$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/206b0a7a-04c8-3178-9cf1-43eb1108f841.roa File: 206b0a7a-04c8-3178-9cf1-43eb1108f841.roa (raw, json) Hash identifier: s++HrQc4LZNrVxbI8G+dUIAOVbspV1wlfcsNr3+zQDo= Subject key identifier: B3:CA:7E:AD:02:6E:7E:5C:EB:19:DD:9B:26:F9:26:29:E1:58:51:B3 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D0A0F3C65E6157C08F13F0600 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/206b0a7a-04c8-3178-9cf1-43eb1108f841.roa Signing time: Mon 02 Mar 2026 22:30:21 +0000 ROA not before: Mon 02 Mar 2026 22:30:21 +0000 ROA not after: Sun 31 May 2026 21:30:21 +0000 asID: 399646 IP address blocks: 108.165.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:0f:3c:65:e6:15:7c:08:f1:3f:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 2 22:30:21 2026 GMT Not After : May 31 21:30:21 2026 GMT Subject: CN=a2be7e76-b1d0-4206-a71f-ce34fd7d95fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:e5:dc:2c:09:75:77:c8:66:86:eb:20:0b: 46:c1:bb:2e:5c:18:1d:0f:2d:27:37:b6:58:ba:49: e7:8a:21:29:56:1c:8b:b7:67:f6:9a:76:50:28:82: 4b:1b:3d:02:b8:de:24:7e:d5:9a:fc:a1:fa:a3:f6: 7f:92:00:43:84:13:7a:b6:ae:b8:ec:9a:2c:cc:f5: e5:69:02:43:f9:52:90:e4:02:ad:18:2e:7f:32:ba: 58:dc:77:0f:e9:cd:78:b5:16:8b:76:86:be:38:10: 2e:e2:e9:3d:11:4b:1f:eb:d2:ac:70:b7:74:02:44: 71:50:1b:b8:91:5f:a7:8d:81:4e:62:92:e4:5e:ba: 42:dd:7f:a8:ca:94:13:a0:b1:32:08:9d:ba:ec:ed: ed:ad:f9:2b:f2:48:89:41:d5:1c:5c:d1:67:00:94: aa:f6:54:60:3c:06:d8:7a:28:92:eb:34:c6:4e:cf: b9:42:72:1f:6e:d4:bb:28:78:ab:e6:06:37:e1:9e: a4:c8:ce:d7:42:db:5e:80:bf:18:64:3b:20:a3:7e: 44:8c:c9:60:f9:0d:52:d8:d5:f4:12:9e:48:da:b1: 25:ef:5a:1b:d8:60:40:58:2b:97:35:da:4a:b5:cb: ae:34:d2:83:46:72:aa:a9:8c:ad:80:73:49:b0:27: f6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CA:7E:AD:02:6E:7E:5C:EB:19:DD:9B:26:F9:26:29:E1:58:51:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/206b0a7a-04c8-3178-9cf1-43eb1108f841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:14:ac:56:c7:54:bb:7d:86:50:8a:b4:92:ea:2e:88:d7:4a: 7e:46:a7:26:0d:c5:3e:37:5f:14:d7:00:0d:27:4d:d4:49:b5: a0:1d:1b:00:85:be:94:0d:21:12:7f:d5:56:44:db:d3:ca:ec: 0a:3f:26:53:16:5c:9a:0f:fe:2f:8f:19:6d:91:69:c6:2c:5c: f3:b4:72:0c:67:b1:ed:55:ac:d0:1a:90:20:6a:ae:ec:37:dc: 1d:e4:9f:9d:71:49:ad:32:e4:1e:c5:b6:36:da:26:5d:4f:50: 3f:de:2e:97:3b:12:c5:de:ad:e9:e6:3d:c7:86:7f:ec:1a:12: 3d:64:51:10:06:49:3b:f8:f5:f1:6a:66:46:f1:a5:44:ce:07: f3:ba:16:f1:72:27:86:03:00:95:80:0c:8f:40:aa:d0:a8:47: 6b:82:6a:74:dd:3c:74:66:78:17:87:8e:da:23:85:8a:1d:10: e1:ef:a9:50:55:14:85:17:0a:78:0a:e1:f2:49:a1:be:87:ff: be:54:48:ca:c1:87:a2:52:57:12:98:49:8a:08:a9:d5:1d:50: 2b:36:7d:4c:95:25:e7:7a:2a:9d:e4:f3:72:eb:ed:c5:12:6b: 06:e2:79:38:05:9d:68:b9:67:62:a9:a9:e3:85:7d:20:6f:a0: 64:de:eb:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0KDzxl5hV8CPE/BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMwMjIyMzAyMVoXDTI2MDUzMTIxMzAyMVowLzEtMCsGA1UEAxMk YTJiZTdlNzYtYjFkMC00MjA2LWE3MWYtY2UzNGZkN2Q5NWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxTl3CwJdXfIZobrIAtGwbsuXBgdDy0nN7ZY uknniiEpVhyLt2f2mnZQKIJLGz0CuN4kftWa/KH6o/Z/kgBDhBN6tq647JoszPXl aQJD+VKQ5AKtGC5/MrpY3HcP6c14tRaLdoa+OBAu4uk9EUsf69KscLd0AkRxUBu4 kV+njYFOYpLkXrpC3X+oypQToLEyCJ267O3trfkr8kiJQdUcXNFnAJSq9lRgPAbY eiiS6zTGTs+5QnIfbtS7KHir5gY34Z6kyM7XQttegL8YZDsgo35EjMlg+Q1S2NX0 Ep5I2rEl71ob2GBAWCuXNdpKtcuuNNKDRnKqqYytgHNJsCf2MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPKfq0Cbn5c6xndmyb5JinhWFGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjA2YjBhN2EtMDRjOC0z MTc4LTljZjEtNDNlYjExMDhmODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYUrFbHVLt9hlCKtJLqLojXSn5GpyYNxT43XxTXAA0nTdRJtaAdGwCF vpQNIRJ/1VZE29PK7Ao/JlMWXJoP/i+PGW2RacYsXPO0cgxnse1VrNAakCBqruw3 3B3kn51xSa0y5B7FtjbaJl1PUD/eLpc7EsXerenmPceGf+waEj1kURAGSTv49fFq ZkbxpUTOB/O6FvFyJ4YDAJWADI9AqtCoR2uCanTdPHRmeBeHjtojhYodEOHvqVBV FIUXCngK4fJJob6H/75USMrBh6JSVxKYSYoIqdUdUCs2fUyVJed6Kp3k83Lr7cUS awbieTgFnWi5Z2KpqeOFfSBvoGTe60g= -----END CERTIFICATE-----Generated at Thu Mar 5 10:43:34 2026 by rpki-client