$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa File: a8f35c59-b971-3d84-a662-b03a19638ac2.roa (raw, json) Hash identifier: FbA271DM/eXM/tSVTfKXe6kGFuJzKxU6nkXvCrhxsIQ= Subject key identifier: 8F:30:88:E9:15:FE:85:9F:D9:53:8A:07:0E:E4:72:90:B5:69:49:1A Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584EAFE6F2E2B92FB1B0769C3960 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 14877 IP address blocks: 166.66.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f2:e2:b9:2f:b1:b0:76:9c:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=365c7bc3-3cf3-4caa-bbac-98a0eeda35e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:b4:78:ec:cb:c2:cf:e4:56:bb:b9:7f:90: 15:e9:0e:34:7d:dd:04:9f:3c:24:f3:d1:0b:4b:52: bf:cd:40:79:31:5d:b1:6f:be:da:2f:43:30:72:48: 42:e4:93:98:ea:af:50:bf:af:eb:36:13:ea:ba:51: 9f:38:7a:4c:66:4b:da:10:9d:1a:e5:e0:e7:be:93: 90:c1:b4:6e:48:c2:b5:fe:40:76:f6:f6:4b:df:25: 2b:93:ef:b4:ae:8b:a7:8d:0d:d2:c4:a1:92:55:d0: e4:38:49:65:26:8f:6f:f7:42:fe:45:d6:5e:d7:a5: 0d:37:7b:4e:35:34:c6:ac:a3:6f:26:58:06:13:33: 1d:04:36:eb:25:c6:f8:69:b2:cd:cb:8b:e7:49:22: a7:d4:e0:73:e1:13:94:ec:18:85:30:ee:73:1f:32: 24:19:ff:51:b9:e2:3a:eb:be:7c:76:1e:c6:4f:50: 09:0e:7a:1c:54:a9:14:2e:93:f7:fe:21:8f:49:ea: d7:d4:05:4c:f1:24:ad:56:26:f5:61:3a:b6:03:04: 5f:ea:a0:d0:da:5c:39:c4:b5:f2:93:ba:5f:c8:4a: f1:d8:28:aa:84:1d:df:16:6a:38:32:93:c0:d2:5d: d2:57:1c:cc:2c:20:49:ed:e8:32:69:f3:54:19:55: 35:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:30:88:E9:15:FE:85:9F:D9:53:8A:07:0E:E4:72:90:B5:69:49:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: 166.66.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:91:f8:42:e6:57:80:78:d3:99:f2:e9:b2:e3:9f:93:5c:32: dd:84:34:78:1f:46:3e:2f:25:1e:66:4f:44:dd:69:9d:85:df: 34:c1:c6:2b:3b:a7:f6:74:3c:6e:3f:b5:34:dd:c2:60:5a:a8: 39:25:a6:51:25:72:1a:b5:25:73:d0:cc:00:d6:16:c9:19:cd: c8:cc:d3:d0:a0:41:b8:35:4c:e7:e3:80:95:82:ed:05:a0:23: e1:a2:65:c5:c4:a8:dc:3e:67:9b:02:7a:a0:44:72:08:ac:10: 41:32:d2:93:3d:bc:a1:2d:e5:6f:11:df:69:75:ac:1f:dc:c7: a4:1d:89:4e:24:3d:e9:2c:60:2c:6a:9c:85:99:45:87:3e:4e: 95:5e:58:27:13:22:51:c5:7e:68:26:09:fb:f3:dd:87:27:f6: 7b:06:10:10:d7:77:a6:38:98:ea:0a:09:2e:48:05:8c:bd:dd: d0:71:cf:30:1f:5c:9c:6b:20:c7:54:0d:f7:47:8f:d4:01:69: 3c:82:b3:57:5e:1b:9b:4b:e0:39:b7:75:18:6b:f6:92:aa:d8: 06:66:5f:2b:0a:61:09:2f:cd:8d:bf:98:44:1b:aa:f4:2e:bd: eb:05:d7:8a:1a:71:2a:3b:bd:82:06:57:7b:42:6a:9e:b3:88: 33:19:10:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vLiuS+xsHacOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MzY1YzdiYzMtM2NmMy00Y2FhLWJiYWMtOThhMGVlZGEzNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHK0eOzLws/kVru5f5AV6Q40fd0Enzwk89EL S1K/zUB5MV2xb77aL0MwckhC5JOY6q9Qv6/rNhPqulGfOHpMZkvaEJ0a5eDnvpOQ wbRuSMK1/kB29vZL3yUrk++0rounjQ3SxKGSVdDkOEllJo9v90L+RdZe16UNN3tO NTTGrKNvJlgGEzMdBDbrJcb4abLNy4vnSSKn1OBz4ROU7BiFMO5zHzIkGf9RueI6 6758dh7GT1AJDnocVKkULpP3/iGPSerX1AVM8SStVib1YTq2AwRf6qDQ2lw5xLXy k7pfyErx2CiqhB3fFmo4MpPA0l3SVxzMLCBJ7egyafNUGVU1xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8wiOkV/oWf2VOKBw7kcpC1aUkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvYThmMzVjNTktYjk3MS0z ZDg0LWE2NjItYjAzYTE5NjM4YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApkLKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeR+ELmV4B405ny6bLjn5NcMt2ENHgfRj4vJR5mT0TdaZ2F3zTBxis7 p/Z0PG4/tTTdwmBaqDklplElchq1JXPQzADWFskZzcjM09CgQbg1TOfjgJWC7QWg I+GiZcXEqNw+Z5sCeqBEcgisEEEy0pM9vKEt5W8R32l1rB/cx6QdiU4kPeksYCxq nIWZRYc+TpVeWCcTIlHFfmgmCfvz3Ycn9nsGEBDXd6Y4mOoKCS5IBYy93dBxzzAf XJxrIMdUDfdHj9QBaTyCs1deG5tL4Dm3dRhr9pKq2AZmXysKYQkvzY2/mEQbqvQu vesF14oacSo7vYIGV3tCap6ziDMZEGo= -----END CERTIFICATE-----Generated at Thu Aug 20 06:35:32 2026 by rpki-client