$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d177e822-1db5-3d4d-a12d-83ba9efb33b0.roa File: d177e822-1db5-3d4d-a12d-83ba9efb33b0.roa (raw, json) Hash identifier: cA994aFFwfYExhMXDO93PLhAwHq5Nc/5vEeqP8gC910= Subject key identifier: E6:35:43:6B:B4:7C:FA:5F:86:F3:3C:16:B6:5F:48:59:49:98:96:A6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DAE4FC86CB20B565CF9789C00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d177e822-1db5-3d4d-a12d-83ba9efb33b0.roa Signing time: Thu 30 Apr 2026 18:32:59 +0000 ROA not before: Thu 30 Apr 2026 18:32:59 +0000 ROA not after: Wed 29 Jul 2026 18:32:59 +0000 asID: 62240 IP address blocks: 166.1.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:4f:c8:6c:b2:0b:56:5c:f9:78:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 30 18:32:59 2026 GMT Not After : Jul 29 18:32:59 2026 GMT Subject: CN=8402aae3-45ac-4f12-a4f6-bc517b93cc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:4f:dc:d0:12:cd:c8:ee:99:88:e0:95:9c: 0c:c4:64:06:de:c2:90:16:9b:ed:16:41:4c:b0:53: f4:3a:da:bc:c0:7e:33:bf:f1:a6:37:b3:03:35:d6: ad:c6:44:9c:05:2e:9f:33:e7:0d:6d:fd:1d:06:7d: 15:1f:1c:39:aa:5a:19:d1:fa:8e:f5:c5:79:e3:e6: 6b:05:d6:00:17:d3:4c:b3:39:5d:08:f5:16:4d:07: 7a:ff:95:93:e9:df:f9:e7:9a:53:90:4a:3a:f2:59: 84:7e:d0:63:c2:b0:3d:2e:73:23:0f:4c:76:73:84: 9b:41:ae:f5:10:d0:c5:fc:f4:f3:b7:ea:3e:ad:0f: 30:ab:ee:a7:fd:22:4a:40:53:79:b3:9c:40:c3:47: bd:9c:27:70:a2:fb:5a:2a:a0:bd:a2:6f:cd:9c:2d: f2:22:ae:fc:72:fb:80:47:6d:18:54:a6:9d:1f:a3: e5:a2:a3:c9:39:a2:1b:3a:14:02:6b:e2:c8:23:1f: dd:a3:59:cb:89:ea:4a:03:3e:83:f9:cd:e7:46:4a: d7:f0:9f:cb:1f:75:45:e8:a0:c6:5a:5b:eb:ea:73: ec:08:42:96:c9:ac:7f:aa:6a:fe:62:8b:4a:5c:e8: 2d:08:10:83:8f:c2:70:08:1a:5c:d6:6d:f0:fb:35: 38:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:35:43:6B:B4:7C:FA:5F:86:F3:3C:16:B6:5F:48:59:49:98:96:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d177e822-1db5-3d4d-a12d-83ba9efb33b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:75:95:78:7c:38:6a:49:a8:1c:8d:36:04:76:81:8d:94:25: 60:6a:93:01:94:5c:6a:f7:54:d2:f6:13:c2:27:62:06:8e:37: 14:78:48:8c:d6:01:2f:e0:c2:5e:8a:8c:7f:9b:de:45:7d:4c: 67:60:3c:bf:19:35:9a:d9:45:14:72:7b:ed:5f:22:a1:c7:f0: 42:88:71:66:b1:f9:a2:f1:b1:d2:d5:ae:fd:14:41:34:3e:2d: 34:1c:ca:63:6d:5c:be:34:5a:3b:f0:6d:fe:c4:68:d9:92:d2: 73:db:9d:ee:02:b5:8e:fa:b5:9f:d0:f0:15:cf:13:88:13:b9: ed:80:43:8d:ee:ad:fe:a5:f9:15:5f:ba:b5:d2:bc:72:73:cc: 02:c4:39:06:5d:48:50:56:ec:ed:44:a4:88:5d:12:4c:6b:3a: bb:97:9c:0f:56:3b:38:04:46:08:75:33:80:36:07:b4:d3:20: 92:eb:f5:73:2b:ad:20:59:90:f4:5d:b9:43:f8:f4:f4:3a:f3: de:38:83:50:02:9a:01:91:65:68:0f:34:a8:f2:00:60:d5:52: ee:1a:f1:0f:de:3b:52:60:83:33:51:4b:4a:8a:e5:19:da:c7: 72:6d:0b:38:d9:d0:87:f0:35:88:35:da:46:6b:94:52:8d:d6: 77:2b:6b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT8hssgtWXPl4nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQzMDE4MzI1OVoXDTI2MDcyOTE4MzI1OVowLzEtMCsGA1UEAxMk ODQwMmFhZTMtNDVhYy00ZjEyLWE0ZjYtYmM1MTdiOTNjYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLdP3NASzcjumYjglZwMxGQG3sKQFpvtFkFM sFP0Otq8wH4zv/GmN7MDNdatxkScBS6fM+cNbf0dBn0VHxw5qloZ0fqO9cV54+Zr BdYAF9NMszldCPUWTQd6/5WT6d/555pTkEo68lmEftBjwrA9LnMjD0x2c4SbQa71 ENDF/PTzt+o+rQ8wq+6n/SJKQFN5s5xAw0e9nCdwovtaKqC9om/NnC3yIq78cvuA R20YVKadH6PloqPJOaIbOhQCa+LIIx/do1nLiepKAz6D+c3nRkrX8J/LH3VF6KDG Wlvr6nPsCEKWyax/qmr+YotKXOgtCBCDj8JwCBpc1m3w+zU4cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY1Q2u0fPpfhvM8FrZfSFlJmJamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDE3N2U4MjItMWRiNS0z ZDRkLWExMmQtODNiYTllZmIzM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp1lXh8OGpJqByNNgR2gY2UJWBqkwGUXGr3VNL2E8InYgaONxR4SIzW AS/gwl6KjH+b3kV9TGdgPL8ZNZrZRRRye+1fIqHH8EKIcWax+aLxsdLVrv0UQTQ+ LTQcymNtXL40Wjvwbf7EaNmS0nPbne4CtY76tZ/Q8BXPE4gTue2AQ43urf6l+RVf urXSvHJzzALEOQZdSFBW7O1EpIhdEkxrOruXnA9WOzgERgh1M4A2B7TTIJLr9XMr rSBZkPRduUP49PQ68944g1ACmgGRZWgPNKjyAGDVUu4a8Q/eO1JggzNRS0qK5Rna x3JtCzjZ0IfwNYg12kZrlFKN1ncrayk= -----END CERTIFICATE-----Generated at Sat May 2 23:07:58 2026 by rpki-client