$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a61434da-e2c7-380c-9707-88c603d42fd1.roa File: a61434da-e2c7-380c-9707-88c603d42fd1.roa (raw, json) Hash identifier: rk4pXAP2h8N9U2w33fkI+RrxF7APTJ9/My66xg6KEx8= Subject key identifier: 2B:EF:0B:6D:8D:D0:F0:88:B1:ED:CD:B4:5A:8B:87:CD:97:B9:12:D7 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D580023D9573061FCAF6A5E00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a61434da-e2c7-380c-9707-88c603d42fd1.roa Signing time: Mon 30 Mar 2026 20:33:00 +0000 ROA not before: Mon 30 Mar 2026 20:33:00 +0000 ROA not after: Sun 28 Jun 2026 20:33:00 +0000 asID: 47294 IP address blocks: 108.165.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:00:23:d9:57:30:61:fc:af:6a:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 30 20:33:00 2026 GMT Not After : Jun 28 20:33:00 2026 GMT Subject: CN=e8cdd8a0-803d-4f9b-9306-3bed3b90e6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9d:13:b1:8a:8b:cc:fc:e6:7f:29:f8:e8:e4: 17:10:32:41:0c:96:8a:19:f5:c7:ff:a4:57:d3:fc: 12:3a:ba:19:2a:80:b2:03:22:d6:4a:0e:93:e1:34: 10:68:e4:a7:c5:c9:b3:1b:f8:36:a8:be:59:ec:2b: 5e:7e:5e:a5:14:a8:70:1d:b1:91:11:09:de:92:c0: fe:3c:2b:e0:55:44:34:61:d9:a3:57:61:f4:b5:7c: e8:c7:f1:ce:d0:46:19:d4:de:9f:3a:80:17:cf:0c: 5a:90:18:fd:35:01:00:d4:08:c2:67:3d:1f:e6:d8: af:e1:86:4b:c0:aa:8f:5d:8a:4b:9d:66:ce:9d:68: 45:c2:f5:fd:ad:6e:04:28:2a:80:f7:e3:79:b7:96: 24:20:84:c5:fe:c3:4e:ba:2c:c4:3e:05:36:ed:cd: bf:9b:5c:e5:07:01:59:ee:0c:d0:12:77:30:4c:1c: 9e:f2:0b:c1:69:48:02:59:75:3b:95:32:67:7e:ba: 14:ff:3b:3f:23:40:51:e5:40:9b:7c:98:4f:7d:2c: 7f:21:cc:0e:88:28:fe:97:b5:81:6f:5c:87:a4:77: 4e:d8:b9:c8:81:44:f7:18:61:78:70:35:c7:18:56: a8:e2:4f:9f:f4:75:d5:3d:bd:d1:4d:3e:1a:f3:72: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EF:0B:6D:8D:D0:F0:88:B1:ED:CD:B4:5A:8B:87:CD:97:B9:12:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a61434da-e2c7-380c-9707-88c603d42fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ee:63:7c:86:4e:0d:47:83:7b:63:1f:a5:01:2a:71:c6:98: a0:c9:d4:38:ef:1b:fd:63:dd:e8:a2:7e:a6:2d:35:0c:75:4c: ab:95:e0:1f:48:2d:b6:35:13:c2:61:ef:44:cf:59:f0:2d:61: ad:06:35:43:6a:2f:a7:92:24:8a:f1:0d:0b:f3:50:ec:68:6b: 91:ed:83:0f:4f:c1:0e:b3:05:60:09:ec:d5:7c:2c:33:26:ce: be:43:dd:bf:ef:8d:e3:3a:b8:c2:1f:8a:56:db:6f:35:51:6d: 20:92:20:4f:42:49:f8:44:11:0f:67:65:59:b1:13:8a:e5:a3: 52:3c:92:61:c6:b0:55:f2:07:17:4b:80:2b:f4:d4:a7:53:b7: 88:10:a2:2b:68:4f:f1:b1:99:73:80:8b:47:04:87:f7:2a:67: 84:58:2c:ee:d7:6d:43:6b:84:07:2e:af:88:39:ad:f3:87:31: cf:76:75:55:34:97:01:b8:84:e6:d4:b6:db:d9:f8:1d:94:ff: 50:f6:67:f4:9d:56:2d:b9:00:49:6c:7e:09:5f:c8:4e:08:ee: 1b:ff:f5:b2:1a:5a:bb:40:07:79:e9:ac:21:a1:b6:22:1c:6d: 75:f2:33:a9:80:1a:b8:a2:62:ea:8f:52:63:b8:27:bc:a0:2d: 12:4b:cb:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YACPZVzBh/K9qXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMzMDIwMzMwMFoXDTI2MDYyODIwMzMwMFowLzEtMCsGA1UEAxMk ZThjZGQ4YTAtODAzZC00ZjliLTkzMDYtM2JlZDNiOTBlNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ0TsYqLzPzmfyn46OQXEDJBDJaKGfXH/6RX 0/wSOroZKoCyAyLWSg6T4TQQaOSnxcmzG/g2qL5Z7Ctefl6lFKhwHbGREQneksD+ PCvgVUQ0YdmjV2H0tXzox/HO0EYZ1N6fOoAXzwxakBj9NQEA1AjCZz0f5tiv4YZL wKqPXYpLnWbOnWhFwvX9rW4EKCqA9+N5t5YkIITF/sNOuizEPgU27c2/m1zlBwFZ 7gzQEncwTBye8gvBaUgCWXU7lTJnfroU/zs/I0BR5UCbfJhPfSx/IcwOiCj+l7WB b1yHpHdO2LnIgUT3GGF4cDXHGFao4k+f9HXVPb3RTT4a83JPZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvvC22N0PCIse3NtFqLh82XuRLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTYxNDM0ZGEtZTJjNy0z ODBjLTk3MDctODhjNjAzZDQyZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjuY3yGTg1Hg3tjH6UBKnHGmKDJ1DjvG/1j3eiifqYtNQx1TKuV4B9I LbY1E8Jh70TPWfAtYa0GNUNqL6eSJIrxDQvzUOxoa5Htgw9PwQ6zBWAJ7NV8LDMm zr5D3b/vjeM6uMIfilbbbzVRbSCSIE9CSfhEEQ9nZVmxE4rlo1I8kmHGsFXyBxdL gCv01KdTt4gQoitoT/GxmXOAi0cEh/cqZ4RYLO7XbUNrhAcur4g5rfOHMc92dVU0 lwG4hObUttvZ+B2U/1D2Z/SdVi25AElsfglfyE4I7hv/9bIaWrtAB3nprCGhtiIc bXXyM6mAGriiYuqPUmO4J7ygLRJLy0k= -----END CERTIFICATE-----Generated at Tue Mar 31 13:05:13 2026 by rpki-client