$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2046611-5c5e-3d47-960e-eeaa126441c6.roa File: f2046611-5c5e-3d47-960e-eeaa126441c6.roa (raw, json) Hash identifier: s1XbuyQM6p6mk1RPAoV4EsF/Ck/z/ldC3er4VYCxpBU= Subject key identifier: DF:3A:9C:EA:CA:A6:67:31:DA:9D:DE:CF:3D:51:80:05:3A:78:AE:2C Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EBDDC56DD4C6ACFEFED67EC80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2046611-5c5e-3d47-960e-eeaa126441c6.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 213529 IP address blocks: 108.165.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:56:dd:4c:6a:cf:ef:ed:67:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=d038f96c-2abe-4028-bcc2-9eb48a5d7bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4d:4c:58:42:5c:f0:b1:a6:f0:d6:14:63:5c: 1f:d5:7d:24:56:16:75:30:b5:2e:8d:5a:d1:2f:7c: 4b:9a:8d:33:7c:90:37:04:58:41:61:19:35:90:61: 1b:21:00:ef:4b:34:b3:03:79:33:9a:e1:07:9f:b0: 2b:59:33:92:29:d5:0a:69:f9:bf:86:63:64:79:ab: 2d:0e:14:fa:ec:11:db:88:35:38:a2:17:0c:77:34: e6:04:7c:7c:c7:17:34:95:93:8d:9e:6d:7f:92:4d: 27:b7:7a:5d:81:54:29:23:ce:fe:04:78:1b:aa:3e: 26:12:39:fe:76:db:71:38:b0:39:90:30:4b:49:1a: 34:17:eb:3e:26:70:c4:ed:aa:02:86:06:0b:5b:46: e2:48:ae:2f:c2:45:7c:ef:4d:8e:2b:d2:88:b4:74: 4d:1e:dd:ea:95:6f:ea:6d:91:8a:0b:de:55:0b:72: 77:1b:8c:be:46:c4:83:f4:ea:77:17:80:75:07:52: a9:06:b4:24:5a:47:c5:e0:97:84:b5:67:02:da:9f: 3e:99:01:fc:5d:17:17:c6:01:1d:58:95:ad:78:5a: 70:5c:c3:b5:fd:bf:9b:93:6f:94:14:41:e4:eb:9e: 03:6d:50:24:50:50:91:ce:c9:28:0b:cb:2f:ce:53: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3A:9C:EA:CA:A6:67:31:DA:9D:DE:CF:3D:51:80:05:3A:78:AE:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2046611-5c5e-3d47-960e-eeaa126441c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d8:0d:77:ba:c8:c7:1d:9d:71:20:64:9b:5e:b9:7c:07:31: 70:27:a5:5b:e7:0a:ab:28:3d:99:ca:a3:02:2d:f5:f6:f2:a1: bd:90:0f:cf:f2:72:a2:d7:b2:d9:29:34:c6:56:94:fc:b6:5a: a2:1d:bd:38:25:16:da:85:da:ec:73:23:cb:67:63:27:51:17: 9b:93:16:1b:39:fd:e4:27:b9:6e:88:3c:3c:0f:d3:50:69:85: 9e:28:af:9c:b6:5c:7d:f7:a4:71:3d:fc:03:88:d9:f4:7c:86: ad:b9:f5:a8:e8:60:47:38:67:0a:ac:e7:f0:8e:1a:cb:8a:17: 3d:5d:84:84:61:5e:2b:4b:04:73:ed:05:5b:16:9f:95:28:28: 01:fc:fb:5e:5d:99:3c:37:57:33:95:6c:e4:4d:2f:78:c1:32: 4e:8d:a4:d0:d6:5b:c8:ae:24:74:41:15:2d:45:0e:b2:c9:c3: 0d:4c:b0:d1:03:19:07:6c:f0:e8:fa:0a:4b:e7:50:27:36:55: 51:a4:80:bb:62:96:39:ae:87:f3:4f:05:db:81:a8:7a:62:ee: 6e:47:91:a5:8a:27:8f:a6:57:a4:7a:29:ca:19:61:be:8b:3f: 13:50:43:8d:4d:a8:c1:3d:20:f1:68:58:a1:59:9b:ba:11:9a: 1f:43:c0:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE693FbdTGrP7+1n7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDAzOGY5NmMtMmFiZS00MDI4LWJjYzItOWViNDhhNWQ3YmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU1MWEJc8LGm8NYUY1wf1X0kVhZ1MLUujVrR L3xLmo0zfJA3BFhBYRk1kGEbIQDvSzSzA3kzmuEHn7ArWTOSKdUKafm/hmNkeast DhT67BHbiDU4ohcMdzTmBHx8xxc0lZONnm1/kk0nt3pdgVQpI87+BHgbqj4mEjn+ dttxOLA5kDBLSRo0F+s+JnDE7aoChgYLW0biSK4vwkV8702OK9KItHRNHt3qlW/q bZGKC95VC3J3G4y+RsSD9Op3F4B1B1KpBrQkWkfF4JeEtWcC2p8+mQH8XRcXxgEd WJWteFpwXMO1/b+bk2+UFEHk654DbVAkUFCRzskoC8svzlO0hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN86nOrKpmcx2p3ezz1RgAU6eK4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjIwNDY2MTEtNWM1ZS0z ZDQ3LTk2MGUtZWVhYTEyNjQ0MWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXYDXe6yMcdnXEgZJteuXwHMXAnpVvnCqsoPZnKowIt9fbyob2QD8/y cqLXstkpNMZWlPy2WqIdvTglFtqF2uxzI8tnYydRF5uTFhs5/eQnuW6IPDwP01Bp hZ4or5y2XH33pHE9/AOI2fR8hq259ajoYEc4Zwqs5/COGsuKFz1dhIRhXitLBHPt BVsWn5UoKAH8+15dmTw3VzOVbORNL3jBMk6NpNDWW8iuJHRBFS1FDrLJww1MsNED GQds8Oj6CkvnUCc2VVGkgLtiljmuh/NPBduBqHpi7m5HkaWKJ4+mV6R6KcoZYb6L PxNQQ41NqME9IPFoWKFZm7oRmh9DwME= -----END CERTIFICATE-----Generated at Sat Sep 19 21:55:51 2026 by rpki-client