$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0856c4df-26a7-3efa-8450-82b646b79445.roa File: 0856c4df-26a7-3efa-8450-82b646b79445.roa (raw, json) Hash identifier: 3qsVQe737UnLDyzHDubU2jEuwiPXoTHirK33XoPF14c= Subject key identifier: 5A:7D:D9:88:38:48:68:B2:03:7A:A2:2B:57:03:33:70:C2:73:51:CE Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D300A4FC101C208268FDE3400 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0856c4df-26a7-3efa-8450-82b646b79445.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 61317 IP address blocks: 108.165.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:4f:c1:01:c2:08:26:8f:de:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=bf304925-560e-4925-a3e0-b2c63a3baa36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:4f:6b:99:ea:51:a9:d9:89:07:ff:7d:5d: 82:a6:e0:7e:f5:eb:e6:b6:06:d2:20:64:ed:62:e2: 5e:06:bb:24:fb:5e:3b:a2:74:e0:47:f8:16:f8:f9: 78:ae:ed:a3:74:bc:05:e0:d9:17:7a:38:ba:ca:c0: a4:4c:3f:29:3a:14:b7:f6:29:a3:25:a1:a0:41:aa: eb:bc:c3:8e:76:9a:a2:ed:40:e8:fa:3f:e8:68:1d: 77:49:fe:c6:0f:06:6f:88:86:72:57:a3:df:c6:19: 6d:96:84:5f:ae:eb:35:03:67:90:e1:1c:53:65:61: e4:ac:48:b4:73:35:37:73:79:e9:01:f2:c1:da:37: 34:34:41:8b:ea:a3:2e:0d:d2:9b:9d:5f:80:95:6c: e8:0d:20:18:4f:99:dc:68:c8:05:84:32:f4:b7:c5: f9:0b:88:6c:ba:2f:c0:9b:64:89:79:a1:0a:d8:03: 6e:9d:e3:cc:27:02:37:b3:12:ea:80:61:f9:87:86: 92:76:6d:a3:04:d4:44:14:c4:12:a2:36:de:09:0f: 36:aa:7b:44:cb:f5:46:6c:6c:47:4a:35:1f:4b:b3: 3f:c7:96:0a:8e:8a:b5:61:33:23:25:fd:46:8b:a7: 68:b4:fa:92:59:fd:c7:08:d2:fa:18:d8:a2:07:5a: 0f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7D:D9:88:38:48:68:B2:03:7A:A2:2B:57:03:33:70:C2:73:51:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0856c4df-26a7-3efa-8450-82b646b79445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:02:a2:77:23:91:88:a8:6e:f7:33:9f:07:5d:72:c0:e7:0d: 08:10:d3:09:b1:47:06:3c:5a:3b:b3:4a:a0:6a:07:46:19:d8: e1:26:82:59:50:b7:81:45:d3:e0:82:f4:36:1a:19:b4:d1:1a: 05:08:08:47:af:91:f8:89:4b:7d:c0:b0:c5:6e:9e:ad:15:5c: 09:40:e5:a0:c2:fa:46:ef:18:df:61:55:a7:7a:68:4f:38:10: 48:aa:8f:16:4b:17:8c:40:6d:06:18:16:47:7f:16:aa:c7:b7: 2a:f1:64:15:0c:c2:12:84:d3:dc:fa:90:40:bf:70:da:fd:7f: a1:d4:81:be:f2:01:8f:ef:c2:30:e4:9f:a7:65:85:0e:f1:4c: 45:86:39:ad:2b:fc:27:a6:1a:60:93:ee:59:18:78:2e:5d:e8: bf:14:14:a5:26:ce:fc:d8:43:aa:4f:9c:bc:3b:a8:65:22:d5: 03:83:7a:bd:c8:5b:d7:a2:de:42:9c:c1:e2:db:30:1b:95:f8: 0a:ad:2a:f1:05:1e:f1:55:ff:b0:f1:5e:e3:d3:7b:80:6b:b9: b4:9a:78:4e:9e:94:53:8e:b2:12:ca:de:82:fb:a0:cc:3c:25: bb:02:50:50:6c:ff:3b:c4:2d:1c:d6:39:26:79:9b:bf:22:e4: c0:1f:8f:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCk/BAcIIJo/eNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YmYzMDQ5MjUtNTYwZS00OTI1LWEzZTAtYjJjNjNhM2JhYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf1Pa5nqUanZiQf/fV2CpuB+9evmtgbSIGTt YuJeBrsk+147onTgR/gW+Pl4ru2jdLwF4NkXeji6ysCkTD8pOhS39imjJaGgQarr vMOOdpqi7UDo+j/oaB13Sf7GDwZviIZyV6PfxhltloRfrus1A2eQ4RxTZWHkrEi0 czU3c3npAfLB2jc0NEGL6qMuDdKbnV+AlWzoDSAYT5ncaMgFhDL0t8X5C4hsui/A m2SJeaEK2ANunePMJwI3sxLqgGH5h4aSdm2jBNREFMQSojbeCQ82qntEy/VGbGxH SjUfS7M/x5YKjoq1YTMjJf1Gi6dotPqSWf3HCNL6GNiiB1oPpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp92Yg4SGiyA3qiK1cDM3DCc1HOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDg1NmM0ZGYtMjZhNy0z ZWZhLTg0NTAtODJiNjQ2Yjc5NDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkConcjkYiobvcznwddcsDnDQgQ0wmxRwY8WjuzSqBqB0YZ2OEmgllQ t4FF0+CC9DYaGbTRGgUICEevkfiJS33AsMVunq0VXAlA5aDC+kbvGN9hVad6aE84 EEiqjxZLF4xAbQYYFkd/FqrHtyrxZBUMwhKE09z6kEC/cNr9f6HUgb7yAY/vwjDk n6dlhQ7xTEWGOa0r/CemGmCT7lkYeC5d6L8UFKUmzvzYQ6pPnLw7qGUi1QODer3I W9ei3kKcweLbMBuV+AqtKvEFHvFV/7DxXuPTe4BrubSaeE6elFOOshLK3oL7oMw8 JbsCUFBs/zvELRzWOSZ5m78i5MAfj5M= -----END CERTIFICATE-----Generated at Thu Mar 26 15:06:12 2026 by rpki-client