$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f59a798-7e4b-34f4-ade4-cd1b19ded626.roa File: 3f59a798-7e4b-34f4-ade4-cd1b19ded626.roa (raw, json) Hash identifier: jNNmlRO0QKsk7+4mF1PI+z3IzxVf9/yyl7yscNG1atg= Subject key identifier: C3:B4:E1:D9:0F:63:A8:20:AA:BE:1F:72:FD:4F:4C:37:A3:53:57:7C Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DAE4FD15ABE773B06B4DB5000 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f59a798-7e4b-34f4-ade4-cd1b19ded626.roa Signing time: Thu 30 Apr 2026 18:33:03 +0000 ROA not before: Thu 30 Apr 2026 18:33:03 +0000 ROA not after: Wed 29 Jul 2026 18:33:03 +0000 asID: 44559 IP address blocks: 166.1.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:4f:d1:5a:be:77:3b:06:b4:db:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 30 18:33:03 2026 GMT Not After : Jul 29 18:33:03 2026 GMT Subject: CN=59c32f6b-0c8c-43d7-93ae-3e6d39bf0ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:34:34:83:ca:2a:bb:0d:9a:b3:db:d1:49:d1: d3:e5:52:e0:28:9e:52:36:12:20:10:04:48:a0:e0: ef:b5:a9:dc:58:8c:b7:1a:8d:db:3e:9b:37:e5:f2: a9:f2:18:ee:83:fb:38:c5:02:97:d4:85:1c:9c:cc: 3f:45:a1:97:8b:12:38:98:27:43:f1:d9:94:6c:de: 73:da:c0:a9:93:93:75:6c:97:09:47:56:02:f3:4e: 53:a5:fe:51:ef:f7:66:23:17:18:81:f0:f3:73:3a: 63:73:35:c5:7f:6f:2b:59:5f:0f:d7:f3:59:30:09: 4d:90:31:a1:d5:7e:40:9f:3a:28:52:a0:1e:bb:85: 6e:5f:80:da:53:db:06:f4:e3:2e:5f:1f:e6:5d:59: 4f:c3:2c:11:8c:dc:89:3a:65:b0:bb:c9:06:ed:79: 6e:75:e1:64:be:6e:a6:2c:a3:c9:17:98:f8:86:3d: 11:14:43:bb:cf:35:5d:ce:6e:90:f1:1f:60:8e:91: 21:89:99:0d:d1:01:8e:94:1b:d5:61:ad:00:11:ad: 2b:d4:55:da:8d:05:2f:54:d6:66:fb:0a:04:cd:52: 6d:68:24:2e:cb:6f:cd:be:b7:e8:6c:1d:8d:2d:1c: 1d:aa:4f:77:dd:00:23:d9:14:9d:cf:c1:ce:b5:75: cd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B4:E1:D9:0F:63:A8:20:AA:BE:1F:72:FD:4F:4C:37:A3:53:57:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f59a798-7e4b-34f4-ade4-cd1b19ded626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e4:4e:10:5e:b1:ec:f0:55:ee:64:d1:47:70:72:1d:3b:0a: 65:d6:3d:55:2e:3d:1b:2f:91:bb:ef:a2:6e:72:5b:3d:9e:7a: 1f:95:81:01:f2:29:ca:7a:d4:6b:c6:51:17:aa:4e:4d:a5:ed: c5:6b:c0:e1:08:c7:7a:9d:17:33:8b:27:24:0e:d9:22:06:c0: 6a:aa:98:fd:2d:70:c3:63:9b:9b:6c:80:62:bd:91:61:32:85: a9:f6:8f:2b:bc:6a:62:ad:97:b9:ff:57:51:9d:2b:bd:7d:3d: 50:2c:5e:fb:d1:12:8b:b0:33:37:33:3c:41:2c:be:e0:5d:13: 45:23:b4:ac:26:97:e2:57:51:31:4b:10:c7:68:0a:97:91:00: 38:34:c1:30:36:46:e9:3a:6f:d5:4b:e1:d2:ae:12:43:fe:fe: 89:97:aa:8a:47:03:f3:07:95:4c:da:93:d0:00:88:0f:11:86: bc:6c:5f:e2:cf:ef:9f:b0:42:83:1c:4d:6f:04:7d:ca:1f:b5: e3:76:a9:f3:13:fb:32:44:b4:96:1d:99:c2:65:23:80:c1:9c: 8b:88:f3:9f:26:44:47:98:90:97:c7:66:44:6a:0f:ea:99:e4: be:0d:b1:06:5a:9f:01:cc:ad:37:9d:21:71:06:8c:c4:9b:44: 5d:d0:af:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT9Favnc7BrTbUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQzMDE4MzMwM1oXDTI2MDcyOTE4MzMwM1owLzEtMCsGA1UEAxMk NTljMzJmNmItMGM4Yy00M2Q3LTkzYWUtM2U2ZDM5YmYwZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzQ0g8oquw2as9vRSdHT5VLgKJ5SNhIgEARI oODvtancWIy3Go3bPps35fKp8hjug/s4xQKX1IUcnMw/RaGXixI4mCdD8dmUbN5z 2sCpk5N1bJcJR1YC805Tpf5R7/dmIxcYgfDzczpjczXFf28rWV8P1/NZMAlNkDGh 1X5AnzooUqAeu4VuX4DaU9sG9OMuXx/mXVlPwywRjNyJOmWwu8kG7XludeFkvm6m LKPJF5j4hj0RFEO7zzVdzm6Q8R9gjpEhiZkN0QGOlBvVYa0AEa0r1FXajQUvVNZm +woEzVJtaCQuy2/NvrfobB2NLRwdqk933QAj2RSdz8HOtXXNeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO04dkPY6ggqr4fcv1PTDejU1d8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2Y1OWE3OTgtN2U0Yi0z NGY0LWFkZTQtY2QxYjE5ZGVkNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHkThBesezwVe5k0Udwch07CmXWPVUuPRsvkbvvom5yWz2eeh+VgQHy Kcp61GvGUReqTk2l7cVrwOEIx3qdFzOLJyQO2SIGwGqqmP0tcMNjm5tsgGK9kWEy han2jyu8amKtl7n/V1GdK719PVAsXvvREouwMzczPEEsvuBdE0UjtKwml+JXUTFL EMdoCpeRADg0wTA2Ruk6b9VL4dKuEkP+/omXqopHA/MHlUzak9AAiA8RhrxsX+LP 75+wQoMcTW8EfcofteN2qfMT+zJEtJYdmcJlI4DBnIuI858mREeYkJfHZkRqD+qZ 5L4NsQZanwHMrTedIXEGjMSbRF3Qrxk= -----END CERTIFICATE-----Generated at Sat May 2 23:08:31 2026 by rpki-client