$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba786dec-4f14-3b17-992b-074c4601715b.roa File: ba786dec-4f14-3b17-992b-074c4601715b.roa (raw, json) Hash identifier: DN++3VUqW6VKGXEVKJ1lpjqBhIAlS+eZ8xR5gSAppt8= Subject key identifier: 99:9A:C6:FB:EC:26:96:B8:BB:C5:FA:11:95:1C:00:33:16:6B:D9:A8 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DAE4FC87AC0FFD7754D155900 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba786dec-4f14-3b17-992b-074c4601715b.roa Signing time: Thu 30 Apr 2026 18:32:59 +0000 ROA not before: Thu 30 Apr 2026 18:32:59 +0000 ROA not after: Wed 29 Jul 2026 18:32:59 +0000 asID: 62240 IP address blocks: 166.1.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:4f:c8:7a:c0:ff:d7:75:4d:15:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 30 18:32:59 2026 GMT Not After : Jul 29 18:32:59 2026 GMT Subject: CN=30704419-addf-417b-9712-787610e62017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:72:26:0d:0d:3e:1f:8b:66:b5:49:95:34: 4c:1c:3a:0d:7c:fb:e5:5b:50:af:f7:09:2c:43:a4: 01:c1:61:64:e5:23:ed:87:f9:3a:d3:34:48:79:eb: 59:05:ab:54:28:0c:50:4b:42:b7:6a:3f:1a:92:b3: 6c:09:64:ea:38:38:f1:23:49:57:f6:f3:47:93:14: ad:c9:18:55:0b:5b:dc:9c:c8:9c:ff:18:33:2a:3f: 51:05:56:dd:43:84:af:7c:2f:a0:b2:28:39:6a:3d: 18:02:82:5c:c1:de:91:99:b8:ae:07:2c:7a:bf:e8: 42:9e:93:11:05:5e:a3:c4:52:cd:b9:32:7f:8e:b3: f2:46:e0:43:a1:1b:85:6a:f1:e2:c5:9c:03:30:db: c5:33:09:65:98:f7:0f:6c:fe:b9:09:47:84:3c:77: 1a:a8:16:31:86:84:71:da:03:7a:f0:37:5e:d1:c8: 5b:49:a5:c4:a0:f9:1a:ed:b5:43:af:53:06:b4:b1: b2:12:d7:0f:50:0b:99:d0:64:40:44:54:18:85:e2: 9e:49:01:8f:dc:ce:f1:3c:7f:21:ae:2e:77:f6:16: 8d:22:60:ae:93:66:50:15:ef:25:5b:26:ed:23:d1: 76:d5:98:37:51:31:6e:3f:a0:3f:9f:79:d8:f2:b9: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9A:C6:FB:EC:26:96:B8:BB:C5:FA:11:95:1C:00:33:16:6B:D9:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba786dec-4f14-3b17-992b-074c4601715b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5b:88:37:a1:be:cc:63:0d:c5:a7:29:d6:fc:e4:20:20:78: fb:43:f8:be:a2:18:47:e8:af:d5:54:b0:9f:0d:0e:6f:4f:3c: a9:90:af:32:51:8c:35:9f:42:a4:80:fa:59:26:52:70:d0:fb: 42:71:86:d3:3c:34:c3:dc:91:02:90:7a:1b:3a:bb:ae:e7:33: d1:ce:3b:b9:7f:03:30:54:2c:74:6b:9e:15:7f:c0:21:57:13: e9:84:bc:78:71:23:bc:ea:6c:19:52:c5:d5:9c:94:24:83:a7: 06:74:b3:33:fe:41:4b:c5:09:ee:e4:5c:99:b3:70:8f:31:d5: 4f:71:65:aa:5c:48:9f:88:45:0f:11:d0:d2:bf:88:03:2c:f9: bd:1d:0c:63:ac:d3:be:4e:77:9f:4d:85:09:56:52:dd:d2:33: 2a:28:ed:a5:02:9b:c8:91:e3:78:58:66:e3:c6:cd:bc:28:42: cc:f4:42:77:d1:ad:c1:77:20:7f:bf:e1:d9:34:4f:f2:bc:23: d8:86:e5:3d:76:c8:16:de:ea:89:f8:20:f9:ad:c9:dd:10:c6: 60:9e:34:df:6b:be:04:a3:71:04:fa:a7:2c:01:0e:84:79:4a: d3:51:d0:6c:bb:ac:34:e7:a1:6e:db:eb:f7:b2:c3:af:ac:e8: f3:33:fc:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT8h6wP/XdU0VWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQzMDE4MzI1OVoXDTI2MDcyOTE4MzI1OVowLzEtMCsGA1UEAxMk MzA3MDQ0MTktYWRkZi00MTdiLTk3MTItNzg3NjEwZTYyMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq9yJg0NPh+LZrVJlTRMHDoNfPvlW1Cv9wks Q6QBwWFk5SPth/k60zRIeetZBatUKAxQS0K3aj8akrNsCWTqODjxI0lX9vNHkxSt yRhVC1vcnMic/xgzKj9RBVbdQ4SvfC+gsig5aj0YAoJcwd6RmbiuByx6v+hCnpMR BV6jxFLNuTJ/jrPyRuBDoRuFavHixZwDMNvFMwllmPcPbP65CUeEPHcaqBYxhoRx 2gN68Dde0chbSaXEoPka7bVDr1MGtLGyEtcPUAuZ0GRARFQYheKeSQGP3M7xPH8h ri539haNImCuk2ZQFe8lWybtI9F21Zg3UTFuP6A/n3nY8rkIqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmaxvvsJpa4u8X6EZUcADMWa9moMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmE3ODZkZWMtNGYxNC0z YjE3LTk5MmItMDc0YzQ2MDE3MTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9biDehvsxjDcWnKdb85CAgePtD+L6iGEfor9VUsJ8NDm9PPKmQrzJR jDWfQqSA+lkmUnDQ+0JxhtM8NMPckQKQehs6u67nM9HOO7l/AzBULHRrnhV/wCFX E+mEvHhxI7zqbBlSxdWclCSDpwZ0szP+QUvFCe7kXJmzcI8x1U9xZapcSJ+IRQ8R 0NK/iAMs+b0dDGOs075Od59NhQlWUt3SMyoo7aUCm8iR43hYZuPGzbwoQsz0QnfR rcF3IH+/4dk0T/K8I9iG5T12yBbe6on4IPmtyd0QxmCeNN9rvgSjcQT6pywBDoR5 StNR0Gy7rDTnoW7b6/eyw6+s6PMz/OY= -----END CERTIFICATE-----Generated at Sat May 2 23:08:58 2026 by rpki-client