$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa File: 4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa (raw, json) Hash identifier: YS3RIsrBWUvQrtUdb/WcOG4+JI96DyXyrvToVBZibco= Subject key identifier: 97:AC:52:B7:ED:9F:B2:BD:2F:4D:66:86:E1:01:96:F7:E5:02:E5:BA Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Certificate serial: 010D0C9F4328584C8A0C66BA2BE025BD73CCB0C0 Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 46562 IP address blocks: 66.115.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:66:ba:2b:e0:25:bd:73:cc:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=85da4528-e816-4c06-9e7c-52e900f2d834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:21:3c:20:85:21:7b:6e:9e:a3:ee:49:55:dd: 2a:da:17:78:05:88:04:d5:3f:07:44:d0:d5:be:64: a5:0e:f7:f8:e8:fb:18:61:58:70:78:76:b4:1d:cb: 43:39:8e:7f:fc:cb:b8:2e:6a:d5:e7:2b:79:23:ac: e9:dd:2a:87:54:dc:9b:6d:28:fe:03:2c:45:d3:32: 22:09:11:d2:54:f8:09:46:73:f0:b4:2e:6c:28:5d: 66:ba:c0:a6:fe:97:5f:8a:76:ab:da:e8:2b:2f:cc: 15:70:b5:e4:6d:5f:ff:a7:2a:fd:8a:7a:c8:71:48: 20:5c:ac:f6:a1:e8:1b:89:16:b4:08:51:db:28:15: ee:42:46:28:b7:7f:31:b3:65:b6:3e:5a:49:3e:eb: 66:19:51:68:32:0f:47:07:e0:c0:ff:6d:7e:60:74: 17:8d:b8:d6:6b:96:2b:b4:4a:18:44:28:dd:2c:46: 41:34:8f:85:f8:5c:0d:be:7f:dd:8f:e9:fa:db:f4: 14:77:1f:c4:20:5e:73:3e:d3:6a:6f:d0:7a:e2:eb: 7c:21:f3:3f:e6:9f:32:8c:f5:17:b1:86:c7:05:ba: 06:64:41:4d:5f:e0:88:3c:02:79:5c:58:80:4f:cd: 5e:50:ba:2d:7e:72:24:0a:22:dc:0e:d1:72:71:4e: a6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AC:52:B7:ED:9F:B2:BD:2F:4D:66:86:E1:01:96:F7:E5:02:E5:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl X509v3 Authority Key Identifier: keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer sbgp-ipAddrBlock: critical IPv4: 66.115.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3a:a9:88:a6:4b:65:35:42:7b:55:49:a9:7b:6d:81:b1:c0: 9e:85:da:17:27:50:61:3c:f6:f7:87:b2:1b:74:a7:63:82:cd: 2a:7f:1b:1e:63:73:a3:d8:b3:37:b5:43:c3:83:99:7e:7b:c8: 4a:b1:cc:55:ad:3d:7e:0b:2b:aa:d9:38:bf:51:e5:ab:65:e9: 3c:48:20:b1:b9:48:19:dd:53:83:9e:ad:50:b0:84:96:df:0f: cd:a4:dc:c5:b2:d6:39:78:54:3b:31:de:1e:80:71:e1:52:57: 28:a7:10:53:ad:8b:b1:a9:ad:1f:db:36:0b:65:48:d6:7e:d9: 45:f6:a2:89:5b:ca:45:b0:96:c4:da:30:d5:9b:30:75:75:ac: be:4a:e5:ff:ea:c0:e7:8f:15:6d:75:18:5e:12:77:f9:08:d9: 16:c9:8a:4b:3b:ad:b0:f9:f5:2e:78:e8:c0:32:c6:20:9f:1c: 4c:e6:5e:76:1c:38:9b:03:3c:ff:af:34:cd:08:2c:f9:2b:c6: 63:b9:04:b3:b7:03:7a:2b:e2:79:d7:70:b0:2a:3c:b9:d6:a6: 3f:3a:34:8c:2e:de:ab:d2:80:74:0a:72:db:c8:b4:2e:70:0f: 72:d4:4a:82:52:61:f3:62:c3:19:1b:d6:fd:e8:a5:d7:40:5f: 49:91:64:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDGa6K+AlvXPMsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex Mjc5MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk ODVkYTQ1MjgtZTgxNi00YzA2LTllN2MtNTJlOTAwZjJkODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSE8IIUhe26eo+5JVd0q2hd4BYgE1T8HRNDV vmSlDvf46PsYYVhweHa0HctDOY5//Mu4LmrV5yt5I6zp3SqHVNybbSj+AyxF0zIi CRHSVPgJRnPwtC5sKF1musCm/pdfinar2ugrL8wVcLXkbV//pyr9inrIcUggXKz2 oegbiRa0CFHbKBXuQkYot38xs2W2PlpJPutmGVFoMg9HB+DA/21+YHQXjbjWa5Yr tEoYRCjdLEZBNI+F+FwNvn/dj+n62/QUdx/EIF5zPtNqb9B64ut8IfM/5p8yjPUX sYbHBboGZEFNX+CIPAJ5XFiAT81eULotfnIkCiLcDtFycU6mvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJesUrftn7K9L01mhuEBlvflAuW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvNGVkYTdlYWEtMTg2Zi0z ZDJiLWE4ODAtYTQzODJhYjg5OTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3 MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQnOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB46qYimS2U1QntVSal7bYGxwJ6F2hcnUGE89veHsht0p2OCzSp/Gx5j c6PYsze1Q8ODmX57yEqxzFWtPX4LK6rZOL9R5atl6TxIILG5SBndU4OerVCwhJbf D82k3MWy1jl4VDsx3h6AceFSVyinEFOti7GprR/bNgtlSNZ+2UX2oolbykWwlsTa MNWbMHV1rL5K5f/qwOePFW11GF4Sd/kI2RbJiks7rbD59S546MAyxiCfHEzmXnYc OJsDPP+vNM0ILPkrxmO5BLO3A3or4nnXcLAqPLnWpj86NIwu3qvSgHQKctvItC5w D3LUSoJSYfNiwxkb1v3opddAX0mRZMA= -----END CERTIFICATE-----Generated at Mon Mar 2 08:34:42 2026 by rpki-client