$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcfd28f8-dada-3107-a2b2-717f5b860624.roa File: bcfd28f8-dada-3107-a2b2-717f5b860624.roa (raw, json) Hash identifier: mhp9dyvPujnGE/MqVcVYst9an/agmMsrVuNFMgmCkn8= Subject key identifier: 86:17:D4:F8:79:3E:2D:D7:25:81:D8:BC:60:BF:B5:3F:59:36:A7:06 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DAE4FCDDDDE69F959C060D680 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcfd28f8-dada-3107-a2b2-717f5b860624.roa Signing time: Thu 30 Apr 2026 18:33:01 +0000 ROA not before: Thu 30 Apr 2026 18:33:01 +0000 ROA not after: Wed 29 Jul 2026 18:33:01 +0000 asID: 44559 IP address blocks: 166.1.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:4f:cd:dd:de:69:f9:59:c0:60:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 30 18:33:01 2026 GMT Not After : Jul 29 18:33:01 2026 GMT Subject: CN=1d34be65-0fef-466f-ad2b-2ad9b9340d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:9e:76:9b:64:1b:b3:6f:62:12:85:6c:1b: c2:e0:89:91:34:80:dd:bb:16:a8:4b:fe:c3:14:f3: 7e:f2:71:e8:13:33:e6:93:e5:e8:1e:2c:ae:de:75: 87:3a:2e:0d:cd:10:1a:3e:fa:42:10:12:8f:e1:99: 5e:56:4f:b0:e3:70:31:48:53:c4:94:dd:e0:49:0a: ce:14:1f:4d:03:e8:aa:aa:f6:97:a7:40:e6:18:ce: 23:b8:79:7d:ee:8d:d9:e3:26:98:52:7f:b5:08:49: 99:1b:05:f4:cb:a4:db:32:91:c4:d2:ac:1a:48:85: 13:c3:33:e9:2d:67:ce:7c:87:fd:03:46:2b:73:d6: cb:7c:ce:e0:e8:74:4d:ca:b1:c0:3d:77:41:d0:fd: 22:26:0f:d0:e1:57:8b:1c:be:84:e7:e5:8d:57:65: 27:43:9a:1c:a1:34:ae:31:cb:d3:91:a2:05:7c:79: 2d:01:99:99:a9:a0:70:bd:85:a3:d5:9f:04:d8:1e: 2c:d3:67:ae:af:1e:76:4b:2e:54:89:a6:b6:18:a7: ab:9a:68:2d:7c:1c:99:c9:8a:7d:eb:a4:92:65:cc: 5c:fe:53:f1:2d:cc:aa:47:a5:de:d3:9e:a8:9b:fd: d7:d6:62:1d:98:a0:6d:73:02:28:35:7f:df:1a:c0: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:17:D4:F8:79:3E:2D:D7:25:81:D8:BC:60:BF:B5:3F:59:36:A7:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcfd28f8-dada-3107-a2b2-717f5b860624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:af:0c:37:10:01:50:0a:f6:92:b0:9e:06:71:25:1a:4e:67: cf:f2:47:e3:9c:3c:43:2d:cb:69:a6:d4:65:b8:92:09:df:d8: 80:2e:51:9e:e6:80:82:ac:74:36:ba:60:c0:2d:24:74:c1:59: 29:4d:95:65:3f:88:f3:9c:9d:03:f0:55:77:ad:30:f1:75:e1: 1f:d6:d2:0a:d7:98:19:64:6e:91:c6:b7:57:2a:9f:1e:28:e8: 08:a4:cf:92:99:7c:fe:20:d7:68:0e:f7:c2:25:2c:40:e4:e2: d1:ec:43:ad:9a:7f:0e:5b:d4:d4:bc:c9:9e:09:ce:97:16:2f: 87:ff:1e:c4:bc:0a:68:81:c6:de:5e:e5:0e:6c:11:ec:26:68: 11:50:af:c2:cc:e3:74:6a:5c:ea:1f:35:da:dc:4e:66:50:5a: 31:cc:4a:dd:bc:cd:49:de:bf:17:bf:8a:d6:5c:2a:d5:a1:78: 68:5b:d2:63:ea:74:14:07:a2:47:65:b9:6c:c1:11:61:da:fb: a5:d6:4c:c5:f8:e3:ad:c5:53:a2:33:61:e9:ed:02:fa:da:b3: 19:d0:1d:28:1f:45:49:f9:6c:23:66:6d:23:f3:c9:e1:eb:09: fb:3a:c1:1b:59:1a:12:6d:5d:22:00:aa:47:5e:f6:3a:3c:05: 26:64:5e:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT83d3mn5WcBg1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQzMDE4MzMwMVoXDTI2MDcyOTE4MzMwMVowLzEtMCsGA1UEAxMk MWQzNGJlNjUtMGZlZi00NjZmLWFkMmItMmFkOWI5MzQwZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCiedptkG7NvYhKFbBvC4ImRNIDduxaoS/7D FPN+8nHoEzPmk+XoHiyu3nWHOi4NzRAaPvpCEBKP4ZleVk+w43AxSFPElN3gSQrO FB9NA+iqqvaXp0DmGM4juHl97o3Z4yaYUn+1CEmZGwX0y6TbMpHE0qwaSIUTwzPp LWfOfIf9A0Yrc9bLfM7g6HRNyrHAPXdB0P0iJg/Q4VeLHL6E5+WNV2UnQ5ocoTSu McvTkaIFfHktAZmZqaBwvYWj1Z8E2B4s02eurx52Sy5Uiaa2GKermmgtfByZyYp9 66SSZcxc/lPxLcyqR6Xe056om/3X1mIdmKBtcwIoNX/fGsAoBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYX1Ph5Pi3XJYHYvGC/tT9ZNqcGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmNmZDI4ZjgtZGFkYS0z MTA3LWEyYjItNzE3ZjViODYwNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+vDDcQAVAK9pKwngZxJRpOZ8/yR+OcPEMty2mm1GW4kgnf2IAuUZ7m gIKsdDa6YMAtJHTBWSlNlWU/iPOcnQPwVXetMPF14R/W0grXmBlkbpHGt1cqnx4o 6Aikz5KZfP4g12gO98IlLEDk4tHsQ62afw5b1NS8yZ4JzpcWL4f/HsS8CmiBxt5e 5Q5sEewmaBFQr8LM43RqXOofNdrcTmZQWjHMSt28zUnevxe/itZcKtWheGhb0mPq dBQHokdluWzBEWHa+6XWTMX4463FU6IzYentAvrasxnQHSgfRUn5bCNmbSPzyeHr Cfs6wRtZGhJtXSIAqkde9jo8BSZkXu4= -----END CERTIFICATE-----Generated at Sat May 2 23:07:31 2026 by rpki-client