$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/023d7855-2d78-37d8-b5fd-57387d527158.roa File: 023d7855-2d78-37d8-b5fd-57387d527158.roa (raw, json) Hash identifier: ED8DlIKgVcOAWFqq/JoUZYkIHG6KEgJ8nmAZ0w/hL/o= Subject key identifier: 99:5D:1D:9E:CA:AA:45:9B:9A:A2:D2:23:81:F2:B1:47:47:7D:BA:C9 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584ED432254C831A7A0B72BEE5E0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/023d7855-2d78-37d8-b5fd-57387d527158.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 58061 IP address blocks: 166.0.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:25:4c:83:1a:7a:0b:72:be:e5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=a5f0441d-15f1-46e5-b364-9792f3672d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fb:b2:f3:dc:a5:ad:5a:e2:60:3c:26:dc:e7: 11:35:09:93:a2:50:90:22:8b:b1:72:4d:89:38:33: cf:81:d3:0e:c4:ba:4c:28:fc:9e:33:9c:59:ee:aa: 2f:c4:9f:22:bf:db:00:27:9d:f4:9d:10:6b:e8:d5: 61:8a:e7:f5:88:aa:fd:9f:3e:af:83:5c:1c:05:4b: 60:4a:73:34:f2:9b:c6:27:88:0e:45:1b:c8:38:e8: f4:f2:ac:7c:d7:3a:48:4d:95:17:70:2e:fa:76:95: 96:1c:e1:e0:38:87:cb:a5:f1:59:a7:ef:a4:09:e6: e0:fb:70:4c:a9:46:d1:39:f2:af:12:c9:9e:31:99: 83:6f:05:e4:ce:51:0c:ca:a2:01:aa:eb:46:43:f0: 6d:ab:ac:3e:ec:97:ec:34:1c:58:01:4e:fc:26:39: 0b:3d:f3:b5:48:cc:63:56:70:52:bb:32:70:33:ba: c3:f8:e5:ad:51:b1:6d:77:4f:da:5b:a7:ea:80:43: b9:63:f7:65:df:8a:67:d1:f1:68:63:f4:9e:11:48: c2:72:05:47:00:3c:97:82:8e:d1:b3:54:1d:8d:f6: 02:09:10:ce:c2:5a:2a:94:6d:19:ba:bb:61:21:d1: ca:82:52:c4:ce:8b:52:c5:c5:35:b5:8f:8d:b6:2a: f2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5D:1D:9E:CA:AA:45:9B:9A:A2:D2:23:81:F2:B1:47:47:7D:BA:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/023d7855-2d78-37d8-b5fd-57387d527158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:de:5b:f5:f7:a6:70:6f:7f:53:de:76:03:aa:df:1f:6e:94: 57:8a:bd:b2:bc:c5:29:55:bb:2f:9d:57:2e:16:54:4f:74:ee: 81:59:25:8d:38:32:76:01:01:a3:26:4a:3a:04:ce:c9:93:2f: c9:38:fb:3b:a0:f0:5f:23:11:db:1c:9c:ae:4c:94:74:98:ae: 56:97:1e:6c:a6:31:e7:84:96:38:e6:85:f5:21:99:e2:d0:4f: 44:6f:9e:44:75:8a:48:27:8d:32:f7:cc:91:8d:d0:2d:8e:06: e3:08:89:37:09:7c:e2:cf:cd:e5:e5:c2:5e:f7:8d:b3:cf:a1: aa:33:e9:d8:2b:92:b6:10:f9:33:1d:4e:3e:b3:5e:e0:fd:ea: b6:da:95:bb:08:29:3f:02:0f:2c:5b:ad:91:9a:99:32:c4:1d: 64:8a:55:c9:82:73:73:62:64:13:9f:db:71:2d:6a:3b:37:24: 08:53:62:aa:2b:99:cb:c2:5c:db:96:ca:37:90:8c:eb:63:50: 18:9c:60:a1:f1:57:6b:a1:09:3e:6b:1c:f2:11:8f:a5:09:b9: a8:dc:3e:d6:66:db:dc:ab:00:e6:f1:2a:2c:e8:0f:00:aa:0a: 02:cf:5f:73:f9:cb:8b:48:a8:f3:a8:c6:9b:f6:ce:a4:d4:39: 4b:64:38:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMiVMgxp6C3K+5eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk YTVmMDQ0MWQtMTVmMS00NmU1LWIzNjQtOTc5MmYzNjcyZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/uy89ylrVriYDwm3OcRNQmTolCQIouxck2J ODPPgdMOxLpMKPyeM5xZ7qovxJ8iv9sAJ530nRBr6NVhiuf1iKr9nz6vg1wcBUtg SnM08pvGJ4gORRvIOOj08qx81zpITZUXcC76dpWWHOHgOIfLpfFZp++kCebg+3BM qUbROfKvEsmeMZmDbwXkzlEMyqIBqutGQ/Btq6w+7JfsNBxYAU78JjkLPfO1SMxj VnBSuzJwM7rD+OWtUbFtd0/aW6fqgEO5Y/dl34pn0fFoY/SeEUjCcgVHADyXgo7R s1QdjfYCCRDOwloqlG0ZurthIdHKglLEzotSxcU1tY+Ntiry+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJldHZ7KqkWbmqLSI4HysUdHfbrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDIzZDc4NTUtMmQ3OC0z N2Q4LWI1ZmQtNTczODdkNTI3MTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzeW/X3pnBvf1PedgOq3x9ulFeKvbK8xSlVuy+dVy4WVE907oFZJY04 MnYBAaMmSjoEzsmTL8k4+zug8F8jEdscnK5MlHSYrlaXHmymMeeEljjmhfUhmeLQ T0RvnkR1ikgnjTL3zJGN0C2OBuMIiTcJfOLPzeXlwl73jbPPoaoz6dgrkrYQ+TMd Tj6zXuD96rbalbsIKT8CDyxbrZGamTLEHWSKVcmCc3NiZBOf23Etajs3JAhTYqor mcvCXNuWyjeQjOtjUBicYKHxV2uhCT5rHPIRj6UJuajcPtZm29yrAObxKizoDwCq CgLPX3P5y4tIqPOoxpv2zqTUOUtkONM= -----END CERTIFICATE-----Generated at Tue Sep 15 12:58:40 2026 by rpki-client