$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa File: dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa (raw, json) Hash identifier: kSmbzelZBbpexFtn0x6LktUbK5w+UBjRAzm5PfEwu3I= Subject key identifier: 0E:7D:EB:21:F4:01:09:2A:0E:4D:0B:5F:43:3B:97:EB:DD:4E:82:10 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D32D4D8C5637B21EF9BAF8180 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 6939 IP address blocks: 166.0.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:d8:c5:63:7b:21:ef:9b:af:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=a16abafe-2f3b-486d-a44f-5ada892fe253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a4:9b:62:24:ff:ab:83:7e:04:1b:0d:12:6b: 65:a9:ed:d3:73:1a:f6:20:b4:02:19:52:87:d0:5e: e7:eb:21:58:cf:a7:27:81:a7:56:21:e7:53:6b:9b: a2:39:b0:a6:f9:96:03:37:57:c0:24:f8:5a:ec:15: 6b:f8:c0:4b:01:68:e8:79:34:01:16:a1:13:31:d5: 58:d8:5e:ee:db:60:03:f4:bb:2e:bb:59:b5:08:69: 83:c2:64:8c:9d:45:de:65:cc:52:f7:a4:46:5c:c8: 06:fe:e7:e4:a8:eb:da:61:14:b6:3b:15:cb:64:64: 62:57:8b:32:70:16:84:01:96:4a:e8:9e:79:a8:c4: fc:5d:c8:bd:51:54:9d:60:d0:44:86:31:06:bb:d4: e8:e7:08:96:b5:30:e0:37:cc:75:d0:c8:b9:21:e7: 10:09:78:d9:f5:c0:e7:81:95:b1:b5:73:f4:03:3f: 3a:ba:e8:1c:a4:ff:af:a0:df:71:c4:71:89:2d:bd: d2:f0:63:6a:7b:24:02:94:17:0a:c5:fe:bc:3e:37: 6e:e0:9c:f4:2b:b8:54:78:4b:ed:fd:59:da:d0:20: b8:53:ba:65:97:78:18:0e:b9:cf:48:a5:5e:9c:68: f6:71:60:ee:4d:63:00:a4:55:06:42:a0:e0:66:9e: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7D:EB:21:F4:01:09:2A:0E:4D:0B:5F:43:3B:97:EB:DD:4E:82:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:84:c8:aa:30:2c:14:05:15:cb:02:e5:32:60:40:61:a1:82: e1:b8:51:ff:94:b9:57:53:e9:c9:3c:ae:2f:7a:48:ef:a7:49: f4:e5:b7:0a:b7:22:a8:56:2e:8d:8f:f0:7e:da:44:77:e8:ec: 23:94:14:f7:4c:a2:a4:dd:37:48:0e:9b:48:3b:46:41:24:bf: 62:e5:3c:0c:27:f8:cb:0f:5e:c9:20:04:73:42:c1:4c:8e:38: 99:ae:f3:fd:a6:fe:e1:e8:c0:44:0a:32:cb:00:d4:3e:35:de: 85:54:80:19:42:4a:6e:e8:e1:5b:8d:7d:0c:df:b2:6e:e9:78: da:bd:48:ee:77:fa:0e:33:75:ec:3a:84:8e:92:09:9c:7e:71: eb:70:5a:3f:b6:a7:81:5f:ca:8b:43:08:a8:ca:40:9c:c5:03: e3:3c:4c:68:5a:7c:ef:87:df:48:28:b3:f5:49:a0:8c:87:ad: 35:f6:6f:8e:c6:36:42:e3:32:7c:e9:0e:a4:28:ac:c3:19:3b: b2:90:b0:b4:bd:f3:76:fb:32:02:43:bd:81:8b:80:b8:99:12: 71:94:86:ad:13:85:5b:22:d1:6b:47:9c:5e:ea:7c:88:4b:5e: b2:02:08:5c:1f:9f:25:4b:36:2a:8e:11:7b:30:54:79:66:c8: d2:bf:0a:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1NjFY3sh75uvgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk YTE2YWJhZmUtMmYzYi00ODZkLWE0NGYtNWFkYTg5MmZlMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqSbYiT/q4N+BBsNEmtlqe3Tcxr2ILQCGVKH 0F7n6yFYz6cngadWIedTa5uiObCm+ZYDN1fAJPha7BVr+MBLAWjoeTQBFqETMdVY 2F7u22AD9Lsuu1m1CGmDwmSMnUXeZcxS96RGXMgG/ufkqOvaYRS2OxXLZGRiV4sy cBaEAZZK6J55qMT8Xci9UVSdYNBEhjEGu9To5wiWtTDgN8x10Mi5IecQCXjZ9cDn gZWxtXP0Az86uugcpP+voN9xxHGJLb3S8GNqeyQClBcKxf68Pjdu4Jz0K7hUeEvt /Vna0CC4U7pll3gYDrnPSKVenGj2cWDuTWMApFUGQqDgZp4B7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA596yH0AQkqDk0LX0M7l+vdToIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGZhOWVjMTQtZjhlNi0z NzVlLWEwNGQtZDc2NjRmZGZmZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGEyKowLBQFFcsC5TJgQGGhguG4Uf+UuVdT6ck8ri96SO+nSfTltwq3 IqhWLo2P8H7aRHfo7COUFPdMoqTdN0gOm0g7RkEkv2LlPAwn+MsPXskgBHNCwUyO OJmu8/2m/uHowEQKMssA1D413oVUgBlCSm7o4VuNfQzfsm7peNq9SO53+g4zdew6 hI6SCZx+cetwWj+2p4FfyotDCKjKQJzFA+M8TGhafO+H30gos/VJoIyHrTX2b47G NkLjMnzpDqQorMMZO7KQsLS983b7MgJDvYGLgLiZEnGUhq0ThVsi0WtHnF7qfIhL XrICCFwfnyVLNiqOEXswVHlmyNK/CgU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:17 2026 by rpki-client