$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa File: bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa (raw, json) Hash identifier: H+sdWWStcREgPGB7BVLtXB1cLtUo92fSBXfAzuGrpW0= Subject key identifier: 45:6B:09:88:2F:BC:52:B9:3F:14:93:03:0B:63:2C:9B:D4:23:87:6E Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D3DFF985AC4B0F0F0B9BE9100 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 211440 IP address blocks: 108.165.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:98:5a:c4:b0:f0:f0:b9:be:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=35ba95c2-8100-4789-aa15-2f2d2e5609cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:b4:d7:af:d2:5e:2d:30:4a:ed:d8:a5:bb: 7a:c7:a7:27:80:7d:f9:03:96:9a:4a:25:c8:a7:a7: 8c:33:36:25:2b:a4:36:8b:59:0b:8a:fb:c5:31:8d: ce:65:a5:f2:2b:e6:c6:c4:df:ec:90:83:e9:8f:a7: e8:db:88:c5:fe:ff:2a:11:54:2c:06:22:2d:a6:dc: 38:4e:88:4f:85:92:bd:48:be:d1:64:eb:7c:22:6f: 35:07:86:ee:a6:5d:3a:b6:b4:cc:f4:f8:e7:9d:40: e4:f8:64:69:73:5a:01:8f:73:3a:02:0a:b1:9f:ee: 16:55:c9:23:dd:62:9b:6e:d0:7a:d0:ff:d9:ed:25: c7:fd:b3:af:0f:3c:53:95:98:4d:e8:6e:35:6f:ae: e3:53:c0:a9:d1:dd:fc:2a:91:ee:3f:13:42:74:9d: a4:c5:fb:23:55:d1:fa:49:72:1d:68:50:fa:ed:5b: 7e:5e:44:ea:e1:ad:37:1f:1c:97:29:c3:2b:41:1d: 90:f1:e4:9b:ba:c0:09:59:4f:75:74:ff:61:9f:fd: fd:cd:21:cc:42:2c:76:44:e8:80:21:1b:ec:f2:0f: d0:16:95:94:b9:63:e9:0b:2a:6d:f6:75:ad:d2:26: a7:4a:62:97:b5:bd:c8:cf:47:cb:c8:8d:59:7c:c8: 6a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6B:09:88:2F:BC:52:B9:3F:14:93:03:0B:63:2C:9B:D4:23:87:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9d:71:a1:b1:86:8f:4d:f3:db:a3:1a:76:a5:77:31:dd:2b: c1:84:46:f9:27:e3:78:a7:a9:de:02:ac:80:d8:74:7d:4d:d7: b9:29:4e:5b:fd:36:64:a2:60:8b:19:8b:e0:a7:2c:82:5c:e2: 04:96:1e:28:f8:57:d9:10:e0:f2:f3:54:21:ff:37:b6:9e:3c: 5e:8b:9b:68:88:8f:3e:c8:46:cb:14:ee:c4:00:98:dd:fc:77: c7:af:d0:3a:5b:b6:32:11:08:a1:dc:58:23:b1:81:12:d4:86: b8:db:16:86:53:e1:06:22:1b:e1:cb:f2:2f:ed:30:27:16:3d: 02:84:d3:2c:67:43:3f:7c:a0:2a:e0:c3:23:d0:c0:2c:7c:37: 4b:b7:7e:35:4a:0c:7a:02:92:82:66:1a:ee:04:cf:33:4b:72: da:4d:a1:f0:d7:40:08:6f:0d:d5:d4:07:80:92:d7:bb:8a:34: 31:fe:76:c5:71:c9:f9:23:3a:78:a1:91:3d:48:12:87:fe:eb: ff:62:e6:80:08:5c:59:d0:f5:87:4e:b6:22:d5:b2:d1:e6:d6: e2:6d:b5:33:d8:32:fc:eb:ba:9a:a3:5d:92:08:94:ff:d8:65: 1e:10:5f:fe:9e:1f:29:55:d2:1b:59:7a:9d:ed:71:ff:69:ca: eb:f4:99:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5haxLDw8Lm+kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MzViYTk1YzItODEwMC00Nzg5LWFhMTUtMmYyZDJlNTYwOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPO016/SXi0wSu3Ypbt6x6cngH35A5aaSiXI p6eMMzYlK6Q2i1kLivvFMY3OZaXyK+bGxN/skIPpj6fo24jF/v8qEVQsBiItptw4 TohPhZK9SL7RZOt8Im81B4bupl06trTM9PjnnUDk+GRpc1oBj3M6Agqxn+4WVckj 3WKbbtB60P/Z7SXH/bOvDzxTlZhN6G41b67jU8Cp0d38KpHuPxNCdJ2kxfsjVdH6 SXIdaFD67Vt+XkTq4a03HxyXKcMrQR2Q8eSbusAJWU91dP9hn/39zSHMQix2ROiA IRvs8g/QFpWUuWPpCypt9nWt0ianSmKXtb3Iz0fLyI1ZfMhqNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVrCYgvvFK5PxSTAwtjLJvUI4duMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmNhZjEzMDUtMWUwZi0z OGY3LWE3YzQtNDViNzgyMGY0ZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2dcaGxho9N89ujGnaldzHdK8GERvkn43inqd4CrIDYdH1N17kpTlv9 NmSiYIsZi+CnLIJc4gSWHij4V9kQ4PLzVCH/N7aePF6Lm2iIjz7IRssU7sQAmN38 d8ev0DpbtjIRCKHcWCOxgRLUhrjbFoZT4QYiG+HL8i/tMCcWPQKE0yxnQz98oCrg wyPQwCx8N0u3fjVKDHoCkoJmGu4EzzNLctpNofDXQAhvDdXUB4CS17uKNDH+dsVx yfkjOnihkT1IEof+6/9i5oAIXFnQ9YdOtiLVstHm1uJttTPYMvzrupqjXZIIlP/Y ZR4QX/6eHylV0htZep3tcf9pyuv0mfw= -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:51 2026 by rpki-client