$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/84f591e2-29b0-34f2-bf1d-02a48a67e082.roa File: 84f591e2-29b0-34f2-bf1d-02a48a67e082.roa (raw, json) Hash identifier: JgfapW2pMWYTZ7Wt1ydZe8btg8YCZdaM46DIGKfQl0k= Subject key identifier: BF:FC:09:7E:62:49:FD:AC:8B:3A:20:4F:B4:6A:13:88:C6:E8:32:38 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D39CF96D57498B2AC1B07D480 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/84f591e2-29b0-34f2-bf1d-02a48a67e082.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 7385 IP address blocks: 108.165.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:96:d5:74:98:b2:ac:1b:07:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=8e41800d-8db5-404d-826c-1dbab5cc0d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:49:66:b3:27:3e:cd:87:d7:4b:df:4a:f9:6e: 85:30:2f:4d:26:21:d3:ca:40:9d:fa:72:2a:f0:e1: 06:10:f5:b0:89:a4:ee:3b:6e:09:0e:4a:45:c8:15: 01:84:5d:df:dc:ff:b4:52:11:bf:01:4a:9a:d8:7a: 16:0a:e9:2b:bc:46:c3:58:83:3b:75:b3:19:d6:7a: 1d:c4:5b:0f:a2:04:0c:37:2e:6b:42:8f:ae:ca:fe: 2a:64:6b:f6:5d:e7:82:07:be:80:05:59:c3:28:e9: d1:78:0e:59:fd:cd:b7:fc:37:97:7f:d6:d0:dd:4d: 4b:a7:b2:ed:25:5f:93:57:93:ae:64:3f:72:d1:b3: 66:6b:99:f1:f0:2f:75:8a:52:93:fe:27:44:e4:0f: eb:2c:74:29:8c:90:8a:53:dd:33:44:d3:37:da:7a: 09:9b:a2:56:83:30:c2:f0:05:52:2d:56:77:e8:dd: fe:aa:9f:52:90:64:1a:fc:55:2c:1a:e6:40:fd:f0: 5c:d4:ae:dc:66:b2:0a:28:94:5a:43:31:fe:dc:bf: 75:e2:b1:fe:d2:2a:47:54:62:3e:5d:70:9f:94:9f: a4:cd:27:ed:f5:be:03:a3:f1:f4:96:d7:ae:4f:49: 07:4f:7b:67:9f:65:49:b9:a1:26:68:10:af:78:9d: f3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FC:09:7E:62:49:FD:AC:8B:3A:20:4F:B4:6A:13:88:C6:E8:32:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/84f591e2-29b0-34f2-bf1d-02a48a67e082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:98:42:93:ed:55:ef:33:bf:30:0f:ac:fb:7d:33:3b:69:40: f2:19:04:7a:ef:e2:45:55:80:bd:ce:89:de:ba:8a:1c:a7:4f: e7:69:64:83:09:45:d3:0d:72:52:6a:e7:be:28:75:1f:61:9e: ed:9d:63:32:e4:af:25:2f:98:8c:10:7e:f5:3a:04:0f:20:7e: 2f:fe:7a:39:01:e2:61:71:07:86:16:35:09:ca:50:2a:43:4b: 71:71:1c:06:cf:9b:c2:4f:60:ec:a8:9c:de:1c:ef:84:83:17: 59:f7:5c:e6:b8:2e:21:c3:36:99:af:5b:bb:d7:ba:9b:64:a4: 69:81:32:37:d7:b2:d9:65:71:af:0b:0a:73:83:43:f3:94:41: 0a:25:3d:45:e8:2a:fd:cd:40:cb:95:af:84:8d:60:2b:74:8f: a5:8a:5f:93:c5:b8:77:33:26:bc:5d:8a:62:d5:d0:72:a6:dc: 52:40:56:7a:3e:88:6e:3b:3b:36:90:5f:98:16:c2:85:64:97: 8e:0f:6f:84:d0:53:5e:36:35:3d:4b:bc:d6:b0:1b:ca:3b:52: ee:95:8f:69:3a:c4:55:10:29:ce:9a:cf:5e:5b:cf:3f:59:10: fa:10:b4:97:30:6d:1f:a5:c9:c1:15:fe:c0:a1:fa:d6:cf:2c: 71:8d:29:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5bVdJiyrBsH1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk OGU0MTgwMGQtOGRiNS00MDRkLTgyNmMtMWRiYWI1Y2MwZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0lmsyc+zYfXS99K+W6FMC9NJiHTykCd+nIq 8OEGEPWwiaTuO24JDkpFyBUBhF3f3P+0UhG/AUqa2HoWCukrvEbDWIM7dbMZ1nod xFsPogQMNy5rQo+uyv4qZGv2XeeCB76ABVnDKOnReA5Z/c23/DeXf9bQ3U1Lp7Lt JV+TV5OuZD9y0bNma5nx8C91ilKT/idE5A/rLHQpjJCKU90zRNM32noJm6JWgzDC 8AVSLVZ36N3+qp9SkGQa/FUsGuZA/fBc1K7cZrIKKJRaQzH+3L914rH+0ipHVGI+ XXCflJ+kzSft9b4Do/H0lteuT0kHT3tnn2VJuaEmaBCveJ3zGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/8CX5iSf2sizogT7RqE4jG6DI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODRmNTkxZTItMjliMC0z NGYyLWJmMWQtMDJhNDhhNjdlMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWYQpPtVe8zvzAPrPt9MztpQPIZBHrv4kVVgL3Oid66ihynT+dpZIMJ RdMNclJq574odR9hnu2dYzLkryUvmIwQfvU6BA8gfi/+ejkB4mFxB4YWNQnKUCpD S3FxHAbPm8JPYOyonN4c74SDF1n3XOa4LiHDNpmvW7vXuptkpGmBMjfXstllca8L CnODQ/OUQQolPUXoKv3NQMuVr4SNYCt0j6WKX5PFuHczJrxdimLV0HKm3FJAVno+ iG47OzaQX5gWwoVkl44Pb4TQU142NT1LvNawG8o7Uu6Vj2k6xFUQKc6az15bzz9Z EPoQtJcwbR+lycEV/sCh+tbPLHGNKbo= -----END CERTIFICATE-----Generated at Fri Mar 20 05:18:09 2026 by rpki-client