$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3209c9dc-a135-3303-8c42-0815c36ae838.roa File: 3209c9dc-a135-3303-8c42-0815c36ae838.roa (raw, json) Hash identifier: /dRRmij6vPYChc3lSH6Px/lLitdjbrzocps7Y76YX3g= Subject key identifier: AD:51:7F:7C:6E:79:32:C4:5C:BD:75:E5:6A:F3:F2:E3:6E:1D:B7:73 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D4461DBBA4BEEF6D5C3E74380 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3209c9dc-a135-3303-8c42-0815c36ae838.roa Signing time: Mon 23 Mar 2026 19:53:43 +0000 ROA not before: Mon 23 Mar 2026 19:53:43 +0000 ROA not after: Sun 21 Jun 2026 19:53:43 +0000 asID: 11798 IP address blocks: 166.0.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:61:db:ba:4b:ee:f6:d5:c3:e7:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 23 19:53:43 2026 GMT Not After : Jun 21 19:53:43 2026 GMT Subject: CN=0ab814ce-9dd6-48b3-9d06-88229aaf584f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c8:99:9f:a5:83:0b:b8:e8:c7:b5:89:de:a2: 32:45:f8:13:54:7d:79:52:6a:94:c2:62:1c:b3:2c: 0f:f1:aa:c5:7a:0a:67:42:3a:09:41:dd:12:e1:0d: 83:9d:2d:80:ce:f6:c7:0b:12:e1:33:55:46:21:97: 8e:35:3f:1e:50:66:45:91:64:2d:30:cf:73:4b:78: 5b:7a:7f:26:83:5c:80:9d:d2:bc:1c:e5:84:41:78: 73:5c:05:65:28:f8:6f:7e:88:c8:f5:df:0a:39:5b: ac:19:08:6b:99:15:26:85:9f:3f:0a:89:1d:fa:a4: e3:79:7b:cd:2f:cf:a0:42:33:70:5e:29:10:76:50: df:2e:81:9c:50:8c:92:71:41:33:df:bd:99:71:97: ab:bd:72:84:85:8e:75:a1:b1:63:28:d6:c5:58:88: 5c:eb:82:a6:ae:93:1e:60:20:b4:18:b0:90:54:a8: 9e:23:aa:1a:7d:3a:d8:8c:ec:fe:a5:42:06:cd:5d: f4:04:26:95:8b:b7:cc:28:f9:66:34:c1:fd:a3:fa: 97:16:52:07:62:f9:70:81:c3:54:29:84:0f:fa:49: aa:16:62:f2:72:71:29:23:58:60:a7:31:97:0a:06: 07:78:12:60:80:f6:f7:dd:d8:ca:bf:94:21:13:db: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:51:7F:7C:6E:79:32:C4:5C:BD:75:E5:6A:F3:F2:E3:6E:1D:B7:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3209c9dc-a135-3303-8c42-0815c36ae838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9e:53:1b:b8:21:c1:d5:6c:46:c5:03:40:2b:52:1e:db:3b: b9:34:1d:f7:98:dc:23:41:df:8c:cb:f1:cd:35:cb:80:3d:96: ac:70:8f:2c:f5:3c:a1:7b:6e:69:9a:4a:fc:85:f2:09:0e:55: 63:5b:ee:52:c7:9b:ea:50:59:45:fc:66:13:c9:ae:87:78:35: b4:c9:d7:77:4f:33:9b:06:7c:8c:da:da:0d:eb:ed:88:fa:2a: 86:43:18:3e:82:1c:d4:75:69:9f:72:f8:f6:2f:3e:8c:63:71: c5:b2:c6:4f:2a:eb:9d:07:fb:17:b0:e6:ee:f3:78:4b:9d:11: 70:f3:74:ff:e0:6c:c1:0f:59:13:78:a3:05:01:f7:60:73:e8: eb:91:3e:38:02:0a:54:38:5b:30:79:5f:29:35:e8:73:c4:02: 0a:55:d0:ff:b5:4c:4f:30:ad:82:8b:77:35:52:32:3b:ba:91: d4:a5:a9:87:a7:3e:62:49:24:85:e6:fb:b6:81:c3:94:d6:e0: e8:10:48:49:76:41:dd:eb:e9:39:b8:c8:d9:23:f2:87:e5:18: a5:4a:98:dc:25:40:60:48:d5:93:b5:82:53:4f:7b:26:5b:87: 54:69:ef:f8:af:d2:5c:26:9c:27:5b:79:3e:11:48:c9:1c:1e: f7:07:a3:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdu6S+721cPnQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyMzE5NTM0M1oXDTI2MDYyMTE5NTM0M1owLzEtMCsGA1UEAxMk MGFiODE0Y2UtOWRkNi00OGIzLTlkMDYtODgyMjlhYWY1ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMiZn6WDC7jox7WJ3qIyRfgTVH15UmqUwmIc sywP8arFegpnQjoJQd0S4Q2DnS2AzvbHCxLhM1VGIZeONT8eUGZFkWQtMM9zS3hb en8mg1yAndK8HOWEQXhzXAVlKPhvfojI9d8KOVusGQhrmRUmhZ8/Cokd+qTjeXvN L8+gQjNwXikQdlDfLoGcUIyScUEz372ZcZervXKEhY51obFjKNbFWIhc64KmrpMe YCC0GLCQVKieI6oafTrYjOz+pUIGzV30BCaVi7fMKPlmNMH9o/qXFlIHYvlwgcNU KYQP+kmqFmLycnEpI1hgpzGXCgYHeBJggPb33djKv5QhE9sDXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1Rf3xueTLEXL115Wrz8uNuHbdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzIwOWM5ZGMtYTEzNS0z MzAzLThjNDItMDgxNWMzNmFlODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEueUxu4IcHVbEbFA0ArUh7bO7k0HfeY3CNB34zL8c01y4A9lqxwjyz1 PKF7bmmaSvyF8gkOVWNb7lLHm+pQWUX8ZhPJrod4NbTJ13dPM5sGfIza2g3r7Yj6 KoZDGD6CHNR1aZ9y+PYvPoxjccWyxk8q650H+xew5u7zeEudEXDzdP/gbMEPWRN4 owUB92Bz6OuRPjgCClQ4WzB5Xyk16HPEAgpV0P+1TE8wrYKLdzVSMju6kdSlqYen PmJJJIXm+7aBw5TW4OgQSEl2Qd3r6Tm4yNkj8oflGKVKmNwlQGBI1ZO1glNPeyZb h1Rp7/iv0lwmnCdbeT4RSMkcHvcHo9w= -----END CERTIFICATE-----Generated at Tue Mar 24 22:32:50 2026 by rpki-client