$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa File: d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa (raw, json) Hash identifier: iZklFLyAl3aIfLmQ/X68iHgMi+0N4n1vTS/afKD6n+I= Subject key identifier: 4B:F8:09:84:53:5C:5C:2C:66:62:BE:68:7B:8C:00:D2:06:40:B0:A5 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F8F3DE8C66267540A7D7B08C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 401152 IP address blocks: 166.0.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:e8:c6:62:67:54:0a:7d:7b:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=80f8e1f3-89c1-4134-885c-891341de2d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:c7:79:70:ef:eb:73:aa:16:0b:20:b1:97: 3a:e1:b8:90:ac:c2:a3:54:c2:08:04:8c:11:fc:08: 66:98:a5:3c:a5:6e:2e:06:89:c1:1d:14:4c:c4:55: 54:75:ad:79:44:8c:c3:35:8a:7c:3b:d0:21:05:72: 55:0d:3f:5c:36:f2:fb:ec:0f:6f:87:e9:7d:2e:90: 74:89:a2:a0:69:94:3c:d4:48:f7:88:42:7e:e5:9f: 48:ed:8b:27:df:3a:dc:28:48:49:7d:bc:a8:ec:da: 5f:24:07:b3:51:67:d6:ae:e2:d0:75:89:8e:e0:d5: bf:5b:1f:d9:4a:34:ba:9f:a0:cd:dd:c3:e1:3b:0d: 3d:6b:33:67:39:2b:75:80:5d:1d:e9:2d:c1:65:ce: 0a:28:2a:65:29:57:fa:3f:ee:55:12:63:30:1d:c7: 22:37:43:d2:b8:31:70:e0:52:09:eb:77:b7:62:fa: d9:3e:09:28:60:ee:e6:84:ad:cf:00:e0:61:a8:d9: 2c:71:f5:af:20:71:bb:b7:de:f3:da:3f:10:48:e6: cc:7d:61:22:4b:1b:2e:d0:d8:c7:89:4c:f4:99:78: 5f:7d:bc:4c:1b:c8:77:1f:0a:4b:0f:5e:19:bb:38: 9c:c1:19:03:ac:d7:17:ac:57:1e:eb:5e:6a:d3:2a: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F8:09:84:53:5C:5C:2C:66:62:BE:68:7B:8C:00:D2:06:40:B0:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d223d205-c9ae-3fea-b2dd-eaf31ab6e6a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0d:13:d5:92:e1:33:8a:7d:b2:f6:68:3f:9c:a9:05:3d:39: 55:1d:95:c5:9f:ce:b2:1f:5e:46:b6:19:37:95:4b:00:c9:69: a7:2c:d6:7a:c8:84:a9:6f:34:dd:4c:6a:f4:95:41:6a:be:f2: 75:31:ad:0c:a8:6a:56:12:0b:85:eb:f8:95:f5:af:db:be:3c: aa:6b:8d:d0:2e:30:1d:d9:bc:87:b3:ab:6a:ea:39:a2:1a:38: ef:46:27:83:22:14:50:31:c1:0c:b9:0d:08:e4:ae:ea:9d:49: d2:29:08:b6:e9:4f:6f:60:69:a9:84:19:62:f9:79:ef:8c:80: 2a:2f:c4:6d:9f:05:6d:40:90:37:85:c9:77:00:83:38:8a:1e: b6:74:92:b1:43:05:12:76:c5:fe:f6:c0:d3:ed:29:9a:c9:7b: be:22:ea:56:c0:b4:52:37:5c:56:49:af:41:c3:61:f5:ca:f4: 4a:80:2b:05:a4:71:f0:43:5c:fb:af:e8:3b:e4:85:c3:37:4e: 39:27:49:00:61:b8:21:8f:0e:73:39:5d:f4:19:53:a8:ae:06: c8:07:7c:af:5d:cc:a1:49:6f:94:da:7b:aa:59:76:33:49:a6: e5:1c:e6:85:ff:95:00:7a:01:cf:ba:46:1e:11:0a:45:d1:37: 03:32:c8:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPejGYmdUCn17CMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk ODBmOGUxZjMtODljMS00MTM0LTg4NWMtODkxMzQxZGUyZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso7HeXDv63OqFgsgsZc64biQrMKjVMIIBIwR /AhmmKU8pW4uBonBHRRMxFVUda15RIzDNYp8O9AhBXJVDT9cNvL77A9vh+l9LpB0 iaKgaZQ81Ej3iEJ+5Z9I7Ysn3zrcKEhJfbyo7NpfJAezUWfWruLQdYmO4NW/Wx/Z SjS6n6DN3cPhOw09azNnOSt1gF0d6S3BZc4KKCplKVf6P+5VEmMwHcciN0PSuDFw 4FIJ63e3YvrZPgkoYO7mhK3PAOBhqNkscfWvIHG7t97z2j8QSObMfWEiSxsu0NjH iUz0mXhffbxMG8h3HwpLD14ZuzicwRkDrNcXrFce615q0yqZFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv4CYRTXFwsZmK+aHuMANIGQLClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDIyM2QyMDUtYzlhZS0z ZmVhLWIyZGQtZWFmMzFhYjZlNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8NE9WS4TOKfbL2aD+cqQU9OVUdlcWfzrIfXka2GTeVSwDJaacs1nrI hKlvNN1MavSVQWq+8nUxrQyoalYSC4Xr+JX1r9u+PKprjdAuMB3ZvIezq2rqOaIa OO9GJ4MiFFAxwQy5DQjkruqdSdIpCLbpT29gaamEGWL5ee+MgCovxG2fBW1AkDeF yXcAgziKHrZ0krFDBRJ2xf72wNPtKZrJe74i6lbAtFI3XFZJr0HDYfXK9EqAKwWk cfBDXPuv6DvkhcM3TjknSQBhuCGPDnM5XfQZU6iuBsgHfK9dzKFJb5Tae6pZdjNJ puUc5oX/lQB6Ac+6Rh4RCkXRNwMyyN8= -----END CERTIFICATE-----Generated at Tue Nov 3 03:49:51 2026 by rpki-client