$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ff58d6d-b275-3a60-b742-01d6a5cae5f1.roa File: 0ff58d6d-b275-3a60-b742-01d6a5cae5f1.roa (raw, json) Hash identifier: oWgZdToXBc8A/tzl6DIIki6dqL7WQu2cSzEH7rsGTF4= Subject key identifier: 68:15:CF:D8:45:46:31:6D:EE:92:37:1A:F5:06:63:00:50:0C:82:90 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F498A9A3E8A89F0A4258B2D80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ff58d6d-b275-3a60-b742-01d6a5cae5f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399646 IP address blocks: 108.165.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:9a:3e:8a:89:f0:a4:25:8b:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fa78578b-b12e-4a46-a7b8-3cb88d2ff2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:73:76:34:f5:cf:6a:35:6d:26:b0:71:f6: 5a:c2:5b:f5:2a:e9:a9:98:26:c2:09:70:bc:cf:e9: 14:e5:b5:01:a9:12:ba:02:19:56:c7:2b:41:8a:4c: 5f:21:e2:fc:3d:34:a4:02:a2:83:4a:82:e9:e5:22: 8f:fb:60:62:3b:7d:de:e6:12:e5:b7:08:66:0f:af: 90:78:d3:54:bd:ad:3c:85:5a:b4:7e:23:2e:89:32: 6a:7b:f4:c4:89:7e:64:f6:6f:7f:70:b6:d9:67:52: 0a:2f:e3:fe:34:ef:31:ce:99:fc:85:fc:63:3e:5e: 80:e2:bc:f1:34:b0:f4:8e:5b:bf:db:e3:20:25:fe: 2e:28:98:63:95:10:87:98:0f:e4:d7:d0:ae:51:22: 51:72:58:47:64:bf:62:ca:7e:0b:b7:de:86:41:11: ea:a0:8f:09:d2:dc:b3:7c:7d:ec:7f:61:11:d7:b6: 93:39:97:9e:d4:b4:c7:76:d5:44:f7:2c:ad:c8:17: 16:5c:2f:ae:42:34:a9:bf:db:f3:e2:28:d1:03:2b: 21:ba:82:e7:e5:bf:1b:d5:7a:93:07:ce:d4:b3:7e: db:c4:42:60:1d:c8:cd:cc:02:05:ed:c8:35:19:8d: f9:13:e7:69:24:d0:d3:4e:c3:4f:83:ea:d0:ae:e8: 75:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:15:CF:D8:45:46:31:6D:EE:92:37:1A:F5:06:63:00:50:0C:82:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ff58d6d-b275-3a60-b742-01d6a5cae5f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5e:c2:de:04:e7:d0:85:41:7b:ad:96:a6:1f:3e:1f:a2:51: 70:b4:d3:53:2e:b9:a4:f7:09:a6:26:25:00:07:a4:b6:96:44: 8b:65:b0:69:a2:b1:5d:37:90:fc:44:e8:fd:e6:21:42:7e:a5: fa:e3:8a:09:a2:2b:18:1c:6d:82:fc:46:4d:c6:1e:de:e5:d7: b2:3a:5b:77:20:5c:d4:7e:c2:34:ba:84:b0:0f:e7:62:6c:5d: 6e:cd:50:ba:1b:24:ce:df:94:3d:56:5c:5c:95:a8:7d:7c:3a: 15:ba:e1:53:07:2c:74:7e:58:aa:d8:4d:e0:cc:99:27:94:b5: fc:8b:2b:64:8c:14:8d:dd:05:6f:9b:f0:20:49:1c:32:50:d6: 9e:77:73:df:41:98:30:43:db:be:ae:8e:9b:d3:49:31:27:71: b8:81:4a:a4:84:ce:bb:63:5f:44:22:d8:c7:3b:a6:70:3a:40: 68:af:f2:08:43:52:57:6a:ac:c3:06:2d:0e:35:59:e5:9c:b3: 09:0e:10:69:52:cb:c3:ea:59:ad:1c:e3:3b:c1:68:b8:b0:f0: 47:8c:1f:98:5e:44:40:d0:1e:e6:40:61:2c:98:ac:45:5f:1f: 27:64:39:cf:9e:71:28:91:d6:95:f9:a5:13:3a:6d:3e:37:d3: 2d:f0:f0:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jipo+ionwpCWLLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmE3ODU3OGItYjEyZS00YTQ2LWE3YjgtM2NiODhkMmZmMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AxzdjT1z2o1bSawcfZawlv1KumpmCbCCXC8 z+kU5bUBqRK6AhlWxytBikxfIeL8PTSkAqKDSoLp5SKP+2BiO33e5hLltwhmD6+Q eNNUva08hVq0fiMuiTJqe/TEiX5k9m9/cLbZZ1IKL+P+NO8xzpn8hfxjPl6A4rzx NLD0jlu/2+MgJf4uKJhjlRCHmA/k19CuUSJRclhHZL9iyn4Lt96GQRHqoI8J0tyz fH3sf2ER17aTOZee1LTHdtVE9yytyBcWXC+uQjSpv9vz4ijRAyshuoLn5b8b1XqT B87Us37bxEJgHcjNzAIF7cg1GY35E+dpJNDTTsNPg+rQruh10QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgVz9hFRjFt7pI3GvUGYwBQDIKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGZmNThkNmQtYjI3NS0z YTYwLWI3NDItMDFkNmE1Y2FlNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANewt4E59CFQXutlqYfPh+iUXC001MuuaT3CaYmJQAHpLaWRItlsGmi sV03kPxE6P3mIUJ+pfrjigmiKxgcbYL8Rk3GHt7l17I6W3cgXNR+wjS6hLAP52Js XW7NULobJM7flD1WXFyVqH18OhW64VMHLHR+WKrYTeDMmSeUtfyLK2SMFI3dBW+b 8CBJHDJQ1p53c99BmDBD276ujpvTSTEncbiBSqSEzrtjX0Qi2Mc7pnA6QGiv8ghD UldqrMMGLQ41WeWcswkOEGlSy8PqWa0c4zvBaLiw8EeMH5heREDQHuZAYSyYrEVf HydkOc+ecSiR1pX5pRM6bT430y3w8BA= -----END CERTIFICATE-----Generated at Sun Oct 4 07:30:58 2026 by rpki-client