$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa File: 3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa (raw, json) Hash identifier: 1EiQGDd0LCJkPQmIPAvo8TMbdUBdvN/i8kHJNiaTSzE= Subject key identifier: C9:A0:ED:5E:CF:2A:35:75:5B:76:DE:27:9F:EC:A6:12:41:61:1E:93 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D1F4A622AC968C23D66DD1988 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 132335 IP address blocks: 166.0.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:62:2a:c9:68:c2:3d:66:dd:19:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=5b871c4d-a33c-4c75-a091-4dee9181ec77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:bd:6d:fd:ce:e6:ec:4a:59:d3:cd:90:46: 63:f4:7d:07:1a:42:4f:00:fa:a4:19:c1:fe:5d:1e: bc:9b:db:5e:36:06:e3:64:c2:1f:60:70:0d:f8:e2: 19:d8:1a:0f:2e:5a:a1:7c:66:16:a5:71:03:2f:31: d9:29:c3:41:6f:eb:2e:47:39:e6:96:60:52:81:06: 7c:2b:29:4a:12:0f:aa:2c:5d:5c:c6:88:6b:e6:96: 27:08:26:06:5c:05:60:fa:ab:c4:d2:a6:ad:6f:72: 0b:91:9b:7d:8b:34:72:d7:27:b6:41:7e:b5:b2:c5: 3a:da:56:95:15:13:18:33:d5:9e:38:d7:81:0f:35: 64:fc:e3:0d:77:32:13:97:13:2c:51:6f:26:ea:59: db:d3:36:ff:f5:fe:a3:61:71:cd:0f:60:5f:2f:75: e3:23:ec:a3:b1:21:38:7a:db:6a:f3:07:ad:27:a4: 42:4e:f8:e3:c6:12:e5:e5:6f:0e:a0:f0:ec:49:77: dd:ee:0c:e8:57:c6:80:4c:1e:eb:7b:38:cc:db:f4: c8:91:fb:15:cf:c3:a8:7c:95:0b:7f:a5:29:e0:7f: dd:d1:95:de:88:68:10:8c:17:48:04:be:04:22:8f: 57:4b:0c:49:97:e5:48:4c:3f:b0:9d:01:0d:53:1f: 3c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A0:ED:5E:CF:2A:35:75:5B:76:DE:27:9F:EC:A6:12:41:61:1E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:42:bf:0e:43:2f:66:fa:0a:01:d8:87:59:3c:b0:ce:4d:6e: 45:6a:4a:d0:f9:b1:8e:b6:dd:e5:4c:ab:f9:24:8d:ea:0a:80: 83:09:fc:a3:00:f6:e4:41:a3:58:8f:65:54:42:81:d8:47:0d: 8d:40:d1:ee:e2:5a:da:b3:c4:c4:42:33:3a:bd:0a:42:b9:6b: 07:25:1f:0d:c4:e5:c5:b8:a4:db:c7:91:fa:2a:a7:f1:71:5d: 89:ce:58:ed:c6:cc:9d:83:25:14:63:55:61:13:2e:c1:20:e2: e2:80:65:49:69:75:d7:3d:c3:59:8a:f6:3e:67:b1:28:20:f0: c6:c4:af:8e:6c:7c:4d:4c:5a:30:01:98:ce:44:fc:07:8f:43: b3:45:21:0e:ab:28:29:ae:7d:86:b2:34:67:e1:62:65:c3:d8: 93:6d:6e:bd:74:57:30:25:b7:cc:ca:c7:11:07:ec:f2:d6:d0: 6e:01:8d:41:23:25:f5:3a:09:7f:e7:39:7d:57:8d:72:bc:08: c6:86:2c:86:e7:3d:d2:04:5c:11:2b:c1:3e:16:5f:1e:d4:0d: d6:6a:6a:d3:ab:2e:0d:73:c5:96:37:d0:2f:c3:8a:2d:bc:2b: 28:57:91:af:80:50:87:76:24:43:d0:78:81:a7:3c:0c:19:c5: 75:8d:56:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSmIqyWjCPWbdGYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NWI4NzFjNGQtYTMzYy00Yzc1LWEwOTEtNGRlZTkxODFlYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXm9bf3O5uxKWdPNkEZj9H0HGkJPAPqkGcH+ XR68m9teNgbjZMIfYHAN+OIZ2BoPLlqhfGYWpXEDLzHZKcNBb+suRznmlmBSgQZ8 KylKEg+qLF1cxohr5pYnCCYGXAVg+qvE0qatb3ILkZt9izRy1ye2QX61ssU62laV FRMYM9WeONeBDzVk/OMNdzITlxMsUW8m6lnb0zb/9f6jYXHND2BfL3XjI+yjsSE4 ettq8wetJ6RCTvjjxhLl5W8OoPDsSXfd7gzoV8aATB7rezjM2/TIkfsVz8OofJUL f6Up4H/d0ZXeiGgQjBdIBL4EIo9XSwxJl+VITD+wnQENUx88RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmg7V7PKjV1W3beJ5/sphJBYR6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2NjZTZkMzYtZGQ0Zi0z OWE0LWFhZjYtNzg2MTg1ZjQ4N2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlCvw5DL2b6CgHYh1k8sM5NbkVqStD5sY623eVMq/kkjeoKgIMJ/KMA 9uRBo1iPZVRCgdhHDY1A0e7iWtqzxMRCMzq9CkK5awclHw3E5cW4pNvHkfoqp/Fx XYnOWO3GzJ2DJRRjVWETLsEg4uKAZUlpddc9w1mK9j5nsSgg8MbEr45sfE1MWjAB mM5E/AePQ7NFIQ6rKCmufYayNGfhYmXD2JNtbr10VzAlt8zKxxEH7PLW0G4BjUEj JfU6CX/nOX1XjXK8CMaGLIbnPdIEXBErwT4WXx7UDdZqatOrLg1zxZY30C/Dii28 KyhXka+AUId2JEPQeIGnPAwZxXWNVnc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:13:09 2026 by rpki-client