$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a95d5e75-75e2-32b4-9752-8aa9953f9979.roa File: a95d5e75-75e2-32b4-9752-8aa9953f9979.roa (raw, json) Hash identifier: Nbq+efFDR0yF96M7WSl+ZmEANrssq8KFGM1CmXbuPBM= Subject key identifier: A4:B9:C4:A7:1E:A0:BC:A7:8E:1A:19:33:12:78:8A:D9:F4:16:D8:6D Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D0F06413BB025748C319F3480 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a95d5e75-75e2-32b4-9752-8aa9953f9979.roa Signing time: Wed 04 Mar 2026 17:11:18 +0000 ROA not before: Wed 04 Mar 2026 17:11:18 +0000 ROA not after: Tue 02 Jun 2026 16:11:18 +0000 asID: 399646 IP address blocks: 108.165.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0f:06:41:3b:b0:25:74:8c:31:9f:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 4 17:11:18 2026 GMT Not After : Jun 2 16:11:18 2026 GMT Subject: CN=fd9dfa14-4e65-4a65-b7a3-323ddee985f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9e:bd:2d:49:0a:a5:3f:55:e2:a2:69:e1:eb: 61:f1:9f:14:7a:54:f8:06:59:ef:80:eb:2a:90:ca: a6:74:74:41:ab:0e:51:f1:c3:32:1a:13:36:99:54: 2f:ae:46:0b:31:7e:e8:d0:00:f4:11:ab:9e:8c:9d: 38:bc:61:23:c5:b8:65:15:ec:9d:58:3f:93:f3:3e: c6:87:17:8a:34:3b:69:2e:2c:07:12:83:f4:93:98: e3:eb:86:db:f5:48:06:72:0e:21:e5:ff:d2:c7:b4: 04:56:11:42:99:11:f7:f2:d7:3d:22:c1:9c:27:af: 47:f4:e1:4d:ff:68:de:6a:e6:9d:56:2b:91:8d:dd: 8b:dd:e6:a0:c4:4c:df:80:2a:9a:6d:4a:00:bd:a0: f0:fc:9f:bf:96:14:15:49:74:0d:f1:22:8d:61:b6: 76:1c:c0:94:28:a1:ea:1d:2e:02:5a:55:3e:f3:ef: d6:c9:a1:88:3d:9f:ac:3a:f2:c2:d7:1d:b1:34:39: bc:96:ef:87:46:3b:0c:87:58:8b:72:6b:85:76:fb: e6:bc:6f:15:b3:20:7c:1c:a4:2a:39:9e:40:40:5b: d5:07:fe:14:7a:52:93:00:90:53:5d:60:85:bc:e5: 14:89:3f:68:82:0e:51:22:e2:00:4a:e3:e9:75:b8: 87:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B9:C4:A7:1E:A0:BC:A7:8E:1A:19:33:12:78:8A:D9:F4:16:D8:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a95d5e75-75e2-32b4-9752-8aa9953f9979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:fe:64:af:40:0e:9e:94:e2:63:c8:2d:d3:f0:10:c2:03:12: bc:98:50:fb:c3:0b:e6:cf:8c:0d:70:e8:b4:2a:71:10:06:71: fd:bc:cc:6b:e3:04:63:be:95:00:25:c8:b4:bc:34:5d:89:36: b0:9c:56:07:04:a5:f4:52:35:2e:2d:52:62:fe:08:7e:a1:22: 74:3b:b9:db:77:f5:9f:3c:e6:97:d1:a2:f2:41:b8:0f:f3:46: de:0f:27:74:34:f7:63:df:d0:5d:fa:21:d6:44:7a:f5:41:f4: c5:b7:11:a7:fd:f8:e0:ce:16:61:d0:c8:dd:18:b6:e2:8b:ef: 96:02:67:63:32:20:77:c2:e4:f8:3c:ac:11:17:ff:52:2b:c7: eb:b8:a8:17:b5:43:d9:3f:c2:3f:3d:6d:83:67:b6:f8:6f:53: f3:f7:e7:90:e0:0e:f1:e2:50:e4:4e:b9:6b:5c:a1:38:77:28: 8e:d4:31:ed:9c:dd:a6:fc:f7:b7:49:07:1a:6a:3f:02:1f:93: 00:a0:e7:0b:65:f8:f9:ef:f3:6b:53:1c:3a:d8:cf:e0:66:62: db:12:c1:d0:1f:7c:40:7b:87:05:96:fb:d7:09:ce:67:da:cb: 38:9e:5c:e7:02:53:ec:3c:75:70:4c:41:69:da:a3:0f:73:02: 4d:dc:14:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0PBkE7sCV0jDGfNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMwNDE3MTExOFoXDTI2MDYwMjE2MTExOFowLzEtMCsGA1UEAxMk ZmQ5ZGZhMTQtNGU2NS00YTY1LWI3YTMtMzIzZGRlZTk4NWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p69LUkKpT9V4qJp4eth8Z8UelT4BlnvgOsq kMqmdHRBqw5R8cMyGhM2mVQvrkYLMX7o0AD0EauejJ04vGEjxbhlFeydWD+T8z7G hxeKNDtpLiwHEoP0k5jj64bb9UgGcg4h5f/Sx7QEVhFCmRH38tc9IsGcJ69H9OFN /2jeauadViuRjd2L3eagxEzfgCqabUoAvaDw/J+/lhQVSXQN8SKNYbZ2HMCUKKHq HS4CWlU+8+/WyaGIPZ+sOvLC1x2xNDm8lu+HRjsMh1iLcmuFdvvmvG8VsyB8HKQq OZ5AQFvVB/4UelKTAJBTXWCFvOUUiT9ogg5RIuIASuPpdbiH5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKS5xKceoLynjhoZMxJ4itn0FthtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTk1ZDVlNzUtNzVlMi0z MmI0LTk3NTItOGFhOTk1M2Y5OTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKX+ZK9ADp6U4mPILdPwEMIDEryYUPvDC+bPjA1w6LQqcRAGcf28zGvj BGO+lQAlyLS8NF2JNrCcVgcEpfRSNS4tUmL+CH6hInQ7udt39Z885pfRovJBuA/z Rt4PJ3Q092Pf0F36IdZEevVB9MW3Eaf9+ODOFmHQyN0YtuKL75YCZ2MyIHfC5Pg8 rBEX/1Irx+u4qBe1Q9k/wj89bYNntvhvU/P355DgDvHiUOROuWtcoTh3KI7UMe2c 3ab897dJBxpqPwIfkwCg5wtl+Pnv82tTHDrYz+BmYtsSwdAffEB7hwWW+9cJzmfa yzieXOcCU+w8dXBMQWnaow9zAk3cFGg= -----END CERTIFICATE-----Generated at Thu Mar 5 10:42:41 2026 by rpki-client