$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/821d9d61-326f-35c2-9972-78a3e2052112.roa File: 821d9d61-326f-35c2-9972-78a3e2052112.roa (raw, json) Hash identifier: c7FyQxFb64uLxZRQkvmcID8RKOdaCox/oFdeHXF8+04= Subject key identifier: 6A:23:EF:54:C0:53:15:0C:4C:17:A6:51:3E:30:BF:54:6A:36:52:84 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D62C4521E53EF4ECA86B0DE80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/821d9d61-326f-35c2-9972-78a3e2052112.roa Signing time: Fri 03 Apr 2026 17:06:21 +0000 ROA not before: Fri 03 Apr 2026 17:06:21 +0000 ROA not after: Thu 02 Jul 2026 17:06:21 +0000 asID: 10753 IP address blocks: 108.165.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:c4:52:1e:53:ef:4e:ca:86:b0:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 3 17:06:21 2026 GMT Not After : Jul 2 17:06:21 2026 GMT Subject: CN=e3c4daee-0450-42ed-ba5b-74d664e19f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:4a:f5:3a:35:d2:d4:16:67:de:9a:2d:e1: 27:45:47:37:1d:42:4e:34:10:20:f4:4c:a4:75:0c: 3a:c4:41:3e:25:5f:ad:d4:f6:81:c0:ec:c2:43:30: 6b:7b:3c:c8:a1:7f:66:4e:59:ae:48:23:ad:6b:f9: 4a:ef:86:5e:e1:69:9f:7b:c4:5b:0a:03:55:3a:d6: ed:54:e0:a4:cd:23:6b:ae:c2:a4:b0:c7:a4:68:55: d2:dd:31:b5:68:8d:31:0a:60:41:95:9c:a4:68:1e: 60:cf:bc:e1:a8:47:0c:bb:14:30:0e:06:2c:83:5b: 60:74:bf:eb:82:95:af:9a:66:f6:5d:51:b7:30:b1: 6b:f8:c7:f1:50:75:f5:f5:6f:63:cc:02:31:7a:9b: 8e:62:b8:ca:0f:37:60:67:dc:2c:3b:70:c6:f0:2c: d7:67:9d:5d:d4:93:ee:45:d8:59:68:d3:e2:ad:ec: 81:19:f9:7c:3e:8b:dd:4a:17:95:70:98:52:5d:07: c9:6a:6f:56:92:de:47:9a:42:c9:03:41:91:4f:ae: b3:15:e0:ab:4a:a9:f9:66:95:3e:a6:81:51:50:c3: 7d:bf:a2:33:73:da:43:48:5e:34:33:9f:10:15:37: f1:d0:26:bc:0e:a6:16:b0:f2:56:2e:05:99:bd:45: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:23:EF:54:C0:53:15:0C:4C:17:A6:51:3E:30:BF:54:6A:36:52:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/821d9d61-326f-35c2-9972-78a3e2052112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:28:e2:83:91:66:77:f4:b8:fb:3e:52:86:b3:11:8e:52:83: 26:b3:27:ba:66:46:6b:3d:12:8a:cf:75:46:2a:ec:8f:72:9b: 95:d9:15:50:2b:ea:f0:62:d3:98:42:fb:0e:33:be:e0:4d:77: 4a:da:f4:67:37:cf:08:cb:95:b8:11:67:2d:84:6c:2e:ce:e1: dc:0e:56:b8:93:4c:bf:a6:06:47:63:60:25:65:cf:40:16:1e: af:5e:81:b4:1c:a6:ac:c6:37:2d:df:f7:30:6f:97:26:cf:6d: d7:71:0f:5f:12:7b:8c:9d:e1:64:83:27:b8:09:a7:fc:73:0a: 19:95:de:06:8f:9d:63:0d:df:d1:39:db:fa:cd:31:c3:5d:9e: 16:3e:1b:a5:fa:f7:c6:65:d5:ab:51:3a:da:96:8d:a2:4c:73: f8:14:bd:b8:27:a6:19:73:0a:67:96:cb:54:27:8d:9d:6f:2d: e3:83:b8:52:38:33:ca:7c:49:bf:70:8e:68:7b:cf:6c:ba:40: 37:fc:b6:7b:9f:b3:7e:fb:83:b9:8a:37:85:34:17:6e:d6:d2: a9:14:5a:23:96:9e:a4:c2:d9:2a:48:59:72:b2:f6:ba:51:24: 5f:e7:f7:14:fa:5a:ca:5a:67:60:77:39:b3:e9:fa:17:60:31: 34:23:54:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ixFIeU+9Oyoaw3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQwMzE3MDYyMVoXDTI2MDcwMjE3MDYyMVowLzEtMCsGA1UEAxMk ZTNjNGRhZWUtMDQ1MC00MmVkLWJhNWItNzRkNjY0ZTE5ZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiFK9To10tQWZ96aLeEnRUc3HUJONBAg9Eyk dQw6xEE+JV+t1PaBwOzCQzBrezzIoX9mTlmuSCOta/lK74Ze4Wmfe8RbCgNVOtbt VOCkzSNrrsKksMekaFXS3TG1aI0xCmBBlZykaB5gz7zhqEcMuxQwDgYsg1tgdL/r gpWvmmb2XVG3MLFr+MfxUHX19W9jzAIxepuOYrjKDzdgZ9wsO3DG8CzXZ51d1JPu RdhZaNPireyBGfl8PovdSheVcJhSXQfJam9Wkt5HmkLJA0GRT66zFeCrSqn5ZpU+ poFRUMN9v6Izc9pDSF40M58QFTfx0Ca8DqYWsPJWLgWZvUXOkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoj71TAUxUMTBemUT4wv1RqNlKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODIxZDlkNjEtMzI2Zi0z NWMyLTk5NzItNzhhM2UyMDUyMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEo4oORZnf0uPs+UoazEY5SgyazJ7pmRms9EorPdUYq7I9ym5XZFVAr 6vBi05hC+w4zvuBNd0ra9Gc3zwjLlbgRZy2EbC7O4dwOVriTTL+mBkdjYCVlz0AW Hq9egbQcpqzGNy3f9zBvlybPbddxD18Se4yd4WSDJ7gJp/xzChmV3gaPnWMN39E5 2/rNMcNdnhY+G6X698Zl1atROtqWjaJMc/gUvbgnphlzCmeWy1QnjZ1vLeODuFI4 M8p8Sb9wjmh7z2y6QDf8tnufs377g7mKN4U0F27W0qkUWiOWnqTC2SpIWXKy9rpR JF/n9xT6WspaZ2B3ObPp+hdgMTQjVNM= -----END CERTIFICATE-----Generated at Sat Apr 4 15:31:09 2026 by rpki-client