$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/403a6f23-0dcd-3708-9913-145e0f724de4.roa File: 403a6f23-0dcd-3708-9913-145e0f724de4.roa (raw, json) Hash identifier: MzVTZqKlAjBmaMo7x1TaUu5obIVa9fwhPKoFgd2kl54= Subject key identifier: 32:F3:A9:DB:52:92:33:C3:CF:64:B8:8F:00:E7:84:59:64:FB:8B:F8 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EB57C5BE275CEB4C6E8F91C30 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/403a6f23-0dcd-3708-9913-145e0f724de4.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 263812 IP address blocks: 108.165.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:5b:e2:75:ce:b4:c6:e8:f9:1c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=42befe27-5dd1-4e11-b1e7-1abe5b1d4f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:75:42:a8:04:69:32:ea:5e:3c:8b:3e:e8: d1:f1:30:7c:2a:a9:ac:1d:b9:9b:a2:05:97:0e:8d: 06:5b:0e:b4:aa:a0:13:26:6b:9f:fe:28:f4:21:53: 09:5a:4e:c4:91:f8:5a:97:35:3c:41:32:d7:9d:ad: 54:aa:39:a5:79:f9:5a:4b:5f:58:f3:29:e5:84:aa: f1:6f:dc:ed:a0:4b:8d:60:be:b2:a5:69:83:64:91: b3:85:d1:99:c9:26:40:28:8e:e6:6e:64:70:7f:2d: 0b:06:72:97:a9:70:62:e0:9b:f3:ca:3c:43:ee:e1: 0b:95:fb:81:13:3c:5f:56:3e:dc:9a:95:44:1a:01: 49:9e:55:c8:1d:2e:19:91:15:b8:1e:3e:f2:22:aa: 62:ca:87:ca:f1:d5:64:9f:70:e7:16:88:a0:e9:9d: c2:fd:2b:ab:5e:6c:c0:e6:e4:72:b5:b1:8e:50:b4: e9:4a:a5:09:1b:69:0b:e8:93:ed:c7:79:c7:92:42: 4b:4b:9d:1f:67:fc:c2:1f:69:26:61:45:69:0e:2b: 07:db:cc:0b:c3:0b:76:cf:95:21:c3:db:ce:10:30: 32:a1:9d:33:5c:5c:c2:12:d8:92:64:05:7d:dc:56: 13:e3:c5:3f:db:e6:94:bd:6d:30:25:24:e3:e0:62: 8b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F3:A9:DB:52:92:33:C3:CF:64:B8:8F:00:E7:84:59:64:FB:8B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/403a6f23-0dcd-3708-9913-145e0f724de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:17:8a:e9:31:c3:a2:48:68:c4:c6:7f:9d:1d:af:4f:24:2d: c1:b8:87:2f:ae:91:5e:de:b7:86:68:5b:e3:e9:2c:cf:ac:27: d6:6c:32:5a:ac:b8:ba:be:93:a7:1f:15:f0:93:31:71:41:58: 34:18:06:3a:cf:69:aa:d9:a5:1c:24:ce:25:be:e3:2e:b6:a3: a5:eb:9d:8e:3e:0f:11:6f:a1:33:62:11:b8:93:f7:b5:3c:bb: 44:dd:c2:29:4f:61:48:76:cd:ad:bb:16:dd:3f:e5:9b:b2:ed: e4:29:8a:4b:8d:89:af:7a:cb:ed:55:77:8a:e8:ca:0e:73:88: 47:12:53:d7:59:5f:2d:e3:92:c0:61:8f:5b:5a:5e:01:12:a0: b6:82:18:46:dd:cb:30:c2:66:df:ac:91:c0:03:b6:24:48:fd: 3b:0d:3e:7a:62:e9:fa:e9:a8:80:ea:47:33:91:5f:91:9a:ef: 2d:12:f7:ba:d9:4d:c4:dd:cd:95:6f:d1:e8:75:90:61:5e:33: 85:f9:aa:a9:b5:92:26:1d:c1:7c:e1:c6:19:58:d7:cc:e1:1e: 65:01:07:fe:44:15:0e:52:a6:f7:8b:ac:03:33:3e:38:f0:76: fb:1b:71:54:4d:db:fd:bd:c6:db:ca:7e:11:14:8d:d6:ae:46: 94:fe:02:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61fFvidc60xuj5HDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk NDJiZWZlMjctNWRkMS00ZTExLWIxZTctMWFiZTViMWQ0ZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUl1QqgEaTLqXjyLPujR8TB8KqmsHbmbogWX Do0GWw60qqATJmuf/ij0IVMJWk7EkfhalzU8QTLXna1UqjmleflaS19Y8ynlhKrx b9ztoEuNYL6ypWmDZJGzhdGZySZAKI7mbmRwfy0LBnKXqXBi4JvzyjxD7uELlfuB EzxfVj7cmpVEGgFJnlXIHS4ZkRW4Hj7yIqpiyofK8dVkn3DnFoig6Z3C/SurXmzA 5uRytbGOULTpSqUJG2kL6JPtx3nHkkJLS50fZ/zCH2kmYUVpDisH28wLwwt2z5Uh w9vOEDAyoZ0zXFzCEtiSZAV93FYT48U/2+aUvW0wJSTj4GKL9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLzqdtSkjPDz2S4jwDnhFlk+4v4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDAzYTZmMjMtMGRjZC0z NzA4LTk5MTMtMTQ1ZTBmNzI0ZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsXiukxw6JIaMTGf50dr08kLcG4hy+ukV7et4ZoW+PpLM+sJ9ZsMlqs uLq+k6cfFfCTMXFBWDQYBjrPaarZpRwkziW+4y62o6XrnY4+DxFvoTNiEbiT97U8 u0TdwilPYUh2za27Ft0/5Zuy7eQpikuNia96y+1Vd4royg5ziEcSU9dZXy3jksBh j1taXgESoLaCGEbdyzDCZt+skcADtiRI/TsNPnpi6frpqIDqRzORX5Ga7y0S97rZ TcTdzZVv0eh1kGFeM4X5qqm1kiYdwXzhxhlY18zhHmUBB/5EFQ5SpveLrAMzPjjw dvsbcVRN2/29xtvKfhEUjdauRpT+Ah0= -----END CERTIFICATE-----Generated at Mon Aug 3 12:30:23 2026 by rpki-client