$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/22101f04-a1c9-37e1-867c-d13aa3ec016b.roa File: 22101f04-a1c9-37e1-867c-d13aa3ec016b.roa (raw, json) Hash identifier: JI6fbLCOHDLQpPG4y2tZR1ke/sAd/Gg0+/X8V1Tf+OU= Subject key identifier: 09:7E:87:45:BE:B8:C5:00:AA:F6:C8:50:D3:F5:67:C6:4E:DA:06:C8 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F7782F53BC9E891139FBA5440 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/22101f04-a1c9-37e1-867c-d13aa3ec016b.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 58061 IP address blocks: 166.0.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:f5:3b:c9:e8:91:13:9f:ba:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=83549786-b602-48b9-85ce-55c1b0a3757e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:16:de:30:73:2e:47:37:fc:50:85:57:7e: 7c:15:cc:b1:49:a0:de:8c:a5:4b:5a:0f:2b:f5:6a: 00:4c:42:3b:2e:66:58:3a:9c:78:78:f0:13:57:a9: bf:a7:7b:4d:bd:a7:96:b8:bc:ee:15:4f:c1:7c:40: d0:00:28:db:55:19:82:79:e5:96:3e:65:ea:ff:22: d5:6c:8e:cf:65:5f:57:44:55:ab:82:98:1b:50:6a: 4c:30:97:cd:3c:84:e4:75:12:0e:90:89:7d:db:e6: f8:c7:cd:22:dd:ed:04:4e:6b:ec:43:cc:96:61:f2: a5:01:03:cf:2a:16:2c:af:38:3e:1d:e7:40:27:e5: 04:e2:89:5b:d2:ce:e7:b3:d2:64:17:87:93:06:25: e8:07:54:1f:1b:23:26:a9:b4:66:fb:2f:03:d4:c5: 20:c6:8d:51:dd:28:9f:c6:70:c3:c4:59:c8:0a:92: e4:b5:de:65:0f:b8:d8:7b:88:a9:2c:e8:4c:36:53: 9f:ce:fc:06:37:cc:05:62:1a:47:0d:a3:f7:43:be: cb:45:50:c3:b7:9a:87:d2:e8:58:66:77:89:ab:c8: 09:18:cf:68:de:42:b0:67:e8:2d:ed:e0:03:3d:d0: fd:55:3d:e5:87:f2:c5:03:0f:2c:49:28:47:2d:51: 74:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7E:87:45:BE:B8:C5:00:AA:F6:C8:50:D3:F5:67:C6:4E:DA:06:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/22101f04-a1c9-37e1-867c-d13aa3ec016b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e9:ea:a0:42:92:e8:cd:28:cd:1b:9b:95:9f:06:c7:6d:56: 7e:01:5b:21:c1:1d:db:6a:36:b8:1d:e6:e7:c0:9f:b7:00:0c: 10:9b:35:f7:43:f7:e0:51:43:67:52:80:f9:cf:c3:70:4a:f5: 43:3d:5a:40:2a:e3:e4:f2:95:57:87:33:d8:01:ec:90:71:3b: 00:f7:c2:f5:89:7e:78:f6:d3:f0:06:57:41:03:12:8c:1d:17: 92:8a:95:52:41:2c:ea:6b:3b:15:ac:d5:1b:b6:73:e7:d5:fc: 44:4e:66:39:71:d7:b8:a7:92:b2:e3:3f:de:cb:f8:9a:b3:aa: 09:20:b8:bd:27:ad:72:9a:40:c9:c6:43:93:3a:f0:2f:fa:4f: 1a:00:68:c5:dc:ae:b4:5b:b3:25:3b:58:73:f6:79:99:0c:bf: 60:58:f3:14:17:ba:1e:11:02:42:c9:ee:8b:93:b7:aa:5b:96: 76:b6:9a:5b:33:35:16:56:b6:c2:ee:2a:7e:5e:3b:51:61:f6: 86:58:83:5c:cb:ee:91:ae:1b:4e:6a:9e:db:27:dd:f1:0e:26: 5c:32:41:0e:aa:e6:90:92:fd:d9:8a:89:90:5a:5f:ae:9c:19: b8:ee:31:25:86:27:ee:0b:4a:8b:2e:a2:d6:6f:b8:39:e1:13: f0:c7:d4:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gvU7yeiRE5+6VEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODM1NDk3ODYtYjYwMi00OGI5LTg1Y2UtNTVjMWIwYTM3NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPMW3jBzLkc3/FCFV358FcyxSaDejKVLWg8r 9WoATEI7LmZYOpx4ePATV6m/p3tNvaeWuLzuFU/BfEDQACjbVRmCeeWWPmXq/yLV bI7PZV9XRFWrgpgbUGpMMJfNPITkdRIOkIl92+b4x80i3e0ETmvsQ8yWYfKlAQPP KhYsrzg+HedAJ+UE4olb0s7ns9JkF4eTBiXoB1QfGyMmqbRm+y8D1MUgxo1R3Sif xnDDxFnICpLktd5lD7jYe4ipLOhMNlOfzvwGN8wFYhpHDaP3Q77LRVDDt5qH0uhY ZneJq8gJGM9o3kKwZ+gt7eADPdD9VT3lh/LFAw8sSShHLVF0GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl+h0W+uMUAqvbIUNP1Z8ZO2gbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjIxMDFmMDQtYTFjOS0z N2UxLTg2N2MtZDEzYWEzZWMwMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInp6qBCkujNKM0bm5WfBsdtVn4BWyHBHdtqNrgd5ufAn7cADBCbNfdD 9+BRQ2dSgPnPw3BK9UM9WkAq4+TylVeHM9gB7JBxOwD3wvWJfnj20/AGV0EDEowd F5KKlVJBLOprOxWs1Ru2c+fV/EROZjlx17inkrLjP97L+JqzqgkguL0nrXKaQMnG Q5M68C/6TxoAaMXcrrRbsyU7WHP2eZkMv2BY8xQXuh4RAkLJ7ouTt6pblna2mlsz NRZWtsLuKn5eO1Fh9oZYg1zL7pGuG05qntsn3fEOJlwyQQ6q5pCS/dmKiZBaX66c GbjuMSWGJ+4LSosuotZvuDnhE/DH1KU= -----END CERTIFICATE-----Generated at Tue Nov 3 22:41:52 2026 by rpki-client