$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0420908a-dd84-3ba5-b49a-32ef75923e40.roa File: 0420908a-dd84-3ba5-b49a-32ef75923e40.roa (raw, json) Hash identifier: 12GJLBYv7n30MoN94AUETu9tUGUtEx1zm0nYjK8qRJc= Subject key identifier: 21:F2:CA:6C:ED:B0:E8:5B:A4:0C:9D:A2:71:47:66:FA:6A:3F:EB:F5 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DAE4FD00D5178C2A7B7551AC0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0420908a-dd84-3ba5-b49a-32ef75923e40.roa Signing time: Thu 30 Apr 2026 18:33:02 +0000 ROA not before: Thu 30 Apr 2026 18:33:02 +0000 ROA not after: Wed 29 Jul 2026 18:33:02 +0000 asID: 44559 IP address blocks: 166.1.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:4f:d0:0d:51:78:c2:a7:b7:55:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 30 18:33:02 2026 GMT Not After : Jul 29 18:33:02 2026 GMT Subject: CN=7e4c67cf-3727-4d27-b1ec-cb97b0f78434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a0:df:fe:8f:65:cd:09:bc:81:91:96:4b:37: 8e:c6:84:2a:42:32:d2:06:2d:ec:68:0c:29:a6:24: 77:a3:6f:48:7d:63:1d:c8:6a:a4:94:ae:6d:fb:6a: 13:1f:2f:97:4a:fb:d3:15:cb:6b:3f:8a:9f:ee:90: 5f:0d:b6:d1:b6:ed:62:50:5b:14:88:46:37:34:b3: 24:fc:36:f1:3a:39:98:44:ab:8d:a3:0d:5b:83:3c: b7:84:38:ef:25:2b:de:24:a0:52:76:9c:18:f6:4f: f2:3a:a7:fc:62:ca:7e:a3:ad:7f:77:a2:97:f6:2b: 7f:26:25:4f:24:09:61:55:03:f3:af:24:a6:a8:cb: 16:e3:be:39:b0:c7:44:fb:b4:69:8a:67:dc:a8:54: 6c:8a:2d:ae:ca:58:25:c4:1c:ae:c4:14:ff:be:9c: b8:db:34:c8:db:5c:f1:9d:88:95:f7:f8:15:72:54: 16:00:42:dd:39:be:6a:1b:56:11:de:90:06:5d:34: 1d:1b:07:e5:61:e9:8c:60:6b:18:8f:75:0d:4f:f5: f2:42:6e:61:0a:f1:28:8d:05:be:c5:b9:4e:b5:87: a6:4c:f9:81:98:66:72:9f:90:b1:82:7f:3e:ef:c3: eb:f5:68:2e:01:ae:04:f4:0b:07:4c:1a:4e:9f:7e: 67:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F2:CA:6C:ED:B0:E8:5B:A4:0C:9D:A2:71:47:66:FA:6A:3F:EB:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0420908a-dd84-3ba5-b49a-32ef75923e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:88:12:02:2d:7f:4e:1f:9d:84:c0:53:c8:21:c8:15:fe:e9: d9:2e:18:94:8c:1b:b9:42:96:25:8f:63:db:f2:f3:ff:78:b3: 36:aa:47:c3:8a:b4:14:f5:f4:d7:73:f8:e9:63:50:df:a6:dd: ac:bf:05:77:18:ba:d2:73:2f:9c:2e:54:73:b9:93:e8:f3:b7: 58:86:d2:94:0a:eb:8a:87:66:fe:c9:33:ff:84:41:ad:6c:23: 0c:d8:f4:7e:11:57:30:b6:e5:56:22:c0:63:81:e5:c2:f8:e4: 6a:9f:e2:52:ee:31:11:ac:28:18:1c:63:6c:38:d1:b3:85:ae: b0:ef:18:2e:5b:f9:8c:66:d3:04:74:ca:1a:91:33:4e:51:22: 8d:34:0f:d0:cc:fc:ac:76:8e:36:de:87:e7:ae:88:93:86:a8: 73:89:a5:e4:5e:f7:de:40:04:4c:cc:ef:1b:b5:c8:90:6f:2b: ab:09:fd:98:6c:01:48:11:f1:f4:bf:ec:78:0f:29:b3:23:cd: b6:37:37:a3:21:bd:c9:1d:95:8c:e4:e8:af:61:46:c6:05:f7: ba:57:3b:c6:cc:d1:9f:13:0c:98:ec:ab:fe:48:62:ed:d5:7b: 58:41:4a:78:05:5b:f9:d6:c2:d9:a7:fa:8e:38:74:98:06:ba: 03:6a:0e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT9ANUXjCp7dVGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQzMDE4MzMwMloXDTI2MDcyOTE4MzMwMlowLzEtMCsGA1UEAxMk N2U0YzY3Y2YtMzcyNy00ZDI3LWIxZWMtY2I5N2IwZjc4NDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaDf/o9lzQm8gZGWSzeOxoQqQjLSBi3saAwp piR3o29IfWMdyGqklK5t+2oTHy+XSvvTFctrP4qf7pBfDbbRtu1iUFsUiEY3NLMk /DbxOjmYRKuNow1bgzy3hDjvJSveJKBSdpwY9k/yOqf8Ysp+o61/d6KX9it/JiVP JAlhVQPzrySmqMsW4745sMdE+7RpimfcqFRsii2uylglxByuxBT/vpy42zTI21zx nYiV9/gVclQWAELdOb5qG1YR3pAGXTQdGwflYemMYGsYj3UNT/XyQm5hCvEojQW+ xblOtYemTPmBmGZyn5Cxgn8+78Pr9WguAa4E9AsHTBpOn35n3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHyymztsOhbpAydonFHZvpqP+v1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDQyMDkwOGEtZGQ4NC0z YmE1LWI0OWEtMzJlZjc1OTIzZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACIEgItf04fnYTAU8ghyBX+6dkuGJSMG7lCliWPY9vy8/94szaqR8OK tBT19Ndz+OljUN+m3ay/BXcYutJzL5wuVHO5k+jzt1iG0pQK64qHZv7JM/+EQa1s IwzY9H4RVzC25VYiwGOB5cL45Gqf4lLuMRGsKBgcY2w40bOFrrDvGC5b+Yxm0wR0 yhqRM05RIo00D9DM/Kx2jjbeh+euiJOGqHOJpeRe995ABEzM7xu1yJBvK6sJ/Zhs AUgR8fS/7HgPKbMjzbY3N6MhvckdlYzk6K9hRsYF97pXO8bM0Z8TDJjsq/5IYu3V e1hBSngFW/nWwtmn+o44dJgGugNqDlM= -----END CERTIFICATE-----Generated at Sat May 2 23:09:12 2026 by rpki-client