$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3bf5784-af41-3267-b472-6d1ec60114d1.roa File: a3bf5784-af41-3267-b472-6d1ec60114d1.roa (raw, json) Hash identifier: Bj9j3/pNqgzL8EIflzaPlWBAm2Y01zt6b17E9bpG+f8= Subject key identifier: 39:D8:6D:91:35:79:E8:31:9B:18:8B:17:3E:01:29:00:E4:AC:5C:CB Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F5A32A7BD9CE505DD35F38580 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3bf5784-af41-3267-b472-6d1ec60114d1.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 166.1.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:a7:bd:9c:e5:05:dd:35:f3:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=b00fcdd4-60f7-4647-9ade-9bce820ef2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:f8:5c:66:39:53:ee:c7:9e:0d:0b:bf:7d: 96:a0:b3:96:eb:d6:c0:c4:17:d0:94:a0:5a:f9:57: f2:0f:e0:36:b4:58:2a:ef:9b:99:2b:62:d5:10:9e: 2f:78:00:b1:93:ed:05:61:08:7c:a7:05:b2:4a:63: 47:fd:c8:f6:f0:42:8c:e3:d2:44:fe:57:e3:92:9c: 49:80:19:4e:3e:4d:97:1c:ef:56:05:fd:45:11:4f: a0:31:a4:1f:39:5c:46:c8:13:75:5a:e6:86:8b:04: d7:f4:fa:27:c0:4d:16:bb:01:1b:55:c5:0e:2d:6c: 54:44:20:ee:1b:94:ba:4c:34:df:4d:5c:96:f4:18: 06:d9:f9:1f:26:82:33:16:36:e7:fc:25:56:df:28: 59:48:17:98:30:72:cd:7d:d9:38:c7:aa:c9:73:78: 2b:39:09:bc:9b:53:87:18:08:c7:6c:45:78:56:24: 42:e2:a9:2e:cc:95:17:df:24:4b:0b:4a:ad:0e:a4: af:da:58:6f:37:19:56:36:ea:26:83:2b:0c:d5:e4: 66:fd:27:35:51:56:d9:f0:c8:07:75:e2:b3:d6:e3: 4f:80:0a:75:c9:8e:45:57:e1:f9:ec:31:7b:3f:1b: 59:25:de:a7:fa:fb:53:f6:b9:ac:32:61:b6:1b:91: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D8:6D:91:35:79:E8:31:9B:18:8B:17:3E:01:29:00:E4:AC:5C:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3bf5784-af41-3267-b472-6d1ec60114d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:82:73:df:d9:8d:0d:87:e3:74:59:f8:e5:9f:17:da:8a:34: 96:82:eb:59:7c:de:fd:37:9b:12:97:f6:56:31:60:79:3f:c8: 40:ce:fb:02:6f:7e:1d:c8:26:28:57:e9:38:ce:9f:df:88:46: 8f:44:f8:b5:8c:b7:7d:2c:21:ca:69:74:1e:45:cc:62:16:98: e6:5c:7a:17:29:0d:31:1b:53:c1:e4:2d:fd:e7:75:23:99:4e: f5:3e:21:15:84:ca:b6:65:f5:44:2c:e9:ec:fd:3f:ba:d4:9b: f5:c1:a0:59:19:eb:95:98:23:ff:48:d0:8f:9b:e4:2a:fb:21: a5:8f:af:1c:55:56:8d:c4:16:0e:81:9f:c1:04:98:8d:8e:0f: 30:b0:44:6b:07:5f:20:9b:3c:bc:44:2b:24:a3:6f:ce:b8:33: 21:5a:b5:cf:9c:7e:e7:fb:db:a5:31:a0:48:b2:36:90:f7:33: f6:cb:ed:f6:1e:ba:51:e1:c6:b2:c0:bc:f6:b8:b3:8e:89:da: 80:f9:95:08:af:26:7c:78:b7:2d:5d:f4:df:f6:5f:fd:27:2f: 57:a9:c1:f4:30:dd:19:f9:63:de:e9:f7:ec:9a:19:f8:d5:f5: e3:62:84:88:ba:f0:b7:c9:ea:cf:59:ed:b0:ab:56:88:19:81: 4e:7c:e5:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMqe9nOUF3TXzhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YjAwZmNkZDQtNjBmNy00NjQ3LTlhZGUtOWJjZTgyMGVmMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgT4XGY5U+7Hng0Lv32WoLOW69bAxBfQlKBa +VfyD+A2tFgq75uZK2LVEJ4veACxk+0FYQh8pwWySmNH/cj28EKM49JE/lfjkpxJ gBlOPk2XHO9WBf1FEU+gMaQfOVxGyBN1WuaGiwTX9PonwE0WuwEbVcUOLWxURCDu G5S6TDTfTVyW9BgG2fkfJoIzFjbn/CVW3yhZSBeYMHLNfdk4x6rJc3grOQm8m1OH GAjHbEV4ViRC4qkuzJUX3yRLC0qtDqSv2lhvNxlWNuomgysM1eRm/Sc1UVbZ8MgH deKz1uNPgAp1yY5FV+H57DF7PxtZJd6n+vtT9rmsMmG2G5EJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnYbZE1eegxmxiLFz4BKQDkrFzLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTNiZjU3ODQtYWY0MS0z MjY3LWI0NzItNmQxZWM2MDExNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpgGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWCc9/ZjQ2H43RZ+OWfF9qKNJaC61l83v03mxKX9lYxYHk/yEDO+wJv fh3IJihX6TjOn9+IRo9E+LWMt30sIcppdB5FzGIWmOZcehcpDTEbU8HkLf3ndSOZ TvU+IRWEyrZl9UQs6ez9P7rUm/XBoFkZ65WYI/9I0I+b5Cr7IaWPrxxVVo3EFg6B n8EEmI2ODzCwRGsHXyCbPLxEKySjb864MyFatc+cfuf726UxoEiyNpD3M/bL7fYe ulHhxrLAvPa4s46J2oD5lQivJnx4ty1d9N/2X/0nL1epwfQw3Rn5Y97p9+yaGfjV 9eNihIi68LfJ6s9Z7bCrVogZgU585YA= -----END CERTIFICATE-----Generated at Wed Nov 4 12:14:06 2026 by rpki-client