$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b38d6c3-5a4c-34a2-96ab-4c9cb7a92c1e.roa File: 3b38d6c3-5a4c-34a2-96ab-4c9cb7a92c1e.roa (raw, json) Hash identifier: 81FsTuZjmAf8jaFrqGrTB1XXPxmHdLejRdhhlBwMsEg= Subject key identifier: 77:58:1F:80:C7:D7:2A:DA:25:76:8E:96:3B:0F:6B:14:74:D9:81:63 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F497395CF981A23A55CE97240 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b38d6c3-5a4c-34a2-96ab-4c9cb7a92c1e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 51765 IP address blocks: 166.0.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:95:cf:98:1a:23:a5:5c:e9:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=efd8522d-381a-4896-b511-4fb789778424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ee:b0:cd:5c:de:ba:60:73:7a:31:ce:3e:0e: 93:e7:57:15:21:42:ba:e0:8e:7a:0f:65:ce:eb:0e: 23:0a:47:f6:b1:b4:45:42:00:06:2d:a4:05:17:f0: 07:a9:0b:35:a6:d2:47:10:6a:7e:7c:f8:84:20:c0: 20:cd:6c:eb:e2:0d:5f:d7:9a:8e:a2:69:fe:df:b6: be:21:ee:83:88:4b:71:6a:52:2b:ff:e1:a2:81:d4: 50:9f:8b:09:32:5f:7b:15:0b:f8:80:ea:a1:17:e7: c4:6b:b0:74:e8:0a:ee:c4:87:96:8c:b2:b4:3a:b9: c8:0e:fa:25:75:b9:43:bf:33:08:ea:23:ad:36:4e: f7:95:9b:fc:82:a8:53:d1:3f:34:64:17:01:76:c6: 7f:f3:37:49:d1:96:06:62:81:af:77:81:4c:4a:20: 00:56:db:f2:a2:80:a6:3d:14:07:8f:c6:2e:c7:ae: 48:58:08:3d:9c:7c:05:76:a0:94:79:82:6f:10:0b: cf:bf:67:24:b3:1d:42:b3:df:75:e4:c6:f9:c2:c4: 77:08:cc:51:d5:83:6f:1a:d4:cc:ce:1b:25:82:ea: 8a:7d:fe:8f:51:95:70:fd:1f:ae:4c:22:1c:fe:f8: 10:52:43:8b:53:57:07:39:3f:f7:11:81:18:ca:82: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:58:1F:80:C7:D7:2A:DA:25:76:8E:96:3B:0F:6B:14:74:D9:81:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b38d6c3-5a4c-34a2-96ab-4c9cb7a92c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:34:63:9a:fd:48:9e:01:3a:91:c1:f4:c8:a6:30:b7:9e:06: 29:1a:01:5b:68:e3:be:d1:e8:e5:2d:2e:70:70:4f:8e:3d:e7: 52:23:06:78:b2:24:31:06:c2:df:66:a5:49:02:b5:55:e6:f0: 03:93:bf:10:6c:7f:3e:4a:5b:ee:4a:37:cc:11:f1:c4:8c:20: 28:ec:b9:4a:33:b0:12:9c:85:39:5a:c2:4d:13:dd:66:34:6b: 88:b0:07:56:a0:d1:b2:0f:3d:c3:25:ff:a9:c8:09:57:70:d0: 8c:df:07:fa:dd:ac:9c:cc:5f:61:ac:62:4d:7a:22:e2:77:05: b0:0d:1f:64:fc:37:aa:53:2f:fe:68:35:40:5d:b9:c9:3c:ec: 7e:e7:10:63:09:b5:59:5c:52:e2:ae:a8:39:f8:55:7d:d1:8a: a5:be:85:50:82:e3:29:ff:eb:80:14:54:68:d7:3d:8a:b5:cb: b7:eb:53:3d:3a:09:92:92:f3:e6:11:51:a3:17:27:6c:97:42: 2a:cb:53:67:4c:65:a7:5b:a9:36:53:8a:47:fc:4f:bf:d3:da: fa:15:81:fc:c1:ee:53:bb:4f:e7:8c:38:72:8d:fb:94:05:a4: 34:e0:04:09:35:c6:be:20:56:02:ad:04:2d:5c:0e:36:2d:d1: 2d:d5:1a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5XPmBojpVzpckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWZkODUyMmQtMzgxYS00ODk2LWI1MTEtNGZiNzg5Nzc4NDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e6wzVzeumBzejHOPg6T51cVIUK64I56D2XO 6w4jCkf2sbRFQgAGLaQFF/AHqQs1ptJHEGp+fPiEIMAgzWzr4g1f15qOomn+37a+ Ie6DiEtxalIr/+GigdRQn4sJMl97FQv4gOqhF+fEa7B06AruxIeWjLK0OrnIDvol dblDvzMI6iOtNk73lZv8gqhT0T80ZBcBdsZ/8zdJ0ZYGYoGvd4FMSiAAVtvyooCm PRQHj8Yux65IWAg9nHwFdqCUeYJvEAvPv2cksx1Cs9915Mb5wsR3CMxR1YNvGtTM zhslguqKff6PUZVw/R+uTCIc/vgQUkOLU1cHOT/3EYEYyoIBJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdYH4DH1yraJXaOljsPaxR02YFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2IzOGQ2YzMtNWE0Yy0z NGEyLTk2YWItNGM5Y2I3YTkyYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY0Y5r9SJ4BOpHB9MimMLeeBikaAVto477R6OUtLnBwT44951IjBniy JDEGwt9mpUkCtVXm8AOTvxBsfz5KW+5KN8wR8cSMICjsuUozsBKchTlawk0T3WY0 a4iwB1ag0bIPPcMl/6nICVdw0IzfB/rdrJzMX2GsYk16IuJ3BbANH2T8N6pTL/5o NUBduck87H7nEGMJtVlcUuKuqDn4VX3RiqW+hVCC4yn/64AUVGjXPYq1y7frUz06 CZKS8+YRUaMXJ2yXQirLU2dMZadbqTZTikf8T7/T2voVgfzB7lO7T+eMOHKN+5QF pDTgBAk1xr4gVgKtBC1cDjYt0S3VGvE= -----END CERTIFICATE-----Generated at Sun Sep 27 01:57:22 2026 by rpki-client