$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4230061-171d-3de7-9b81-4d2e8d6a0428.roa File: b4230061-171d-3de7-9b81-4d2e8d6a0428.roa (raw, json) Hash identifier: yvdjlOqaLe3KeEe25FFHpYEuvtiS3hE8XNQQaVKOoRs= Subject key identifier: 1E:3E:06:22:93:37:4E:65:F8:DC:C0:AB:F6:AD:1F:27:D4:D4:3C:B6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584ED4322520118CD1E5DF30B540 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4230061-171d-3de7-9b81-4d2e8d6a0428.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 58061 IP address blocks: 166.0.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:25:20:11:8c:d1:e5:df:30:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=71b8ee98-72ef-4251-b162-247103eaf04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:49:f6:c6:65:c9:cc:08:bb:ce:39:c0:25: ed:06:d0:c6:8f:14:07:8c:d3:92:b6:e4:b7:c9:c1: 0c:ca:6f:b7:9e:b8:bf:8f:26:bc:74:06:ff:63:2c: f0:51:cf:e8:a7:26:c1:02:14:bf:f7:bb:d3:f9:11: 62:cf:5c:5d:44:82:59:11:c0:6b:13:ac:0a:c6:40: d2:26:42:c5:21:38:0c:d6:17:2f:c5:41:e1:97:d9: 1e:31:8b:5e:db:49:87:45:e3:ec:99:85:42:ba:6d: 8a:36:cb:d8:d1:3e:08:5f:fc:d3:46:64:50:de:a9: 19:39:5c:56:d8:f0:74:2f:63:71:04:20:e6:fb:29: 18:76:e2:58:e6:69:ef:0e:40:63:79:a1:bb:d9:1a: f3:ef:bb:bf:6b:bb:11:df:3e:c3:ac:8f:4c:96:ff: ed:b4:96:33:f1:6f:00:43:7a:61:b1:69:b7:aa:63: 88:02:3c:d4:b1:22:db:9b:31:cb:10:a8:0c:35:5e: d8:ad:84:37:38:a1:3a:60:45:61:2e:f6:5c:d2:7d: 80:6e:1a:d7:57:90:fe:91:20:bb:ac:3e:63:ae:07: 2d:90:95:3f:8c:86:23:98:e3:a7:68:b4:11:a8:fd: a4:e7:fa:b3:c3:35:bf:e9:43:b1:50:79:3e:76:dd: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3E:06:22:93:37:4E:65:F8:DC:C0:AB:F6:AD:1F:27:D4:D4:3C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4230061-171d-3de7-9b81-4d2e8d6a0428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:45:60:01:ca:32:20:7a:c6:0a:a0:01:9d:9c:b5:02:f6:72: d7:b6:3c:10:3a:18:cd:2f:ce:1b:f4:b7:ec:b6:11:52:b9:cc: e0:a4:e4:4a:53:30:ef:86:24:62:bf:9a:f9:6e:3e:bf:f1:a3: bd:54:07:d8:48:8d:2e:67:49:18:32:02:5c:76:18:bf:86:63: 93:06:f0:ce:a1:42:d1:00:f8:78:61:5e:e6:f7:61:be:11:7a: b4:67:f8:51:d7:f2:fb:89:cd:b8:d3:e5:b7:85:94:b1:c0:22: 49:e8:b3:ce:d0:94:4e:a0:77:8c:ca:16:d1:23:d4:28:bd:b2: 93:fc:01:f8:c2:b1:00:85:43:3d:b1:b9:28:5b:be:e2:fd:27: fe:e0:74:e0:4e:c9:7b:86:e3:ba:97:9b:9d:a7:e4:4a:1c:14: 53:e1:4b:57:54:0b:44:2a:d4:a0:4b:13:1c:45:39:5b:30:d6: ef:61:53:70:94:47:12:2d:91:81:33:6e:8f:c2:c0:89:9c:c6: 80:d7:7f:54:90:cd:bf:9f:4f:be:d1:a9:10:a4:75:89:92:de: 4b:93:e2:25:2f:91:cd:3d:85:52:f5:bd:11:35:97:be:2b:38: 73:0d:26:3d:e4:3b:71:09:ff:ae:e7:11:7b:1b:35:3e:a4:df: 67:b8:ce:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMiUgEYzR5d8wtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NzFiOGVlOTgtNzJlZi00MjUxLWIxNjItMjQ3MTAzZWFmMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsClJ9sZlycwIu845wCXtBtDGjxQHjNOStuS3 ycEMym+3nri/jya8dAb/YyzwUc/opybBAhS/97vT+RFiz1xdRIJZEcBrE6wKxkDS JkLFITgM1hcvxUHhl9keMYte20mHRePsmYVCum2KNsvY0T4IX/zTRmRQ3qkZOVxW 2PB0L2NxBCDm+ykYduJY5mnvDkBjeaG72Rrz77u/a7sR3z7DrI9Mlv/ttJYz8W8A Q3phsWm3qmOIAjzUsSLbmzHLEKgMNV7YrYQ3OKE6YEVhLvZc0n2AbhrXV5D+kSC7 rD5jrgctkJU/jIYjmOOnaLQRqP2k5/qzwzW/6UOxUHk+dt2U5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4+BiKTN05l+NzAq/atHyfU1Dy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjQyMzAwNjEtMTcxZC0z ZGU3LTliODEtNGQyZThkNmEwNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtFYAHKMiB6xgqgAZ2ctQL2cte2PBA6GM0vzhv0t+y2EVK5zOCk5EpT MO+GJGK/mvluPr/xo71UB9hIjS5nSRgyAlx2GL+GY5MG8M6hQtEA+HhhXub3Yb4R erRn+FHX8vuJzbjT5beFlLHAIknos87QlE6gd4zKFtEj1Ci9spP8AfjCsQCFQz2x uShbvuL9J/7gdOBOyXuG47qXm52n5EocFFPhS1dUC0Qq1KBLExxFOVsw1u9hU3CU RxItkYEzbo/CwImcxoDXf1SQzb+fT77RqRCkdYmS3kuT4iUvkc09hVL1vRE1l74r OHMNJj3kO3EJ/67nEXsbNT6k32e4zlA= -----END CERTIFICATE-----Generated at Mon Sep 14 12:48:03 2026 by rpki-client