$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f8db3da-634c-34cf-91f6-608577ee2698.roa File: 2f8db3da-634c-34cf-91f6-608577ee2698.roa (raw, json) Hash identifier: y63ganT/AC33HzLbQoEzl2sbgHoi1VQm9pMwDtbZp/Y= Subject key identifier: 99:A9:4E:BE:94:AE:86:E6:AB:79:DD:70:A2:83:F5:DA:34:D3:5C:CC Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D3EBF81FA805E0B4CFD042AC0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f8db3da-634c-34cf-91f6-608577ee2698.roa Signing time: Sat 21 Mar 2026 19:27:33 +0000 ROA not before: Sat 21 Mar 2026 19:27:33 +0000 ROA not after: Fri 19 Jun 2026 19:27:33 +0000 asID: 209604 IP address blocks: 108.165.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:bf:81:fa:80:5e:0b:4c:fd:04:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 21 19:27:33 2026 GMT Not After : Jun 19 19:27:33 2026 GMT Subject: CN=6a10e1ab-d4a9-4f05-a4ca-1d8450f9bf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:dd:ef:10:7d:19:20:9d:f6:23:86:a6:72: b6:74:cb:89:1d:e2:fe:3b:df:5a:d6:b9:64:6a:3c: 64:1b:fc:24:e8:23:2a:74:b5:87:23:cc:33:29:bf: cf:4d:1f:37:6b:0a:7b:e1:01:5a:7e:a0:21:64:d8: b7:3c:39:ee:02:51:ea:7c:52:70:95:60:18:c0:32: ed:79:23:da:14:a2:cb:71:cb:43:91:f6:e4:e3:81: a3:ca:7a:0b:ab:8c:c6:09:28:bd:a7:36:12:2e:81: b7:4f:d8:94:9e:8a:c6:71:7a:08:23:55:e1:11:31: 55:3c:5f:a6:93:2c:98:99:c8:44:b0:f8:06:38:49: d2:e3:96:ca:cb:08:09:e0:38:17:68:d5:35:8f:f6: 5c:83:d8:2b:c5:fe:0b:2d:a2:59:83:e4:29:b9:24: 20:18:40:79:ba:3c:85:5e:c4:e0:d9:a8:77:68:d4: e5:0b:8b:d7:d3:62:ba:fa:cc:54:c6:e0:bf:4f:31: 5e:d3:d4:7e:de:6c:de:20:2d:38:d4:0f:83:fb:e4: a3:d5:1e:0b:a3:95:5c:f1:4c:36:56:37:5f:0a:a7: 33:b3:43:79:d4:4f:d5:9b:fe:f6:c3:86:c4:85:7b: 88:c2:e3:80:16:e0:f0:d4:66:99:e5:b1:ba:b5:61: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A9:4E:BE:94:AE:86:E6:AB:79:DD:70:A2:83:F5:DA:34:D3:5C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f8db3da-634c-34cf-91f6-608577ee2698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:09:d0:62:43:be:90:01:95:36:92:bf:55:f6:85:30:f7:cd: 58:6b:ff:91:85:28:95:e2:05:45:e9:32:ac:d4:39:74:c5:0c: 45:49:12:37:c1:de:2b:da:6f:ba:e0:dd:78:ac:b4:5d:84:cf: c7:46:c5:49:30:76:cf:03:48:18:4e:75:bd:ed:e9:dc:53:50: c7:6e:93:d6:d4:ff:db:de:d1:41:5f:fa:08:a3:cb:1c:17:94: c7:1d:87:95:1d:1c:b6:3b:36:69:38:45:75:ed:74:42:c2:c2: 31:dd:82:0f:95:b1:63:76:02:77:43:db:36:30:a7:7a:38:48: 0f:b9:e5:a4:0b:26:80:e1:41:73:d1:06:35:35:cc:a0:65:6e: 01:ca:56:b4:b2:56:92:1a:e6:20:bd:ee:85:76:73:4f:01:f6: 16:66:39:44:d5:eb:2a:2d:15:5c:e4:c3:b1:d7:9d:fd:9e:86: 99:89:6a:86:2c:f3:96:9a:77:e1:e1:44:3a:54:be:1e:39:73: 72:f9:2d:eb:58:ce:59:d7:7a:25:4f:32:fc:b1:d3:51:a6:86: 52:4a:5d:6d:02:de:31:7f:51:63:92:b3:a2:8f:9d:4b:4b:d0: 8b:f3:d5:e9:21:30:8f:66:4a:5a:75:a0:1a:a5:57:be:cb:d6: 2e:1a:54:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+v4H6gF4LTP0EKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyMTE5MjczM1oXDTI2MDYxOTE5MjczM1owLzEtMCsGA1UEAxMk NmExMGUxYWItZDRhOS00ZjA1LWE0Y2EtMWQ4NDUwZjliZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO/d7xB9GSCd9iOGpnK2dMuJHeL+O99a1rlk ajxkG/wk6CMqdLWHI8wzKb/PTR83awp74QFafqAhZNi3PDnuAlHqfFJwlWAYwDLt eSPaFKLLcctDkfbk44GjynoLq4zGCSi9pzYSLoG3T9iUnorGcXoII1XhETFVPF+m kyyYmchEsPgGOEnS45bKywgJ4DgXaNU1j/Zcg9grxf4LLaJZg+QpuSQgGEB5ujyF XsTg2ah3aNTlC4vX02K6+sxUxuC/TzFe09R+3mzeIC041A+D++Sj1R4Lo5Vc8Uw2 VjdfCqczs0N51E/Vm/72w4bEhXuIwuOAFuDw1GaZ5bG6tWHoRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmpTr6Urobmq3ndcKKD9do001zMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmY4ZGIzZGEtNjM0Yy0z NGNmLTkxZjYtNjA4NTc3ZWUyNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgJ0GJDvpABlTaSv1X2hTD3zVhr/5GFKJXiBUXpMqzUOXTFDEVJEjfB 3ivab7rg3XistF2Ez8dGxUkwds8DSBhOdb3t6dxTUMduk9bU/9ve0UFf+gijyxwX lMcdh5UdHLY7Nmk4RXXtdELCwjHdgg+VsWN2AndD2zYwp3o4SA+55aQLJoDhQXPR BjU1zKBlbgHKVrSyVpIa5iC97oV2c08B9hZmOUTV6yotFVzkw7HXnf2ehpmJaoYs 85aad+HhRDpUvh45c3L5LetYzlnXeiVPMvyx01GmhlJKXW0C3jF/UWOSs6KPnUtL 0Ivz1ekhMI9mSlp1oBqlV77L1i4aVKc= -----END CERTIFICATE-----Generated at Sun Mar 22 05:16:04 2026 by rpki-client