$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/087a11e4-0700-3a8b-8352-5b2bb426b0a0.roa File: 087a11e4-0700-3a8b-8352-5b2bb426b0a0.roa (raw, json) Hash identifier: P3Dwle1uyAUdRAhf6pjrNLijthkaJgblLZQ61VnqUTg= Subject key identifier: 5F:DA:68:AF:53:C9:89:75:28:90:D3:DE:06:9F:5F:77:62:55:54:86 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D1496E19F1CB8CB3972518900 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/087a11e4-0700-3a8b-8352-5b2bb426b0a0.roa Signing time: Fri 06 Mar 2026 17:01:45 +0000 ROA not before: Fri 06 Mar 2026 17:01:45 +0000 ROA not after: Thu 04 Jun 2026 16:01:45 +0000 asID: 401152 IP address blocks: 108.165.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:96:e1:9f:1c:b8:cb:39:72:51:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 6 17:01:45 2026 GMT Not After : Jun 4 16:01:45 2026 GMT Subject: CN=3217832b-c9a4-4f10-b810-c21be9d9ed9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:d5:24:e6:ca:27:10:cf:bc:80:f9:39:c3: 01:bd:15:c4:d4:b3:21:d1:3d:bc:92:21:46:a7:31: 1f:76:d3:18:96:84:5f:34:d3:c1:9f:9e:51:2d:97: af:b3:f7:9f:ff:2d:e1:c6:e1:26:08:89:34:c8:9d: 36:77:ac:85:01:29:c7:01:14:75:43:24:ce:b9:eb: 3e:af:63:2a:25:08:0b:c5:e8:fa:60:67:2b:32:a6: a2:1e:bc:4f:71:4c:8d:34:db:83:de:50:c0:d5:0e: a9:b5:bc:65:02:76:ff:2c:32:12:bc:03:68:27:fa: c0:16:2f:e9:71:4a:17:41:06:cf:d6:3a:51:f3:3a: ca:90:5a:6f:bb:d3:a8:be:d8:cc:22:e7:e8:e2:c3: 7a:f8:9d:63:c2:79:09:21:89:4e:36:20:fc:b8:43: 38:b6:09:79:ff:cd:b6:a0:bd:f1:dc:c0:54:02:7c: 57:36:f8:af:5f:f3:65:f8:c9:26:f8:e8:3a:96:69: bd:5e:a5:b0:ec:a5:6e:86:ba:1b:bc:a5:20:e4:6c: db:25:99:02:34:42:f3:99:86:b0:be:ca:ac:27:93: b3:67:97:80:00:2c:78:3f:90:2b:10:7b:29:a3:ce: f0:42:87:0e:b5:1d:fc:84:98:a1:b4:36:d4:c7:42: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DA:68:AF:53:C9:89:75:28:90:D3:DE:06:9F:5F:77:62:55:54:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/087a11e4-0700-3a8b-8352-5b2bb426b0a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:de:c2:b6:b9:0e:a1:1a:46:9c:3b:24:9f:87:89:36:ea:89: 57:04:f2:47:be:74:74:ba:b1:79:cc:7d:70:25:0e:27:89:58: 2b:de:c9:f8:41:74:e6:ba:0b:43:4c:1f:bc:f5:30:9a:7d:42: 37:f1:41:01:2a:15:d3:3a:b7:07:cd:1b:30:42:ac:cb:68:93: 88:9c:e8:9f:57:23:ca:74:73:6f:01:50:bb:06:d8:8c:ed:f5: 44:12:06:d5:38:41:0e:de:b9:43:be:1a:29:d2:f9:7b:9c:fb: 40:82:d5:d6:08:f2:ab:22:4e:0c:ca:bb:e4:fe:14:64:bd:e2: 3e:45:e3:17:fc:a1:1d:b6:a3:c3:37:98:1c:51:7c:ab:43:cd: a7:e9:66:4b:a2:86:e3:17:52:38:88:3c:42:61:f2:41:c8:50: d5:29:13:e9:7f:c0:9d:b7:38:1e:58:f5:a7:1b:71:23:05:36: 53:25:93:cf:a2:e3:71:78:b5:56:80:b4:72:68:de:e0:e2:dd: de:1d:60:65:4c:bd:93:05:45:74:5d:24:4a:e3:a1:33:61:27: cc:ae:7d:81:a2:52:64:ba:47:34:7a:90:ac:fa:58:e0:c6:35: 99:c9:2e:0a:cc:89:78:9d:cf:58:7c:6a:33:14:ca:51:11:89: 1d:28:59:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UluGfHLjLOXJRiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMwNjE3MDE0NVoXDTI2MDYwNDE2MDE0NVowLzEtMCsGA1UEAxMk MzIxNzgzMmItYzlhNC00ZjEwLWI4MTAtYzIxYmU5ZDllZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmjVJObKJxDPvID5OcMBvRXE1LMh0T28kiFG pzEfdtMYloRfNNPBn55RLZevs/ef/y3hxuEmCIk0yJ02d6yFASnHARR1QyTOues+ r2MqJQgLxej6YGcrMqaiHrxPcUyNNNuD3lDA1Q6ptbxlAnb/LDISvANoJ/rAFi/p cUoXQQbP1jpR8zrKkFpvu9OovtjMIufo4sN6+J1jwnkJIYlONiD8uEM4tgl5/822 oL3x3MBUAnxXNvivX/Nl+Mkm+Og6lmm9XqWw7KVuhrobvKUg5GzbJZkCNELzmYaw vsqsJ5OzZ5eAACx4P5ArEHspo87wQocOtR38hJihtDbUx0JygwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/aaK9TyYl1KJDT3gafX3diVVSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDg3YTExZTQtMDcwMC0z YThiLTgzNTItNWIyYmI0MjZiMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDewra5DqEaRpw7JJ+HiTbqiVcE8ke+dHS6sXnMfXAlDieJWCveyfhB dOa6C0NMH7z1MJp9QjfxQQEqFdM6twfNGzBCrMtok4ic6J9XI8p0c28BULsG2Izt 9UQSBtU4QQ7euUO+GinS+Xuc+0CC1dYI8qsiTgzKu+T+FGS94j5F4xf8oR22o8M3 mBxRfKtDzafpZkuihuMXUjiIPEJh8kHIUNUpE+l/wJ23OB5Y9acbcSMFNlMlk8+i 43F4tVaAtHJo3uDi3d4dYGVMvZMFRXRdJErjoTNhJ8yufYGiUmS6RzR6kKz6WODG NZnJLgrMiXidz1h8ajMUylERiR0oWW0= -----END CERTIFICATE-----Generated at Tue Mar 10 11:19:08 2026 by rpki-client