$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41d7d85d-09de-3cf5-87e7-ccc63c2b7096.roa File: 41d7d85d-09de-3cf5-87e7-ccc63c2b7096.roa (raw, json) Hash identifier: lVcBd97gAvwv9WpnzKV/VzeKWUgsxtRDHFTtBFkfoWs= Subject key identifier: D7:CB:65:59:84:B9:AD:9F:C0:44:18:97:93:84:DA:19:32:40:0B:96 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D46BDA63577F77D66E641A500 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41d7d85d-09de-3cf5-87e7-ccc63c2b7096.roa Signing time: Tue 24 Mar 2026 16:10:17 +0000 ROA not before: Tue 24 Mar 2026 16:10:17 +0000 ROA not after: Mon 22 Jun 2026 16:10:17 +0000 asID: 401152 IP address blocks: 108.165.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:bd:a6:35:77:f7:7d:66:e6:41:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 24 16:10:17 2026 GMT Not After : Jun 22 16:10:17 2026 GMT Subject: CN=e891f78a-d7fb-4799-8008-a931afa25897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:b3:80:37:6a:90:a0:6d:8f:d7:96:7c:34: d3:6e:84:cd:c1:53:23:c7:74:19:6e:b9:17:c8:7f: eb:e0:7a:22:d4:c2:10:76:42:86:47:89:1a:14:c6: d1:24:bd:28:8a:00:27:6b:5a:57:ab:cc:45:64:3a: 8c:70:7d:51:74:16:8d:8a:46:ce:6b:b6:98:3e:0b: 01:10:c2:cd:3d:8a:50:87:04:a8:f1:53:7a:3a:3d: 3f:86:fc:aa:a9:1c:f0:62:70:06:73:16:f9:7e:d1: 65:5f:d3:be:97:90:8a:8d:2f:6b:e1:4c:54:89:cc: 18:cb:8a:29:f0:17:a2:c7:1d:05:e5:96:63:22:af: c0:e0:17:3d:2d:3e:4a:b0:5b:03:8f:21:0f:89:d3: 37:4a:9a:0e:5a:c5:e7:fd:bc:91:c0:09:ae:8a:08: 20:cc:dd:46:53:42:99:23:2d:45:8c:a7:c9:38:ef: 37:04:e0:cd:54:7e:be:54:87:aa:15:ef:5a:7e:71: ed:09:b1:57:d2:f7:7d:40:dc:f4:b6:48:d6:6e:80: 5f:90:c7:11:ae:2c:c8:09:7a:5a:c2:0d:9a:42:48: ee:d6:a1:4b:dc:1f:8f:b9:8a:87:fe:84:37:f1:df: c6:14:33:87:ec:14:37:3d:6c:cd:e4:66:de:0d:5d: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CB:65:59:84:B9:AD:9F:C0:44:18:97:93:84:DA:19:32:40:0B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41d7d85d-09de-3cf5-87e7-ccc63c2b7096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d1:cf:12:65:0c:50:1c:c2:23:9a:c7:19:f5:d2:46:6a:ab: ee:ac:94:9c:e7:b9:f6:34:84:b4:6d:b2:3b:ce:8b:80:1a:1a: 26:2c:02:80:17:93:a5:b3:8b:e0:fa:bd:06:4f:4d:aa:02:aa: d3:57:b9:b4:55:63:ef:f2:13:6d:3d:06:21:f8:0a:0d:72:9d: 4f:0e:08:c2:c2:4e:2c:2c:76:6a:70:a6:07:e3:12:fd:f0:a9: dd:a6:3d:4f:0b:84:15:ee:3c:80:8c:cc:84:64:d6:cf:ac:9d: ce:af:58:0d:c3:af:b8:b3:84:e4:cb:4b:1a:ba:5e:46:f1:81: 7c:30:94:84:e0:e4:a3:d7:d3:b7:6d:df:a5:62:43:76:ac:7d: 4d:5e:c7:ab:d0:9c:34:0d:7e:f1:76:dc:47:ee:48:1d:51:34: 22:28:c2:a6:78:cf:fa:7c:6d:5a:b6:e6:ad:7d:da:18:e3:8f: f2:6c:43:c4:bb:5a:b2:8c:a2:fb:3c:bc:2d:0d:c8:d4:56:d5: ea:28:98:21:fc:41:9d:27:9b:ac:18:01:de:73:e6:16:4a:c0: 6e:e4:5a:ca:46:10:9e:56:1a:df:32:d3:17:25:cf:62:27:fb: d6:45:77:7b:e9:5e:46:10:a1:1e:78:bb:50:6d:51:9e:43:97: 8c:6c:e6:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GvaY1d/d9ZuZBpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyNDE2MTAxN1oXDTI2MDYyMjE2MTAxN1owLzEtMCsGA1UEAxMk ZTg5MWY3OGEtZDdmYi00Nzk5LTgwMDgtYTkzMWFmYTI1ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUyzgDdqkKBtj9eWfDTTboTNwVMjx3QZbrkX yH/r4Hoi1MIQdkKGR4kaFMbRJL0oigAna1pXq8xFZDqMcH1RdBaNikbOa7aYPgsB EMLNPYpQhwSo8VN6Oj0/hvyqqRzwYnAGcxb5ftFlX9O+l5CKjS9r4UxUicwYy4op 8Beixx0F5ZZjIq/A4Bc9LT5KsFsDjyEPidM3SpoOWsXn/byRwAmuigggzN1GU0KZ Iy1FjKfJOO83BODNVH6+VIeqFe9afnHtCbFX0vd9QNz0tkjWboBfkMcRrizICXpa wg2aQkju1qFL3B+PuYqH/oQ38d/GFDOH7BQ3PWzN5GbeDV0qQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfLZVmEua2fwEQYl5OE2hkyQAuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDFkN2Q4NWQtMDlkZS0z Y2Y1LTg3ZTctY2NjNjNjMmI3MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXRzxJlDFAcwiOaxxn10kZqq+6slJznufY0hLRtsjvOi4AaGiYsAoAX k6Wzi+D6vQZPTaoCqtNXubRVY+/yE209BiH4Cg1ynU8OCMLCTiwsdmpwpgfjEv3w qd2mPU8LhBXuPICMzIRk1s+snc6vWA3Dr7izhOTLSxq6XkbxgXwwlITg5KPX07dt 36ViQ3asfU1ex6vQnDQNfvF23EfuSB1RNCIowqZ4z/p8bVq25q192hjjj/JsQ8S7 WrKMovs8vC0NyNRW1eoomCH8QZ0nm6wYAd5z5hZKwG7kWspGEJ5WGt8y0xclz2In +9ZFd3vpXkYQoR54u1BtUZ5Dl4xs5t4= -----END CERTIFICATE-----Generated at Tue Mar 24 22:35:05 2026 by rpki-client