$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d928c6bf-47de-3d0f-a0e3-330c17cb60a6.roa File: d928c6bf-47de-3d0f-a0e3-330c17cb60a6.roa (raw, json) Hash identifier: BkHFo5XY3FppzIvINRHSBm1j8ZIlUL/Qmiyq9W2+GSQ= Subject key identifier: 4A:30:1A:4E:13:4E:FA:C6:A9:32:5C:3E:C9:2B:82:27:F7:A0:35:37 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D366F5AC755AE7847086CFDA0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d928c6bf-47de-3d0f-a0e3-330c17cb60a6.roa Signing time: Wed 18 Mar 2026 19:59:35 +0000 ROA not before: Wed 18 Mar 2026 19:59:35 +0000 ROA not after: Tue 16 Jun 2026 19:59:35 +0000 asID: 401152 IP address blocks: 108.165.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:6f:5a:c7:55:ae:78:47:08:6c:fd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 18 19:59:35 2026 GMT Not After : Jun 16 19:59:35 2026 GMT Subject: CN=f2939807-263c-46f1-aa86-9e34f31264ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d5:df:28:a5:3f:7a:3f:ee:24:5b:65:58:9a: 51:1a:0c:e9:6b:96:6a:52:63:bd:0f:84:b6:7b:6d: a6:df:1b:88:bc:8a:67:5b:c9:3b:31:d5:19:5c:cc: 0c:3d:43:24:8e:11:bb:64:0a:04:dd:b1:29:50:ab: 9c:dc:16:34:fb:c1:de:88:26:ea:4d:02:ab:27:04: 4e:3d:37:16:4a:e9:1c:4a:27:c7:66:e7:15:de:0e: 24:f3:31:71:ea:cf:45:f8:08:d0:00:f6:5a:15:4d: 6a:ee:d3:06:42:99:cb:ad:6b:82:b6:6a:d9:98:75: e2:9f:77:94:ff:bc:18:0c:e6:5f:96:88:98:c8:bf: d5:c1:35:d0:a2:53:89:d8:ea:61:4c:20:db:52:fc: 10:16:f8:36:62:01:86:fa:a1:9d:af:19:e0:d2:6e: 89:0e:6a:db:d2:c0:11:8d:56:ba:4d:91:56:ec:f2: ae:19:cd:d9:70:ab:a3:df:ba:5d:31:e6:25:51:c9: 60:89:2d:4e:b2:57:e9:a9:ba:e3:2d:d2:61:26:20: 4c:24:4f:a4:b0:8e:c2:f1:28:4f:77:76:17:2d:d3: cf:06:13:4a:10:38:05:64:99:d5:37:df:46:4c:8a: 75:7a:c3:c0:f2:00:dc:aa:12:f6:62:2b:db:d7:ea: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:30:1A:4E:13:4E:FA:C6:A9:32:5C:3E:C9:2B:82:27:F7:A0:35:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d928c6bf-47de-3d0f-a0e3-330c17cb60a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7d:1a:3e:e6:17:0e:30:14:33:f5:49:b5:dd:e6:3e:3f:aa: 28:14:7e:88:9f:35:e6:f8:2f:39:6f:37:95:c9:4c:ad:1d:e6: 1e:77:9f:0f:ad:bb:e7:3a:c3:b5:6a:b9:75:f6:fc:f9:8c:5f: 4a:c3:00:04:7a:87:e3:b8:b1:1d:e4:19:71:79:a2:b4:38:4e: a7:22:83:39:32:2f:31:30:ce:b2:35:15:d8:f3:60:39:9a:21: 5f:5b:c5:b3:0f:46:30:72:ca:9f:f6:9e:9a:37:e4:41:10:5a: 0b:46:33:b0:7d:ad:a1:3e:72:e4:cf:ba:40:77:09:77:5e:74: 5e:b6:61:6f:4c:2c:e8:9c:d2:9c:e3:95:b9:78:2a:63:ca:83: 7b:23:07:7a:ee:01:dd:5e:b6:dd:96:da:e0:4b:7f:d1:7f:53: 1a:fc:19:22:ce:a6:e3:c3:bb:89:08:5c:be:09:8e:9a:04:2d: f8:64:d8:07:b9:8c:d7:b1:da:92:28:00:9a:f5:ae:b3:ab:23: 42:c3:39:e0:6f:61:c8:dc:6f:c1:7f:21:89:95:57:d3:e0:b5: 13:f5:1a:04:21:87:d9:67:14:a5:6b:f6:46:6e:9a:9b:44:ad: c1:9f:91:7d:b7:1a:e2:cb:9a:07:64:fa:43:a0:c5:a2:ce:64: eb:6d:5a:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02b1rHVa54Rwhs/aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMxODE5NTkzNVoXDTI2MDYxNjE5NTkzNVowLzEtMCsGA1UEAxMk ZjI5Mzk4MDctMjYzYy00NmYxLWFhODYtOWUzNGYzMTI2NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidXfKKU/ej/uJFtlWJpRGgzpa5ZqUmO9D4S2 e22m3xuIvIpnW8k7MdUZXMwMPUMkjhG7ZAoE3bEpUKuc3BY0+8HeiCbqTQKrJwRO PTcWSukcSifHZucV3g4k8zFx6s9F+AjQAPZaFU1q7tMGQpnLrWuCtmrZmHXin3eU /7wYDOZfloiYyL/VwTXQolOJ2OphTCDbUvwQFvg2YgGG+qGdrxng0m6JDmrb0sAR jVa6TZFW7PKuGc3ZcKuj37pdMeYlUclgiS1OslfpqbrjLdJhJiBMJE+ksI7C8ShP d3YXLdPPBhNKEDgFZJnVN99GTIp1esPA8gDcqhL2Yivb1+rfMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEowGk4TTvrGqTJcPskrgif3oDU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDkyOGM2YmYtNDdkZS0z ZDBmLWEwZTMtMzMwYzE3Y2I2MGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt9Gj7mFw4wFDP1SbXd5j4/qigUfoifNeb4LzlvN5XJTK0d5h53nw+t u+c6w7VquXX2/PmMX0rDAAR6h+O4sR3kGXF5orQ4TqcigzkyLzEwzrI1FdjzYDma IV9bxbMPRjByyp/2npo35EEQWgtGM7B9raE+cuTPukB3CXdedF62YW9MLOic0pzj lbl4KmPKg3sjB3ruAd1ett2W2uBLf9F/Uxr8GSLOpuPDu4kIXL4JjpoELfhk2Ae5 jNex2pIoAJr1rrOrI0LDOeBvYcjcb8F/IYmVV9PgtRP1GgQhh9lnFKVr9kZumptE rcGfkX23GuLLmgdk+kOgxaLOZOttWnI= -----END CERTIFICATE-----Generated at Thu Mar 19 14:54:44 2026 by rpki-client