$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de290d4e-58a9-374b-963f-17ccd577cb58.roa File: de290d4e-58a9-374b-963f-17ccd577cb58.roa (raw, json) Hash identifier: uhBftRr3B1sZaxPb1SQK+zZ/Ihg7T8/M+P1/pCtO7BQ= Subject key identifier: 23:92:80:4B:04:AC:E0:CD:D4:3C:55:B3:E5:3B:A2:6A:BF:7B:BC:8A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D300A4BAB49D7E6832456D140 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de290d4e-58a9-374b-963f-17ccd577cb58.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 200017 IP address blocks: 166.0.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:4b:ab:49:d7:e6:83:24:56:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=dabafe07-0c33-4f69-ab05-ea3fcaa1b05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2f:59:78:7d:89:e5:ef:4d:a3:97:98:ab:0c: 74:50:e0:2e:48:ba:f6:a7:e5:9b:f2:60:ba:1f:b9: ae:45:03:e8:a7:1a:f4:18:7d:14:4e:02:ae:f4:00: 31:4c:42:e7:41:0b:8a:4c:34:27:8b:7e:0f:da:e7: d2:b4:54:b0:d4:ba:e0:b1:a9:0a:a7:25:92:0e:d7: 89:76:9e:71:5c:08:e7:a4:91:ff:2b:91:53:92:5e: c2:26:db:01:2a:53:c2:74:0a:28:30:69:65:8f:a7: b7:63:2f:29:5a:a6:1c:bb:da:8a:5a:75:3f:36:55: dc:02:6a:dc:7d:5f:1c:f2:be:5a:c1:8c:ba:95:54: fd:a3:91:47:9a:60:3b:68:70:49:3c:57:10:7c:e2: ce:a8:29:46:8f:3a:e3:59:79:ca:c7:a2:0b:7e:2a: 6e:53:f2:2f:81:12:52:f9:65:a0:0d:2c:9b:ab:21: ab:ff:59:50:46:f7:21:e8:2f:1b:89:ca:37:a6:d2: 37:49:18:eb:37:26:33:df:8e:4c:e8:ab:cf:22:2d: ee:7d:b9:54:9b:5b:97:d4:f7:3d:af:28:ec:63:91: b7:df:44:c3:85:b7:e8:c3:02:da:45:e9:b5:29:1f: 50:bd:44:15:e7:a3:3e:3b:c9:b4:5e:8f:17:ba:99: 94:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:92:80:4B:04:AC:E0:CD:D4:3C:55:B3:E5:3B:A2:6A:BF:7B:BC:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de290d4e-58a9-374b-963f-17ccd577cb58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:eb:74:61:10:3c:3a:1f:95:32:51:b8:11:ae:eb:4f:54:1b: ce:f5:65:54:e7:3d:88:fb:9d:53:b0:36:8d:c4:97:bd:4c:2d: d1:2e:31:48:ff:3e:75:b4:01:c8:6c:aa:30:19:be:ba:f3:8b: 6c:76:a1:12:87:91:65:06:31:7a:f5:de:53:1c:d0:94:78:c8: 0d:f3:43:2c:01:5a:c4:4d:ce:db:de:7d:22:32:2f:a6:ba:ab: 38:91:5b:a7:f4:3d:93:c8:ed:73:7a:02:10:f3:be:95:da:79: a5:f8:56:fa:40:42:98:c2:bc:82:0d:4b:a5:b0:39:31:2e:e2: b0:bb:d5:50:97:1a:e3:1c:3e:f3:37:4d:43:fc:56:21:8b:09: c3:4d:e3:c5:49:6e:ac:10:f7:0c:bc:50:42:98:bd:63:8d:16: 48:43:7d:f8:8e:56:c8:06:fe:a6:2c:e8:20:b9:1d:a1:17:13: df:79:97:aa:ea:5d:db:4a:6b:ea:57:ea:c3:b2:bb:a8:4b:15: 24:fe:2b:3b:64:9b:a4:6d:0f:06:0d:92:14:75:33:10:c5:0e: 82:8a:30:fa:91:2a:f2:44:a8:0d:23:ad:20:6f:a5:b1:80:17: a5:4f:86:ec:d2:6a:89:e4:08:b0:75:ab:ba:76:9a:87:d7:be: 88:48:bc:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkurSdfmgyRW0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZGFiYWZlMDctMGMzMy00ZjY5LWFiMDUtZWEzZmNhYTFiMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS9ZeH2J5e9No5eYqwx0UOAuSLr2p+Wb8mC6 H7muRQPopxr0GH0UTgKu9AAxTELnQQuKTDQni34P2ufStFSw1LrgsakKpyWSDteJ dp5xXAjnpJH/K5FTkl7CJtsBKlPCdAooMGllj6e3Yy8pWqYcu9qKWnU/NlXcAmrc fV8c8r5awYy6lVT9o5FHmmA7aHBJPFcQfOLOqClGjzrjWXnKx6ILfipuU/IvgRJS +WWgDSybqyGr/1lQRvch6C8bico3ptI3SRjrNyYz345M6KvPIi3ufblUm1uX1Pc9 ryjsY5G330TDhbfowwLaRem1KR9QvUQV56M+O8m0Xo8XupmU5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOSgEsErODN1DxVs+U7omq/e7yKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGUyOTBkNGUtNThhOS0z NzRiLTk2M2YtMTdjY2Q1NzdjYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDrdGEQPDoflTJRuBGu609UG871ZVTnPYj7nVOwNo3El71MLdEuMUj/ PnW0AchsqjAZvrrzi2x2oRKHkWUGMXr13lMc0JR4yA3zQywBWsRNztvefSIyL6a6 qziRW6f0PZPI7XN6AhDzvpXaeaX4VvpAQpjCvIINS6WwOTEu4rC71VCXGuMcPvM3 TUP8ViGLCcNN48VJbqwQ9wy8UEKYvWONFkhDffiOVsgG/qYs6CC5HaEXE995l6rq XdtKa+pX6sOyu6hLFST+Kztkm6RtDwYNkhR1MxDFDoKKMPqRKvJEqA0jrSBvpbGA F6VPhuzSaonkCLB1q7p2mofXvohIvFs= -----END CERTIFICATE-----Generated at Thu Mar 26 03:41:13 2026 by rpki-client