$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa File: 2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa (raw, json) Hash identifier: TGZ8lcE3IACM51K1v/pG71y/Pg4AtEpRRMDW2flD2NE= Subject key identifier: F9:CE:67:40:3F:90:3E:14:16:ED:AF:4F:36:4F:43:0E:D0:58:48:31 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D47C4E389C38C2A6F014B6B00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 211440 IP address blocks: 108.165.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e3:89:c3:8c:2a:6f:01:4b:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=071f9b08-777b-43e0-a6c8-24e78787c9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:ce:39:70:58:3d:ca:e2:fb:e9:66:25:4a: 6f:5c:2d:23:f7:b2:44:4d:03:db:6c:f4:44:5b:b2: 35:2f:c2:7d:ab:bc:4e:02:08:5e:c9:9e:7a:9d:69: 42:26:e9:b1:e5:30:53:5a:f0:06:e5:72:27:80:8c: bb:de:d3:e9:b3:d8:93:39:ac:60:b9:ab:2f:34:4c: b4:be:66:fe:c4:01:23:de:b6:6d:d1:70:db:fc:47: 53:a9:70:57:65:cc:69:bb:e4:7b:42:0d:56:fa:d6: b7:d3:e1:97:dd:8a:47:e2:5d:bb:89:a0:7a:a7:5d: 11:94:ae:cc:58:10:82:1d:3e:1c:3e:34:0f:ce:5a: c7:0b:8d:79:fa:b3:58:54:e9:05:7b:91:5d:e8:a6: 1b:13:40:bf:d6:ad:78:d7:ce:87:43:d0:bf:f0:d7: e7:3a:7b:bd:40:d4:ca:5b:cd:08:38:a8:dc:8c:de: c6:c9:bf:d6:d1:ed:03:db:03:bf:98:d0:d1:1a:31: bf:5e:f2:3e:ce:fb:7b:bb:e3:3b:be:3a:b6:57:cd: 3e:7d:89:cd:f8:da:fd:ac:6e:3d:1f:f2:62:27:81: 0a:b9:44:cb:b2:db:0a:ee:28:53:13:a8:97:26:d1: 33:21:8a:b3:56:5a:58:69:43:29:23:1c:aa:b6:e8: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CE:67:40:3F:90:3E:14:16:ED:AF:4F:36:4F:43:0E:D0:58:48:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:63:3c:98:3f:8a:bc:09:43:42:ca:48:5f:02:92:70:85:c7: 70:78:52:bd:2c:51:d9:bd:ec:cb:ff:fd:cb:38:ac:9d:e9:a4: 83:cb:01:85:05:b7:5e:c6:ba:1b:8c:65:5b:a8:94:98:b1:33: b7:46:71:9e:30:22:f5:45:42:f0:75:75:88:bd:3b:13:2a:2a: 66:75:cc:27:37:6c:d0:71:16:a1:88:46:96:19:0c:8d:8c:51: 11:13:c1:b3:28:ac:d8:3c:73:01:a5:44:a1:d7:58:c0:0a:b3: c3:db:59:5e:1d:17:6a:6c:9b:ba:2e:c0:32:09:34:3f:f2:41: dc:7c:1a:79:6b:22:75:14:73:32:9a:01:21:dd:50:3b:46:25: ff:24:17:d1:9a:60:97:84:4e:22:8d:d7:0a:b0:35:a8:17:e9: ff:9e:c6:e7:cd:73:30:8e:6d:f5:a6:21:bc:80:14:b2:d4:3e: 92:4c:80:5d:c6:df:c6:2c:71:2f:1a:72:b4:c2:1d:e4:19:41: ec:1f:22:d5:fd:a5:13:aa:5c:aa:76:52:c9:a4:d3:00:4e:1d: 6a:b6:1c:8a:b8:3e:00:a6:76:18:13:6d:23:c8:23:d9:da:7d: e8:db:59:33:e3:2c:f0:5f:f6:5e:8a:7d:b9:c3:ee:ee:2a:b9: 77:48:ca:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOOJw4wqbwFLawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk MDcxZjliMDgtNzc3Yi00M2UwLWE2YzgtMjRlNzg3ODdjOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov3OOXBYPcri++lmJUpvXC0j97JETQPbbPRE W7I1L8J9q7xOAgheyZ56nWlCJumx5TBTWvAG5XIngIy73tPps9iTOaxguasvNEy0 vmb+xAEj3rZt0XDb/EdTqXBXZcxpu+R7Qg1W+ta30+GX3YpH4l27iaB6p10RlK7M WBCCHT4cPjQPzlrHC415+rNYVOkFe5Fd6KYbE0C/1q14186HQ9C/8NfnOnu9QNTK W80IOKjcjN7Gyb/W0e0D2wO/mNDRGjG/XvI+zvt7u+M7vjq2V80+fYnN+Nr9rG49 H/JiJ4EKuUTLstsK7ihTE6iXJtEzIYqzVlpYaUMpIxyqtuiDFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnOZ0A/kD4UFu2vTzZPQw7QWEgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmVmYzdkMzctMWZlMi0z ZjAzLTg5NTktZTkwM2ZlZjlmNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1jPJg/irwJQ0LKSF8CknCFx3B4Ur0sUdm97Mv//cs4rJ3ppIPLAYUF t17GuhuMZVuolJixM7dGcZ4wIvVFQvB1dYi9OxMqKmZ1zCc3bNBxFqGIRpYZDI2M URETwbMorNg8cwGlRKHXWMAKs8PbWV4dF2psm7ouwDIJND/yQdx8GnlrInUUczKa ASHdUDtGJf8kF9GaYJeETiKN1wqwNagX6f+exufNczCObfWmIbyAFLLUPpJMgF3G 38YscS8acrTCHeQZQewfItX9pROqXKp2Usmk0wBOHWq2HIq4PgCmdhgTbSPII9na fejbWTPjLPBf9l6KfbnD7u4quXdIysg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:59:51 2026 by rpki-client