$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dcaca63-2f73-350d-8a07-e890be1d6bf7.roa File: 1dcaca63-2f73-350d-8a07-e890be1d6bf7.roa (raw, json) Hash identifier: fQeMFkpXX9PfK86W7AcLN2GfqP23fZHpyRYwjPrGBcg= Subject key identifier: FD:1A:E2:15:44:99:DE:1A:E9:EC:CD:20:93:83:06:66:9E:D7:10:92 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D237A75933E054A1271DD2F40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dcaca63-2f73-350d-8a07-e890be1d6bf7.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 8100 IP address blocks: 166.1.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:75:93:3e:05:4a:12:71:dd:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=dcb0f528-cb09-4dc4-b125-e957b865de23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:63:ac:41:56:2d:0e:21:81:b7:25:4f:da:7e: d6:92:68:02:6e:33:2c:8f:bc:a8:dc:33:39:96:19: 54:de:bc:63:f6:87:4c:8e:3a:cd:82:e8:35:35:35: 0f:6f:be:9b:16:05:61:9c:07:c1:cb:d3:6f:86:f5: d4:50:c1:0c:3b:e3:ea:4f:6b:ce:cf:da:17:50:b3: da:09:cd:6b:f7:59:2c:20:0d:53:0c:27:1b:75:bb: 9e:30:44:64:d1:f1:ba:4d:f6:0c:02:c3:3e:01:ff: 12:3a:a3:be:2f:b3:55:f6:8a:50:44:a5:59:19:06: 99:52:62:8e:d1:04:02:58:4e:8e:d0:0b:36:63:13: 89:22:b8:d9:0e:16:39:f9:9a:70:69:6d:5c:eb:b9: 10:bc:09:ef:d7:d2:b8:d6:c6:91:c4:d3:0f:0d:b5: 5f:9f:52:1d:fd:5b:81:4e:d7:4d:a8:8a:89:67:fe: 7d:7c:57:f7:57:e8:85:54:62:6e:95:76:9c:19:b1: 78:52:06:94:6e:69:51:5d:5b:59:e2:22:08:1e:d7: 52:9c:15:05:d2:26:81:57:63:e7:d8:b8:cc:35:cd: bb:b5:ad:d8:33:02:04:b8:03:88:23:0c:ec:f5:c6: 47:28:3d:d3:59:77:1c:60:71:2a:b9:25:2a:94:c1: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1A:E2:15:44:99:DE:1A:E9:EC:CD:20:93:83:06:66:9E:D7:10:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dcaca63-2f73-350d-8a07-e890be1d6bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:84:a4:83:24:a2:e4:87:a3:79:d9:59:cc:31:59:fe:9f:60: c7:b1:44:6a:15:94:b5:93:d6:9e:4c:14:c9:16:94:74:df:9c: 55:61:b6:2a:7a:a4:5e:29:39:60:56:6d:52:bb:52:03:37:2b: e3:c7:cc:b0:ae:15:a4:d6:8e:7a:e0:33:29:10:db:cd:8f:41: 70:59:4e:f8:9b:96:fa:33:da:3b:d9:41:c8:f3:d8:07:34:5a: d3:f1:d3:78:ad:a1:ed:7c:31:34:d0:78:1e:9f:9f:de:24:0a: 1b:10:52:5f:3b:f8:73:c1:ed:f9:58:a1:1f:d5:8e:b5:ca:d0: 10:0e:b4:21:04:c5:98:f4:05:43:8a:3b:aa:ea:b8:2d:80:df: 13:2a:1c:cc:18:bf:8a:18:81:a2:cd:4b:f6:ba:83:a0:39:ea: 05:6e:81:53:e3:a1:dc:75:77:e1:ae:3f:34:86:03:52:9f:b6: ad:2d:2b:06:a9:98:f0:eb:c7:06:d3:0c:d5:43:59:b8:fa:a3: 59:9f:01:95:75:9b:95:09:59:a7:f1:28:88:3d:c5:44:1a:52: 2a:d5:69:f9:aa:6c:cb:26:f1:18:55:6d:7e:b3:d7:22:ff:3e: fe:cc:99:b6:ba:5e:27:bd:ec:4d:46:fa:6f:60:6a:b3:fb:c6: b9:ab:c5:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jenWTPgVKEnHdL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZGNiMGY1MjgtY2IwOS00ZGM0LWIxMjUtZTk1N2I4NjVkZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32OsQVYtDiGBtyVP2n7WkmgCbjMsj7yo3DM5 lhlU3rxj9odMjjrNgug1NTUPb76bFgVhnAfBy9NvhvXUUMEMO+PqT2vOz9oXULPa Cc1r91ksIA1TDCcbdbueMERk0fG6TfYMAsM+Af8SOqO+L7NV9opQRKVZGQaZUmKO 0QQCWE6O0As2YxOJIrjZDhY5+ZpwaW1c67kQvAnv19K41saRxNMPDbVfn1Id/VuB TtdNqIqJZ/59fFf3V+iFVGJulXacGbF4UgaUbmlRXVtZ4iIIHtdSnBUF0iaBV2Pn 2LjMNc27ta3YMwIEuAOIIwzs9cZHKD3TWXccYHEquSUqlMEFvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0a4hVEmd4a6ezNIJODBmae1xCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWRjYWNhNjMtMmY3My0z NTBkLThhMDctZTg5MGJlMWQ2YmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiEpIMkouSHo3nZWcwxWf6fYMexRGoVlLWT1p5MFMkWlHTfnFVhtip6 pF4pOWBWbVK7UgM3K+PHzLCuFaTWjnrgMykQ282PQXBZTviblvoz2jvZQcjz2Ac0 WtPx03itoe18MTTQeB6fn94kChsQUl87+HPB7flYoR/VjrXK0BAOtCEExZj0BUOK O6rquC2A3xMqHMwYv4oYgaLNS/a6g6A56gVugVPjodx1d+GuPzSGA1Kftq0tKwap mPDrxwbTDNVDWbj6o1mfAZV1m5UJWafxKIg9xUQaUirVafmqbMsm8RhVbX6z1yL/ Pv7Mmba6Xie97E1G+m9garP7xrmrxSI= -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:05 2026 by rpki-client