$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04f9b8bb-55f7-33b2-8828-ec5766849cc8.roa File: 04f9b8bb-55f7-33b2-8828-ec5766849cc8.roa (raw, json) Hash identifier: bu03wYvvKRddVT9fAUYiAydwWr1ovR2Y7wEiE8sDDcU= Subject key identifier: 4C:B1:8D:84:A0:8E:0E:81:BC:C4:EC:F3:2C:41:D7:6F:28:E9:34:75 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F093CCDCFE6687744DCF0E2E8 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04f9b8bb-55f7-33b2-8828-ec5766849cc8.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 203090 IP address blocks: 108.165.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:cd:cf:e6:68:77:44:dc:f0:e2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=fc62a364-d1ee-4bfb-8484-5c9c43a77a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:61:47:b3:2b:20:b7:0f:e1:fa:cc:b0:7e: 69:c4:ce:dc:f8:00:f6:2f:9e:c6:24:d0:c1:e3:98: 95:ad:36:17:76:2b:cb:5f:2c:f7:4f:80:33:4d:54: d7:d1:ab:01:5f:b7:eb:15:9f:68:3d:83:f4:5c:af: 4b:55:d6:52:52:a3:52:12:11:be:63:ef:df:01:c1: 04:eb:20:af:2b:4c:99:5c:a9:e2:47:1c:12:82:f9: 94:27:d3:66:bd:dc:8c:3b:40:06:91:a8:f2:a4:0b: ae:69:16:29:f1:4a:6f:8f:8b:01:56:cd:e1:49:7c: 0b:9a:27:5b:9a:65:c2:18:af:ab:2f:aa:a0:9d:09: 3f:f8:1d:8a:41:1f:76:63:37:03:79:68:99:df:1d: 31:af:80:cd:f6:4d:8b:87:c3:09:f5:6e:d1:e5:5d: 8f:95:e9:e7:9f:e1:f6:b6:44:76:2e:c0:c9:e7:24: ff:90:ac:51:76:03:a3:2f:3e:ad:6c:7b:12:22:3b: 8e:b1:2b:c5:ba:98:8f:69:b2:df:83:87:fd:cf:56: 93:af:cd:c9:bf:5f:1f:39:91:69:d4:d3:a2:70:58: 2d:26:ba:8e:84:bf:36:c5:d1:a0:f2:8e:5d:89:af: 31:c5:ac:b2:80:9f:a5:08:f2:1f:cf:d3:77:cf:d3: 95:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B1:8D:84:A0:8E:0E:81:BC:C4:EC:F3:2C:41:D7:6F:28:E9:34:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04f9b8bb-55f7-33b2-8828-ec5766849cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:4a:08:fd:a8:af:f1:69:ef:a2:78:18:fd:72:ab:7b:d6:fb: d4:60:ad:b1:08:79:0a:c7:27:5d:9c:64:c5:72:18:dc:b7:68: 94:d8:1b:5f:68:93:9f:af:d2:9d:0d:ee:7d:d1:fa:40:f6:e0: 93:14:1a:26:2f:84:23:66:7e:10:0f:48:6a:95:8e:46:0d:8a: 12:40:12:f7:00:f6:e0:0f:3b:0d:32:63:b5:e2:d7:b2:84:af: ca:64:e8:09:fd:e6:5e:62:db:1d:c4:cb:72:d5:ee:b0:f3:fb: 7d:bf:f7:d8:f8:41:64:1c:7a:fc:12:86:2b:52:42:bc:9b:c2: 07:86:e8:2f:8c:51:4a:8b:65:16:d2:a9:98:a3:94:eb:3a:25: 1d:b8:97:e1:20:29:86:ff:9d:63:94:45:32:a0:64:68:5c:ea: 69:e0:37:f3:ca:47:07:74:92:2f:9f:80:46:47:b5:e9:ee:e6: 52:31:f9:82:c6:b5:7b:65:b6:b3:c1:5e:5c:58:da:ba:2c:a0: 24:3f:30:7c:da:af:51:f5:47:59:8b:69:72:cd:41:39:56:17: a4:9d:58:de:b2:27:23:a5:26:3e:3b:bb:35:43:98:3b:13:ac: 40:5e:71:8f:cd:66:bf:a0:05:eb:19:7d:6a:cf:b4:6b:1c:06: 71:b3:94:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPM3P5mh3RNzw4ugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZmM2MmEzNjQtZDFlZS00YmZiLTg0ODQtNWM5YzQzYTc3YTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5RhR7MrILcP4frMsH5pxM7c+AD2L57GJNDB 45iVrTYXdivLXyz3T4AzTVTX0asBX7frFZ9oPYP0XK9LVdZSUqNSEhG+Y+/fAcEE 6yCvK0yZXKniRxwSgvmUJ9NmvdyMO0AGkajypAuuaRYp8Upvj4sBVs3hSXwLmidb mmXCGK+rL6qgnQk/+B2KQR92YzcDeWiZ3x0xr4DN9k2Lh8MJ9W7R5V2Plennn+H2 tkR2LsDJ5yT/kKxRdgOjLz6tbHsSIjuOsSvFupiPabLfg4f9z1aTr83Jv18fOZFp 1NOicFgtJrqOhL82xdGg8o5dia8xxayygJ+lCPIfz9N3z9OVlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyxjYSgjg6BvMTs8yxB128o6TR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDRmOWI4YmItNTVmNy0z M2IyLTg4MjgtZWM1NzY2ODQ5Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpKCP2or/Fp76J4GP1yq3vW+9RgrbEIeQrHJ12cZMVyGNy3aJTYG19o k5+v0p0N7n3R+kD24JMUGiYvhCNmfhAPSGqVjkYNihJAEvcA9uAPOw0yY7Xi17KE r8pk6An95l5i2x3Ey3LV7rDz+32/99j4QWQcevwShitSQrybwgeG6C+MUUqLZRbS qZijlOs6JR24l+EgKYb/nWOURTKgZGhc6mngN/PKRwd0ki+fgEZHtenu5lIx+YLG tXtltrPBXlxY2rosoCQ/MHzar1H1R1mLaXLNQTlWF6SdWN6yJyOlJj47uzVDmDsT rEBecY/NZr+gBesZfWrPtGscBnGzlFk= -----END CERTIFICATE-----Generated at Mon Sep 21 18:36:21 2026 by rpki-client