$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/521c2bda-8972-3aa4-a6a0-c3fd24779ed8.roa File: 521c2bda-8972-3aa4-a6a0-c3fd24779ed8.roa (raw, json) Hash identifier: HiAGIdP0zrhRDx6+PURjwFHwXromr1soo5QKDDOyfQw= Subject key identifier: 3C:3F:69:BE:1F:CD:56:80:5E:2D:F6:61:1E:7A:FC:12:24:E9:9C:FC Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DAB4A5FE9C42F0A6AC95D3300 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/521c2bda-8972-3aa4-a6a0-c3fd24779ed8.roa Signing time: Wed 29 Apr 2026 16:34:39 +0000 ROA not before: Wed 29 Apr 2026 16:34:39 +0000 ROA not after: Tue 28 Jul 2026 16:34:39 +0000 asID: 212238 IP address blocks: 108.165.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:4a:5f:e9:c4:2f:0a:6a:c9:5d:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 29 16:34:39 2026 GMT Not After : Jul 28 16:34:39 2026 GMT Subject: CN=500a58af-03a4-4849-9f0d-f4a3fb4b7780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b1:c2:39:51:d1:9e:f3:41:bc:32:9f:03:05: f9:a7:55:61:fe:46:5a:20:a9:19:7d:92:3d:63:50: f2:72:32:66:68:e1:fa:94:1b:f1:59:47:bc:9b:21: 81:7b:43:77:fb:2a:08:98:d6:c0:c4:ea:34:93:cd: b7:5d:18:f9:d5:3d:59:34:bd:34:d8:26:13:b8:66: 89:50:f4:a8:6c:60:00:74:f2:d2:05:30:60:88:01: 6d:80:61:97:8f:98:81:77:32:c5:a0:03:8e:6e:23: 50:9f:bd:68:ac:fe:6e:2b:e7:c7:5a:c6:bf:86:14: 35:e3:20:f4:29:87:fc:52:7e:0d:b1:30:f7:84:1a: d8:0e:9d:14:15:16:bf:be:e0:2b:7f:cc:fe:43:63: 40:e9:a1:3c:0e:61:4b:67:61:79:20:68:d2:3e:4a: c4:63:c8:1a:72:d6:03:34:ff:dc:6a:3f:e1:50:1b: 00:5a:9f:8d:26:2a:13:af:ea:8c:a6:13:9d:ef:04: cc:01:3f:b8:0a:19:e2:f1:24:36:6c:a4:cd:1c:a3: 13:40:71:9f:26:a9:fb:5d:71:e7:b4:2c:b3:5b:eb: 27:ee:ed:c1:38:02:90:a1:07:dc:28:6a:54:8d:be: f8:fa:4e:91:52:4a:6c:17:c4:24:f4:eb:56:68:3c: aa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3F:69:BE:1F:CD:56:80:5E:2D:F6:61:1E:7A:FC:12:24:E9:9C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/521c2bda-8972-3aa4-a6a0-c3fd24779ed8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:63:72:3d:b7:7d:f7:07:6d:4b:47:fd:30:62:d6:5c:75:07: 2b:8b:13:30:9e:22:ac:c4:90:7e:a1:f6:5e:5a:37:1b:6e:f8: 32:2f:de:97:ad:e6:59:2b:01:14:d2:ee:c4:20:84:7f:6b:a7: 96:45:8c:68:f5:7d:d3:19:7c:0d:a5:9b:60:9d:40:d4:6d:b4: 38:8a:2e:2d:a6:ce:0f:50:54:f4:d2:f0:ad:4d:ee:42:90:d3: f3:46:38:72:48:2d:3c:4c:02:a6:bf:d0:ea:81:be:81:bb:bf: 63:fb:f6:b4:a8:a6:7b:39:67:21:1c:57:de:00:e8:bf:a2:a5: f1:9e:3f:2e:8a:47:61:d8:2a:09:c7:0e:4b:72:34:9d:98:3e: 13:26:c4:e5:d8:3f:4d:e4:46:1b:60:9f:9e:21:43:c4:49:d7: 3f:27:2d:63:d3:1c:7a:3a:5b:fe:bf:1b:e6:0f:be:ed:de:b9: ee:25:54:0b:34:19:bc:2a:ab:1d:65:b5:ba:01:e0:be:dd:ed: 75:24:6b:55:b5:3e:aa:62:fe:46:03:18:88:e7:c3:6f:28:8c: 27:34:7d:a5:b7:29:56:82:40:c6:1b:bc:25:31:98:af:e3:b5: bc:3c:fa:10:6e:bd:eb:a7:90:b8:66:28:92:9a:95:97:89:5d: 31:13:96:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2rSl/pxC8KasldMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQyOTE2MzQzOVoXDTI2MDcyODE2MzQzOVowLzEtMCsGA1UEAxMk NTAwYTU4YWYtMDNhNC00ODQ5LTlmMGQtZjRhM2ZiNGI3NzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87HCOVHRnvNBvDKfAwX5p1Vh/kZaIKkZfZI9 Y1DycjJmaOH6lBvxWUe8myGBe0N3+yoImNbAxOo0k823XRj51T1ZNL002CYTuGaJ UPSobGAAdPLSBTBgiAFtgGGXj5iBdzLFoAOObiNQn71orP5uK+fHWsa/hhQ14yD0 KYf8Un4NsTD3hBrYDp0UFRa/vuArf8z+Q2NA6aE8DmFLZ2F5IGjSPkrEY8gactYD NP/caj/hUBsAWp+NJioTr+qMphOd7wTMAT+4Chni8SQ2bKTNHKMTQHGfJqn7XXHn tCyzW+sn7u3BOAKQoQfcKGpUjb74+k6RUkpsF8Qk9OtWaDyqhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDw/ab4fzVaAXi32YR56/BIk6Zz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTIxYzJiZGEtODk3Mi0z YWE0LWE2YTAtYzNmZDI0Nzc5ZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdjcj23ffcHbUtH/TBi1lx1ByuLEzCeIqzEkH6h9l5aNxtu+DIv3pet 5lkrARTS7sQghH9rp5ZFjGj1fdMZfA2lm2CdQNRttDiKLi2mzg9QVPTS8K1N7kKQ 0/NGOHJILTxMAqa/0OqBvoG7v2P79rSopns5ZyEcV94A6L+ipfGePy6KR2HYKgnH DktyNJ2YPhMmxOXYP03kRhtgn54hQ8RJ1z8nLWPTHHo6W/6/G+YPvu3eue4lVAs0 Gbwqqx1ltboB4L7d7XUka1W1Pqpi/kYDGIjnw28ojCc0faW3KVaCQMYbvCUxmK/j tbw8+hBuveunkLhmKJKalZeJXTETlvw= -----END CERTIFICATE-----Generated at Wed Apr 29 22:28:37 2026 by rpki-client