$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/36da5e6d-ec74-3e67-aac0-96c34a92d3cb.roa File: 36da5e6d-ec74-3e67-aac0-96c34a92d3cb.roa (raw, json) Hash identifier: /EIXQoI4Za7r+oXH+EFu0nP9zagnWHKaekiNDs3+Tjc= Subject key identifier: 79:43:25:05:B0:E4:B3:E5:50:8C:3B:79:33:C4:A1:1B:67:E2:B3:21 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EB8475094AEC317A81AE94240 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/36da5e6d-ec74-3e67-aac0-96c34a92d3cb.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 401152 IP address blocks: 108.165.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:50:94:ae:c3:17:a8:1a:e9:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=e32d65c9-5f21-46de-bd2f-66899e5386fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:cf:b7:c2:b6:2d:b0:57:8f:88:0a:b3:48: f2:79:76:70:03:ce:7a:81:44:4f:30:98:de:63:4a: 19:0b:35:55:e5:1b:22:3c:00:9d:9f:4b:b9:5b:c8: 59:c0:8d:db:17:2e:f1:09:d8:d8:58:ba:04:32:9a: 44:0f:9a:57:0d:77:07:3a:46:a4:4f:f1:73:04:c7: f1:01:4b:b4:06:5c:7e:ce:ab:44:53:c7:b9:b1:4a: 1a:7f:3e:1d:69:d1:e2:d4:ec:53:36:ef:a8:90:b0: e6:f0:f2:4d:d3:71:a5:ca:30:d5:96:57:08:a6:86: ac:a0:ff:cd:e8:e8:f1:8b:ae:e4:e8:2b:16:02:f8: 6f:0d:91:b1:45:0b:53:b1:f2:a9:11:38:a8:fb:f2: db:d2:51:7f:7e:4d:e5:5f:a0:73:2a:ca:62:89:8e: 27:ba:34:79:0b:32:5e:5a:14:7d:c8:d7:a8:59:51: 24:48:de:4f:cf:a1:d7:1d:c5:5f:e9:cc:db:a7:22: b5:67:bc:8a:08:41:3e:9c:d3:ba:50:8c:ac:8c:65: e3:8e:6d:0e:65:7b:2d:56:38:93:8b:93:d3:7a:c7: e9:76:cd:ed:9d:8d:82:1f:06:69:c7:28:0b:f9:03: be:4f:7c:59:a1:5b:84:57:52:1a:43:04:6e:95:30: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:43:25:05:B0:E4:B3:E5:50:8C:3B:79:33:C4:A1:1B:67:E2:B3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/36da5e6d-ec74-3e67-aac0-96c34a92d3cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:0a:9a:3b:08:47:1b:a0:47:54:e9:b0:66:36:f1:08:b1:e4: c9:1c:44:b8:42:93:a3:e1:d7:07:73:e5:a8:72:fa:82:a7:ca: dc:0f:a4:12:2a:e7:a0:91:97:a3:49:24:e8:a6:3b:53:32:8e: 5e:c1:fa:34:64:b4:14:29:ba:83:af:41:98:97:4a:60:17:01: 5d:4c:f1:04:a3:14:4e:b1:17:41:8d:95:f7:ef:c1:7e:f3:d0: ab:80:5e:e8:af:59:e7:19:35:df:46:cd:b9:b4:5d:aa:a6:4e: 27:70:7b:c9:81:61:54:dd:d0:87:ae:dd:a7:d0:8b:02:a6:25: 09:5f:6a:ff:3d:6a:9e:e7:0c:cb:1c:c2:84:e8:90:48:08:54: 4c:73:7e:da:ca:39:61:33:b5:a3:e9:93:a1:bf:00:02:91:5b: 81:d7:16:0f:b0:d8:96:83:a7:36:bf:72:c6:eb:07:be:50:8e: 25:ff:f9:dc:8c:33:07:48:7a:17:5f:44:d2:f3:0c:18:0d:de: b4:ef:a6:d3:33:3e:c4:ce:44:e1:6a:76:f1:19:0f:29:e6:f9: 55:d0:b8:a8:b2:df:7b:1e:b0:1e:32:22:79:90:06:a8:eb:b5: 5b:01:4f:38:45:f7:e7:39:f9:f0:2d:aa:96:f1:a8:98:98:a9: 41:5c:63:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R1CUrsMXqBrpQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTMyZDY1YzktNWYyMS00NmRlLWJkMmYtNjY4OTllNTM4NmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyETPt8K2LbBXj4gKs0jyeXZwA856gURPMJje Y0oZCzVV5RsiPACdn0u5W8hZwI3bFy7xCdjYWLoEMppED5pXDXcHOkakT/FzBMfx AUu0Blx+zqtEU8e5sUoafz4dadHi1OxTNu+okLDm8PJN03GlyjDVllcIpoasoP/N 6Ojxi67k6CsWAvhvDZGxRQtTsfKpETio+/Lb0lF/fk3lX6BzKspiiY4nujR5CzJe WhR9yNeoWVEkSN5Pz6HXHcVf6czbpyK1Z7yKCEE+nNO6UIysjGXjjm0OZXstVjiT i5PTesfpds3tnY2CHwZpxygL+QO+T3xZoVuEV1IaQwRulTDZlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlDJQWw5LPlUIw7eTPEoRtn4rMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzZkYTVlNmQtZWM3NC0z ZTY3LWFhYzAtOTZjMzRhOTJkM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEKmjsIRxugR1TpsGY28Qix5MkcRLhCk6Ph1wdz5ahy+oKnytwPpBIq 56CRl6NJJOimO1Myjl7B+jRktBQpuoOvQZiXSmAXAV1M8QSjFE6xF0GNlffvwX7z 0KuAXuivWecZNd9Gzbm0XaqmTidwe8mBYVTd0Ieu3afQiwKmJQlfav89ap7nDMsc woTokEgIVExzftrKOWEztaPpk6G/AAKRW4HXFg+w2JaDpza/csbrB75QjiX/+dyM MwdIehdfRNLzDBgN3rTvptMzPsTOROFqdvEZDynm+VXQuKiy33sesB4yInmQBqjr tVsBTzhF9+c5+fAtqpbxqJiYqUFcY1I= -----END CERTIFICATE-----Generated at Thu Sep 17 20:46:06 2026 by rpki-client