$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/25ac78b4-e1ca-3663-9d67-95abb9982390.roa File: 25ac78b4-e1ca-3663-9d67-95abb9982390.roa (raw, json) Hash identifier: ROSNcCAdAyBK/SApBA1C42NqwJNeb+WefS7oRBP53CQ= Subject key identifier: 9B:BC:66:9E:12:B6:EF:EE:69:8D:37:25:A1:96:C2:0F:43:CA:C1:43 Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Certificate serial: 010D0C9F4328584D59EA5A05D95879E417D0E0C0 Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/25ac78b4-e1ca-3663-9d67-95abb9982390.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 32329 IP address blocks: 158.247.68.0/22 maxlen: 24 176.108.136.0/21 maxlen: 24 207.53.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5a:05:d9:58:79:e4:17:d0:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=8f913d16-02c7-4291-bdb8-d7c38567ea8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e0:83:06:db:66:77:bb:81:6b:17:21:ea:4c: 75:83:dd:f0:18:a8:1e:b3:aa:a4:e5:f3:c7:20:c3: d8:36:56:bd:f3:f5:7e:55:01:77:40:6f:30:0d:f2: 85:f5:62:8c:d9:68:db:e5:ab:71:35:61:09:d7:f3: 74:70:a1:c8:1a:e1:97:eb:82:10:5e:50:7a:d9:ac: 56:62:bb:6b:13:2e:2a:0d:7a:8c:16:cf:a2:62:3b: 85:3d:10:8d:b2:f9:93:83:2a:de:45:ff:d9:4c:57: 6e:dd:64:b4:d9:33:de:4a:61:a8:47:9b:87:c7:bb: 92:98:5d:45:92:04:33:ad:9d:c8:78:4c:fc:d7:3b: 01:02:9f:8a:94:a0:54:ca:ef:de:84:e2:52:c6:20: 4d:52:91:00:53:e7:25:47:56:c3:2a:97:48:59:1e: b3:3e:f9:80:d5:44:eb:69:1d:df:82:87:70:c7:1a: da:74:1c:89:d9:83:ca:c2:b8:60:3f:ce:ac:f5:bf: d3:e2:1a:72:15:e7:5c:81:50:4e:62:90:9a:7b:a2: 54:a0:40:de:14:f3:66:cc:0d:e4:a2:cb:94:55:11: 3e:d7:aa:61:67:47:81:a9:b9:fb:94:b3:e7:3f:62: aa:4a:74:e7:2f:d4:9f:3f:32:d5:3b:19:00:dd:a8: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BC:66:9E:12:B6:EF:EE:69:8D:37:25:A1:96:C2:0F:43:CA:C1:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/25ac78b4-e1ca-3663-9d67-95abb9982390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl X509v3 Authority Key Identifier: keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer sbgp-ipAddrBlock: critical IPv4: 158.247.68.0/22 176.108.136.0/21 207.53.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:10:bb:a1:08:83:b5:e5:25:6b:7a:32:74:0c:37:6d:59:6b: 7a:47:92:91:6d:19:90:b9:d2:56:1c:a3:34:4e:e9:ed:a2:48: e5:88:14:13:ce:05:81:7c:50:a8:0b:4b:78:ff:e4:f5:ea:31: 76:f9:0f:ec:c9:11:f2:72:b4:2f:ca:cb:ec:16:32:e5:76:7a: 36:30:cf:47:88:0d:23:9d:26:b0:0e:81:fe:d5:25:6e:a2:90: 10:a7:2e:4a:a4:66:df:bb:7d:73:44:61:d0:49:6b:a2:d3:de: ab:43:03:d7:da:99:a6:53:4c:9c:10:79:32:10:8f:87:a4:9e: 78:94:05:69:b1:ac:4b:a2:e4:57:16:c5:d9:6f:d1:d0:2c:25: 5a:d0:1d:b8:66:0b:76:12:cb:64:61:10:2e:db:56:76:8d:9f: 31:0e:5a:0c:01:21:0d:c4:4c:a9:ef:e0:27:10:8f:6a:98:82: 23:b7:26:74:dd:a3:2d:e7:43:68:b0:72:b7:94:37:50:80:45: 17:f6:1d:9b:c7:bb:ea:0d:d2:74:af:89:c2:c4:c8:bc:ca:0b: 8c:09:e7:5a:ed:98:0c:3d:e9:66:2d:2b:2a:21:61:c3:f9:99: 15:fa:1d:4a:f9:e9:ef:e9:37:50:d9:b0:33:b0:92:99:2a:a7: c9:9a:ea:19 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1Z6loF2Vh55BfQ4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj N2YyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OGY5MTNkMTYtMDJjNy00MjkxLWJkYjgtZDdjMzg1NjdlYThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+CDBttmd7uBaxch6kx1g93wGKges6qk5fPH IMPYNla98/V+VQF3QG8wDfKF9WKM2Wjb5atxNWEJ1/N0cKHIGuGX64IQXlB62axW YrtrEy4qDXqMFs+iYjuFPRCNsvmTgyreRf/ZTFdu3WS02TPeSmGoR5uHx7uSmF1F kgQzrZ3IeEz81zsBAp+KlKBUyu/ehOJSxiBNUpEAU+clR1bDKpdIWR6zPvmA1UTr aR3fgodwxxradByJ2YPKwrhgP86s9b/T4hpyFedcgVBOYpCae6JUoEDeFPNmzA3k osuUVRE+16phZ0eBqbn7lLPnP2KqSnTnL9SfPzLVOxkA3ajALQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJu8Zp4Stu/uaY03JaGWwg9DysFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4 MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvMjVhYzc4YjQtZTFjYS0z NjYzLTlkNjctOTVhYmI5OTgyMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4 MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh ZTkyYWM3ZjIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnvdEAwQD sGyIAwQCzzX8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEcQu6EIg7XlJWt6MnQMN21Za3pHkpFtGZC50lYc ozRO6e2iSOWIFBPOBYF8UKgLS3j/5PXqMXb5D+zJEfJytC/Ky+wWMuV2ejYwz0eI DSOdJrAOgf7VJW6ikBCnLkqkZt+7fXNEYdBJa6LT3qtDA9famaZTTJwQeTIQj4ek nniUBWmxrEui5FcWxdlv0dAsJVrQHbhmC3YSy2RhEC7bVnaNnzEOWgwBIQ3ETKnv 4CcQj2qYgiO3JnTdoy3nQ2iwcreUN1CARRf2HZvHu+oN0nSvicLEyLzKC4wJ51rt mAw96WYtKyohYcP5mRX6HUr56e/pN1DZsDOwkpkqp8ma6hk= -----END CERTIFICATE-----Generated at Sat Apr 18 02:37:38 2026 by rpki-client