$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cdd68c6f-f95e-34b3-adde-9a7181618fe3.roa File: cdd68c6f-f95e-34b3-adde-9a7181618fe3.roa (raw, json) Hash identifier: 8lENPLZIdCU11qnO3B7UU2X0rThCDXDlR51H8SuCMGI= Subject key identifier: A9:DE:1C:58:13:2A:13:E5:94:66:E7:19:C1:35:B7:DA:10:C0:F2:0A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D4461DAFEB5FB5B13C6392700 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cdd68c6f-f95e-34b3-adde-9a7181618fe3.roa Signing time: Mon 23 Mar 2026 19:53:43 +0000 ROA not before: Mon 23 Mar 2026 19:53:43 +0000 ROA not after: Sun 21 Jun 2026 19:53:43 +0000 asID: 11798 IP address blocks: 166.0.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:61:da:fe:b5:fb:5b:13:c6:39:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 23 19:53:43 2026 GMT Not After : Jun 21 19:53:43 2026 GMT Subject: CN=3d4588e5-5c5c-4e53-b78a-63a518d01691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ae:03:13:81:ce:d4:d7:e7:46:af:05:7c:e3: f5:6a:3d:80:29:87:7c:84:41:7e:94:ab:2a:54:06: 77:10:31:34:9a:70:5c:80:f3:a1:9b:1d:02:5f:87: bf:e4:74:77:2a:61:cb:fc:92:f9:75:38:02:12:3c: 24:09:48:2e:6d:dc:98:ca:12:7f:23:31:6d:77:57: cf:07:6b:64:7e:8b:b7:b8:49:16:7d:6f:46:27:f3: d1:44:1e:bd:b3:07:08:e3:b3:38:4d:42:8e:8c:dd: 1c:af:cd:9e:71:f7:51:71:0d:db:36:67:57:dc:67: 20:7a:9e:c0:12:52:13:32:f3:c6:e4:fe:46:5a:0b: b1:bb:98:aa:cf:66:37:32:d9:db:71:9a:64:e7:4d: 22:b7:d8:2b:d2:f1:21:60:c5:4c:8d:09:8c:66:86: 29:30:13:37:d5:99:9e:79:ae:cc:22:86:04:a4:93: 14:bc:61:8c:64:8a:6b:00:d4:d3:0b:6c:50:e9:a4: e7:46:fa:a5:88:3b:b8:80:4a:b8:e5:c4:be:48:c6: cf:d5:2e:1f:84:10:07:a8:98:48:7e:76:78:1c:66: 1c:7b:68:ae:23:5a:0c:94:b7:2c:82:e8:88:6d:5f: 87:f6:2f:d8:2a:ca:48:ed:cb:21:56:87:57:44:83: f9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DE:1C:58:13:2A:13:E5:94:66:E7:19:C1:35:B7:DA:10:C0:F2:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cdd68c6f-f95e-34b3-adde-9a7181618fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:b5:61:98:2f:a5:62:d2:58:8c:2b:6b:21:08:89:8a:c2:6a: b3:86:eb:fd:dd:bd:89:94:50:3b:4a:3d:56:04:67:c5:98:54: db:d2:83:1d:60:82:3a:39:0e:0e:80:b9:ca:ed:e0:3e:c0:b2: aa:26:62:05:6e:aa:f7:88:8c:e1:6f:45:b1:09:b0:44:d4:9f: 16:50:a1:33:dc:1d:0b:b5:3a:35:65:3d:a5:5b:6e:88:d1:bc: 8f:cc:29:70:09:7c:1a:4b:0d:2b:6d:78:59:af:28:6e:7a:cc: 7c:87:ef:a6:b8:f0:53:9b:4a:23:9e:02:c0:65:09:2f:3c:92: 73:59:ec:ca:a1:00:a1:6c:13:8d:fa:b3:02:89:96:be:e6:97: c9:d5:92:2b:4b:45:55:72:d8:7b:b7:3c:d6:e6:f2:2d:5f:d7: 4f:5b:4a:7d:1d:84:94:97:92:d9:96:b4:a5:a8:8e:3b:f0:fc: ec:85:f2:1c:92:cb:9b:e0:bb:7a:6d:aa:47:1c:f2:14:ab:a5: c5:38:f8:5a:35:a9:fd:96:b8:57:20:db:79:48:e7:48:ed:52: e6:59:26:ac:50:65:0d:79:d3:f6:30:17:26:e6:b4:36:b7:3e: cb:ca:a7:7b:cd:6c:1a:bc:cf:e0:97:aa:73:35:19:ba:fe:1a: 88:58:6a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdr+tftbE8Y5JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyMzE5NTM0M1oXDTI2MDYyMTE5NTM0M1owLzEtMCsGA1UEAxMk M2Q0NTg4ZTUtNWM1Yy00ZTUzLWI3OGEtNjNhNTE4ZDAxNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi64DE4HO1NfnRq8FfOP1aj2AKYd8hEF+lKsq VAZ3EDE0mnBcgPOhmx0CX4e/5HR3KmHL/JL5dTgCEjwkCUgubdyYyhJ/IzFtd1fP B2tkfou3uEkWfW9GJ/PRRB69swcI47M4TUKOjN0cr82ecfdRcQ3bNmdX3Gcgep7A ElITMvPG5P5GWguxu5iqz2Y3MtnbcZpk500it9gr0vEhYMVMjQmMZoYpMBM31Zme ea7MIoYEpJMUvGGMZIprANTTC2xQ6aTnRvqliDu4gEq45cS+SMbP1S4fhBAHqJhI fnZ4HGYce2iuI1oMlLcsguiIbV+H9i/YKspI7cshVodXRIP52QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKneHFgTKhPllGbnGcE1t9oQwPIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2RkNjhjNmYtZjk1ZS0z NGIzLWFkZGUtOWE3MTgxNjE4ZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+1YZgvpWLSWIwrayEIiYrCarOG6/3dvYmUUDtKPVYEZ8WYVNvSgx1g gjo5Dg6Aucrt4D7AsqomYgVuqveIjOFvRbEJsETUnxZQoTPcHQu1OjVlPaVbbojR vI/MKXAJfBpLDStteFmvKG56zHyH76a48FObSiOeAsBlCS88knNZ7MqhAKFsE436 swKJlr7ml8nVkitLRVVy2Hu3PNbm8i1f109bSn0dhJSXktmWtKWojjvw/OyF8hyS y5vgu3ptqkcc8hSrpcU4+Fo1qf2WuFcg23lI50jtUuZZJqxQZQ150/YwFybmtDa3 PsvKp3vNbBq8z+CXqnM1Gbr+GohYag0= -----END CERTIFICATE-----Generated at Tue Mar 24 22:32:50 2026 by rpki-client