$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afd44fba-38a4-3a02-9d19-d672b74c311d.roa File: afd44fba-38a4-3a02-9d19-d672b74c311d.roa (raw, json) Hash identifier: SUqaEsCSTRS7BHTjstnvhFfpKskr7SCdjH/W+RwzQzU= Subject key identifier: 5D:9D:A2:37:DD:DB:6B:38:43:A3:A2:3B:B2:9C:D2:F0:E4:E6:B1:2C Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EF87CB8F1C11A574B2318E680 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afd44fba-38a4-3a02-9d19-d672b74c311d.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 14080 IP address blocks: 108.165.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:b8:f1:c1:1a:57:4b:23:18:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=d144f867-9a7d-4088-982f-0037db587cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:a0:cd:f4:85:4c:b1:37:2c:60:6a:0a:44: 4f:16:26:4c:d1:d8:75:6a:91:73:75:bf:b6:2f:12: 6e:13:6c:6d:24:11:4a:99:95:48:29:51:dd:d2:1c: 38:9c:ac:48:3e:a1:93:e3:61:12:b5:35:5b:88:e1: 0c:cf:29:88:e9:dc:d9:e9:eb:72:ce:53:08:ad:f8: c5:bc:55:42:7a:5d:4c:92:0a:00:36:87:00:4d:ec: 61:a2:89:75:af:76:a1:f3:61:7d:ea:0e:bc:50:5d: e0:d0:ec:81:81:ff:3c:bc:7e:00:02:01:38:45:54: 8b:69:56:0e:cd:6b:9e:5c:79:9c:37:91:a7:17:86: b3:cf:02:0b:cb:82:10:e4:20:18:8b:3b:dc:47:b4: 91:da:a5:13:5a:c9:b6:01:2e:67:1b:54:fa:12:7d: 7c:2c:81:57:69:55:0c:61:7b:f3:e9:1b:1b:78:eb: fb:1d:b4:74:cd:52:bf:4f:60:48:a9:04:9c:d5:17: 32:23:a6:37:0c:51:d1:79:d7:71:33:4a:d4:03:b8: 75:ff:83:00:0a:01:65:43:6f:d3:c8:47:65:d4:03: 60:54:f1:6d:aa:43:a8:72:26:59:da:2b:ca:2c:15: 3d:de:eb:4f:25:67:cf:e5:49:cb:4b:7d:41:bd:85: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9D:A2:37:DD:DB:6B:38:43:A3:A2:3B:B2:9C:D2:F0:E4:E6:B1:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afd44fba-38a4-3a02-9d19-d672b74c311d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:37:3f:c4:1c:d6:04:71:9c:bc:c9:61:de:3e:a8:2a:b4:30: 3b:dc:25:c7:eb:71:34:59:c9:8b:0b:fb:af:5c:b8:3f:16:92: 9e:74:70:72:6a:b4:7d:eb:e1:a4:df:68:52:d6:32:92:66:97: 67:b2:cf:5b:0e:a8:65:d8:e8:d0:58:82:dd:d5:1d:a1:f0:67: 4e:92:aa:2b:d6:0a:2e:03:2e:ce:bb:20:83:47:71:88:12:56: 09:35:6a:64:ed:e8:4e:05:6f:db:51:b7:76:fe:0f:38:df:57: 2b:08:63:13:4f:c6:3b:66:7e:ff:8f:e6:0d:0a:8d:19:00:96: c6:00:c2:c1:7e:46:59:51:22:11:bb:45:b0:8d:b4:4e:32:c5: 55:9a:f4:33:53:29:1e:8f:de:59:0f:f0:5d:e0:e0:5e:61:c0: 5f:96:eb:1c:88:91:30:0c:3d:30:a8:c8:70:ab:3f:c4:c0:11: db:62:c8:97:35:59:27:f2:43:63:93:85:9b:06:26:38:14:5a: ef:76:ef:0c:03:36:95:04:55:22:19:6d:e9:d5:c9:cd:66:ce: a0:67:93:26:80:9e:12:aa:fd:55:da:cf:da:ea:a6:0c:d0:dd: fe:d8:a6:03:74:a9:1d:b9:43:d1:a6:63:10:78:ee:62:37:88: 5e:1e:e7:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLjxwRpXSyMY5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDE0NGY4NjctOWE3ZC00MDg4LTk4MmYtMDAzN2RiNTg3Y2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox2gzfSFTLE3LGBqCkRPFiZM0dh1apFzdb+2 LxJuE2xtJBFKmZVIKVHd0hw4nKxIPqGT42EStTVbiOEMzymI6dzZ6etyzlMIrfjF vFVCel1MkgoANocATexhool1r3ah82F96g68UF3g0OyBgf88vH4AAgE4RVSLaVYO zWueXHmcN5GnF4azzwILy4IQ5CAYizvcR7SR2qUTWsm2AS5nG1T6En18LIFXaVUM YXvz6RsbeOv7HbR0zVK/T2BIqQSc1RcyI6Y3DFHReddxM0rUA7h1/4MACgFlQ2/T yEdl1ANgVPFtqkOociZZ2ivKLBU93utPJWfP5UnLS31BvYXhVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2dojfd22s4Q6OiO7Kc0vDk5rEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWZkNDRmYmEtMzhhNC0z YTAyLTlkMTktZDY3MmI3NGMzMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs3P8Qc1gRxnLzJYd4+qCq0MDvcJcfrcTRZyYsL+69cuD8Wkp50cHJq tH3r4aTfaFLWMpJml2eyz1sOqGXY6NBYgt3VHaHwZ06SqivWCi4DLs67IINHcYgS Vgk1amTt6E4Fb9tRt3b+DzjfVysIYxNPxjtmfv+P5g0KjRkAlsYAwsF+RllRIhG7 RbCNtE4yxVWa9DNTKR6P3lkP8F3g4F5hwF+W6xyIkTAMPTCoyHCrP8TAEdtiyJc1 WSfyQ2OThZsGJjgUWu927wwDNpUEVSIZbenVyc1mzqBnkyaAnhKq/VXaz9rqpgzQ 3f7YpgN0qR25Q9GmYxB47mI3iF4e53U= -----END CERTIFICATE-----Generated at Sat Sep 26 09:57:04 2026 by rpki-client