$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2972c2f9-e851-351a-879a-93883f540b8f.roa File: 2972c2f9-e851-351a-879a-93883f540b8f.roa (raw, json) Hash identifier: NbPtEi7tmnTn6ISck9ml5FDQVB+YnB92cpFkHbIVDBs= Subject key identifier: 8F:6F:2D:E2:E4:2B:64:D4:BC:54:B0:37:60:9C:E1:BA:D2:5E:22:88 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D0F2067C77A45B6DFDDDE3E00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2972c2f9-e851-351a-879a-93883f540b8f.roa Signing time: Wed 04 Mar 2026 18:04:00 +0000 ROA not before: Wed 04 Mar 2026 18:04:00 +0000 ROA not after: Tue 02 Jun 2026 17:04:00 +0000 asID: 16509 IP address blocks: 108.165.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0f:20:67:c7:7a:45:b6:df:dd:de:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 4 18:04:00 2026 GMT Not After : Jun 2 17:04:00 2026 GMT Subject: CN=e1dba2d4-15c8-486f-8f84-da591f1ae337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b3:b6:f7:69:4b:68:2d:08:65:ec:ac:cc:df: d6:51:1e:06:0b:db:a2:31:30:55:9c:ff:58:72:0b: dd:f4:58:82:60:1c:f9:ce:68:ab:1a:86:89:b3:70: a1:c3:07:34:2e:64:1d:87:e6:e0:20:4d:9f:f0:4a: 67:a2:ab:7c:87:f5:be:6b:92:71:56:63:6d:5d:0b: 76:7c:68:78:1e:b6:76:b4:49:3b:67:ec:4f:3b:e4: 76:88:e0:e9:90:aa:dd:12:2c:e6:ad:d5:97:3a:7c: 66:7e:5d:da:c4:2d:67:1b:33:26:59:3c:00:c5:ca: b2:b3:b1:ec:fc:77:af:43:c5:6d:ac:7c:54:30:5a: 81:5b:e3:f6:3b:24:9d:e9:1f:fc:43:7c:85:98:3b: b6:cb:12:d9:f5:21:91:1d:91:63:a0:82:5e:60:75: 03:88:9b:64:a0:99:ff:0b:28:16:d3:16:bd:05:bf: 57:ff:25:a0:7f:17:17:d7:42:23:66:0d:52:6c:a9: 61:01:b1:83:5d:1c:a9:89:b7:c3:65:ee:08:46:9e: 10:09:23:30:d3:23:56:37:52:8c:bd:ed:5e:58:87: e3:29:32:bd:63:07:b7:c1:27:f1:92:15:68:0a:b5: c5:90:00:d9:ee:fe:27:30:5b:d4:be:27:e2:55:95: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:2D:E2:E4:2B:64:D4:BC:54:B0:37:60:9C:E1:BA:D2:5E:22:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2972c2f9-e851-351a-879a-93883f540b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:cb:63:66:bc:60:df:09:be:99:c9:41:74:f8:af:b1:14:a2: c6:70:8f:c4:0d:34:e2:61:5a:3b:0b:5f:b9:fa:47:0e:16:52: fb:1b:02:0c:e4:57:a4:77:be:d3:77:0d:82:c4:05:b8:ad:94: db:d5:14:ec:8b:d7:6d:3a:2a:3d:63:c3:90:92:e3:de:c9:54: bd:56:90:41:e2:4e:5c:99:cc:e0:48:98:7b:7a:aa:51:ed:6b: 57:49:30:92:c7:62:f0:5a:8e:a8:10:24:97:50:97:e0:c6:3c: e3:8e:d1:dd:0e:0e:c1:3f:90:a4:ad:d5:a5:89:cb:52:ad:f4: bb:5a:08:de:78:00:6b:68:0a:0c:6d:97:42:30:5c:4a:bb:3e: e5:d1:d7:32:6d:96:74:3d:74:f5:0c:c4:5b:76:0c:0c:7f:d3: 09:46:fd:37:72:a7:52:26:2e:50:78:68:6c:95:5a:15:30:df: a5:c4:11:4e:d0:62:aa:25:30:3c:1f:1b:8a:fb:3e:d1:04:67: 24:be:26:77:aa:f8:d3:80:f9:ca:08:fd:8b:54:50:34:5f:af: bb:8e:82:71:3e:62:d0:39:40:5e:25:5d:5e:7f:6c:21:cd:33: ba:fa:06:95:37:c2:0a:57:73:e3:aa:88:8a:e9:cb:93:9b:a3: 79:a1:7d:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0PIGfHekW2393ePgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMwNDE4MDQwMFoXDTI2MDYwMjE3MDQwMFowLzEtMCsGA1UEAxMk ZTFkYmEyZDQtMTVjOC00ODZmLThmODQtZGE1OTFmMWFlMzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LO292lLaC0IZeyszN/WUR4GC9uiMTBVnP9Y cgvd9FiCYBz5zmirGoaJs3Chwwc0LmQdh+bgIE2f8Epnoqt8h/W+a5JxVmNtXQt2 fGh4HrZ2tEk7Z+xPO+R2iODpkKrdEizmrdWXOnxmfl3axC1nGzMmWTwAxcqys7Hs /HevQ8VtrHxUMFqBW+P2OySd6R/8Q3yFmDu2yxLZ9SGRHZFjoIJeYHUDiJtkoJn/ CygW0xa9Bb9X/yWgfxcX10IjZg1SbKlhAbGDXRypibfDZe4IRp4QCSMw0yNWN1KM ve1eWIfjKTK9Ywe3wSfxkhVoCrXFkADZ7v4nMFvUvifiVZWAlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9vLeLkK2TUvFSwN2Cc4brSXiKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjk3MmMyZjktZTg1MS0z NTFhLTg3OWEtOTM4ODNmNTQwYjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfLY2a8YN8JvpnJQXT4r7EUosZwj8QNNOJhWjsLX7n6Rw4WUvsbAgzk V6R3vtN3DYLEBbitlNvVFOyL1206Kj1jw5CS497JVL1WkEHiTlyZzOBImHt6qlHt a1dJMJLHYvBajqgQJJdQl+DGPOOO0d0ODsE/kKSt1aWJy1Kt9LtaCN54AGtoCgxt l0IwXEq7PuXR1zJtlnQ9dPUMxFt2DAx/0wlG/Tdyp1ImLlB4aGyVWhUw36XEEU7Q YqolMDwfG4r7PtEEZyS+Jneq+NOA+coI/YtUUDRfr7uOgnE+YtA5QF4lXV5/bCHN M7r6BpU3wgpXc+OqiIrpy5Obo3mhfcI= -----END CERTIFICATE-----Generated at Thu Mar 5 10:42:41 2026 by rpki-client