$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aaf8e030-6bce-301d-9f7c-d267bb94db54.roa File: aaf8e030-6bce-301d-9f7c-d267bb94db54.roa (raw, json) Hash identifier: mRz5JuoXCgUQDRbH12dd2w1J3BwS40mj65Kh1wqqp9o= Subject key identifier: 3D:EA:5E:3D:2C:32:F3:26:65:13:45:18:9A:C4:E2:F9:43:6D:0B:79 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DAF102D18DB904DE319AE0B00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aaf8e030-6bce-301d-9f7c-d267bb94db54.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 21859 IP address blocks: 108.165.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:2d:18:db:90:4d:e3:19:ae:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=b80ef95d-792e-4c1a-b352-9e7d8157cc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:69:86:36:a8:bf:f1:df:9d:35:e7:01:59: f7:59:0b:80:fd:72:d1:e3:02:f8:d4:ac:0e:be:aa: a4:44:cf:5a:b7:0e:a1:13:6d:26:26:21:97:73:87: 86:b3:0e:aa:90:3a:ca:23:b2:88:c5:bf:57:dc:11: 65:47:09:2d:7e:41:ee:29:3e:08:b7:f8:2f:8e:d6: a2:a4:15:65:dd:aa:0c:d9:9f:f7:5c:70:54:a3:59: 29:ec:01:37:5c:78:cf:82:43:27:11:d0:86:0c:5c: 9b:51:12:e2:12:bb:3f:54:11:8e:c7:af:7e:72:d8: e2:10:7c:fc:e0:33:43:69:fe:34:03:3a:8c:74:01: ce:ad:d7:f2:e6:cb:18:8c:dc:3d:d1:97:c5:ee:f2: 17:55:27:e6:fd:65:d6:03:e4:2a:13:d8:ed:5b:aa: fb:56:ce:e6:7c:9f:14:e3:10:0e:bf:4e:1d:f5:05: a2:6e:d5:a3:07:ae:25:37:af:94:72:a8:de:7a:8b: ff:95:65:a3:53:f4:10:c2:f1:72:ec:8a:37:cb:c0: 79:c9:72:21:27:22:d6:de:7a:df:f4:8c:0d:f2:10: 8f:7e:f7:b4:3e:57:fb:03:21:6f:a5:b3:5a:2f:b7: 35:a9:7c:a7:4b:72:1e:b1:e8:9c:64:1e:fe:99:6f: 23:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EA:5E:3D:2C:32:F3:26:65:13:45:18:9A:C4:E2:F9:43:6D:0B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aaf8e030-6bce-301d-9f7c-d267bb94db54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:8a:ad:ad:d3:2b:d2:81:30:12:0f:17:a7:9b:02:00:92:af: e2:50:2a:4f:bc:7f:b1:c7:d4:df:4e:81:54:9f:3c:e6:f4:0f: b3:d0:b3:c7:93:31:37:a9:37:ec:f3:2d:66:5a:7c:0e:2e:00: 44:45:a2:47:04:ab:2e:61:56:60:a0:c4:07:e7:b2:c9:07:7b: fc:a2:25:82:06:80:9a:2f:43:9a:67:a9:95:41:18:21:95:28: c8:c3:74:bd:73:82:d2:e1:5d:1f:7c:2c:eb:58:86:7b:05:bb: 46:0a:20:63:76:9b:66:86:17:b7:41:4a:5e:6d:e9:42:eb:1f: 23:2a:fc:6e:c5:86:35:31:02:be:84:c8:b4:01:8d:f2:9f:77: 64:ac:d7:9b:b7:a2:68:14:25:46:56:12:67:16:2b:e6:63:6e: 4c:ca:74:3e:ca:54:4e:a8:02:d3:da:c6:a1:42:fa:20:33:80: a0:6d:96:a4:05:32:f0:0d:29:7d:03:e6:3c:91:0a:30:a9:5a: 44:ef:a7:f2:e0:b4:0e:c0:ce:59:f1:7b:57:9a:40:68:8d:4c: 1f:4a:30:e7:10:b8:03:ab:98:0f:24:96:55:ac:2e:c0:0c:15: 70:fc:27:d6:57:c2:79:b4:2a:af:45:c2:06:a5:32:72:b2:12: 9c:ee:8a:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEC0Y25BN4xmuCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk YjgwZWY5NWQtNzkyZS00YzFhLWIzNTItOWU3ZDgxNTdjYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNFphjaov/HfnTXnAVn3WQuA/XLR4wL41KwO vqqkRM9atw6hE20mJiGXc4eGsw6qkDrKI7KIxb9X3BFlRwktfkHuKT4It/gvjtai pBVl3aoM2Z/3XHBUo1kp7AE3XHjPgkMnEdCGDFybURLiErs/VBGOx69+ctjiEHz8 4DNDaf40AzqMdAHOrdfy5ssYjNw90ZfF7vIXVSfm/WXWA+QqE9jtW6r7Vs7mfJ8U 4xAOv04d9QWibtWjB64lN6+Ucqjeeov/lWWjU/QQwvFy7Io3y8B5yXIhJyLW3nrf 9IwN8hCPfve0Plf7AyFvpbNaL7c1qXynS3IeseicZB7+mW8jowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3qXj0sMvMmZRNFGJrE4vlDbQt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWFmOGUwMzAtNmJjZS0z MDFkLTlmN2MtZDI2N2JiOTRkYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6Kra3TK9KBMBIPF6ebAgCSr+JQKk+8f7HH1N9OgVSfPOb0D7PQs8eT MTepN+zzLWZafA4uAERFokcEqy5hVmCgxAfnsskHe/yiJYIGgJovQ5pnqZVBGCGV KMjDdL1zgtLhXR98LOtYhnsFu0YKIGN2m2aGF7dBSl5t6ULrHyMq/G7FhjUxAr6E yLQBjfKfd2Ss15u3omgUJUZWEmcWK+ZjbkzKdD7KVE6oAtPaxqFC+iAzgKBtlqQF MvANKX0D5jyRCjCpWkTvp/LgtA7Azlnxe1eaQGiNTB9KMOcQuAOrmA8kllWsLsAM FXD8J9ZXwnm0Kq9FwgalMnKyEpzuiuU= -----END CERTIFICATE-----Generated at Wed May 13 06:14:23 2026 by rpki-client