdA2BgpHoSLydTW3lpVmyNEK1S37l0uqGKPFTRQHIO2EoYJJmCOXQ5uSzYbP+FG7 WQPfgvmnI+0h+xHpmGlJKVmyQI5VVFkKucOMD5aLjYyP7HGpST10cgAiTrJPHPjM xZoW2mTRoh/wSss092Ff7Eq2J6M1e5lPpCLd3wTVEkdAOk6qLl11eCXdMr5O3rW3 +wxfdZw4yKojeTz5dDoydDR8UBlRwRLn1zOWR1cipSwpZvqwJ9wmNmJZVEooblLq swakqU+YJMVr9cplkokCnmay4H5pxdW0FA8RGOd/eO3WPMu9T+sN5nO9T/uPmPBs I4h1zIfO -----END CERTIFICATE-----Generated at Sun Mar 1 20:42:43 2026 by rpki-client