$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa File: d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa (raw, json) Hash identifier: M0DsBtz8bgipl1PIkqWAPYXdfFAphMAReKlwvRiU7AA= Subject key identifier: 37:04:42:ED:C9:51:70:40:29:AB:84:56:0A:93:B0:09:AF:D8:5D:64 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EB847648F68B12E811339FB00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 401152 IP address blocks: 108.165.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:64:8f:68:b1:2e:81:13:39:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=ba985f0f-415d-40b0-9ccb-69a62f2f65e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c5:2f:7f:3e:28:69:2d:6e:41:90:7d:da:f9: 02:fa:3d:51:31:bc:9c:23:98:22:86:99:02:f3:81: b3:40:fc:89:d5:37:0c:37:dd:4e:82:a2:d4:48:0a: e1:4a:43:c5:b8:d7:ea:fa:4c:d1:df:a2:c2:82:08: c6:ef:31:dd:c6:c1:eb:a1:67:68:fe:68:45:b4:85: 7a:aa:bf:0f:cd:cc:a7:78:3b:d4:00:cb:74:37:22: ac:0b:c6:20:41:a4:21:de:14:2d:f6:03:8c:ed:ef: f8:05:de:17:f7:43:f0:84:ac:32:dc:d4:82:da:57: ea:b0:9c:79:2e:7a:1a:25:2a:f0:c0:44:79:e1:de: 3e:e4:4b:0e:4d:cb:b0:af:e2:42:17:3d:34:50:7f: 58:d1:fa:da:e2:4a:46:3c:23:46:5d:82:29:73:6e: 4e:ff:af:2b:8b:14:54:d0:7e:12:aa:b6:fd:52:4d: ef:04:ab:75:0c:19:6c:78:b7:75:c2:b4:36:83:f9: 62:22:d5:fa:c4:1a:0a:8b:fc:76:f7:94:e1:82:66: 69:91:a0:99:10:4e:77:0d:cb:08:a3:07:c1:3b:e5: ff:33:77:dd:a7:3f:52:09:12:f8:de:21:a8:61:7f: 01:d6:70:6b:75:78:43:9c:d5:d3:ac:07:d9:0b:dd: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:04:42:ED:C9:51:70:40:29:AB:84:56:0A:93:B0:09:AF:D8:5D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:48:58:ed:10:38:20:3c:83:66:14:f7:2f:a8:16:10:34:a3: c2:69:02:15:0c:d0:0d:c9:90:3b:fa:85:cc:01:84:1b:33:83: 15:5d:b7:51:3d:0f:9c:aa:f6:d4:f0:59:65:ee:63:a3:d2:67: fe:c8:0c:c7:f6:3b:86:d8:0c:26:bb:0b:59:06:0f:1f:15:c7: b6:ea:58:24:ad:0c:68:d5:d5:6f:66:8c:65:e4:ef:a9:e0:15: 42:73:27:ce:91:0b:4f:4b:af:18:57:ee:a6:26:7a:c5:c2:0d: 54:dc:05:c6:ba:ac:53:9e:cc:a6:f8:e8:28:5a:58:98:f8:90: 13:da:19:e8:17:b6:dd:09:aa:e7:04:74:70:e0:24:7a:c7:ec: 2d:99:8a:90:bc:9c:26:b2:a8:35:0f:03:b4:07:46:af:4a:da: 8a:9e:8c:cd:d1:56:66:2a:d9:eb:c9:e3:d4:25:74:aa:98:9e: ae:e8:8b:44:06:65:ca:4e:b3:8b:0b:d2:fd:27:4c:35:86:bb: cf:89:fe:41:2d:74:5c:c1:9e:b6:54:5a:e5:cb:60:4f:8b:cf: b4:e5:be:eb:da:41:be:d5:4c:3d:04:66:69:3c:f6:5d:20:21: 49:bb:2d:07:02:80:57:19:dc:98:a7:23:a6:e5:61:9b:9b:5d: 32:ef:2a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R2SPaLEugRM5+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk YmE5ODVmMGYtNDE1ZC00MGIwLTljY2ItNjlhNjJmMmY2NWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sUvfz4oaS1uQZB92vkC+j1RMbycI5gihpkC 84GzQPyJ1TcMN91OgqLUSArhSkPFuNfq+kzR36LCggjG7zHdxsHroWdo/mhFtIV6 qr8PzcyneDvUAMt0NyKsC8YgQaQh3hQt9gOM7e/4Bd4X90PwhKwy3NSC2lfqsJx5 LnoaJSrwwER54d4+5EsOTcuwr+JCFz00UH9Y0fra4kpGPCNGXYIpc25O/68rixRU 0H4Sqrb9Uk3vBKt1DBlseLd1wrQ2g/liItX6xBoKi/x295ThgmZpkaCZEE53DcsI owfBO+X/M3fdpz9SCRL43iGoYX8B1nBrdXhDnNXTrAfZC90PxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcEQu3JUXBAKauEVgqTsAmv2F1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDliMjViN2UtMzg0Mi0z ZGQ5LTgyODUtMWFlZWRkYjIxOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtIWO0QOCA8g2YU9y+oFhA0o8JpAhUM0A3JkDv6hcwBhBszgxVdt1E9 D5yq9tTwWWXuY6PSZ/7IDMf2O4bYDCa7C1kGDx8Vx7bqWCStDGjV1W9mjGXk76ng FUJzJ86RC09LrxhX7qYmesXCDVTcBca6rFOezKb46ChaWJj4kBPaGegXtt0JqucE dHDgJHrH7C2ZipC8nCayqDUPA7QHRq9K2oqejM3RVmYq2evJ49QldKqYnq7oi0QG ZcpOs4sL0v0nTDWGu8+J/kEtdFzBnrZUWuXLYE+Lz7TlvuvaQb7VTD0EZmk89l0g IUm7LQcCgFcZ3JinI6blYZubXTLvKkQ= -----END CERTIFICATE-----Generated at Thu Sep 17 18:00:46 2026 by rpki-client