$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d0fae02-067a-3267-aef3-20e13d78c435.roa File: 2d0fae02-067a-3267-aef3-20e13d78c435.roa (raw, json) Hash identifier: kY2VbkZRRd6ypNY09laSeCVW6EBroSCv41l5doXv2IY= Subject key identifier: 2E:1A:FC:4F:63:70:41:B3:05:5D:89:C2:56:53:30:E1:3F:6B:CD:C6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D143D747B1AEC9AABBA389FC0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d0fae02-067a-3267-aef3-20e13d78c435.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 212238 IP address blocks: 166.0.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:74:7b:1a:ec:9a:ab:ba:38:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=fffef6cf-7248-4b7d-a3f8-1039ada9b1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:9b:5c:a3:8c:93:a2:4c:27:f4:1f:8a:1e: 75:1c:cd:11:ff:02:cd:7a:69:e0:6a:34:53:7b:69: f8:5d:92:93:26:3d:12:4e:d4:4c:8f:7d:40:87:f9: 82:c2:95:7e:af:4c:21:48:1f:0a:e9:33:c0:1b:19: 93:8e:f0:d6:fe:1f:ae:67:b3:a9:b1:eb:3f:1e:e8: 7c:7d:46:8a:d8:72:0b:0d:30:a9:e3:e2:a4:85:d8: ca:49:06:f0:4e:b3:7f:93:e7:42:2c:e0:a0:3e:d0: 34:4e:06:da:0e:74:18:4e:26:1f:a5:0b:88:5f:20: ea:44:69:d0:27:bd:d2:d6:c3:63:16:68:b0:ec:15: 32:3e:f3:e5:91:22:77:e8:a1:ae:ae:b9:86:b9:3d: 5e:ef:af:21:8a:80:7a:60:03:c1:09:86:2b:1a:2a: 86:e8:43:e2:92:d4:0e:cf:1c:20:8a:22:32:2d:49: a7:75:96:53:b7:a0:54:4c:38:68:68:b7:1e:5a:1a: d7:13:d5:3d:36:c2:a3:71:61:5b:2b:67:59:9b:64: 3b:fd:f1:77:63:03:39:21:37:80:5b:de:0d:30:c9: b0:3a:92:8c:2a:fc:23:50:69:fc:75:13:98:e4:ef: 25:c4:55:ac:b8:28:6f:c5:81:41:56:50:cb:83:9c: 33:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1A:FC:4F:63:70:41:B3:05:5D:89:C2:56:53:30:E1:3F:6B:CD:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d0fae02-067a-3267-aef3-20e13d78c435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4b:3d:94:d0:47:f3:b2:2c:7e:ef:4b:87:e8:59:8e:25:20: 61:10:bb:7f:5c:45:92:b2:57:46:f5:a6:cb:05:2c:5d:af:ea: e0:7e:55:9d:4d:af:e3:8d:00:18:57:5d:dd:b6:b4:d8:8b:f2: f1:34:1d:e1:46:31:dd:d8:9c:82:e4:ee:a2:96:16:f5:cd:ec: 15:15:d1:9b:a7:18:eb:72:c3:fc:26:8c:6b:31:49:c6:f4:42: 28:c1:03:ba:aa:d1:46:ae:ce:0e:98:d8:47:21:0c:88:e1:99: 8b:2a:07:e2:eb:0f:f1:65:e7:1b:cc:71:ac:d4:85:77:80:2a: 28:16:00:4e:2a:84:b8:65:44:ab:e5:b2:e7:55:4a:c8:13:0f: 74:bf:49:bd:9d:80:58:89:40:03:c5:0d:92:0c:a0:7c:5d:54: 41:b3:b0:b3:73:52:06:d5:cf:0c:15:c2:cc:f2:86:4e:a0:c9: 83:08:ef:db:48:5a:75:59:74:f4:73:27:b1:9e:73:52:44:cd: 0f:0d:84:5e:9c:1d:f3:25:a2:35:7c:19:53:b5:a1:10:22:ee: e9:04:6a:cd:1d:6c:12:a9:10:a3:52:97:6c:c3:ff:0f:17:4b: 80:07:05:41:3a:45:23:b9:7a:4c:72:e5:8d:20:ab:12:e0:79: 3e:22:8e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPXR7Guyaq7o4n8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmZmZWY2Y2YtNzI0OC00YjdkLWEzZjgtMTAzOWFkYTliMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JGbXKOMk6JMJ/Qfih51HM0R/wLNemngajRT e2n4XZKTJj0STtRMj31Ah/mCwpV+r0whSB8K6TPAGxmTjvDW/h+uZ7Opses/Huh8 fUaK2HILDTCp4+KkhdjKSQbwTrN/k+dCLOCgPtA0TgbaDnQYTiYfpQuIXyDqRGnQ J73S1sNjFmiw7BUyPvPlkSJ36KGurrmGuT1e768hioB6YAPBCYYrGiqG6EPiktQO zxwgiiIyLUmndZZTt6BUTDhoaLceWhrXE9U9NsKjcWFbK2dZm2Q7/fF3YwM5ITeA W94NMMmwOpKMKvwjUGn8dROY5O8lxFWsuChvxYFBVlDLg5wzJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4a/E9jcEGzBV2JwlZTMOE/a83GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmQwZmFlMDItMDY3YS0z MjY3LWFlZjMtMjBlMTNkNzhjNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtLPZTQR/OyLH7vS4foWY4lIGEQu39cRZKyV0b1pssFLF2v6uB+VZ1N r+ONABhXXd22tNiL8vE0HeFGMd3YnILk7qKWFvXN7BUV0ZunGOtyw/wmjGsxScb0 QijBA7qq0Uauzg6Y2EchDIjhmYsqB+LrD/Fl5xvMcazUhXeAKigWAE4qhLhlRKvl sudVSsgTD3S/Sb2dgFiJQAPFDZIMoHxdVEGzsLNzUgbVzwwVwszyhk6gyYMI79tI WnVZdPRzJ7Gec1JEzQ8NhF6cHfMlojV8GVO1oRAi7ukEas0dbBKpEKNSl2zD/w8X S4AHBUE6RSO5ekxy5Y0gqxLgeT4ijp0= -----END CERTIFICATE-----Generated at Tue Mar 10 03:30:54 2026 by rpki-client