$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19542bc1-46f6-36e5-9407-9fa15ba6d595.roa File: 19542bc1-46f6-36e5-9407-9fa15ba6d595.roa (raw, json) Hash identifier: zaYJWbUHrMmNFz38kv38qwgzNWNucgB9V90qjZq3FKU= Subject key identifier: FC:9D:C1:4C:B6:A4:89:81:8A:63:45:2E:66:D7:F3:E5:18:AD:3A:A4 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F4974D73A68B68F758F772300 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19542bc1-46f6-36e5-9407-9fa15ba6d595.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2914 IP address blocks: 108.165.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d7:3a:68:b6:8f:75:8f:77:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=32bcf4a6-aebb-4269-ae74-d1a10cf0af18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:1d:d2:74:f9:bd:d4:d9:cd:42:26:6b:36: 6d:cd:70:b4:07:dc:63:f6:1d:0d:56:ce:96:a7:b1: 6f:d7:30:75:a2:23:db:c1:55:26:16:01:e4:be:dc: da:0b:97:d7:aa:76:ad:97:a1:bb:a2:4e:67:d6:1c: 72:31:7a:1f:16:30:48:36:11:a3:3a:f7:67:f9:1e: 2c:2c:66:f0:85:af:0f:84:c6:6e:3a:04:45:3b:7c: 18:aa:bc:9f:91:b3:f2:3b:93:a9:e1:f6:04:75:74: 47:c4:5e:a6:2d:96:39:8d:db:9f:2c:ba:26:b6:de: 5f:75:52:9f:9e:cb:7a:40:81:d7:a7:d5:87:00:e4: 0e:66:01:8c:a3:4b:25:2a:85:4f:4e:9c:1f:b8:b3: e3:e1:bb:83:bb:e2:09:99:8d:32:95:39:70:8e:98: 45:f9:67:c3:2e:fd:87:29:8c:2e:9e:21:7b:48:af: e1:99:79:3f:78:fc:37:82:0f:da:e2:38:41:94:16: 52:42:64:41:33:ac:8c:10:7c:55:07:cd:c9:28:ce: aa:0a:28:08:04:8a:c7:50:8c:a9:08:bd:e9:cb:a0: 86:5d:99:b1:e2:be:3d:1d:79:cb:a1:b1:37:c0:00: cb:5f:f3:53:5e:1a:fc:a5:1d:00:60:52:43:ac:47: f5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9D:C1:4C:B6:A4:89:81:8A:63:45:2E:66:D7:F3:E5:18:AD:3A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19542bc1-46f6-36e5-9407-9fa15ba6d595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bf:4c:a1:29:2a:3c:06:8c:1d:8e:05:b8:da:55:0b:7a:fc: 14:f5:4b:9b:30:6a:12:ca:af:a3:58:85:b0:71:02:06:54:85: 93:37:38:8e:f3:d9:46:32:31:a7:67:a1:0b:18:ff:ce:80:6c: b0:75:eb:d8:0b:7d:2b:b5:ba:ac:ec:64:24:b8:05:fe:be:4b: 39:3c:4a:30:a7:ba:11:c2:81:ee:80:e7:4a:a3:c5:f3:18:a1: cc:aa:c5:32:46:e1:cf:32:0b:b9:99:bc:5f:a1:63:78:c4:11: da:84:c2:ac:f5:af:34:c4:ba:cf:d8:85:07:6b:cb:8e:bb:c5: 4b:4c:fe:82:a2:c4:93:df:d0:55:a3:86:a6:6c:f5:36:ba:d3: b4:d3:f9:23:07:50:9b:68:87:d5:a3:4e:93:b3:60:51:6e:4e: 1f:a9:e9:05:22:89:88:b3:2e:78:24:92:81:24:1e:be:04:71: 5a:9f:8d:7a:6e:72:9e:d8:79:06:2c:41:8e:36:3b:67:5f:20: 98:4a:0e:83:81:6c:5a:9a:f1:82:88:10:97:0f:23:02:47:af: 3c:54:58:de:5b:c8:ee:54:1c:35:01:25:a2:57:85:a8:83:a4: b7:78:d0:4e:1f:10:27:2c:3d:58:6a:de:3d:f2:26:e9:c5:c5: cb:3e:ca:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNc6aLaPdY93IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzJiY2Y0YTYtYWViYi00MjY5LWFlNzQtZDFhMTBjZjBhZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFEd0nT5vdTZzUImazZtzXC0B9xj9h0NVs6W p7Fv1zB1oiPbwVUmFgHkvtzaC5fXqnatl6G7ok5n1hxyMXofFjBINhGjOvdn+R4s LGbwha8PhMZuOgRFO3wYqryfkbPyO5Op4fYEdXRHxF6mLZY5jdufLLomtt5fdVKf nst6QIHXp9WHAOQOZgGMo0slKoVPTpwfuLPj4buDu+IJmY0ylTlwjphF+WfDLv2H KYwuniF7SK/hmXk/ePw3gg/a4jhBlBZSQmRBM6yMEHxVB83JKM6qCigIBIrHUIyp CL3py6CGXZmx4r49HXnLobE3wADLX/NTXhr8pR0AYFJDrEf1dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPydwUy2pImBimNFLmbX8+UYrTqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTk1NDJiYzEtNDZmNi0z NmU1LTk0MDctOWZhMTViYTZkNTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy/TKEpKjwGjB2OBbjaVQt6/BT1S5swahLKr6NYhbBxAgZUhZM3OI7z 2UYyMadnoQsY/86AbLB169gLfSu1uqzsZCS4Bf6+Szk8SjCnuhHCge6A50qjxfMY ocyqxTJG4c8yC7mZvF+hY3jEEdqEwqz1rzTEus/YhQdry467xUtM/oKixJPf0FWj hqZs9Ta607TT+SMHUJtoh9WjTpOzYFFuTh+p6QUiiYizLngkkoEkHr4EcVqfjXpu cp7YeQYsQY42O2dfIJhKDoOBbFqa8YKIEJcPIwJHrzxUWN5byO5UHDUBJaJXhaiD pLd40E4fECcsPVhq3j3yJunFxcs+ygg= -----END CERTIFICATE-----Generated at Sat Sep 26 07:49:41 2026 by rpki-client