$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d299fb2a-8fe9-388d-8dbe-e8367288b026.roa File: d299fb2a-8fe9-388d-8dbe-e8367288b026.roa (raw, json) Hash identifier: JXT3Oab6maNI6obzz/oaTQiqB2IZcT710e0AaUt6nis= Subject key identifier: 72:14:B3:1E:62:EA:BC:69:06:37:7D:B9:7C:2F:9C:5C:FB:BC:B8:F7 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DABAF82E4DB55301B32549A80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d299fb2a-8fe9-388d-8dbe-e8367288b026.roa Signing time: Wed 29 Apr 2026 19:58:26 +0000 ROA not before: Wed 29 Apr 2026 19:58:26 +0000 ROA not after: Tue 28 Jul 2026 19:58:26 +0000 asID: 401152 IP address blocks: 166.1.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:af:82:e4:db:55:30:1b:32:54:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 29 19:58:26 2026 GMT Not After : Jul 28 19:58:26 2026 GMT Subject: CN=e3d52bac-0792-450c-a1fb-ba05d264d7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b7:b6:af:f1:75:57:0a:f0:93:68:fc:d4:e7: 60:17:83:70:44:d4:72:da:9b:e8:63:3c:33:d2:5f: 2b:d9:00:5d:9b:d7:b6:0f:b3:2c:76:6e:d7:1b:ee: 5f:90:b7:63:21:7c:b6:56:d3:16:41:6b:fc:7b:bf: da:9f:e3:81:62:80:c1:22:99:0b:ae:05:76:3e:39: 5b:58:80:35:c2:86:16:f6:44:54:7d:32:fe:b4:db: 9d:78:74:0d:6f:df:bb:29:b6:c6:62:81:c3:a8:72: b4:9a:04:37:e0:63:13:80:b0:99:39:fe:35:eb:9e: 5f:50:d3:ab:20:ab:fc:e7:db:72:f6:47:01:87:da: 3b:2a:87:57:94:82:07:71:aa:e1:ac:27:77:00:7d: f5:c6:fe:c6:c2:0c:60:73:af:c5:0e:60:78:94:41: 9b:54:a0:e5:c1:0b:27:c1:97:0d:39:2e:0f:21:60: e7:21:4d:3b:e5:3f:69:09:8c:65:68:9a:f4:d8:56: 3c:81:2c:63:f6:82:af:e4:f4:32:50:c5:55:ab:e4: 6d:83:2d:03:a8:41:4f:d8:80:a6:14:4e:79:61:a9: 2a:c0:e4:58:59:3b:cb:b4:39:67:89:d8:96:37:18: 81:5e:90:65:ef:23:08:bc:36:04:30:49:92:99:2b: 97:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:14:B3:1E:62:EA:BC:69:06:37:7D:B9:7C:2F:9C:5C:FB:BC:B8:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d299fb2a-8fe9-388d-8dbe-e8367288b026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f5:84:24:a1:99:c4:58:86:36:f4:25:6c:22:58:10:ea:6a: 5c:51:de:5f:3a:98:c0:42:1d:f1:0a:ff:5e:bc:51:46:c0:fe: 06:51:a8:96:00:6a:f4:6b:0d:c2:f1:ee:3f:70:1a:d7:09:89: 07:94:da:58:cd:9d:d6:50:e7:33:ac:e3:d1:8f:83:a2:dc:64: ed:bd:38:9e:9b:3a:6e:86:db:e1:90:99:9f:a2:05:2f:00:ac: 3a:a3:75:16:64:af:c5:93:6b:ed:b6:e5:b7:a8:ff:fd:fd:8c: 0b:07:56:b3:32:b9:f1:35:a2:53:75:f1:28:bd:b4:f9:22:c3: 95:97:d4:82:6b:d4:7b:38:e1:e0:1f:9b:65:91:6a:ce:94:0a: b3:1d:0d:c0:b7:ba:5e:2f:26:bc:0e:f1:c0:fa:7b:8a:b4:4f: 7a:f6:f0:2c:35:a5:e2:bd:db:b1:50:84:39:1b:ef:90:f4:ec: d2:b5:2e:66:e2:35:de:6f:ca:09:71:e2:a7:ec:89:a2:69:c1: 86:84:8a:ac:7a:ee:17:96:0f:14:7b:bb:47:40:94:19:9b:0b: 44:29:44:e1:eb:26:86:ae:12:18:15:8d:7b:cb:75:0b:3e:61: aa:5b:d7:b7:31:f9:5c:04:f3:ff:ff:5d:ba:8a:22:62:31:42: 6d:93:74:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2rr4Lk21UwGzJUmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQyOTE5NTgyNloXDTI2MDcyODE5NTgyNlowLzEtMCsGA1UEAxMk ZTNkNTJiYWMtMDc5Mi00NTBjLWExZmItYmEwNWQyNjRkN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhre2r/F1Vwrwk2j81OdgF4NwRNRy2pvoYzwz 0l8r2QBdm9e2D7Msdm7XG+5fkLdjIXy2VtMWQWv8e7/an+OBYoDBIpkLrgV2Pjlb WIA1woYW9kRUfTL+tNudeHQNb9+7KbbGYoHDqHK0mgQ34GMTgLCZOf41655fUNOr IKv859ty9kcBh9o7KodXlIIHcarhrCd3AH31xv7Gwgxgc6/FDmB4lEGbVKDlwQsn wZcNOS4PIWDnIU075T9pCYxlaJr02FY8gSxj9oKv5PQyUMVVq+Rtgy0DqEFP2ICm FE55YakqwORYWTvLtDlnidiWNxiBXpBl7yMIvDYEMEmSmSuXdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIUsx5i6rxpBjd9uXwvnFz7vLj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDI5OWZiMmEtOGZlOS0z ODhkLThkYmUtZTgzNjcyODhiMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP1hCShmcRYhjb0JWwiWBDqalxR3l86mMBCHfEK/168UUbA/gZRqJYA avRrDcLx7j9wGtcJiQeU2ljNndZQ5zOs49GPg6LcZO29OJ6bOm6G2+GQmZ+iBS8A rDqjdRZkr8WTa+225beo//39jAsHVrMyufE1olN18Si9tPkiw5WX1IJr1Hs44eAf m2WRas6UCrMdDcC3ul4vJrwO8cD6e4q0T3r28Cw1peK927FQhDkb75D07NK1Lmbi Nd5vyglx4qfsiaJpwYaEiqx67heWDxR7u0dAlBmbC0QpROHrJoauEhgVjXvLdQs+ Yapb17cx+VwE8///XbqKImIxQm2TdHs= -----END CERTIFICATE-----Generated at Sat May 2 23:07:27 2026 by rpki-client