$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2da6ba5c-0e24-34a4-9298-ffcaa7f800c2.roa File: 2da6ba5c-0e24-34a4-9298-ffcaa7f800c2.roa (raw, json) Hash identifier: MhMYhpYjs/g6G3GkptrD+eCG8yi3FMKBTkxDaFAcGdk= Subject key identifier: E0:1C:F5:24:E9:B5:C5:E9:13:D3:0B:87:A1:EF:D0:1D:84:CE:46:20 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F9BCDE683218218BE8F56E400 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2da6ba5c-0e24-34a4-9298-ffcaa7f800c2.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 49770 IP address blocks: 108.165.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e6:83:21:82:18:be:8f:56:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=ba99707c-40b6-4254-994a-30dae5979d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fe:47:4b:cf:a2:ac:52:65:27:c6:9c:a8:a7: fa:63:f3:17:0d:00:50:54:b5:86:39:d6:14:c8:83: 62:92:d3:6b:21:bd:7c:ae:fa:cc:f2:78:97:61:65: c8:c3:d8:58:0b:f6:07:a7:a2:44:5f:69:31:fc:74: 34:1a:d2:e1:0e:09:2e:15:0d:76:18:e7:98:c7:83: c4:d9:82:8b:21:63:96:2c:26:0e:4f:23:b2:82:be: 72:e8:6c:8b:58:9d:c2:37:4c:dc:8e:30:c3:1b:02: a7:22:9f:35:6b:2a:c2:1d:e1:64:cc:16:ff:f5:a0: 3e:91:16:04:c4:25:c9:ce:9d:07:9c:ff:7e:21:24: 72:2b:55:46:1f:b5:23:e0:89:64:d2:a5:df:7b:11: eb:ed:48:cb:2e:97:b3:05:16:e9:7e:aa:12:72:62: 73:c2:5a:ed:87:fe:fd:47:ff:6d:9f:3c:3a:58:f1: 6c:60:30:20:5b:9b:a3:58:f6:b3:f6:4c:27:e6:14: 5c:90:31:43:84:2f:f4:85:51:4a:d0:a4:d1:14:7c: d2:1a:98:02:a6:b3:1b:e8:58:24:3c:cf:20:a1:28: 36:7e:77:5f:80:ef:bc:9b:49:53:c7:1a:3b:d5:53: b3:02:04:71:80:06:d2:aa:73:5f:2b:04:4f:02:69: 1b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1C:F5:24:E9:B5:C5:E9:13:D3:0B:87:A1:EF:D0:1D:84:CE:46:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2da6ba5c-0e24-34a4-9298-ffcaa7f800c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:8d:45:b8:1c:e8:a1:b9:62:d7:08:5c:28:bc:b6:47:a2:e8: b0:42:84:af:c3:60:b2:ee:f0:24:88:12:5a:65:ef:28:28:4f: 5c:dd:e8:e6:f5:c1:0b:d0:af:7a:75:cf:58:6d:44:4a:a0:e1: d3:3f:92:43:b8:ad:df:92:a1:96:db:60:90:a7:1b:c6:6b:0a: a7:64:d1:3c:35:e0:ec:53:e6:33:cf:e9:22:dd:dd:85:ef:d2: 87:88:a4:6d:c9:e5:21:c7:cf:21:17:20:8d:89:e2:4f:d7:e8: b1:14:91:41:43:e8:54:1f:90:a5:d8:80:c7:75:1f:e3:a9:f8: 45:aa:8d:eb:bd:c4:90:2a:d9:24:e4:7f:7e:40:e2:a9:7a:94: 43:82:7a:e0:bd:21:85:db:18:b6:ab:2b:d9:f2:82:67:07:43: ef:2f:4d:77:b6:5f:60:8e:b1:20:5f:80:99:1d:e4:bd:ce:ce: 87:5b:8c:b3:31:5d:f5:2d:06:bb:dd:54:76:4f:84:d3:79:aa: f8:9b:d3:33:e0:15:08:f7:2a:5a:bc:e0:ef:ec:0e:b0:eb:17: 7c:f9:0e:3a:6d:85:df:d6:84:83:a9:54:e8:fa:ec:fd:c5:82: 0b:2b:af:f8:21:2d:8d:48:0f:5a:d1:2b:1c:61:31:ef:f1:13: 0f:2c:9c:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeaDIYIYvo9W5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YmE5OTcwN2MtNDBiNi00MjU0LTk5NGEtMzBkYWU1OTc5ZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P5HS8+irFJlJ8acqKf6Y/MXDQBQVLWGOdYU yINiktNrIb18rvrM8niXYWXIw9hYC/YHp6JEX2kx/HQ0GtLhDgkuFQ12GOeYx4PE 2YKLIWOWLCYOTyOygr5y6GyLWJ3CN0zcjjDDGwKnIp81ayrCHeFkzBb/9aA+kRYE xCXJzp0HnP9+ISRyK1VGH7Uj4Ilk0qXfexHr7UjLLpezBRbpfqoScmJzwlrth/79 R/9tnzw6WPFsYDAgW5ujWPaz9kwn5hRckDFDhC/0hVFK0KTRFHzSGpgCprMb6Fgk PM8goSg2fndfgO+8m0lTxxo71VOzAgRxgAbSqnNfKwRPAmkbVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAc9STptcXpE9MLh6Hv0B2EzkYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmRhNmJhNWMtMGUyNC0z NGE0LTkyOTgtZmZjYWE3ZjgwMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWNRbgc6KG5YtcIXCi8tkei6LBChK/DYLLu8CSIElpl7ygoT1zd6Ob1 wQvQr3p1z1htREqg4dM/kkO4rd+SoZbbYJCnG8ZrCqdk0Tw14OxT5jPP6SLd3YXv 0oeIpG3J5SHHzyEXII2J4k/X6LEUkUFD6FQfkKXYgMd1H+Op+EWqjeu9xJAq2STk f35A4ql6lEOCeuC9IYXbGLarK9nygmcHQ+8vTXe2X2COsSBfgJkd5L3OzodbjLMx XfUtBrvdVHZPhNN5qvib0zPgFQj3Klq84O/sDrDrF3z5Djpthd/WhIOpVOj67P3F ggsrr/ghLY1ID1rRKxxhMe/xEw8snNk= -----END CERTIFICATE-----Generated at Wed Nov 4 16:04:38 2026 by rpki-client