$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/661ac87c-02bd-3b65-bb78-e76a86861b1e.roa File: 661ac87c-02bd-3b65-bb78-e76a86861b1e.roa (raw, json) Hash identifier: w8FRBjizhVka7Z8dDQ1BpmjkJql9j3CS+Fb7SB4Ui3o= Subject key identifier: C7:C6:3A:0F:03:88:DB:12:EE:69:78:29:E7:DA:4C:CF:0B:29:92:B0 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D366F5AD4EA0A4D4AF9718780 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/661ac87c-02bd-3b65-bb78-e76a86861b1e.roa Signing time: Wed 18 Mar 2026 19:59:36 +0000 ROA not before: Wed 18 Mar 2026 19:59:36 +0000 ROA not after: Tue 16 Jun 2026 19:59:36 +0000 asID: 401152 IP address blocks: 108.165.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:6f:5a:d4:ea:0a:4d:4a:f9:71:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 18 19:59:36 2026 GMT Not After : Jun 16 19:59:36 2026 GMT Subject: CN=24e8edf8-a481-4f11-99ad-6de2ffc52bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:d6:3c:43:1d:ff:ea:b8:ec:3d:28:78:49: 2d:f0:12:bd:f9:7b:ed:77:5e:9b:3b:cf:72:5b:1e: 98:7b:e3:06:ff:d1:33:83:32:a4:ca:e2:d9:d9:3a: ac:e8:6f:30:f9:5c:d6:c9:17:bd:9e:09:91:4a:8e: 71:eb:fe:d1:de:73:e5:c5:d6:cb:49:58:d8:51:3b: 56:e2:c6:8c:33:c9:fc:43:f3:fd:0f:ff:a1:cf:e4: c3:62:a0:15:c4:ed:6a:1f:45:ce:15:ad:dd:7c:12: 06:52:31:a4:0e:2d:60:5a:b0:a5:18:04:5e:21:10: de:de:b3:69:39:e5:2f:2c:6c:e9:5e:30:ca:a1:3c: 74:f6:a7:e2:6c:3b:04:c3:d3:3b:f5:5d:51:32:2d: d4:35:2a:8b:08:ed:09:3b:34:0d:79:f2:b0:2e:ba: 93:d8:23:96:bb:2e:27:a8:ac:16:10:be:3d:c7:d6: 5a:7b:b6:6c:52:23:c9:5b:66:75:8f:d1:85:20:80: c1:63:45:7f:f7:6b:81:df:e3:57:e0:ce:d8:83:af: a3:bc:8d:5c:6f:07:bd:e3:b5:d8:38:5a:d6:bf:94: 58:25:ee:5e:75:3f:13:18:cf:e2:45:c8:e8:c3:8c: 68:2d:f1:a3:e7:d2:91:5d:88:71:94:d3:81:e3:c0: b3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C6:3A:0F:03:88:DB:12:EE:69:78:29:E7:DA:4C:CF:0B:29:92:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/661ac87c-02bd-3b65-bb78-e76a86861b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:bb:02:62:f1:e0:e4:a3:7e:b8:cd:88:de:af:12:40:b9:49: d4:21:b9:09:0b:39:2b:d5:96:2b:3d:bc:01:31:bc:4f:d2:f2: e2:d9:1d:c1:08:d1:b2:b5:11:ca:36:73:d3:d0:f7:0f:79:48: 70:52:ee:a7:16:d8:d8:24:50:72:4e:07:51:73:e1:a0:0e:94: d1:65:5e:59:7e:71:d4:cf:b4:66:d4:ad:6c:83:b3:45:6c:09: e4:95:97:af:1d:e8:d1:e9:5a:05:a8:e4:0e:c5:7e:de:2c:3a: 0e:09:d2:69:16:f5:af:44:ff:0d:d0:b6:8a:0c:f9:42:b9:88: 9a:a1:0f:9a:e1:e3:8d:d5:39:38:49:05:43:45:13:84:20:64: 5d:0e:77:bb:71:01:b6:9a:29:10:9a:fc:4c:33:6d:08:86:c4: 15:7c:40:76:84:5a:8e:85:19:8f:f1:37:f0:ad:52:4a:1a:a8: f2:06:d3:03:c2:d3:6d:aa:8e:2d:3b:14:46:0c:89:38:73:cb: af:de:de:ba:23:a8:b1:45:27:e5:d5:31:65:0b:e1:d1:6e:30: 7e:6d:80:94:70:cf:76:0c:ca:c7:06:8c:26:38:36:52:8c:63: d7:11:83:a9:c4:2a:df:52:64:56:12:d5:82:13:98:34:f4:be: 2c:9f:2a:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02b1rU6gpNSvlxh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMxODE5NTkzNloXDTI2MDYxNjE5NTkzNlowLzEtMCsGA1UEAxMk MjRlOGVkZjgtYTQ4MS00ZjExLTk5YWQtNmRlMmZmYzUyYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZrWPEMd/+q47D0oeEkt8BK9+Xvtd16bO89y Wx6Ye+MG/9EzgzKkyuLZ2Tqs6G8w+VzWyRe9ngmRSo5x6/7R3nPlxdbLSVjYUTtW 4saMM8n8Q/P9D/+hz+TDYqAVxO1qH0XOFa3dfBIGUjGkDi1gWrClGAReIRDe3rNp OeUvLGzpXjDKoTx09qfibDsEw9M79V1RMi3UNSqLCO0JOzQNefKwLrqT2COWuy4n qKwWEL49x9Zae7ZsUiPJW2Z1j9GFIIDBY0V/92uB3+NX4M7Yg6+jvI1cbwe947XY OFrWv5RYJe5edT8TGM/iRcjow4xoLfGj59KRXYhxlNOB48CzywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfGOg8DiNsS7ml4KefaTM8LKZKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjYxYWM4N2MtMDJiZC0z YjY1LWJiNzgtZTc2YTg2ODYxYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu7AmLx4OSjfrjNiN6vEkC5SdQhuQkLOSvVlis9vAExvE/S8uLZHcEI 0bK1Eco2c9PQ9w95SHBS7qcW2NgkUHJOB1Fz4aAOlNFlXll+cdTPtGbUrWyDs0Vs CeSVl68d6NHpWgWo5A7Fft4sOg4J0mkW9a9E/w3QtooM+UK5iJqhD5rh443VOThJ BUNFE4QgZF0Od7txAbaaKRCa/EwzbQiGxBV8QHaEWo6FGY/xN/CtUkoaqPIG0wPC 022qji07FEYMiThzy6/e3rojqLFFJ+XVMWUL4dFuMH5tgJRwz3YMyscGjCY4NlKM Y9cRg6nEKt9SZFYS1YITmDT0viyfKvc= -----END CERTIFICATE-----Generated at Thu Mar 19 14:46:19 2026 by rpki-client