$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6a28421f-97b4-3d54-b7fb-239986b71f20.roa File: 6a28421f-97b4-3d54-b7fb-239986b71f20.roa (raw, json) Hash identifier: 9zQwb4F2gNTvGHgayQfHVr0b/06fMADJGaHngIUlbf8= Subject key identifier: 85:27:49:42:1C:44:FD:71:2A:96:7F:40:64:6D:55:70:90:5A:09:20 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F9BCDE35AD13AA0F12A2F1060 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6a28421f-97b4-3d54-b7fb-239986b71f20.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 108.165.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e3:5a:d1:3a:a0:f1:2a:2f:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=7a62b4d2-f8df-4fa4-985f-26b20f5b99f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:9b:71:95:f1:04:db:11:57:ac:3f:67:a2: be:8f:f2:ea:aa:e6:b6:f6:91:1c:75:cf:52:55:a3: e4:0e:d0:3e:d2:ba:cb:e8:b8:d7:cb:c8:2e:44:42: 50:d3:18:97:0c:2f:cd:b7:86:93:d7:1d:e1:77:4e: 21:9e:b8:9f:35:43:1e:9d:25:11:07:e1:aa:20:45: 41:c1:28:5a:f0:37:d2:04:6e:1c:2e:d1:ed:eb:95: 98:13:03:2e:8c:bf:db:45:7d:e1:b5:4b:22:e0:64: c9:dc:e7:6b:f6:86:e6:1b:5c:7d:e1:f2:84:b4:bb: 5c:21:c7:7b:46:67:7e:ea:e2:58:f1:82:e6:3b:7c: da:f1:ad:1d:e1:ee:2f:7b:57:8a:43:cb:4a:1d:0a: 21:64:2d:df:e0:bc:d9:26:58:6f:cc:e9:1d:48:84: a0:d0:4e:17:0f:d2:14:30:d5:b4:92:11:11:e7:24: cc:c0:85:25:b2:dd:12:36:88:af:76:50:53:1e:ed: 03:56:f6:0e:97:d7:b3:ee:c6:ba:35:14:40:24:6e: 59:08:cd:55:94:b7:5e:93:64:b1:05:f8:60:ba:c5: 11:d3:64:66:48:08:7a:a2:34:80:b9:be:ce:6a:5e: d7:24:e9:c7:59:33:46:16:f4:e6:f3:03:9c:f4:f7: 4f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:27:49:42:1C:44:FD:71:2A:96:7F:40:64:6D:55:70:90:5A:09:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6a28421f-97b4-3d54-b7fb-239986b71f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9d:1d:14:93:a6:20:54:a8:05:46:0d:96:b2:31:96:e8:c3: e3:ad:c7:9c:ab:53:87:f5:56:65:3d:f1:70:f0:a5:57:3c:52: 87:38:77:2f:5d:21:25:3f:bf:60:70:dd:5e:09:59:e5:0c:d7: f5:24:70:28:fc:d0:10:90:9e:8f:8a:be:fa:93:80:0f:41:01: c8:b8:83:a8:49:dd:fe:4d:23:7e:cd:ec:cd:ad:f5:69:ca:c0: 15:49:46:c5:34:20:e9:04:30:53:5d:da:4d:b4:e8:54:5c:4c: 71:d5:6f:58:cb:1d:68:79:1b:2b:3f:20:c2:0b:c3:f6:c4:43: e3:a9:41:e4:af:2f:63:63:ed:f2:8a:66:34:76:40:c5:f9:12: 6b:e9:e3:83:1b:4d:23:5b:9c:5e:c9:82:4a:b9:85:3c:e6:14: 92:f3:10:a8:d0:04:79:dd:a7:8c:d1:17:75:c3:36:4f:e6:21: c7:40:27:43:0d:8b:e6:3a:2b:b4:22:bd:2b:e9:3e:71:d2:c2: e1:83:6f:b3:ed:83:14:a9:66:52:9d:cb:9d:65:f3:e6:40:ae: 60:4d:e7:bf:86:18:51:e9:10:71:2c:86:54:a4:9f:a7:ea:f0: 1c:6a:4d:10:9e:5a:80:69:ae:cb:92:7b:ba:4b:45:e2:28:f3: af:c7:da:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeNa0Tqg8SovEGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk N2E2MmI0ZDItZjhkZi00ZmE0LTk4NWYtMjZiMjBmNWI5OWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgSbcZXxBNsRV6w/Z6K+j/Lqqua29pEcdc9S VaPkDtA+0rrL6LjXy8guREJQ0xiXDC/Nt4aT1x3hd04hnrifNUMenSURB+GqIEVB wSha8DfSBG4cLtHt65WYEwMujL/bRX3htUsi4GTJ3Odr9obmG1x94fKEtLtcIcd7 Rmd+6uJY8YLmO3za8a0d4e4ve1eKQ8tKHQohZC3f4LzZJlhvzOkdSISg0E4XD9IU MNW0khER5yTMwIUlst0SNoivdlBTHu0DVvYOl9ez7sa6NRRAJG5ZCM1VlLdek2Sx BfhgusUR02RmSAh6ojSAub7Oal7XJOnHWTNGFvTm8wOc9PdPuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUnSUIcRP1xKpZ/QGRtVXCQWgkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmEyODQyMWYtOTdiNC0z ZDU0LWI3ZmItMjM5OTg2YjcxZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqdHRSTpiBUqAVGDZayMZbow+Otx5yrU4f1VmU98XDwpVc8Uoc4dy9d ISU/v2Bw3V4JWeUM1/UkcCj80BCQno+KvvqTgA9BAci4g6hJ3f5NI37N7M2t9WnK wBVJRsU0IOkEMFNd2k206FRcTHHVb1jLHWh5Gys/IMILw/bEQ+OpQeSvL2Nj7fKK ZjR2QMX5Emvp44MbTSNbnF7Jgkq5hTzmFJLzEKjQBHndp4zRF3XDNk/mIcdAJ0MN i+Y6K7QivSvpPnHSwuGDb7PtgxSpZlKdy51l8+ZArmBN57+GGFHpEHEshlSkn6fq 8BxqTRCeWoBprsuSe7pLReIo86/H2lM= -----END CERTIFICATE-----Generated at Tue Nov 3 22:41:35 2026 by rpki-client