$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa File: bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa (raw, json) Hash identifier: 21hgMffsQuJzoRwIDgLyEMbo4Sdt6l/70FZ9wxVqRDI= Subject key identifier: D8:BF:CF:37:B0:2D:E2:73:76:63:79:85:51:5A:34:F4:4E:4F:E6:D9 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EC0A71BB15087E949A9544340 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 211440 IP address blocks: 108.165.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:1b:b1:50:87:e9:49:a9:54:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=0c6d0316-ced4-4806-abcd-248dd3fca18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:3d:ab:2e:58:d9:bc:75:8c:73:72:93:07: 8b:f7:48:76:b5:7c:7b:07:7f:38:3f:9b:dc:4b:89: 98:cf:33:16:1c:23:a9:48:29:9b:50:47:16:64:aa: ea:89:27:57:db:35:e7:ee:54:b6:b3:8d:9e:1d:66: c1:e5:53:2c:5c:6a:16:16:18:cd:b9:78:8d:87:f4: fb:a5:e4:1a:3f:5e:39:c8:2d:4b:f5:22:a2:fc:89: af:3b:54:26:ba:77:d3:07:23:e3:4e:1d:74:5e:da: 11:bc:c4:f0:14:3d:75:49:4d:ca:c0:78:68:c9:cb: 15:ca:74:09:0d:48:02:0f:9d:17:ae:90:9b:3e:81: be:74:39:b1:5d:1d:5d:fa:fe:7c:3e:80:ee:91:73: f2:da:88:32:11:60:ce:a6:83:4c:fb:73:6a:f7:8e: cc:44:06:c2:98:d8:2e:e4:de:0b:55:06:b4:f1:fc: 2b:de:17:f8:f7:27:49:c8:2f:04:31:6c:b4:b9:58: 8b:09:81:8d:15:f0:97:9a:2f:19:89:34:4c:43:e2: 2e:af:9e:2a:73:d8:da:90:42:ee:fa:ed:09:ad:74: ec:6c:a0:91:a6:12:af:6d:6c:9b:26:42:66:3c:e7: ae:fc:2d:52:7d:78:b0:99:f4:02:c2:ab:1d:0e:8d: d1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BF:CF:37:B0:2D:E2:73:76:63:79:85:51:5A:34:F4:4E:4F:E6:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:0d:82:41:99:ce:71:e3:9c:a5:f8:d4:af:8c:0b:c1:43:cf: f4:83:0e:17:29:2e:e8:ab:d3:1b:7b:6e:24:b9:18:c3:da:3d: 75:a4:2f:4a:88:c9:4c:75:40:ce:ec:d6:dc:09:86:2d:9d:29: c4:40:09:2b:32:bd:1b:0e:1d:46:78:fb:08:e1:3a:4f:d9:20: 6c:29:18:05:3e:6c:e4:af:c8:84:f4:5a:c9:ab:db:2e:32:02: 45:b4:fc:94:bd:66:71:f9:d7:7b:21:e5:4b:b4:67:02:4e:76: 77:d3:66:a5:7f:92:e9:c3:06:24:c9:61:ee:f1:90:1b:ac:08: 9c:ec:03:31:c0:78:9f:bb:45:4f:d9:b8:b5:25:e6:60:8a:ca: 34:d2:ac:64:74:e5:ff:ff:87:6e:f0:f8:7b:84:f1:4a:ac:04: 18:04:11:01:47:7e:fb:23:6f:c1:ab:11:fa:13:90:db:ec:18: 98:b0:6b:74:d0:26:db:1e:88:71:fb:34:51:57:fa:8c:4d:4c: ae:e7:e3:10:d1:8b:63:d6:f5:cf:39:fb:d0:f3:2d:cb:b6:e0: 3b:1b:de:c7:c9:3d:af:07:71:cb:c1:18:77:ac:73:2d:ca:9a: 88:87:0e:fd:25:b0:98:bb:d3:2e:70:2b:fa:3e:c4:77:b3:14: 0a:a5:87:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApxuxUIfpSalUQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk MGM2ZDAzMTYtY2VkNC00ODA2LWFiY2QtMjQ4ZGQzZmNhMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFE9qy5Y2bx1jHNykweL90h2tXx7B384P5vc S4mYzzMWHCOpSCmbUEcWZKrqiSdX2zXn7lS2s42eHWbB5VMsXGoWFhjNuXiNh/T7 peQaP145yC1L9SKi/ImvO1QmunfTByPjTh10XtoRvMTwFD11SU3KwHhoycsVynQJ DUgCD50XrpCbPoG+dDmxXR1d+v58PoDukXPy2ogyEWDOpoNM+3Nq947MRAbCmNgu 5N4LVQa08fwr3hf49ydJyC8EMWy0uViLCYGNFfCXmi8ZiTRMQ+Iur54qc9jakELu +u0JrXTsbKCRphKvbWybJkJmPOeu/C1SfXiwmfQCwqsdDo3RKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi/zzewLeJzdmN5hVFaNPROT+bZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmNhZjEzMDUtMWUwZi0z OGY3LWE3YzQtNDViNzgyMGY0ZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkNgkGZznHjnKX41K+MC8FDz/SDDhcpLuir0xt7biS5GMPaPXWkL0qI yUx1QM7s1twJhi2dKcRACSsyvRsOHUZ4+wjhOk/ZIGwpGAU+bOSvyIT0Wsmr2y4y AkW0/JS9ZnH513sh5Uu0ZwJOdnfTZqV/kunDBiTJYe7xkBusCJzsAzHAeJ+7RU/Z uLUl5mCKyjTSrGR05f//h27w+HuE8UqsBBgEEQFHfvsjb8GrEfoTkNvsGJiwa3TQ JtseiHH7NFFX+oxNTK7n4xDRi2PW9c85+9DzLcu24Dsb3sfJPa8HccvBGHescy3K moiHDv0lsJi70y5wK/o+xHezFAqlhzk= -----END CERTIFICATE-----Generated at Fri Sep 4 01:42:14 2026 by rpki-client