$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f52a9bdd-61e4-3ade-ac8a-554e021867c0.roa File: f52a9bdd-61e4-3ade-ac8a-554e021867c0.roa (raw, json) Hash identifier: 9xOr4+t7H69KY7aQZCoKOJdiH7LdTmXGOcTbcOJC8oM= Subject key identifier: 97:7C:C7:FD:AF:C6:D4:54:60:47:9F:99:8B:E8:25:2C:A1:BD:AD:76 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584CED9D380B3D9F010B3FB0DD80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f52a9bdd-61e4-3ade-ac8a-554e021867c0.roa Signing time: Fri 20 Feb 2026 17:58:00 +0000 ROA not before: Fri 20 Feb 2026 17:58:00 +0000 ROA not after: Thu 21 May 2026 16:58:00 +0000 asID: 212238 IP address blocks: 166.0.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:9d:38:0b:3d:9f:01:0b:3f:b0:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 20 17:58:00 2026 GMT Not After : May 21 16:58:00 2026 GMT Subject: CN=3e255440-dc6b-48ba-9ab9-be7a18c5e192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:31:18:c7:dc:96:5a:18:93:e1:ec:d2:ea: bd:78:aa:55:93:9e:2e:3c:95:58:c9:eb:62:3d:7a: b7:7c:d0:b1:37:d7:4b:c1:c5:80:08:7b:8b:74:88: ee:5a:62:e0:62:4a:3d:42:0b:b6:71:3f:04:22:62: 07:0e:6f:3e:78:af:be:e0:ce:3e:25:a6:3e:ef:70: 68:cf:73:23:ac:f4:df:a2:f8:b7:32:ec:b9:df:aa: 64:ef:55:e5:56:03:c2:0b:09:f6:52:ae:60:d3:14: 3c:1a:62:09:7f:99:ca:a3:8e:62:da:90:70:5f:4f: 51:19:67:41:e1:2a:6f:ff:fc:fa:ea:ab:60:78:f2: eb:40:e3:df:cc:6a:25:cf:ca:05:50:f6:eb:ec:15: 55:4a:7d:e5:10:58:b1:08:43:1a:b4:29:7d:fa:44: 4e:12:3d:13:93:41:01:04:1e:71:08:37:df:d9:32: 78:ff:91:08:9d:f6:1b:63:8f:1d:11:d5:ea:8f:a7: e8:8b:08:cf:9a:43:a5:33:a0:23:7c:da:03:e1:56: 9c:35:c4:b6:44:7e:d5:54:3a:b8:cb:05:91:71:b7: 21:6f:9d:d7:a6:e3:0d:d6:32:93:dc:71:ae:ff:f9: d8:df:b8:37:74:03:31:64:53:91:7a:5e:2f:03:71: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7C:C7:FD:AF:C6:D4:54:60:47:9F:99:8B:E8:25:2C:A1:BD:AD:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f52a9bdd-61e4-3ade-ac8a-554e021867c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:86:86:df:bf:e2:98:36:7f:11:23:8c:4c:de:3a:29:2e:57: c1:40:5b:ee:59:39:8c:dc:ce:aa:98:4f:e5:48:70:a3:e6:a2: 88:eb:8a:bf:f0:b5:3d:be:01:77:56:c5:0e:4b:d5:95:d0:01: 22:57:43:30:fe:a3:8e:0f:24:46:9b:cb:82:61:6c:24:9b:86: 2c:da:fa:e7:5d:a9:07:22:ea:45:25:44:fb:4c:42:e7:ec:3a: b2:1f:48:cd:1d:1a:ee:00:e6:4d:a6:8f:ff:b7:17:14:4b:aa: c6:1c:66:29:87:06:be:d9:e3:58:d7:7e:15:18:00:fe:d9:95: ee:2a:e1:df:d9:fd:e3:14:46:ea:13:57:3f:05:07:04:2e:cf: 77:05:40:53:69:89:2c:62:94:ba:cd:52:fa:5e:d4:fa:8e:31: 44:cd:32:b1:70:dc:50:4c:9f:a9:be:be:cc:70:be:17:45:9e: 54:ee:ae:f9:78:40:02:df:77:21:ae:0c:95:8f:20:ef:ef:41: 11:11:94:79:04:cb:0d:78:57:55:55:22:38:ae:f1:c9:8b:a7: c1:67:97:34:2d:b3:e9:f1:7f:f3:c9:60:ce:bf:25:c0:57:a5: 02:cd:63:22:92:da:c8:e8:7a:b2:99:3d:3e:3f:8e:99:26:c9: 73:df:2f:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztnTgLPZ8BCz+w3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDIyMDE3NTgwMFoXDTI2MDUyMTE2NTgwMFowLzEtMCsGA1UEAxMk M2UyNTU0NDAtZGM2Yi00OGJhLTlhYjktYmU3YTE4YzVlMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNgxGMfclloYk+Hs0uq9eKpVk54uPJVYyeti PXq3fNCxN9dLwcWACHuLdIjuWmLgYko9Qgu2cT8EImIHDm8+eK++4M4+JaY+73Bo z3MjrPTfovi3Muy536pk71XlVgPCCwn2Uq5g0xQ8GmIJf5nKo45i2pBwX09RGWdB 4Spv//z66qtgePLrQOPfzGolz8oFUPbr7BVVSn3lEFixCEMatCl9+kROEj0Tk0EB BB5xCDff2TJ4/5EInfYbY48dEdXqj6foiwjPmkOlM6AjfNoD4VacNcS2RH7VVDq4 ywWRcbchb53XpuMN1jKT3HGu//nY37g3dAMxZFORel4vA3F/1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd8x/2vxtRUYEefmYvoJSyhva12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjUyYTliZGQtNjFlNC0z YWRlLWFjOGEtNTU0ZTAyMTg2N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6Ght+/4pg2fxEjjEzeOikuV8FAW+5ZOYzczqqYT+VIcKPmoojrir/w tT2+AXdWxQ5L1ZXQASJXQzD+o44PJEaby4JhbCSbhiza+uddqQci6kUlRPtMQufs OrIfSM0dGu4A5k2mj/+3FxRLqsYcZimHBr7Z41jXfhUYAP7Zle4q4d/Z/eMURuoT Vz8FBwQuz3cFQFNpiSxilLrNUvpe1PqOMUTNMrFw3FBMn6m+vsxwvhdFnlTurvl4 QALfdyGuDJWPIO/vQRERlHkEyw14V1VVIjiu8cmLp8FnlzQts+nxf/PJYM6/JcBX pQLNYyKS2sjoerKZPT4/jpkmyXPfLxo= -----END CERTIFICATE-----Generated at Tue Feb 24 07:42:09 2026 by rpki-client