$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb9f5c54-18ac-3319-afb0-c82ef2f68593.roa File: bb9f5c54-18ac-3319-afb0-c82ef2f68593.roa (raw, json) Hash identifier: g7mdaCkfJCQZU0RSa4xLNRTSdqGNvhVSU9uNjyvnt+c= Subject key identifier: BC:DC:02:EA:7B:49:06:51:FE:B3:F9:42:6E:07:16:A0:92:7F:12:D1 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D39CF72269AB4357707DC65A0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb9f5c54-18ac-3319-afb0-c82ef2f68593.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 401152 IP address blocks: 166.1.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:72:26:9a:b4:35:77:07:dc:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=3da47c9f-5813-41fd-81e7-fbc60b38bbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:0e:cd:62:71:6b:39:d5:b6:ae:20:0d:e2: 8e:fc:13:f6:d1:c4:99:90:43:96:0f:91:da:f3:34: a5:f9:70:7b:d9:64:3e:7e:8d:6b:ab:4d:06:17:ef: 46:33:41:15:11:29:b4:99:46:de:54:34:ad:19:d5: 81:eb:91:ba:18:e7:ea:07:c0:27:dc:c5:27:81:45: 8b:cc:8e:f8:76:51:7a:98:88:08:2a:a8:6b:30:92: 2e:4c:3f:df:b5:43:50:e6:08:b8:a6:a1:fb:5a:7d: 38:f8:66:85:1a:ce:04:4f:ce:98:65:9b:1b:90:72: a8:2d:ca:71:fe:8c:f7:78:c3:3a:ef:bc:97:bc:ce: 20:d3:e6:b0:ce:00:53:21:1c:9e:96:cf:ff:92:42: 1c:e3:06:a3:ec:8d:81:3c:af:3a:33:d9:9b:31:92: cd:e9:4b:24:a6:8f:2b:a2:e1:7b:8c:db:ec:5a:d5: 8b:3f:8f:ac:82:55:b0:53:2e:43:d0:30:f8:c7:0b: f3:79:d2:24:b2:e3:37:52:68:0c:b7:b9:5f:0a:59: 36:9c:ef:fb:90:2d:58:0d:a3:2b:d2:c2:16:b4:dd: fa:dc:56:9a:b6:86:4d:f0:e7:f2:10:8a:ed:6d:78: e5:3d:b6:ed:ef:70:63:29:f3:e5:e3:f0:e5:89:6c: 7a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DC:02:EA:7B:49:06:51:FE:B3:F9:42:6E:07:16:A0:92:7F:12:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb9f5c54-18ac-3319-afb0-c82ef2f68593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0e:bd:be:85:f4:16:fe:2f:fc:88:f7:7c:18:fa:95:cb:79: 1f:13:d7:72:7f:62:a1:2e:9e:1e:46:be:3d:92:5c:9b:bb:9b: 01:96:0b:c8:2f:b0:fe:d3:e4:eb:0a:ed:5c:dc:00:0f:d1:81: b4:2a:25:39:f9:22:7d:bb:a7:e9:74:11:01:ad:18:e4:98:33: e2:8e:f5:da:f9:3c:e9:a0:c6:7c:20:c7:7f:cb:79:2d:17:e2: 5b:e3:e3:a6:c3:e8:85:8f:60:b5:76:5e:4c:ba:5d:08:01:a2: 8f:fe:66:17:d6:27:3c:c7:6d:68:bc:af:2a:15:10:49:71:27: a4:c2:01:8b:93:b1:a6:7a:ce:d1:c9:62:d6:a0:1d:da:5b:9d: a2:0f:d3:73:42:02:06:0e:c0:b6:49:4e:a7:0b:b2:12:eb:22: 26:dd:91:1a:0f:93:48:96:5a:5f:b8:46:65:0e:6e:39:fb:0c: 49:96:f6:c7:a8:31:ad:7d:7c:6b:c0:0e:2e:cd:d5:8b:79:87: da:72:4c:19:25:df:ca:e1:34:9c:22:76:3c:4f:50:92:3c:2d: f2:14:e0:31:19:93:37:10:5d:7e:d2:73:24:01:ae:ab:ed:2a: 19:96:d1:55:45:9d:8e:c2:8b:fa:ae:27:f3:6b:74:c2:9b:ee: 2f:fe:fe:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3ImmrQ1dwfcZaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk M2RhNDdjOWYtNTgxMy00MWZkLTgxZTctZmJjNjBiMzhiYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHgOzWJxaznVtq4gDeKO/BP20cSZkEOWD5Ha 8zSl+XB72WQ+fo1rq00GF+9GM0EVESm0mUbeVDStGdWB65G6GOfqB8An3MUngUWL zI74dlF6mIgIKqhrMJIuTD/ftUNQ5gi4pqH7Wn04+GaFGs4ET86YZZsbkHKoLcpx /oz3eMM677yXvM4g0+awzgBTIRyels//kkIc4waj7I2BPK86M9mbMZLN6Uskpo8r ouF7jNvsWtWLP4+sglWwUy5D0DD4xwvzedIksuM3UmgMt7lfClk2nO/7kC1YDaMr 0sIWtN363FaatoZN8OfyEIrtbXjlPbbt73BjKfPl4/DliWx6tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzcAup7SQZR/rP5Qm4HFqCSfxLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmI5ZjVjNTQtMThhYy0z MzE5LWFmYjAtYzgyZWYyZjY4NTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAOvb6F9Bb+L/yI93wY+pXLeR8T13J/YqEunh5Gvj2SXJu7mwGWC8gv sP7T5OsK7VzcAA/RgbQqJTn5In27p+l0EQGtGOSYM+KO9dr5POmgxnwgx3/LeS0X 4lvj46bD6IWPYLV2Xky6XQgBoo/+ZhfWJzzHbWi8ryoVEElxJ6TCAYuTsaZ6ztHJ YtagHdpbnaIP03NCAgYOwLZJTqcLshLrIibdkRoPk0iWWl+4RmUObjn7DEmW9seo Ma19fGvADi7N1Yt5h9pyTBkl38rhNJwidjxPUJI8LfIU4DEZkzcQXX7ScyQBrqvt KhmW0VVFnY7Ci/quJ/NrdMKb7i/+/gc= -----END CERTIFICATE-----Generated at Thu Mar 26 05:58:08 2026 by rpki-client