$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cec2ecee-3620-31bc-9932-4b6d6b3879e7.roa File: cec2ecee-3620-31bc-9932-4b6d6b3879e7.roa (raw, json) Hash identifier: XTIls5G1rYVzVOCCG/I/q4fjT1jbTTh54+xk+/YfDRs= Subject key identifier: 9F:92:B6:6B:8B:61:4B:2F:74:32:E9:C9:1E:2B:36:35:92:76:0E:FD Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F49749E235775C83BE5690220 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cec2ecee-3620-31bc-9932-4b6d6b3879e7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401152 IP address blocks: 108.165.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:9e:23:57:75:c8:3b:e5:69:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a3c1c50d-8310-4727-b4e4-5ab44f362271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f2:43:d6:54:f5:f9:83:0f:59:8e:49:c2:79: 66:f4:28:78:cb:73:8d:2d:35:a1:da:5b:bf:a0:75: d2:39:05:46:a9:12:46:ee:58:1b:b4:ec:62:40:17: c9:63:57:bf:64:b1:32:d2:52:c2:3c:98:dd:fa:d1: 28:a5:3a:b6:e9:c7:69:d9:92:97:2b:f2:bd:5b:0d: c5:e1:df:be:ae:f6:dc:2c:15:00:d0:2d:75:0c:fd: d8:6c:42:91:fd:a0:dc:43:75:90:07:5c:57:50:8f: 0d:49:be:12:91:3c:38:0e:a0:8d:94:34:b2:80:fb: 15:3e:06:2b:81:7a:48:c2:78:66:d2:b3:aa:2c:7a: 5f:44:6e:e2:04:0f:1e:c0:12:95:84:26:c8:2d:3e: 86:8c:a4:0e:a3:b3:5a:bb:9c:57:4d:6a:7b:a3:ac: 15:96:05:cb:84:5e:da:6c:cd:19:65:50:b7:44:2f: 14:39:1f:51:5b:35:67:f4:70:aa:f0:e2:4b:b7:7f: 5b:ae:62:c6:6b:10:88:a1:8b:47:75:12:07:5f:94: 6a:2b:53:9e:2d:eb:47:01:2a:cd:bf:d9:04:76:51: 9a:47:ac:83:d2:a0:bf:44:09:00:61:c2:84:09:56: 62:14:80:e5:6e:9f:24:67:8b:07:1b:76:21:73:79: 0e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:92:B6:6B:8B:61:4B:2F:74:32:E9:C9:1E:2B:36:35:92:76:0E:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cec2ecee-3620-31bc-9932-4b6d6b3879e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:93:ac:4b:47:23:d7:09:a8:b7:e2:2c:11:c3:f4:8b:bb:55: 41:ea:36:9f:2f:b1:79:ed:ee:93:0c:b7:fc:ea:cb:02:56:fc: da:32:f3:4e:7a:b0:88:b1:35:ce:11:7d:e8:e2:81:0a:02:08: 20:cc:16:b4:20:c2:88:9b:e7:f6:72:ef:02:5b:a1:04:ca:79: 8a:ff:1b:61:13:59:47:a2:46:cc:e8:6f:c5:0a:50:02:c2:0a: 94:85:76:73:29:46:67:73:25:74:3f:09:82:93:01:cc:2c:1e: b2:91:32:96:39:f1:f0:3e:6f:b3:41:cb:5f:03:57:96:14:ab: 02:e9:31:a3:6a:88:b5:ac:bb:a4:f8:30:6f:e8:06:97:f9:2e: 63:71:89:61:e5:bd:0d:31:26:7b:9f:cb:5f:15:38:a8:fd:84: f6:53:a1:65:c7:a5:8f:ac:88:0d:8b:37:32:07:99:e9:ef:3d: e0:00:ee:f9:c7:1e:89:5f:10:32:62:9f:cc:d7:9b:6c:95:84: 55:ad:7b:b7:98:f3:95:3a:d4:d5:f3:06:52:ee:89:34:a6:7f: 98:05:6a:88:17:0f:20:e1:c8:db:fd:3a:28:e4:3c:12:bf:be: d9:22:80:63:a7:3a:66:c4:02:30:b0:bd:0d:90:11:fd:be:e0: 14:53:cf:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJ4jV3XIO+VpAiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTNjMWM1MGQtODMxMC00NzI3LWI0ZTQtNWFiNDRmMzYyMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfJD1lT1+YMPWY5Jwnlm9Ch4y3ONLTWh2lu/ oHXSOQVGqRJG7lgbtOxiQBfJY1e/ZLEy0lLCPJjd+tEopTq26cdp2ZKXK/K9Ww3F 4d++rvbcLBUA0C11DP3YbEKR/aDcQ3WQB1xXUI8NSb4SkTw4DqCNlDSygPsVPgYr gXpIwnhm0rOqLHpfRG7iBA8ewBKVhCbILT6GjKQOo7Nau5xXTWp7o6wVlgXLhF7a bM0ZZVC3RC8UOR9RWzVn9HCq8OJLt39brmLGaxCIoYtHdRIHX5RqK1OeLetHASrN v9kEdlGaR6yD0qC/RAkAYcKECVZiFIDlbp8kZ4sHG3Yhc3kOgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+StmuLYUsvdDLpyR4rNjWSdg79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2VjMmVjZWUtMzYyMC0z MWJjLTk5MzItNGI2ZDZiMzg3OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuTrEtHI9cJqLfiLBHD9Iu7VUHqNp8vsXnt7pMMt/zqywJW/Noy8056 sIixNc4RfejigQoCCCDMFrQgwoib5/Zy7wJboQTKeYr/G2ETWUeiRszob8UKUALC CpSFdnMpRmdzJXQ/CYKTAcwsHrKRMpY58fA+b7NBy18DV5YUqwLpMaNqiLWsu6T4 MG/oBpf5LmNxiWHlvQ0xJnufy18VOKj9hPZToWXHpY+siA2LNzIHmenvPeAA7vnH HolfEDJin8zXm2yVhFWte7eY85U61NXzBlLuiTSmf5gFaogXDyDhyNv9OijkPBK/ vtkigGOnOmbEAjCwvQ2QEf2+4BRTzxQ= -----END CERTIFICATE-----Generated at Sat Oct 31 08:18:56 2026 by rpki-client