$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa File: 42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa (raw, json) Hash identifier: pRcuHhrFKZZKhCnpBXX3jIEzy55LsK0itEoFTtm3BGQ= Subject key identifier: C7:3D:05:68:1F:BD:32:86:33:05:CA:0C:2E:81:13:70:C0:96:4E:E6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EEA8757E8B59C6FDB9329BD40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 212335 IP address blocks: 108.165.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:57:e8:b5:9c:6f:db:93:29:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=3a462905-0429-44e9-afd6-f45eb43de98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:c1:a1:b6:44:7a:aa:0a:14:03:03:10:9d: 48:ad:1b:c4:fd:7d:11:64:d6:c3:39:e0:a2:44:c8: 1a:81:0d:84:f3:dd:0b:73:a8:a2:75:f6:61:5d:f3: e2:26:ae:b5:ba:f6:98:ea:b4:25:4d:36:f7:c8:aa: 90:51:12:15:f9:c2:cc:58:1c:55:a6:36:4d:3a:80: 76:45:ad:bf:9b:55:b4:ad:04:f8:3c:ec:4d:78:c8: ed:77:c8:04:78:dc:97:38:48:d8:11:22:51:35:39: 31:5f:ec:1e:e3:bd:c2:0b:e1:19:7f:0a:47:85:b5: d9:ed:52:01:09:38:f3:8d:e1:ff:02:d1:1c:bc:c7: 83:64:f3:3b:f1:52:de:ce:b3:74:cd:0c:25:57:c2: 63:a0:93:e7:54:db:26:a6:7e:5a:98:5d:21:08:82: 7a:b4:d1:a4:d2:4a:2c:70:d4:f7:46:91:32:03:25: 42:df:18:4e:53:96:8b:88:da:65:f7:4c:89:6d:87: 50:84:c2:fd:4e:f3:d9:df:33:b1:92:fa:47:e1:f4: 4c:8e:ad:1c:6a:4b:9f:fc:cc:1d:91:3a:98:1d:f5: 41:5a:80:37:52:41:0a:af:c9:ae:a1:0a:59:ee:6c: 79:2a:96:e3:80:5b:50:24:35:98:4e:df:24:83:2f: 5a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3D:05:68:1F:BD:32:86:33:05:CA:0C:2E:81:13:70:C0:96:4E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:6c:28:8d:0f:98:f3:e0:f5:9a:03:23:a2:2e:82:74:62:50: 67:cb:04:14:38:28:13:e1:87:dd:b2:00:56:44:68:06:d6:df: 56:91:de:21:54:fe:e3:e7:ae:ac:5b:57:8a:4d:63:66:10:f7: 06:2a:65:e8:63:75:35:92:67:30:c9:55:da:17:c1:7d:ee:25: f8:f3:4e:71:04:5e:fa:e0:a1:c8:f8:c0:3c:79:2f:ce:58:31: 80:2d:d0:9b:0c:d1:9a:05:40:a6:ea:94:1b:11:00:05:a3:02: 61:1a:e4:70:4b:7d:91:69:db:6e:7d:f9:9a:37:ae:af:52:e8: 2f:e8:03:47:21:de:e6:cd:f9:23:8b:99:d3:f0:0d:ff:3f:e7: 01:48:82:28:49:d6:47:d3:19:93:3a:03:c4:8a:fc:09:b7:1e: 8b:5f:d8:6c:3a:ab:1b:66:cd:e8:6f:f4:f5:49:13:bb:18:c4: 5d:ab:5c:1b:36:e3:56:7c:b5:f1:9c:a8:0b:c7:f2:b1:f5:4b: 9e:a7:44:dd:ec:a1:25:c9:15:a6:26:49:2b:74:e4:d3:af:1c: 28:1d:b0:17:c8:84:99:80:fa:24:bb:af:bd:3f:a6:a3:2c:63: 73:c2:9b:e2:2f:14:f1:17:68:f4:12:1b:e8:a2:92:1a:67:e4: 3a:58:3b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1fotZxv25MpvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk M2E0NjI5MDUtMDQyOS00NGU5LWFmZDYtZjQ1ZWI0M2RlOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK7BobZEeqoKFAMDEJ1IrRvE/X0RZNbDOeCi RMgagQ2E890Lc6iidfZhXfPiJq61uvaY6rQlTTb3yKqQURIV+cLMWBxVpjZNOoB2 Ra2/m1W0rQT4POxNeMjtd8gEeNyXOEjYESJRNTkxX+we473CC+EZfwpHhbXZ7VIB CTjzjeH/AtEcvMeDZPM78VLezrN0zQwlV8JjoJPnVNsmpn5amF0hCIJ6tNGk0kos cNT3RpEyAyVC3xhOU5aLiNpl90yJbYdQhML9TvPZ3zOxkvpH4fRMjq0cakuf/Mwd kTqYHfVBWoA3UkEKr8muoQpZ7mx5KpbjgFtQJDWYTt8kgy9aMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc9BWgfvTKGMwXKDC6BE3DAlk7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDJlNWFmMGItZDc3ZS0z MDBkLThmMjgtN2VlYjg0YmUwOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJsKI0PmPPg9ZoDI6IugnRiUGfLBBQ4KBPhh92yAFZEaAbW31aR3iFU /uPnrqxbV4pNY2YQ9wYqZehjdTWSZzDJVdoXwX3uJfjzTnEEXvrgocj4wDx5L85Y MYAt0JsM0ZoFQKbqlBsRAAWjAmEa5HBLfZFp2259+Zo3rq9S6C/oA0ch3ubN+SOL mdPwDf8/5wFIgihJ1kfTGZM6A8SK/Am3Hotf2Gw6qxtmzehv9PVJE7sYxF2rXBs2 41Z8tfGcqAvH8rH1S56nRN3soSXJFaYmSSt05NOvHCgdsBfIhJmA+iS7r70/pqMs Y3PCm+IvFPEXaPQSG+iikhpn5DpYO3M= -----END CERTIFICATE-----Generated at Mon Sep 21 19:53:27 2026 by rpki-client