$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa File: 7d36ea96-e1a3-346d-96f7-d02e19249321.roa (raw, json) Hash identifier: yW7rKbJbMDD3tG+AXo5w5Yr9WvGhmw6TEXUvkhjpbNM= Subject key identifier: 87:EF:CE:9B:C2:34:F6:01:FA:88:C9:B8:5E:B2:72:0D:52:FE:00:F1 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F9BCDD34A703F26D988F7BE90 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 396163 IP address blocks: 166.0.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:d3:4a:70:3f:26:d9:88:f7:be:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=cf7fc09e-5a74-48b8-8c95-7c7a58b8fd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:c1:ab:ea:5f:ae:00:99:ce:43:82:a5:9b: 88:54:ec:0e:13:f1:1b:d9:c0:bf:99:86:cd:b7:79: da:ea:bd:d3:95:4f:51:71:b5:f2:64:e0:82:45:7c: 1c:6c:dd:50:91:4c:ae:12:7f:e6:4b:24:cc:76:83: 52:76:41:9c:d4:99:7a:4d:c2:0b:5f:f7:25:74:bd: e5:84:01:35:3d:5a:51:fa:f9:ae:25:ab:e4:43:d4: 92:7a:f5:af:18:7b:6c:30:57:e3:9f:d0:f4:07:88: 4b:c3:7d:e0:5b:aa:d0:c0:07:8b:62:14:b2:a7:69: ca:1a:8d:35:5c:47:5c:25:69:c0:92:8c:c4:fc:31: f7:79:3c:7c:14:7b:2c:15:f2:0a:cc:62:0a:34:a1: 49:a1:c8:da:fa:77:51:3d:7e:d0:1f:ea:81:23:5b: ba:53:03:82:6a:f9:e7:71:42:5b:44:f7:db:a7:2c: 84:4e:5f:49:2e:b4:0c:e6:10:3c:85:cf:84:93:3b: 1f:b4:28:38:4b:23:4f:af:cb:5a:b5:1c:7e:2a:f3: 3f:f1:b7:8b:89:2f:9a:1b:f2:ee:59:e1:cb:db:b4: 97:d6:35:d3:8c:24:74:3d:97:4c:70:87:45:03:11: 13:f7:19:b4:f6:0d:1c:0a:ef:f3:ea:8e:6a:90:d7: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EF:CE:9B:C2:34:F6:01:FA:88:C9:B8:5E:B2:72:0D:52:FE:00:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f1:49:84:7e:1d:80:97:c8:a7:eb:c2:c7:b5:6f:ce:2c:bd: e7:58:33:e8:7b:89:c0:8e:45:d7:59:8d:e8:8e:e9:cd:72:8b: a0:56:7e:27:03:f1:fa:cc:21:1f:ad:ab:c0:59:8b:45:cf:e7: d7:ad:df:23:59:d8:e3:03:e6:89:e3:d6:de:d8:00:a8:37:1b: 92:19:51:c7:c7:be:73:e6:69:0e:0c:3c:96:aa:6c:b0:2a:e6: 5b:e6:59:1f:d8:b1:c0:9a:ca:6c:e7:c7:81:e1:22:2a:0c:59: 27:aa:bc:55:dd:e7:10:bf:75:8f:1e:98:a9:38:17:e5:e5:49: 2f:48:47:36:d2:8d:6a:3f:33:0a:3d:32:f3:cf:28:4d:ee:e8: df:6c:f3:42:2e:b9:bb:73:e6:93:2a:1d:eb:6d:c2:12:83:b6: 02:36:00:db:a0:2a:d2:41:82:50:56:71:2f:93:94:b8:aa:19: f7:52:27:47:2d:08:4b:6c:ef:43:94:28:2c:9f:c2:f7:5f:80: a3:6f:17:d4:46:4f:39:1f:36:fa:0b:29:90:af:c8:d2:51:48: 98:4c:2e:5c:ab:85:11:f8:83:e7:a3:6b:23:23:26:54:5a:9d: e1:9e:5b:d0:1b:cf:55:9a:80:b8:c6:b8:3a:a8:05:89:b8:55: 50:9c:42:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzdNKcD8m2Yj3vpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk Y2Y3ZmMwOWUtNWE3NC00OGI4LThjOTUtN2M3YTU4YjhmZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrjBq+pfrgCZzkOCpZuIVOwOE/Eb2cC/mYbN t3na6r3TlU9RcbXyZOCCRXwcbN1QkUyuEn/mSyTMdoNSdkGc1Jl6TcILX/cldL3l hAE1PVpR+vmuJavkQ9SSevWvGHtsMFfjn9D0B4hLw33gW6rQwAeLYhSyp2nKGo01 XEdcJWnAkozE/DH3eTx8FHssFfIKzGIKNKFJocja+ndRPX7QH+qBI1u6UwOCavnn cUJbRPfbpyyETl9JLrQM5hA8hc+EkzsftCg4SyNPr8tatRx+KvM/8beLiS+aG/Lu WeHL27SX1jXTjCR0PZdMcIdFAxET9xm09g0cCu/z6o5qkNdr/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfvzpvCNPYB+ojJuF6ycg1S/gDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2QzNmVhOTYtZTFhMy0z NDZkLTk2ZjctZDAyZTE5MjQ5MzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpgBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDxSYR+HYCXyKfrwse1b84svedYM+h7icCORddZjeiO6c1yi6BWficD 8frMIR+tq8BZi0XP59et3yNZ2OMD5onj1t7YAKg3G5IZUcfHvnPmaQ4MPJaqbLAq 5lvmWR/YscCaymznx4HhIioMWSeqvFXd5xC/dY8emKk4F+XlSS9IRzbSjWo/Mwo9 MvPPKE3u6N9s80Iuubtz5pMqHettwhKDtgI2ANugKtJBglBWcS+TlLiqGfdSJ0ct CEts70OUKCyfwvdfgKNvF9RGTzkfNvoLKZCvyNJRSJhMLlyrhRH4g+ejayMjJlRa neGeW9Abz1WagLjGuDqoBYm4VVCcQg8= -----END CERTIFICATE-----Generated at Wed Nov 4 20:27:40 2026 by rpki-client