$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa File: 0917c851-a40a-30a1-a39b-23f91f1ca480.roa (raw, json) Hash identifier: YJ3RXGr2xAbLFnWLaThXCj9Ihj+FKh++8B37KVLpO1s= Subject key identifier: 08:EA:A7:4D:AD:4C:93:5A:82:21:E6:86:A3:F4:DA:32:3F:46:48:46 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EF87CE34060DC0F9853751D20 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 49770 IP address blocks: 108.165.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:e3:40:60:dc:0f:98:53:75:1d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=722ec78a-1833-403b-b1b6-c51a4cf24144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:7c:d8:95:09:ac:96:fa:3d:a6:0d:9d:09: 23:33:7c:e1:1a:8f:cf:07:f5:6b:e0:66:84:ee:ef: 40:6f:83:f2:4c:f3:64:f8:38:04:eb:f6:44:31:8b: 9a:34:2c:c2:a9:11:ff:ec:09:49:eb:28:43:57:df: a9:9c:89:c8:50:4e:43:0a:14:b8:35:db:ca:97:ed: 51:04:64:53:a5:99:aa:64:5e:9f:d0:57:5f:be:6a: ef:30:31:e0:63:a6:85:9a:bc:8d:04:a3:cd:40:24: 09:dd:2c:cb:1e:2e:ea:18:b4:12:a8:51:43:01:bf: e1:fc:11:9c:a6:88:12:cb:df:a6:70:72:5e:1b:b2: f2:f1:81:2a:e0:5a:c4:ce:3e:16:3c:f3:dd:6f:ca: 45:82:8a:da:c3:5e:b5:fb:87:d7:6c:0d:f9:98:e1: fa:13:7e:b5:59:8c:b3:95:69:11:f2:b3:b3:45:42: a5:fa:ce:80:42:38:2f:a4:f9:b2:0e:4b:b3:5b:ec: 23:e3:bb:cb:00:7f:c8:2c:12:de:3c:72:35:5d:88: 48:6d:13:3d:19:98:15:48:1c:52:a1:e9:c2:bc:f4: 60:6a:87:93:95:c5:e2:d6:48:a1:0f:09:ca:a6:9c: 5e:d5:13:d9:04:f7:12:d7:bd:24:84:f3:b0:5b:d2: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EA:A7:4D:AD:4C:93:5A:82:21:E6:86:A3:F4:DA:32:3F:46:48:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:cf:7e:9e:cd:cb:36:ea:2d:05:15:74:fc:b1:5e:e8:5b:ff: 9f:75:7e:e3:83:26:84:1c:ad:84:d0:2b:7f:be:db:14:ce:82: e2:9c:58:51:2e:9b:19:d3:ff:ed:83:18:c4:a7:71:45:66:bf: 6f:16:ef:5b:38:8b:9e:fb:c3:f8:a9:03:06:78:f4:ab:7b:ef: 01:e0:71:b1:c1:7c:03:05:87:db:4b:97:9e:e1:8b:de:bd:bd: 49:f4:75:09:35:04:27:ad:58:ff:77:ab:23:44:12:33:8b:04: 8e:15:0e:ff:43:cf:47:19:ce:20:5c:23:b7:59:16:f9:11:b6: 70:ce:98:73:e3:a3:b7:61:6c:e9:2a:03:9c:88:46:6d:49:a8: 97:be:46:2e:c4:82:f1:5b:22:34:63:d6:58:b3:8a:a0:50:08: 2c:39:0c:a2:10:89:12:4e:e7:55:02:61:c7:e6:df:a6:03:a9: 04:40:bc:50:63:3e:68:55:a3:8c:b8:11:bd:ea:0c:48:d2:0c: 70:b9:e4:00:da:08:30:a6:99:c1:41:5e:71:ee:8e:77:79:2c: c8:38:d4:7e:47:69:70:c5:db:2e:fd:38:b7:f3:ae:d2:89:f2: d3:05:96:15:35:9a:16:af:8b:99:b7:45:87:09:4e:85:f4:e4: a7:77:35:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fONAYNwPmFN1HSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk NzIyZWM3OGEtMTgzMy00MDNiLWIxYjYtYzUxYTRjZjI0MTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAZ82JUJrJb6PaYNnQkjM3zhGo/PB/Vr4GaE 7u9Ab4PyTPNk+DgE6/ZEMYuaNCzCqRH/7AlJ6yhDV9+pnInIUE5DChS4NdvKl+1R BGRTpZmqZF6f0FdfvmrvMDHgY6aFmryNBKPNQCQJ3SzLHi7qGLQSqFFDAb/h/BGc pogSy9+mcHJeG7Ly8YEq4FrEzj4WPPPdb8pFgoraw161+4fXbA35mOH6E361WYyz lWkR8rOzRUKl+s6AQjgvpPmyDkuzW+wj47vLAH/ILBLePHI1XYhIbRM9GZgVSBxS oenCvPRgaoeTlcXi1kihDwnKppxe1RPZBPcS170khPOwW9L+/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjqp02tTJNagiHmhqP02jI/RkhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDkxN2M4NTEtYTQwYS0z MGExLWEzOWItMjNmOTFmMWNhNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPPfp7NyzbqLQUVdPyxXuhb/591fuODJoQcrYTQK3++2xTOguKcWFEu mxnT/+2DGMSncUVmv28W71s4i577w/ipAwZ49Kt77wHgcbHBfAMFh9tLl57hi969 vUn0dQk1BCetWP93qyNEEjOLBI4VDv9Dz0cZziBcI7dZFvkRtnDOmHPjo7dhbOkq A5yIRm1JqJe+Ri7EgvFbIjRj1liziqBQCCw5DKIQiRJO51UCYcfm36YDqQRAvFBj PmhVo4y4Eb3qDEjSDHC55ADaCDCmmcFBXnHujnd5LMg41H5HaXDF2y79OLfzrtKJ 8tMFlhU1mhavi5m3RYcJToX05Kd3NRs= -----END CERTIFICATE-----Generated at Thu Sep 17 20:46:27 2026 by rpki-client