$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8c48d6c-b962-3608-880d-0358dd701bd8.roa File: e8c48d6c-b962-3608-880d-0358dd701bd8.roa (raw, json) Hash identifier: 1ZzUK6DmP9GR2u9eP5AGogGo8Zr+MTUOOpIRvJL5kVs= Subject key identifier: 96:16:9A:6B:48:1C:AC:01:59:68:22:68:7E:FF:21:1D:30:42:ED:D4 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D366F5BFAC06890CC81A8BC80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8c48d6c-b962-3608-880d-0358dd701bd8.roa Signing time: Wed 18 Mar 2026 19:59:36 +0000 ROA not before: Wed 18 Mar 2026 19:59:36 +0000 ROA not after: Tue 16 Jun 2026 19:59:36 +0000 asID: 401152 IP address blocks: 166.0.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:6f:5b:fa:c0:68:90:cc:81:a8:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 18 19:59:36 2026 GMT Not After : Jun 16 19:59:36 2026 GMT Subject: CN=4ec89b40-edcc-4c4a-9bef-ab853bb63eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:dd:ac:2f:0d:70:78:5d:76:d2:7a:89:eb:38: 34:b3:45:b2:96:b4:60:93:0c:97:b1:5e:9e:b6:65: fc:27:6d:9b:cb:a3:ac:95:cc:03:1b:c4:3d:92:76: 1f:76:8e:2e:c9:c1:79:b8:5c:74:65:0c:1d:c4:57: 14:72:4b:76:5d:51:11:32:ac:b3:2c:bb:af:48:f2: 9c:98:52:05:00:77:a7:14:00:6f:2c:1a:c9:70:8e: 65:66:38:5e:d7:27:ec:3a:6a:a8:1d:41:f0:b2:3f: 36:f9:a2:64:e2:7b:72:fb:fa:cf:87:5a:5c:61:9f: a1:b2:69:c6:0b:10:af:91:5f:f5:62:ca:b4:cf:17: 13:68:05:70:89:e0:cf:8b:b8:8c:ea:ed:f6:dc:75: f0:a5:be:ff:bd:fa:21:6f:16:63:f5:33:9a:57:55: cd:2e:7b:bb:aa:70:8c:f7:7c:5e:71:86:f6:f0:ec: cb:f5:d0:8d:28:2b:e8:26:1f:ff:98:cb:e6:fc:f8: 76:db:d1:65:94:75:fd:11:e2:6f:c5:3e:ea:e8:f3: bd:a9:ce:71:45:d7:1a:4f:71:fa:25:5a:a9:f8:bb: cc:7b:a7:7b:75:69:c9:48:6c:ae:93:36:18:53:2c: e6:b0:d0:9e:f1:9d:0f:3f:e1:d2:77:a1:6d:6e:a3: 10:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:16:9A:6B:48:1C:AC:01:59:68:22:68:7E:FF:21:1D:30:42:ED:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8c48d6c-b962-3608-880d-0358dd701bd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9d:8a:85:38:b6:6c:28:41:92:2c:2b:57:07:0d:c5:d3:90: 1b:cd:96:4e:79:df:46:e3:ee:44:17:b7:c6:3c:ec:c5:fb:b0: df:dd:67:ba:86:67:62:d8:06:ca:79:ed:15:96:d9:3f:43:31: f7:3d:63:ce:e0:0c:33:48:e7:f0:4d:50:a8:46:57:3e:2c:e2: c2:08:e7:78:f0:02:63:9d:6e:d1:dd:37:6f:fe:ae:a7:b6:27: 86:b1:17:b8:16:12:d8:e4:a0:0b:8d:9d:39:30:92:c9:ff:39: 64:b8:17:6b:91:17:49:5a:22:5c:22:2e:88:d1:7b:9d:04:68: 3d:65:59:c4:3d:11:1a:2d:f5:e8:01:f5:24:48:ed:da:d9:60: a0:b7:c7:5b:71:90:ab:3c:9d:4c:0d:ee:ea:62:78:58:31:09: 8a:f3:78:56:95:65:b0:0a:d1:a3:72:6b:b9:30:7c:d0:d6:ad: 09:af:c2:7a:e6:17:58:ef:f6:f5:d7:a2:67:0e:18:02:44:5d: 35:5a:6b:dc:d2:74:db:76:bb:a9:ca:97:c2:90:c2:2d:3a:a9: 41:ea:9d:22:5b:72:39:52:44:2d:71:b4:78:12:bc:43:35:b2: ad:bb:f8:ae:e6:22:16:78:b5:42:2a:5d:db:ca:65:df:28:cf: d5:d8:77:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02b1v6wGiQzIGovIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMxODE5NTkzNloXDTI2MDYxNjE5NTkzNlowLzEtMCsGA1UEAxMk NGVjODliNDAtZWRjYy00YzRhLTliZWYtYWI4NTNiYjYzZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd2sLw1weF120nqJ6zg0s0WylrRgkwyXsV6e tmX8J22by6OslcwDG8Q9knYfdo4uycF5uFx0ZQwdxFcUckt2XVERMqyzLLuvSPKc mFIFAHenFABvLBrJcI5lZjhe1yfsOmqoHUHwsj82+aJk4nty+/rPh1pcYZ+hsmnG CxCvkV/1Ysq0zxcTaAVwieDPi7iM6u323HXwpb7/vfohbxZj9TOaV1XNLnu7qnCM 93xecYb28OzL9dCNKCvoJh//mMvm/Ph229FllHX9EeJvxT7q6PO9qc5xRdcaT3H6 JVqp+LvMe6d7dWnJSGyukzYYUyzmsNCe8Z0PP+HSd6FtbqMQSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYWmmtIHKwBWWgiaH7/IR0wQu3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZThjNDhkNmMtYjk2Mi0z NjA4LTg4MGQtMDM1OGRkNzAxYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSdioU4tmwoQZIsK1cHDcXTkBvNlk5530bj7kQXt8Y87MX7sN/dZ7qG Z2LYBsp57RWW2T9DMfc9Y87gDDNI5/BNUKhGVz4s4sII53jwAmOdbtHdN2/+rqe2 J4axF7gWEtjkoAuNnTkwksn/OWS4F2uRF0laIlwiLojRe50EaD1lWcQ9ERot9egB 9SRI7drZYKC3x1txkKs8nUwN7upieFgxCYrzeFaVZbAK0aNya7kwfNDWrQmvwnrm F1jv9vXXomcOGAJEXTVaa9zSdNt2u6nKl8KQwi06qUHqnSJbcjlSRC1xtHgSvEM1 sq27+K7mIhZ4tUIqXdvKZd8oz9XYd/0= -----END CERTIFICATE-----Generated at Thu Mar 19 14:53:45 2026 by rpki-client