$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa File: e5a2b901-93aa-343b-bf32-8a23a333f069.roa (raw, json) Hash identifier: p9iPGBP0nGRDcuUNoV6bVnQOqfkIaRlulD1DxOiKe0k= Subject key identifier: CE:5C:59:54:03:C8:48:4B:86:34:3E:FC:D2:35:1B:2B:17:9A:8C:6F Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F58CD5B1ADCB76A2D528B6600 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 21859 IP address blocks: 108.165.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:5b:1a:dc:b7:6a:2d:52:8b:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=7ee28919-0acb-43b3-a55e-84e7739732b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bc:f6:05:19:da:60:ad:2f:d8:c2:35:2c:f4: 06:dd:98:06:be:28:e9:d9:bd:a0:7c:ee:46:12:04: 5d:76:7e:f2:5e:ce:33:5b:de:01:fb:66:1b:fd:8a: c8:f7:fe:91:26:f6:9e:53:e0:d8:04:5e:af:33:0a: f7:f7:f5:8e:fb:8d:b1:fc:09:60:6e:4f:c9:7f:68: 82:3c:35:34:dc:1f:14:e1:a9:3f:4c:fb:9f:a3:97: 0a:4f:5e:e7:3f:0d:c4:99:60:8f:4d:9d:f3:9c:e8: 55:63:fd:0b:84:f8:98:87:10:e2:18:c1:12:36:2b: 6e:58:60:10:a5:ae:e1:42:8f:4b:ba:91:7d:3c:a0: 77:47:c8:da:44:64:ef:12:5e:2f:01:f9:4b:3d:9f: 9c:7d:7d:a6:da:50:7b:a8:31:cf:55:d9:e1:3b:3d: cb:3b:1d:04:04:1f:16:75:81:ce:25:e4:68:e8:80: 01:d3:88:ed:10:3a:9e:84:31:0c:b7:24:bd:05:5e: 51:18:8e:eb:b9:fb:20:8f:aa:56:09:a6:cd:14:31: 75:37:6a:6b:e3:3e:67:8a:db:dc:dd:f4:59:a3:07: f0:49:33:f9:24:d0:45:70:85:4b:19:11:92:58:a2: 5f:f7:14:35:15:dd:4e:43:9d:69:8f:16:2b:99:c2: b9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5C:59:54:03:C8:48:4B:86:34:3E:FC:D2:35:1B:2B:17:9A:8C:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:2f:b9:7d:9f:de:93:db:35:9a:2a:ce:50:45:85:9b:49:d7: d6:a6:78:62:73:81:9e:32:a8:35:d8:f2:4c:2b:27:34:23:ed: 05:7d:4e:5c:dc:c2:78:2c:5e:83:4c:16:07:7a:44:1d:fa:84: f4:0f:11:da:cf:30:fa:75:d0:79:dd:54:ea:38:38:29:f0:d9: 59:2b:4d:60:96:1b:f9:82:9b:59:dc:05:7f:c6:13:2a:74:08: 91:91:84:fb:f5:a8:ff:58:4b:ac:de:38:79:a0:46:2f:3c:af: ee:f3:c9:82:6c:3d:1d:39:15:3e:10:8b:1a:04:16:84:d7:30: 48:e8:6b:fc:27:c6:50:ff:0b:2d:14:30:04:98:36:b3:65:ca: f2:63:0b:76:d0:ad:14:4d:a0:26:bf:97:27:fc:af:83:b4:40: a9:a8:ce:50:04:d4:53:34:df:6b:bf:43:94:10:5f:76:40:37: f4:cf:73:b2:7b:1d:ab:a7:91:0a:de:fa:39:e3:6f:99:8d:4c: 2c:50:c5:5a:65:9d:84:d8:d5:5c:db:d1:b8:5c:60:67:ad:53: 1c:a3:73:75:60:b9:00:0e:27:8c:c1:89:ba:81:12:53:92:7c: 40:e7:cc:9c:a5:d5:a4:14:a5:ec:2e:13:06:d6:72:9a:33:34: 39:42:71:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVsa3LdqLVKLZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk N2VlMjg5MTktMGFjYi00M2IzLWE1NWUtODRlNzczOTczMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLz2BRnaYK0v2MI1LPQG3ZgGvijp2b2gfO5G EgRddn7yXs4zW94B+2Yb/YrI9/6RJvaeU+DYBF6vMwr39/WO+42x/Algbk/Jf2iC PDU03B8U4ak/TPufo5cKT17nPw3EmWCPTZ3znOhVY/0LhPiYhxDiGMESNituWGAQ pa7hQo9LupF9PKB3R8jaRGTvEl4vAflLPZ+cfX2m2lB7qDHPVdnhOz3LOx0EBB8W dYHOJeRo6IAB04jtEDqehDEMtyS9BV5RGI7rufsgj6pWCabNFDF1N2pr4z5nitvc 3fRZowfwSTP5JNBFcIVLGRGSWKJf9xQ1Fd1OQ51pjxYrmcK5HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5cWVQDyEhLhjQ+/NI1GysXmoxvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTVhMmI5MDEtOTNhYS0z NDNiLWJmMzItOGEyM2EzMzNmMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0vuX2f3pPbNZoqzlBFhZtJ19ameGJzgZ4yqDXY8kwrJzQj7QV9Tlzc wngsXoNMFgd6RB36hPQPEdrPMPp10HndVOo4OCnw2VkrTWCWG/mCm1ncBX/GEyp0 CJGRhPv1qP9YS6zeOHmgRi88r+7zyYJsPR05FT4QixoEFoTXMEjoa/wnxlD/Cy0U MASYNrNlyvJjC3bQrRRNoCa/lyf8r4O0QKmozlAE1FM032u/Q5QQX3ZAN/TPc7J7 HaunkQre+jnjb5mNTCxQxVplnYTY1Vzb0bhcYGetUxyjc3VguQAOJ4zBibqBElOS fEDnzJyl1aQUpewuEwbWcpozNDlCcS4= -----END CERTIFICATE-----Generated at Mon Nov 2 19:10:47 2026 by rpki-client