$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa File: bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa (raw, json) Hash identifier: l/RlRsdfI90IWuKcLA6qFCTk9SQlCEd/0Jv7MoKz03Y= Subject key identifier: BF:8D:34:C3:76:06:EC:E1:DC:1E:0C:5F:D9:FD:7A:88:5B:C7:61:B0 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F6292CB5C77CCC12132E24D00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 211440 IP address blocks: 108.165.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:cb:5c:77:cc:c1:21:32:e2:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=7c3153d4-4795-4cf4-9f20-0e21684e7954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:db:b3:d6:53:0e:64:62:44:99:e1:0c:db:1d: a5:f6:ec:19:39:30:1d:58:68:89:af:29:26:ae:38: 0c:28:7d:37:54:09:d0:5b:5f:4d:66:0c:f3:41:48: 29:c3:e8:d6:f4:fe:23:23:2d:8e:0f:78:a0:6e:43: e5:63:33:4b:3c:bb:2c:75:e9:ca:4f:d1:6e:44:6d: 32:a5:7c:00:d6:8c:0d:ba:e7:50:8d:e0:4e:a5:37: d5:25:e7:c1:7c:1f:45:fd:e5:46:bd:47:93:02:95: 93:31:0c:48:eb:96:ac:ad:d4:11:4e:88:6e:36:92: e5:3a:60:7e:59:2b:48:a8:5c:93:9f:75:fa:2b:15: c8:e4:cf:2c:22:5f:b9:96:66:53:29:86:c3:8d:3b: ea:19:c7:97:bd:33:56:7f:bc:73:d5:35:92:be:f0: fd:26:91:4a:e0:b6:d4:ca:85:3a:84:30:d9:46:10: 96:92:b8:60:59:5f:98:cd:1d:b6:ab:1c:ed:3b:44: a9:ae:5a:e7:27:fc:2a:5b:a0:91:d7:28:00:07:13: 48:63:17:7b:75:8a:f8:d4:03:ce:ce:b3:51:9d:ad: 82:3c:2a:36:00:10:2c:b8:a3:e1:1b:01:6d:c6:41: e1:cf:e6:cd:bd:2b:f6:8a:4a:ff:e4:30:15:43:82: b5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8D:34:C3:76:06:EC:E1:DC:1E:0C:5F:D9:FD:7A:88:5B:C7:61:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e4:fc:db:85:9c:14:6c:39:d0:a5:d7:84:31:8f:75:ae:56: c8:77:34:a5:21:72:83:de:68:81:bc:74:de:7c:35:ca:1c:2c: ec:ba:cd:4f:53:4b:c2:29:51:f4:fa:61:bc:cb:ad:77:b4:b7: 1a:72:30:4a:2d:2a:f3:e1:16:48:47:30:4f:46:f8:e8:d3:d8: 65:c8:cf:ef:29:38:a4:40:1a:9e:40:60:57:f0:09:d8:a0:bf: 3a:55:8f:8a:5c:89:88:02:fd:cc:64:98:77:a0:ca:91:8f:ea: 24:df:f8:5d:24:49:a2:f7:7a:ba:23:16:47:9e:ee:4f:ea:c5: 05:0e:45:bf:f6:0c:b3:3b:34:53:b3:88:cb:97:d9:f0:68:54: a3:81:9e:0b:8a:0f:2a:83:3e:5a:6e:9c:27:b3:5a:9b:5b:36: f9:9b:ed:1c:3e:4e:5f:0b:05:9c:6d:bb:b6:b9:0f:ec:c3:da: 25:c2:af:da:a1:bc:34:2d:1a:e6:17:b0:08:b8:77:a1:9b:e8: 4b:a2:c5:00:79:8b:a3:44:4d:02:57:11:31:3c:6b:49:e1:57: 69:4d:08:58:b9:92:61:18:6b:22:66:0c:d9:29:05:20:6d:1c: cd:97:e7:04:1a:24:8b:ef:64:6a:e2:14:f8:b9:94:11:f3:b8: 07:52:34:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikstcd8zBITLiTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk N2MzMTUzZDQtNDc5NS00Y2Y0LTlmMjAtMGUyMTY4NGU3OTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2duz1lMOZGJEmeEM2x2l9uwZOTAdWGiJrykm rjgMKH03VAnQW19NZgzzQUgpw+jW9P4jIy2OD3igbkPlYzNLPLssdenKT9FuRG0y pXwA1owNuudQjeBOpTfVJefBfB9F/eVGvUeTApWTMQxI65asrdQRTohuNpLlOmB+ WStIqFyTn3X6KxXI5M8sIl+5lmZTKYbDjTvqGceXvTNWf7xz1TWSvvD9JpFK4LbU yoU6hDDZRhCWkrhgWV+YzR22qxztO0SprlrnJ/wqW6CR1ygABxNIYxd7dYr41APO zrNRna2CPCo2ABAsuKPhGwFtxkHhz+bNvSv2ikr/5DAVQ4K1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+NNMN2Buzh3B4MX9n9eohbx2GwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmNhZjEzMDUtMWUwZi0z OGY3LWE3YzQtNDViNzgyMGY0ZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDk/NuFnBRsOdCl14Qxj3WuVsh3NKUhcoPeaIG8dN58NcocLOy6zU9T S8IpUfT6YbzLrXe0txpyMEotKvPhFkhHME9G+OjT2GXIz+8pOKRAGp5AYFfwCdig vzpVj4pciYgC/cxkmHegypGP6iTf+F0kSaL3erojFkee7k/qxQUORb/2DLM7NFOz iMuX2fBoVKOBnguKDyqDPlpunCezWptbNvmb7Rw+Tl8LBZxtu7a5D+zD2iXCr9qh vDQtGuYXsAi4d6Gb6EuixQB5i6NETQJXETE8a0nhV2lNCFi5kmEYayJmDNkpBSBt HM2X5wQaJIvvZGriFPi5lBHzuAdSNDA= -----END CERTIFICATE-----Generated at Mon Oct 19 15:06:41 2026 by rpki-client