$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d36a22e7-b1f6-3c14-a4b4-13f6a5e65c59.roa File: d36a22e7-b1f6-3c14-a4b4-13f6a5e65c59.roa (raw, json) Hash identifier: eGESTNJYcYw95kQd2NFTbLyYxN9LZmyQjAFPrDC4MbM= Subject key identifier: BA:F7:D3:4A:C6:A7:D3:89:04:6B:E7:65:9D:49:C6:7E:48:77:94:25 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F1C6ECA5E9790D64D76F68100 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d36a22e7-b1f6-3c14-a4b4-13f6a5e65c59.roa Signing time: Tue 08 Sep 2026 22:01:19 +0000 ROA not before: Tue 08 Sep 2026 22:01:19 +0000 ROA not after: Mon 07 Dec 2026 23:01:19 +0000 asID: 401152 IP address blocks: 166.1.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:6e:ca:5e:97:90:d6:4d:76:f6:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 8 22:01:19 2026 GMT Not After : Dec 7 23:01:19 2026 GMT Subject: CN=af46398f-7f6b-485e-8e5a-d4ddb163d681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4f:8a:0b:11:ec:6b:db:e2:f5:0b:52:cf:ad: d5:92:ad:11:64:e4:c3:2d:63:49:f2:92:0d:73:cb: c9:a6:d2:c1:a1:de:66:63:47:0c:9c:6e:76:c1:d8: 29:aa:73:28:62:27:11:70:2f:71:b6:13:6e:4b:6d: 27:a1:fd:0f:12:42:37:64:28:2d:81:b8:b0:f2:e5: a1:2f:4e:45:ca:2c:cf:ea:93:91:9e:fa:38:29:3e: 5f:bf:ce:d5:5d:c6:32:e3:b7:c3:1f:74:fd:07:51: 94:bd:5d:69:6f:e6:2d:ba:03:da:5b:19:73:3d:9a: 1f:40:96:6d:49:4e:d1:b8:d8:02:69:96:cb:36:e7: 93:28:bf:50:64:3c:de:b4:ad:cd:bc:ed:e6:69:fb: 4f:8e:59:cf:aa:55:77:e1:5e:a5:4e:17:c6:45:9b: 2e:e9:6a:6f:c2:82:c6:29:19:14:87:39:fb:00:66: ec:4e:0c:90:73:ab:79:e2:8b:3d:eb:23:72:f7:a5: 99:43:d1:91:d5:a9:d5:e6:aa:30:e3:87:66:68:d0: d0:a1:45:ef:db:63:23:9c:99:32:21:19:e1:62:9b: ff:ff:27:16:65:2a:4a:fa:7b:d3:6b:8e:38:c5:94: 00:63:6d:36:e6:c7:56:ed:fa:0a:4d:8b:46:fd:7d: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F7:D3:4A:C6:A7:D3:89:04:6B:E7:65:9D:49:C6:7E:48:77:94:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d36a22e7-b1f6-3c14-a4b4-13f6a5e65c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:03:7a:7d:20:b7:68:3c:92:b6:9d:e1:c9:27:c1:b8:e8:de: 60:91:6b:ed:2d:bc:f8:d6:63:6a:e0:64:a8:09:b3:aa:88:3c: 49:36:9a:84:1c:c2:34:71:10:82:a3:47:47:66:09:2b:84:ae: 15:e3:c8:6f:53:70:9f:29:7a:c0:f0:4b:1b:7e:02:ee:29:3b: 65:58:8d:38:9d:e0:ba:09:1a:bc:0a:c1:fc:c8:39:a2:09:7f: 0b:26:3c:48:17:8b:53:d1:2a:3f:23:a3:68:4e:bb:da:86:f6: 6a:73:40:33:5e:2b:fc:00:a0:dd:91:85:ff:08:d1:2c:6a:c5: fe:bd:f5:d6:12:54:55:10:c3:e6:62:6b:ea:9c:fc:10:73:c3: 22:b7:6d:55:9b:03:2a:5f:20:a9:c6:f9:9c:13:75:52:f8:bd: d4:ca:17:f3:56:75:b9:b6:29:ec:db:c4:40:21:3d:45:44:6e: 4f:30:9a:1d:7b:2e:c3:fa:d0:0a:7f:e0:2f:8c:97:df:85:a3: 57:67:aa:7c:66:d2:74:c2:16:51:64:3c:a4:dc:5b:e8:8d:25: e3:71:75:a5:b2:15:ff:0d:54:bf:f6:8b:b0:6b:61:9c:ab:2d: b2:e4:6a:8d:2d:88:0d:12:54:06:79:fe:d8:cc:45:6f:4d:b9: ab:6c:72:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cbspel5DWTXb2gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkwODIyMDExOVoXDTI2MTIwNzIzMDExOVowLzEtMCsGA1UEAxMk YWY0NjM5OGYtN2Y2Yi00ODVlLThlNWEtZDRkZGIxNjNkNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU+KCxHsa9vi9QtSz63Vkq0RZOTDLWNJ8pIN c8vJptLBod5mY0cMnG52wdgpqnMoYicRcC9xthNuS20nof0PEkI3ZCgtgbiw8uWh L05FyizP6pORnvo4KT5fv87VXcYy47fDH3T9B1GUvV1pb+YtugPaWxlzPZofQJZt SU7RuNgCaZbLNueTKL9QZDzetK3NvO3maftPjlnPqlV34V6lThfGRZsu6WpvwoLG KRkUhzn7AGbsTgyQc6t54os96yNy96WZQ9GR1anV5qow44dmaNDQoUXv22MjnJky IRnhYpv//ycWZSpK+nvTa444xZQAY2025sdW7foKTYtG/X2iOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr300rGp9OJBGvnZZ1Jxn5Id5QlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDM2YTIyZTctYjFmNi0z YzE0LWE0YjQtMTNmNmE1ZTY1YzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkDen0gt2g8krad4cknwbjo3mCRa+0tvPjWY2rgZKgJs6qIPEk2moQc wjRxEIKjR0dmCSuErhXjyG9TcJ8pesDwSxt+Au4pO2VYjTid4LoJGrwKwfzIOaIJ fwsmPEgXi1PRKj8jo2hOu9qG9mpzQDNeK/wAoN2Rhf8I0Sxqxf699dYSVFUQw+Zi a+qc/BBzwyK3bVWbAypfIKnG+ZwTdVL4vdTKF/NWdbm2KezbxEAhPUVEbk8wmh17 LsP60Ap/4C+Ml9+Fo1dnqnxm0nTCFlFkPKTcW+iNJeNxdaWyFf8NVL/2i7BrYZyr LbLkao0tiA0SVAZ5/tjMRW9Nuatscjk= -----END CERTIFICATE-----Generated at Wed Sep 9 05:37:27 2026 by rpki-client