$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b49c6850-fc46-38a7-84ef-90f7d84cc17e.roa File: b49c6850-fc46-38a7-84ef-90f7d84cc17e.roa (raw, json) Hash identifier: 8Sw5TEbGgNA168gpved23V7fSl9RupmHT8eTKczDSNM= Subject key identifier: 1C:72:0D:D7:B8:71:9A:84:D1:C5:F4:7E:78:1F:E8:C7:19:E5:0C:42 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D24E10AE2A12528D30AA99000 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b49c6850-fc46-38a7-84ef-90f7d84cc17e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 58061 IP address blocks: 166.0.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0a:e2:a1:25:28:d3:0a:a9:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1ad221ef-3e7b-4eef-a1e3-3e1cfd67f817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fa:c8:35:72:17:b7:21:a1:00:41:99:41:9f: 41:db:43:cb:87:d0:45:77:e1:5b:01:3d:6b:f1:d4: ea:77:64:07:f2:15:7b:42:f6:e8:cb:9e:e8:db:3b: 0c:9a:4f:b6:6c:e1:31:c9:10:42:e4:5c:5a:09:76: f9:fa:0a:23:0b:b3:52:5d:e7:5d:32:85:68:c7:99: fc:42:32:ae:c1:95:89:f5:0b:c1:ad:bb:f5:f3:a0: a9:57:9d:32:bc:6e:7d:69:ec:23:4f:cc:9a:e8:93: d5:f5:a6:89:fa:11:29:27:ef:52:98:d6:86:3f:22: d6:f5:55:19:8d:ee:ab:c6:bd:d5:31:50:18:c2:ac: 8e:a8:e8:7c:de:f1:7e:97:16:53:7f:c2:a1:cf:91: c0:35:78:75:99:cb:7d:cb:e8:59:9b:06:9d:11:85: 28:04:04:be:7a:68:ca:97:f1:bc:56:ca:65:a4:a6: b0:05:ad:50:9c:5b:10:45:6b:23:6e:f1:20:13:27: f8:3d:0c:1e:3e:65:9e:57:66:4f:12:10:9b:a2:c5: 44:8b:03:67:7b:8a:f1:68:cc:a3:73:31:40:48:b0: 2d:0a:af:6d:78:04:b6:1e:eb:f6:12:2c:c9:5b:fb: 92:c6:29:83:72:9f:2f:95:da:1a:14:86:3f:5b:48: 11:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:72:0D:D7:B8:71:9A:84:D1:C5:F4:7E:78:1F:E8:C7:19:E5:0C:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b49c6850-fc46-38a7-84ef-90f7d84cc17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:71:be:60:fc:d1:39:37:6d:eb:7e:38:97:fd:b7:32:e2:7b: 34:a2:11:0b:17:a3:9e:0b:a4:f3:32:90:4c:a3:35:ae:2b:11: c4:fc:40:5e:95:a2:cd:54:cc:19:0a:1e:c3:07:71:8b:2a:f6: a7:87:db:9c:fc:94:7c:5b:25:1b:eb:81:39:8a:a3:d2:16:14: e3:f3:85:dc:a7:0d:24:57:16:f0:06:e9:ba:33:04:ee:2b:42: e5:d7:45:81:03:5f:29:b0:b8:1f:26:f2:78:89:3a:a4:34:84: e4:48:5c:a5:8a:5d:29:99:4d:c6:19:ea:ab:3f:1d:2a:88:d4: 0c:60:b6:17:92:96:07:a2:f9:59:fe:34:2c:b2:33:41:25:8a: be:7a:e2:e3:d8:2f:5a:50:b9:c8:ce:f0:e5:53:a2:37:de:21: 22:e6:87:2c:88:0c:d4:37:b0:51:81:88:ee:06:50:2a:dd:ff: aa:a7:ec:bf:b1:59:79:cf:df:57:d8:25:74:47:cf:1b:5c:f4: 54:5b:86:09:12:8d:aa:65:3f:16:c3:bb:29:b5:8a:d0:7d:76: a4:fa:c3:b2:b3:cb:21:58:3a:85:58:52:7f:84:97:2f:06:42: ea:96:f5:ba:f8:78:5c:b6:9f:0d:5b:20:7a:81:3d:70:71:7b: 20:7d:e7:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4QrioSUo0wqpkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWFkMjIxZWYtM2U3Yi00ZWVmLWExZTMtM2UxY2ZkNjdmODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfrINXIXtyGhAEGZQZ9B20PLh9BFd+FbAT1r 8dTqd2QH8hV7Qvboy57o2zsMmk+2bOExyRBC5FxaCXb5+gojC7NSXeddMoVox5n8 QjKuwZWJ9QvBrbv186CpV50yvG59aewjT8ya6JPV9aaJ+hEpJ+9SmNaGPyLW9VUZ je6rxr3VMVAYwqyOqOh83vF+lxZTf8Khz5HANXh1mct9y+hZmwadEYUoBAS+emjK l/G8VsplpKawBa1QnFsQRWsjbvEgEyf4PQwePmWeV2ZPEhCbosVEiwNne4rxaMyj czFASLAtCq9teAS2Huv2EizJW/uSximDcp8vldoaFIY/W0gRBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxyDde4cZqE0cX0fngf6McZ5QxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjQ5YzY4NTAtZmM0Ni0z OGE3LTg0ZWYtOTBmN2Q4NGNjMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1xvmD80Tk3bet+OJf9tzLiezSiEQsXo54LpPMykEyjNa4rEcT8QF6V os1UzBkKHsMHcYsq9qeH25z8lHxbJRvrgTmKo9IWFOPzhdynDSRXFvAG6bozBO4r QuXXRYEDXymwuB8m8niJOqQ0hORIXKWKXSmZTcYZ6qs/HSqI1AxgtheSlgei+Vn+ NCyyM0Elir564uPYL1pQucjO8OVTojfeISLmhyyIDNQ3sFGBiO4GUCrd/6qn7L+x WXnP31fYJXRHzxtc9FRbhgkSjaplPxbDuym1itB9dqT6w7KzyyFYOoVYUn+Ely8G QuqW9br4eFy2nw1bIHqBPXBxeyB957U= -----END CERTIFICATE-----Generated at Thu Mar 26 18:09:02 2026 by rpki-client