$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa File: 12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa (raw, json) Hash identifier: cnMkpSeafBQ9xYV+IiGL9vFKOrEf5dTaMIZpHpiof4s= Subject key identifier: CB:AB:C6:58:EE:66:DC:EE:5B:18:0B:7A:3B:3A:36:DC:B3:B9:A7:D2 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D0EA7B929271FD257B8733590 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 212609 IP address blocks: 108.165.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b9:29:27:1f:d2:57:b8:73:35:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=5c62b10c-0280-48c8-948b-f2fb7b91be43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0e:1f:86:83:79:26:d5:f5:ce:e9:5f:85:61: 4f:43:ae:8b:7d:dc:bf:d2:f1:7c:a8:b5:ae:83:14: 96:3c:7c:1d:27:b6:50:3a:51:49:fe:89:a4:7f:a3: f2:8e:f0:d6:ab:67:45:45:99:69:de:9b:9f:e5:fc: 03:21:87:75:59:19:61:f1:6d:0a:64:13:df:d4:19: f2:55:89:14:f2:39:98:72:a5:ad:be:37:c3:89:59: 31:aa:70:5e:ba:c3:e3:9e:cf:47:67:dc:61:7f:27: 4d:0d:6e:b7:b5:34:db:64:5c:a4:52:ff:98:c9:34: ca:2e:2c:7a:82:64:2c:79:a6:d3:da:68:dd:54:18: 59:ca:7a:f7:b5:5a:79:55:99:e9:a4:dc:eb:f3:d0: 2e:92:c6:7b:52:91:12:3c:7e:8f:9f:77:12:fc:0d: 28:1f:e8:eb:56:59:08:2c:b4:4a:3b:4c:49:08:40: d0:79:77:7f:63:0b:e3:be:14:6b:38:a8:28:c4:78: 52:9f:c1:c5:73:20:e6:07:08:59:a8:47:3a:a5:96: 6b:ed:45:2e:2d:21:45:f2:77:f2:73:94:fb:d7:4b: 30:76:ec:3e:00:47:50:ea:15:9e:7b:d7:71:c0:a0: 28:f8:57:b7:91:6d:bd:0d:33:a8:31:aa:b6:44:50: 68:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AB:C6:58:EE:66:DC:EE:5B:18:0B:7A:3B:3A:36:DC:B3:B9:A7:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:34:77:4b:21:3c:5e:77:90:d4:ae:7b:87:e8:8a:c1:82:6f: df:dc:2b:f3:3d:cf:55:38:82:76:45:8f:cd:8c:1a:70:5c:b0: a7:f7:c7:e8:d6:48:45:91:6c:f9:4f:70:17:fa:17:7e:52:c5: 64:a9:ed:af:97:02:6e:7f:23:c9:cd:31:02:af:42:15:20:14: f7:9a:06:5d:3c:51:e2:92:b4:0d:cd:1b:e4:1d:5d:d6:5d:c1: 7a:74:f7:59:3a:a3:e3:35:b5:31:6c:f0:9d:e0:6d:c0:10:6e: 2b:d1:fc:72:d7:78:82:18:68:87:7e:2f:ae:27:2b:a9:e8:a7: 00:47:59:62:89:10:4c:68:37:aa:69:11:f9:f9:00:1e:87:0f: 92:6f:cd:dc:22:01:5f:eb:19:4e:4e:51:44:bf:dd:2e:67:7e: 14:39:7d:b9:1c:d5:e3:76:b2:9a:97:72:dd:a5:82:53:93:fd: e5:da:5c:96:63:75:c7:f2:a5:08:90:dc:62:93:9d:b2:2c:89: cb:2a:90:fc:ca:5a:24:77:8d:d4:2d:cf:b8:68:e2:01:45:11: 8b:0c:3e:78:c4:9e:de:5b:7e:ed:9f:2f:95:d0:36:c4:d0:b0: 9a:6a:7c:7a:97:bb:8d:4c:f8:10:8b:87:5e:0f:3c:75:2d:26: 0a:ce:1e:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op7kpJx/SV7hzNZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NWM2MmIxMGMtMDI4MC00OGM4LTk0OGItZjJmYjdiOTFiZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA4fhoN5JtX1zulfhWFPQ66Lfdy/0vF8qLWu gxSWPHwdJ7ZQOlFJ/omkf6PyjvDWq2dFRZlp3puf5fwDIYd1WRlh8W0KZBPf1Bny VYkU8jmYcqWtvjfDiVkxqnBeusPjns9HZ9xhfydNDW63tTTbZFykUv+YyTTKLix6 gmQseabT2mjdVBhZynr3tVp5VZnppNzr89AuksZ7UpESPH6Pn3cS/A0oH+jrVlkI LLRKO0xJCEDQeXd/YwvjvhRrOKgoxHhSn8HFcyDmBwhZqEc6pZZr7UUuLSFF8nfy c5T710swduw+AEdQ6hWee9dxwKAo+Fe3kW29DTOoMaq2RFBofQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMurxljuZtzuWxgLejs6NtyzuafSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTJmYzRiZTQtM2Q1Yi0z NjZhLWFkNDMtZGQ0Mzg5YTBhZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA00d0shPF53kNSue4foisGCb9/cK/M9z1U4gnZFj82MGnBcsKf3x+jW SEWRbPlPcBf6F35SxWSp7a+XAm5/I8nNMQKvQhUgFPeaBl08UeKStA3NG+QdXdZd wXp091k6o+M1tTFs8J3gbcAQbivR/HLXeIIYaId+L64nK6nopwBHWWKJEExoN6pp Efn5AB6HD5JvzdwiAV/rGU5OUUS/3S5nfhQ5fbkc1eN2spqXct2lglOT/eXaXJZj dcfypQiQ3GKTnbIsicsqkPzKWiR3jdQtz7ho4gFFEYsMPnjEnt5bfu2fL5XQNsTQ sJpqfHqXu41M+BCLh14PPHUtJgrOHgU= -----END CERTIFICATE-----Generated at Tue Mar 24 16:36:11 2026 by rpki-client