$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7af85b32-82e8-3c98-9d01-f68e79ae07a1.roa File: 7af85b32-82e8-3c98-9d01-f68e79ae07a1.roa (raw, json) Hash identifier: pOCsZmmyUSt0KBxt4chRp/Bwn7KtxH6jlJZbhhC+NJM= Subject key identifier: FF:46:CD:89:17:72:82:39:8D:71:CD:18:DD:7B:F0:C2:C5:1D:E7:D7 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D4461DA82909A5FF961763FC0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7af85b32-82e8-3c98-9d01-f68e79ae07a1.roa Signing time: Mon 23 Mar 2026 19:53:42 +0000 ROA not before: Mon 23 Mar 2026 19:53:42 +0000 ROA not after: Sun 21 Jun 2026 19:53:42 +0000 asID: 11798 IP address blocks: 108.165.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:61:da:82:90:9a:5f:f9:61:76:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 23 19:53:42 2026 GMT Not After : Jun 21 19:53:42 2026 GMT Subject: CN=b1beb454-d509-4b29-a2fe-65e3d66f12ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:6b:64:76:d5:2f:45:a9:17:0f:f5:d3:3e: 9d:e6:17:d3:05:90:79:80:9a:7d:f0:fa:a0:94:a0: 19:ba:dd:54:da:da:bf:71:74:ec:f8:61:54:3e:82: e4:4a:12:37:d5:54:49:a4:2d:53:56:05:fd:04:7f: 09:c4:39:ce:ff:72:43:38:71:ff:c4:59:24:ca:64: 8c:de:56:8c:cd:40:ee:00:75:dc:04:20:59:07:6d: 85:c3:d2:e5:7f:81:94:9d:65:67:8e:24:4c:ed:ed: af:4e:a7:6f:84:7d:aa:c3:d2:8a:f9:a7:f0:68:af: 0a:91:dd:de:a8:bd:50:10:9b:ad:97:5a:9b:9e:92: 05:03:27:99:80:0e:4c:3b:57:d7:c6:ac:c7:86:64: 7b:9b:96:0a:ab:4d:ac:53:84:94:ff:0a:6f:8e:72: 27:d0:3d:bc:e7:73:ba:30:04:e1:8d:43:28:38:90: 3d:1b:25:0e:fb:72:ba:cb:81:2c:a3:ea:4a:fe:88: cc:98:31:4d:1b:b6:11:43:dc:0e:00:45:35:61:cf: 29:58:2f:19:67:c7:aa:34:f9:39:72:95:ac:54:fc: 24:cc:54:a6:3a:88:52:99:b2:15:fd:92:ee:36:3b: d7:ea:3b:3f:ed:3f:28:a9:90:7c:28:7f:98:f9:49: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:46:CD:89:17:72:82:39:8D:71:CD:18:DD:7B:F0:C2:C5:1D:E7:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7af85b32-82e8-3c98-9d01-f68e79ae07a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a6:49:20:2e:1d:81:7c:e5:3f:ba:10:a5:70:81:15:75:c0: 00:17:09:aa:4c:61:c8:3d:59:21:15:af:53:81:9b:66:22:c3: 9c:47:5e:ee:32:12:db:7d:06:20:a0:6a:42:ad:3b:f5:6a:31: 03:6f:a9:d9:07:6b:1e:eb:d9:58:dd:7c:8b:d0:67:15:73:e9: e9:fa:af:54:1f:45:a8:8a:2c:42:11:75:38:8b:a3:ec:a2:e3: b2:a8:21:7c:6a:30:f1:f7:db:ca:3b:fa:02:c7:a2:28:da:47: e6:b0:10:06:1b:51:da:07:08:11:1e:b4:1d:5c:ad:1f:2a:ab: 44:f7:d5:d3:b2:89:45:96:a8:67:ad:f3:5d:46:15:0f:48:a2: bf:01:04:f3:8a:a8:8b:ac:7a:aa:fe:5b:26:72:8d:ee:7b:2b: 8f:77:a9:a2:b3:05:bf:a8:3a:e6:0c:9e:36:65:48:63:eb:0d: 1d:6a:6e:b7:54:16:3e:ce:06:9a:a9:bb:26:01:5f:99:35:a5: ca:25:7f:eb:7c:4b:1c:c7:a9:79:8f:4e:7a:e2:9d:77:95:ab: b5:7b:7f:36:af:ec:ac:38:22:bc:ed:21:b1:b5:24:5a:df:72: e2:b4:f0:79:5d:b6:a3:75:ce:23:9f:00:54:35:29:76:34:34: f2:64:08:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdqCkJpf+WF2P8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyMzE5NTM0MloXDTI2MDYyMTE5NTM0MlowLzEtMCsGA1UEAxMk YjFiZWI0NTQtZDUwOS00YjI5LWEyZmUtNjVlM2Q2NmYxMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtdrZHbVL0WpFw/10z6d5hfTBZB5gJp98Pqg lKAZut1U2tq/cXTs+GFUPoLkShI31VRJpC1TVgX9BH8JxDnO/3JDOHH/xFkkymSM 3laMzUDuAHXcBCBZB22Fw9Llf4GUnWVnjiRM7e2vTqdvhH2qw9KK+afwaK8Kkd3e qL1QEJutl1qbnpIFAyeZgA5MO1fXxqzHhmR7m5YKq02sU4SU/wpvjnIn0D2853O6 MAThjUMoOJA9GyUO+3K6y4Eso+pK/ojMmDFNG7YRQ9wOAEU1Yc8pWC8ZZ8eqNPk5 cpWsVPwkzFSmOohSmbIV/ZLuNjvX6js/7T8oqZB8KH+Y+Umg1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9GzYkXcoI5jXHNGN178MLFHefXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2FmODViMzItODJlOC0z Yzk4LTlkMDEtZjY4ZTc5YWUwN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKmSSAuHYF85T+6EKVwgRV1wAAXCapMYcg9WSEVr1OBm2Yiw5xHXu4y Ett9BiCgakKtO/VqMQNvqdkHax7r2VjdfIvQZxVz6en6r1QfRaiKLEIRdTiLo+yi 47KoIXxqMPH328o7+gLHoijaR+awEAYbUdoHCBEetB1crR8qq0T31dOyiUWWqGet 811GFQ9Ior8BBPOKqIuseqr+WyZyje57K493qaKzBb+oOuYMnjZlSGPrDR1qbrdU Fj7OBpqpuyYBX5k1pcolf+t8SxzHqXmPTnrinXeVq7V7fzav7Kw4IrztIbG1JFrf cuK08HldtqN1ziOfAFQ1KXY0NPJkCDw= -----END CERTIFICATE-----Generated at Tue Mar 24 22:32:51 2026 by rpki-client