$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa File: 0917c851-a40a-30a1-a39b-23f91f1ca480.roa (raw, json) Hash identifier: xR73PrUN/KRxRsiZKbKQwg/bEYNkK9+YAfq1TeNJ5oA= Subject key identifier: 7E:F5:6F:74:F5:0E:7B:4C:AF:15:3B:4C:47:DB:67:83:A9:CC:E1:03 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F9BCDE90A62F6EBC0E1291E80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 49770 IP address blocks: 108.165.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e9:0a:62:f6:eb:c0:e1:29:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=9584bd07-cfe0-4702-980d-2b7c7f8223c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bc:79:fa:bc:a5:4e:06:9c:a9:58:a8:27:1f: 3f:68:5b:9c:bb:fa:5a:27:61:26:0c:03:96:ff:d2: 9f:04:10:f3:f9:8c:05:61:5d:1f:57:a5:68:c2:50: 39:bd:94:39:d8:61:a0:91:0b:e0:52:f5:cb:46:96: 96:e9:94:ab:17:69:13:3d:c6:4b:25:08:f6:0a:c9: c2:65:2e:42:35:f0:3d:0c:61:1e:6f:63:39:1e:61: 70:e0:7a:15:8a:a7:06:ec:ae:8a:82:b1:d9:6b:ba: de:9e:49:0e:2d:63:32:fd:07:fd:77:8b:a1:a0:85: cc:cd:05:b6:cb:e2:e7:06:84:96:5a:e8:c8:9f:2d: 60:d9:95:26:b6:e8:7b:f3:a2:2c:02:70:b3:78:2e: a4:82:16:8f:5e:46:08:4d:f8:67:f3:03:09:12:30: 9e:fc:f5:2e:0d:dc:58:8d:30:03:58:87:d1:2b:24: df:2b:3b:2c:7d:5e:5d:b5:e5:55:82:fe:0b:21:61: 3c:33:2d:68:94:4a:59:8d:75:65:7a:a1:c1:f5:18: 17:c1:08:77:5e:2c:82:68:64:56:6e:4d:9e:df:42: 7f:c7:1c:c4:de:af:da:70:5a:16:78:4a:3e:38:6d: d9:b8:6e:68:80:67:00:44:49:0e:5a:26:70:76:75: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F5:6F:74:F5:0E:7B:4C:AF:15:3B:4C:47:DB:67:83:A9:CC:E1:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4e:55:7d:9a:84:21:ce:01:65:7e:87:a9:f6:87:e7:1f:67: 6b:b1:47:e9:15:00:ec:40:99:f9:e9:4a:10:45:c6:53:f2:7d: 23:c7:f6:b3:15:a5:c9:d1:e9:96:d9:da:32:ce:69:78:0d:61: 9a:43:ba:06:81:21:67:ee:ce:e0:16:a3:04:65:b0:05:a8:b8: ee:11:b2:ef:07:b0:37:28:fd:80:85:da:f6:ef:6f:50:15:0b: ab:00:cb:fa:bf:5b:62:a0:a5:2f:08:5f:5c:f2:c5:17:db:f3: dd:fc:09:fa:78:3e:6d:aa:b0:82:13:f1:0c:7b:88:76:31:cd: d5:0e:36:b8:f4:fd:89:6e:02:ef:8e:7a:95:03:06:b1:e1:ad: 4e:12:42:e5:2e:e1:68:f0:16:58:0e:0b:d6:03:e4:20:13:bb: 1b:0b:1f:05:d8:de:b7:6b:a5:55:e9:b4:1f:06:a3:e7:56:7e: 66:15:9a:6a:18:8b:f4:f8:c2:83:30:d5:9a:bb:c2:cb:20:3f: 74:02:c3:da:aa:80:6b:33:e5:fc:24:b6:8d:9e:e6:e2:05:73: be:34:14:bc:1b:b8:00:45:c4:e9:ba:09:66:f5:bb:a5:f3:c5: 17:2c:26:ad:09:df:ea:a3:00:e8:b2:80:d2:5a:a1:9b:26:97: 63:99:b7:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzekKYvbrwOEpHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk OTU4NGJkMDctY2ZlMC00NzAyLTk4MGQtMmI3YzdmODIyM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbx5+rylTgacqVioJx8/aFucu/paJ2EmDAOW /9KfBBDz+YwFYV0fV6VowlA5vZQ52GGgkQvgUvXLRpaW6ZSrF2kTPcZLJQj2CsnC ZS5CNfA9DGEeb2M5HmFw4HoViqcG7K6KgrHZa7renkkOLWMy/Qf9d4uhoIXMzQW2 y+LnBoSWWujIny1g2ZUmtuh786IsAnCzeC6kghaPXkYITfhn8wMJEjCe/PUuDdxY jTADWIfRKyTfKzssfV5dteVVgv4LIWE8My1olEpZjXVleqHB9RgXwQh3XiyCaGRW bk2e30J/xxzE3q/acFoWeEo+OG3ZuG5ogGcAREkOWiZwdnXlywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH71b3T1DntMrxU7TEfbZ4OpzOEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDkxN2M4NTEtYTQwYS0z MGExLWEzOWItMjNmOTFmMWNhNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9OVX2ahCHOAWV+h6n2h+cfZ2uxR+kVAOxAmfnpShBFxlPyfSPH9rMV pcnR6ZbZ2jLOaXgNYZpDugaBIWfuzuAWowRlsAWouO4Rsu8HsDco/YCF2vbvb1AV C6sAy/q/W2KgpS8IX1zyxRfb8938Cfp4Pm2qsIIT8Qx7iHYxzdUONrj0/YluAu+O epUDBrHhrU4SQuUu4WjwFlgOC9YD5CATuxsLHwXY3rdrpVXptB8Go+dWfmYVmmoY i/T4woMw1Zq7wssgP3QCw9qqgGsz5fwkto2e5uIFc740FLwbuABFxOm6CWb1u6Xz xRcsJq0J3+qjAOiygNJaoZsml2OZtzM= -----END CERTIFICATE-----Generated at Mon Nov 2 19:10:25 2026 by rpki-client