$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa File: 1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa (raw, json) Hash identifier: C8n1qxQZBpA2nMs2yeQ4AINDG1MP/k9wXofaBssqFVE= Subject key identifier: 6C:BF:F4:C5:E6:7F:DF:FB:66:F8:F6:5A:63:6D:EC:C8:9F:09:93:BC Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F0D6CF0DD6786D43862AC6D80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 22168 IP address blocks: 108.165.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f0:dd:67:86:d4:38:62:ac:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=cb1b73d0-72ad-4ec1-91cc-92233df7bbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:59:af:00:88:3b:49:5a:e4:49:b9:b5:9e:a9: 18:b4:64:98:24:00:f7:a6:53:b0:f9:61:42:ef:97: 19:0a:0d:89:2b:a5:4b:e9:f0:95:1b:52:ea:44:5a: 89:32:fd:01:6d:3d:32:c0:b0:38:75:35:5b:ad:82: 5d:63:92:f1:34:b7:f8:59:5c:fa:86:bf:d4:b7:7e: 01:f8:90:94:ce:f7:17:61:cd:44:18:8a:09:ea:bb: aa:02:d8:92:9d:1d:7a:dd:dc:93:2c:79:30:bb:c7: 6f:61:0e:77:35:8f:53:21:d9:3b:63:52:cc:96:6f: 57:a3:ee:8b:c6:3c:64:10:48:dc:aa:47:08:da:9c: a0:f8:f9:cc:cd:2e:4b:ba:ff:0b:0e:f0:94:b7:f0: 14:d0:dd:a1:dd:63:7d:36:1a:25:97:45:f7:a7:c8: 1b:e2:ee:c2:7b:42:16:9e:f8:8e:4a:55:27:a8:6b: 3b:43:31:5b:03:90:44:6c:24:d9:53:5a:7b:95:70: dd:bf:70:3f:40:ea:a3:17:85:ff:b2:9d:78:a3:b3: 76:7b:35:96:cc:9b:0f:c7:ba:36:2f:76:f7:5a:fa: 83:4f:7b:cb:a0:29:76:be:e4:71:98:1d:1f:72:ed: 2f:c1:f2:97:3b:1b:c0:02:36:67:89:76:7a:fe:94: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BF:F4:C5:E6:7F:DF:FB:66:F8:F6:5A:63:6D:EC:C8:9F:09:93:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:62:80:90:bd:3e:e6:4d:15:51:95:6a:5e:9f:c5:a4:96:43: 1d:3f:e6:ea:a5:65:cf:3b:b1:2a:5f:39:16:fc:34:4d:91:94: fc:77:45:eb:c4:ea:80:57:17:6f:55:00:fe:4d:58:79:8e:b2: e1:88:76:27:f9:35:a5:36:8c:ff:4f:6c:53:66:4c:10:4b:a9: 41:a4:f1:f4:49:a6:42:50:58:0d:da:c9:c8:16:84:31:82:f6: 69:13:17:c0:6f:ff:94:7c:64:02:25:c1:4d:19:66:b7:86:ce: 3b:e4:bc:e3:8f:05:33:cc:b8:d1:23:7f:44:c4:61:07:e9:35: 6e:ee:c2:3b:c8:36:d1:d8:7b:7e:81:b1:2e:5e:a5:13:a4:28: 0f:ba:13:5d:d5:a7:81:31:a8:d1:72:17:df:05:c0:82:14:65: 50:f5:cb:89:7a:66:d5:ad:59:c8:de:ac:0b:46:05:6b:83:a9: 4a:60:4c:3b:82:66:18:24:fe:bc:aa:f0:5f:97:ed:8a:bd:6f: ee:7f:88:45:4d:00:6b:fd:12:01:4f:bf:48:2b:85:da:1f:54: d8:5f:4d:9c:17:db:51:02:28:f2:07:67:9b:ed:12:60:ad:f4: 50:8b:06:ea:1f:bb:55:9d:a1:ea:9c:f1:dd:42:d4:fa:68:8e: 1a:c8:17:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPDdZ4bUOGKsbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk Y2IxYjczZDAtNzJhZC00ZWMxLTkxY2MtOTIyMzNkZjdiYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lmvAIg7SVrkSbm1nqkYtGSYJAD3plOw+WFC 75cZCg2JK6VL6fCVG1LqRFqJMv0BbT0ywLA4dTVbrYJdY5LxNLf4WVz6hr/Ut34B +JCUzvcXYc1EGIoJ6ruqAtiSnR163dyTLHkwu8dvYQ53NY9TIdk7Y1LMlm9Xo+6L xjxkEEjcqkcI2pyg+PnMzS5Luv8LDvCUt/AU0N2h3WN9Nholl0X3p8gb4u7Ce0IW nviOSlUnqGs7QzFbA5BEbCTZU1p7lXDdv3A/QOqjF4X/sp14o7N2ezWWzJsPx7o2 L3b3WvqDT3vLoCl2vuRxmB0fcu0vwfKXOxvAAjZniXZ6/pR7RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGy/9MXmf9/7Zvj2WmNt7MifCZO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWQ4NzcwNzktM2E3Ni0z ZmFhLWJlZmEtYTlmYjZiYTRiMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxigJC9PuZNFVGVal6fxaSWQx0/5uqlZc87sSpfORb8NE2RlPx3RevE 6oBXF29VAP5NWHmOsuGIdif5NaU2jP9PbFNmTBBLqUGk8fRJpkJQWA3aycgWhDGC 9mkTF8Bv/5R8ZAIlwU0ZZreGzjvkvOOPBTPMuNEjf0TEYQfpNW7uwjvINtHYe36B sS5epROkKA+6E13Vp4ExqNFyF98FwIIUZVD1y4l6ZtWtWcjerAtGBWuDqUpgTDuC Zhgk/ryq8F+X7Yq9b+5/iEVNAGv9EgFPv0grhdofVNhfTZwX21ECKPIHZ5vtEmCt 9FCLBuofu1Wdoeqc8d1C1PpojhrIFwo= -----END CERTIFICATE-----Generated at Wed Sep 16 14:07:40 2026 by rpki-client