$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa File: e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa (raw, json) Hash identifier: 0penQWGqHks7iZ5sTeVJylORCMn4CkfQ96RJ5GhIjD0= Subject key identifier: E3:9E:36:F7:4C:57:E3:36:FE:AB:9C:B2:6F:19:4C:9C:A3:7E:E1:72 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D9E5018D05462A6F90B9A1F00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 212335 IP address blocks: 108.165.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:18:d0:54:62:a6:f9:0b:9a:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=e3356dd3-39b4-4a37-8a0e-e049f58ca0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:d7:e9:8e:3f:4f:de:1f:37:6a:b8:e5:12: 33:dc:96:d4:24:fa:ab:4a:2c:da:0f:41:44:45:8b: e4:01:5c:b8:af:54:ed:ea:66:7a:21:1f:81:ca:5d: e8:31:60:ab:0f:be:f5:96:59:73:33:0b:a8:c1:63: 74:3a:e7:e0:18:fa:32:79:21:a8:a5:a8:8a:b6:67: 7a:bb:34:3e:97:3d:52:f3:dc:e3:dd:93:6a:33:4f: 2b:87:1b:03:a5:08:79:de:f6:58:ea:f4:ab:1e:98: 46:9f:0d:d7:09:5e:30:b1:ee:09:89:d8:3f:d3:e3: da:a1:86:0a:4e:2d:e6:dc:18:f1:f0:17:89:ba:3c: 82:69:99:9e:a7:cb:43:16:a6:b3:78:0e:81:ee:ca: d5:6c:36:72:19:96:cc:32:fb:53:4a:fd:07:67:0d: ff:20:9c:1f:59:ff:d7:94:63:e6:09:86:03:c2:d6: 97:3a:e7:a1:04:88:9b:38:4e:aa:38:ac:95:4b:24: f3:02:cc:4f:f2:fe:52:cf:61:d5:df:0a:73:ae:98: 94:46:72:ce:9b:db:f6:3b:22:5c:ae:a9:83:a6:2b: 99:8f:87:e0:1d:61:d8:03:13:52:6f:a8:f5:88:29: 18:2e:b6:4f:0a:98:ea:34:4a:db:d5:57:30:6f:13: b3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9E:36:F7:4C:57:E3:36:FE:AB:9C:B2:6F:19:4C:9C:A3:7E:E1:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:5d:a5:f9:19:a2:89:cd:05:b6:a8:a4:3a:e5:96:34:d5:aa: be:65:e2:71:8c:90:f3:56:8f:cf:38:b6:25:72:e4:61:2f:7e: 87:45:3f:ac:c1:d2:5a:4b:8f:fb:5a:b8:bc:b5:5d:da:fa:91: 0a:33:4c:26:af:62:af:7c:68:f7:ee:54:08:f6:45:5a:bd:31: 3b:0f:8e:46:9a:45:51:03:3e:b1:3d:da:ee:dd:85:0a:d0:72: d7:5c:08:b0:d7:ba:16:4a:15:e2:74:39:e4:56:91:92:3f:1b: 01:a0:15:c5:43:90:19:6d:3b:ab:db:04:b8:df:ba:c9:77:4b: 93:ed:22:73:88:a3:8e:39:84:55:7c:71:1c:31:e8:3d:4c:0c: a3:ac:e2:30:ba:f9:a4:f8:1a:a0:2f:0c:5d:15:ea:8a:68:14: e3:dc:00:4c:e0:a5:2c:c7:69:94:4c:c1:4b:de:02:79:29:84: f4:8c:b5:4e:fe:b1:57:2a:f8:c1:20:a8:dc:0d:b7:54:ed:c1: 71:84:a3:1b:0f:ff:ce:9b:be:7a:56:6d:83:eb:16:dc:3b:f1: 8e:95:27:51:28:f1:90:3c:76:40:ba:3d:59:84:4a:28:c0:15: 2b:17:8e:92:e2:e7:41:16:ef:a4:00:73:5e:1f:07:2d:a7:41: ec:d5:9c:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBjQVGKm+QuaHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZTMzNTZkZDMtMzliNC00YTM3LThhMGUtZTA0OWY1OGNhMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJTX6Y4/T94fN2q45RIz3JbUJPqrSizaD0FE RYvkAVy4r1Tt6mZ6IR+Byl3oMWCrD771lllzMwuowWN0OufgGPoyeSGopaiKtmd6 uzQ+lz1S89zj3ZNqM08rhxsDpQh53vZY6vSrHphGnw3XCV4wse4Jidg/0+PaoYYK Ti3m3Bjx8BeJujyCaZmep8tDFqazeA6B7srVbDZyGZbMMvtTSv0HZw3/IJwfWf/X lGPmCYYDwtaXOuehBIibOE6qOKyVSyTzAsxP8v5Sz2HV3wpzrpiURnLOm9v2OyJc rqmDpiuZj4fgHWHYAxNSb6j1iCkYLrZPCpjqNErb1VcwbxOz6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOeNvdMV+M2/qucsm8ZTJyjfuFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTliNGY0ODMtYjM3YS0z MjliLWJhOTctMmUwNTE4ZGRiM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZdpfkZoonNBbaopDrlljTVqr5l4nGMkPNWj884tiVy5GEvfodFP6zB 0lpLj/tauLy1Xdr6kQozTCavYq98aPfuVAj2RVq9MTsPjkaaRVEDPrE92u7dhQrQ ctdcCLDXuhZKFeJ0OeRWkZI/GwGgFcVDkBltO6vbBLjfusl3S5PtInOIo445hFV8 cRwx6D1MDKOs4jC6+aT4GqAvDF0V6opoFOPcAEzgpSzHaZRMwUveAnkphPSMtU7+ sVcq+MEgqNwNt1TtwXGEoxsP/86bvnpWbYPrFtw78Y6VJ1Eo8ZA8dkC6PVmESijA FSsXjpLi50EW76QAc14fBy2nQezVnMw= -----END CERTIFICATE-----Generated at Wed May 13 06:40:54 2026 by rpki-client