$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df1fd899-5035-351b-9006-8496b357700e.roa File: df1fd899-5035-351b-9006-8496b357700e.roa (raw, json) Hash identifier: lQAXyv3zT+VTXUnXPMA/SriiFNosPHo7ojhNdKUV3Q8= Subject key identifier: 8E:E1:60:70:50:2B:CD:2B:14:C6:A4:6C:C5:FE:E4:C5:4B:39:E7:8B Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584E31CF4CC495A66D45BE2BC600 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df1fd899-5035-351b-9006-8496b357700e.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 58061 IP address blocks: 166.0.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:4c:c4:95:a6:6d:45:be:2b:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=9dd9ae73-58b5-48bf-92c5-7f69341a6bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:d0:9e:e7:de:9c:54:d9:d1:b8:8d:06:8f: e6:e7:30:ce:cd:10:68:3e:8e:23:ab:21:5a:96:2b: cc:99:3f:4d:e4:39:20:10:87:1c:ab:a8:39:58:66: a8:94:80:82:fe:01:0e:50:0a:d1:e7:d1:c8:ad:bf: 7a:54:ff:03:c1:7f:24:29:a2:ac:01:8f:83:e9:9b: 84:ba:c3:0c:5e:bd:a0:27:45:b2:8a:92:63:db:96: de:c4:bc:d2:59:79:82:e5:cb:b2:02:b0:08:2d:9e: ea:a8:d5:b6:4f:31:8e:57:a1:03:3b:67:5e:c0:39: c9:d4:fd:36:11:0d:33:a5:09:cf:a8:ee:55:0c:b3: a4:e1:88:b2:f6:58:14:51:19:5d:0f:2c:0d:05:02: f1:76:d3:1d:5c:ef:de:85:1f:90:94:c9:3d:52:e1: f5:58:b4:92:e2:ed:97:c7:b0:43:e1:db:ef:54:a5: f2:de:95:19:aa:10:43:85:98:c3:4c:00:21:85:7e: ee:51:42:29:60:80:95:60:a8:33:94:a5:a0:60:4a: 2d:19:8f:26:07:cb:6f:e5:4d:5c:e8:c0:68:dd:12: b4:b1:90:ff:9e:7e:39:12:70:39:60:b2:94:13:52: d6:14:3d:13:81:07:b0:33:db:27:39:90:d6:6d:63: d9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E1:60:70:50:2B:CD:2B:14:C6:A4:6C:C5:FE:E4:C5:4B:39:E7:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df1fd899-5035-351b-9006-8496b357700e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c9:74:e2:fc:41:bf:66:60:04:c8:54:a2:b9:b5:ac:c7:8c: dc:96:19:2b:40:6b:09:30:56:f9:eb:7a:6b:c5:60:ea:cb:f3: c2:5c:fe:04:61:17:ca:1d:7f:29:88:63:07:ab:a9:42:b3:e3: 50:d8:b9:7b:6d:1d:0e:9f:6e:7b:88:c0:9e:a7:ec:b3:75:77: ae:29:f4:da:40:14:04:8b:d0:e6:58:e4:a7:3d:ae:84:60:f9: b4:d8:26:ce:0b:71:71:d5:1c:5f:9e:80:da:1d:e3:05:e4:2e: 9d:90:ab:e8:44:d2:87:7a:a5:1e:62:a6:0d:18:cd:9b:08:45: c8:62:9e:7b:cf:c2:9d:8b:6f:c2:9b:69:a2:f5:f6:73:9c:0a: d3:bd:cc:c7:1f:5a:25:e2:46:3c:4c:6a:60:b7:3f:79:b2:22: 3b:fb:b2:cd:12:92:46:fb:63:67:f8:7c:e0:49:17:88:42:ef: 2f:ad:a6:19:a9:c2:1e:43:68:fd:79:7b:19:d9:7a:fb:1e:07: 24:96:cd:cb:3e:2a:cc:65:8c:89:09:8a:b8:cc:b0:c8:67:ba: 9d:cb:16:ae:1b:46:17:24:26:d5:0e:cc:36:d4:5c:2c:01:ca: 8a:9f:03:b5:2e:73:3c:23:4a:6b:65:8f:13:21:52:34:c3:a9: e9:3f:20:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz0zElaZtRb4rxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk OWRkOWFlNzMtNThiNS00OGJmLTkyYzUtN2Y2OTM0MWE2YmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYTQnufenFTZ0biNBo/m5zDOzRBoPo4jqyFa livMmT9N5DkgEIccq6g5WGaolICC/gEOUArR59HIrb96VP8DwX8kKaKsAY+D6ZuE usMMXr2gJ0WyipJj25bexLzSWXmC5cuyArAILZ7qqNW2TzGOV6EDO2dewDnJ1P02 EQ0zpQnPqO5VDLOk4Yiy9lgUURldDywNBQLxdtMdXO/ehR+QlMk9UuH1WLSS4u2X x7BD4dvvVKXy3pUZqhBDhZjDTAAhhX7uUUIpYICVYKgzlKWgYEotGY8mB8tv5U1c 6MBo3RK0sZD/nn45EnA5YLKUE1LWFD0TgQewM9snOZDWbWPZ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7hYHBQK80rFMakbMX+5MVLOeeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGYxZmQ4OTktNTAzNS0z NTFiLTkwMDYtODQ5NmIzNTc3MDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELJdOL8Qb9mYATIVKK5tazHjNyWGStAawkwVvnremvFYOrL88Jc/gRh F8odfymIYwerqUKz41DYuXttHQ6fbnuIwJ6n7LN1d64p9NpAFASL0OZY5Kc9roRg +bTYJs4LcXHVHF+egNod4wXkLp2Qq+hE0od6pR5ipg0YzZsIRchinnvPwp2Lb8Kb aaL19nOcCtO9zMcfWiXiRjxMamC3P3myIjv7ss0Skkb7Y2f4fOBJF4hC7y+tphmp wh5DaP15exnZevseBySWzcs+KsxljIkJirjMsMhnup3LFq4bRhckJtUOzDbUXCwB yoqfA7UuczwjSmtljxMhUjTDqek/IDc= -----END CERTIFICATE-----Generated at Fri Jul 24 11:57:17 2026 by rpki-client