$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a44f07f0-947b-3b88-b276-2d2f95d43ec3.roa File: a44f07f0-947b-3b88-b276-2d2f95d43ec3.roa (raw, json) Hash identifier: ktlHhqvpn4JMgkzYw22DYH0daOU11JSZhDkYDtDBk/4= Subject key identifier: C8:C7:93:4F:41:73:0F:6A:D7:49:F2:D0:1A:D6:F4:70:ED:4B:0F:5B Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F86DDA1322AE1281E07347680 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a44f07f0-947b-3b88-b276-2d2f95d43ec3.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 10753 IP address blocks: 108.165.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:a1:32:2a:e1:28:1e:07:34:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=2b536d43-6ccc-4f3a-aa87-c278830e1020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:bc:54:4e:55:6c:27:f9:02:22:a7:77:0f: cb:da:bd:5a:26:55:c4:15:b0:64:68:05:91:d5:24: 04:78:72:98:33:45:da:05:5f:5b:f0:df:14:e7:2e: bc:5b:8d:fc:5e:00:ce:0e:6a:2c:8e:18:be:09:36: 18:f0:81:ac:16:ac:ef:08:bb:39:d2:dc:5d:dd:e1: fe:4b:bf:07:f5:53:24:2f:55:25:e5:72:47:2f:3a: e3:b3:ee:1d:ec:37:b8:06:3d:f8:64:f3:66:8b:a8: 8c:49:45:4a:5d:5f:25:d0:69:4b:3d:a8:b2:e3:8c: 3b:7c:48:33:08:5b:fd:c6:ab:c7:27:10:0e:e6:cb: ad:fc:9d:25:c3:48:82:e0:0e:8d:18:e4:6f:e0:d5: 68:50:11:a0:cf:51:72:35:1d:a6:92:13:8d:a8:88: 0d:ad:70:47:be:a6:79:26:f7:e4:13:02:c8:04:c5: 46:7f:32:8c:17:94:fa:61:06:37:0c:aa:6b:84:21: a8:7d:28:34:35:b6:eb:24:10:4f:3d:45:dd:b6:e1: b3:27:00:be:0e:6b:e0:33:e7:41:89:77:cd:fb:de: c7:25:a9:6b:0f:15:ab:0e:af:a3:6b:ba:f4:19:31: 53:04:ad:a7:39:f5:76:7e:0a:a8:f1:7c:15:d5:92: f7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C7:93:4F:41:73:0F:6A:D7:49:F2:D0:1A:D6:F4:70:ED:4B:0F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a44f07f0-947b-3b88-b276-2d2f95d43ec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:69:80:94:41:52:fb:44:87:97:73:c7:ce:0a:49:be:8c:61: 51:7a:61:95:d8:e0:37:2e:36:9b:e5:38:f7:56:71:02:76:22: d5:37:b7:f2:39:c0:c7:37:03:06:a9:81:77:75:0a:28:75:14: 7c:e2:48:a0:aa:7f:ba:0f:20:6a:a0:0b:ad:78:6c:69:74:2e: 10:9f:2c:b2:01:95:14:0a:10:66:20:0b:a6:8a:f6:c8:79:2a: cc:ed:91:8d:3c:b6:c7:c1:d1:13:95:8a:b4:12:8e:52:b7:9c: 06:b4:70:8c:f7:a8:cc:47:37:b8:55:d1:07:d3:1c:64:49:3a: 4d:b5:54:f7:ba:47:a6:32:34:50:f1:c4:62:0e:db:b7:70:0a: 3d:f0:20:01:22:0a:19:9c:e3:fd:2c:a3:70:5a:7a:d0:7d:c1: d0:ac:49:f6:40:d0:f0:c8:0e:a2:da:dd:80:a1:73:fe:40:e0: 16:89:30:dc:74:a0:7e:f8:e2:fb:e0:d4:d0:17:a6:91:54:c9: f6:e0:47:66:a1:5f:aa:f3:b6:33:6b:7e:2f:f2:34:cb:0d:90: 0f:fa:9e:fa:07:18:54:ce:52:74:82:9f:2f:cf:b9:fb:b4:7c: 00:1a:f3:c8:9c:9f:2f:55:fc:48:fe:64:b1:d3:f7:3a:b5:a7: 5b:07:4b:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3aEyKuEoHgc0doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk MmI1MzZkNDMtNmNjYy00ZjNhLWFhODctYzI3ODgzMGUxMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM+8VE5VbCf5AiKndw/L2r1aJlXEFbBkaAWR 1SQEeHKYM0XaBV9b8N8U5y68W438XgDODmosjhi+CTYY8IGsFqzvCLs50txd3eH+ S78H9VMkL1Ul5XJHLzrjs+4d7De4Bj34ZPNmi6iMSUVKXV8l0GlLPaiy44w7fEgz CFv9xqvHJxAO5sut/J0lw0iC4A6NGORv4NVoUBGgz1FyNR2mkhONqIgNrXBHvqZ5 JvfkEwLIBMVGfzKMF5T6YQY3DKprhCGofSg0NbbrJBBPPUXdtuGzJwC+DmvgM+dB iXfN+97HJalrDxWrDq+ja7r0GTFTBK2nOfV2fgqo8XwV1ZL3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjHk09Bcw9q10ny0BrW9HDtSw9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTQ0ZjA3ZjAtOTQ3Yi0z Yjg4LWIyNzYtMmQyZjk1ZDQzZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRpgJRBUvtEh5dzx84KSb6MYVF6YZXY4DcuNpvlOPdWcQJ2ItU3t/I5 wMc3AwapgXd1Cih1FHziSKCqf7oPIGqgC614bGl0LhCfLLIBlRQKEGYgC6aK9sh5 KsztkY08tsfB0ROVirQSjlK3nAa0cIz3qMxHN7hV0QfTHGRJOk21VPe6R6YyNFDx xGIO27dwCj3wIAEiChmc4/0so3BaetB9wdCsSfZA0PDIDqLa3YChc/5A4BaJMNx0 oH744vvg1NAXppFUyfbgR2ahX6rztjNrfi/yNMsNkA/6nvoHGFTOUnSCny/Pufu0 fAAa88icny9V/Ej+ZLHT9zq1p1sHS0w= -----END CERTIFICATE-----Generated at Wed Oct 28 16:36:09 2026 by rpki-client