$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476bd808-22ee-3fb9-a672-04b849f47ec4.roa File: 476bd808-22ee-3fb9-a672-04b849f47ec4.roa (raw, json) Hash identifier: m9+XMs5Qqt0BLPYW1mLzVDNjHLbHxGyjUI7mYLQ23Cg= Subject key identifier: 1F:0E:56:FC:DE:97:4F:13:23:3F:C9:F7:DA:2D:0C:D3:EF:51:87:9D Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F4F08242F389CA8E75011D200 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476bd808-22ee-3fb9-a672-04b849f47ec4.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 20068 IP address blocks: 108.165.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:24:2f:38:9c:a8:e7:50:11:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=28d098f1-6548-4790-8f3a-0b63eee444a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2f:6c:12:1b:0a:23:06:b3:0b:58:62:9d:d4: d1:e8:ee:27:ea:f4:ce:b3:a9:3b:01:1d:e8:28:91: 6b:d6:fe:40:07:3b:8b:9a:53:99:9c:08:84:81:45: 22:15:56:54:4f:62:68:6c:a5:e8:8f:65:bd:37:e7: c4:b9:7f:a7:bf:4d:35:5b:e9:93:36:a9:4d:3b:9e: a1:c6:41:6a:66:fc:e0:a2:50:f7:af:80:b1:be:7b: 4e:df:72:6d:f5:a0:4c:74:6c:22:1d:14:c5:49:3a: 96:84:bf:97:6d:dd:dd:c6:4c:d2:01:7d:4a:b4:4c: 71:48:28:28:c6:2d:95:83:ef:0f:da:78:84:a8:19: 4f:17:f5:d6:c6:69:54:1e:56:ab:72:25:6f:9a:6a: 25:83:b7:ee:3e:71:e4:0c:6d:23:3b:ac:e2:bd:ea: ac:54:12:cb:39:da:ea:4f:c5:e8:31:d5:d4:86:77: 1f:66:7e:8e:18:2f:6d:d9:be:d3:35:18:d4:c1:82: b0:26:f6:69:bb:ef:77:c1:5b:1c:9c:f5:40:b9:44: 5d:04:17:fc:f9:03:44:20:63:f9:6f:a4:b1:8e:71: 3a:47:fe:2e:72:d1:e0:af:7a:37:08:89:e1:79:85: d1:77:5b:27:1d:6e:e1:ba:95:07:ad:4a:6d:82:2f: 24:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0E:56:FC:DE:97:4F:13:23:3F:C9:F7:DA:2D:0C:D3:EF:51:87:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476bd808-22ee-3fb9-a672-04b849f47ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1b:e1:a1:6d:49:04:be:2d:9b:fb:cc:bc:69:90:6c:67:fc: 3c:9f:9c:5e:38:c0:e2:16:e1:f1:95:bc:af:2e:88:85:fb:5e: 52:b0:43:b1:73:cb:9b:3f:08:1a:fc:03:40:d1:7a:b5:b7:98: b9:5e:c1:76:db:28:0d:c9:3d:47:9a:4b:46:55:a2:d8:01:e2: 83:07:bd:6d:c8:c2:ce:8d:b6:6a:36:73:73:4d:03:3d:b7:4e: a4:f2:24:3e:57:15:f2:77:3e:f3:33:00:51:4d:48:44:e1:71: fd:84:9c:80:6d:17:aa:b3:a9:b2:1d:e6:e6:f2:ef:07:3b:21: 97:ba:80:22:94:97:80:e8:77:2d:35:a9:d9:dc:14:00:fb:b6: dd:e7:01:2b:e7:46:20:25:2f:70:67:e6:7a:56:f0:38:c1:0a: 21:bd:89:25:de:00:80:cf:79:c0:ca:20:26:82:98:f1:07:5a: cd:2a:e4:0b:57:9b:13:99:59:73:c0:0d:f3:eb:f6:15:3b:91: 9b:b2:a6:06:d2:e7:20:9c:d8:de:c2:14:64:02:51:bc:44:be: a7:c3:4e:cb:bc:15:45:b1:93:29:7f:fe:93:54:5c:17:07:3b: e6:31:41:9f:f5:b4:11:d3:65:72:56:dc:0a:c9:5b:67:d6:29: c3:24:5e:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCQvOJyo51AR0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MjhkMDk4ZjEtNjU0OC00NzkwLThmM2EtMGI2M2VlZTQ0NGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji9sEhsKIwazC1hindTR6O4n6vTOs6k7AR3o KJFr1v5ABzuLmlOZnAiEgUUiFVZUT2JobKXoj2W9N+fEuX+nv001W+mTNqlNO56h xkFqZvzgolD3r4CxvntO33Jt9aBMdGwiHRTFSTqWhL+Xbd3dxkzSAX1KtExxSCgo xi2Vg+8P2niEqBlPF/XWxmlUHlarciVvmmolg7fuPnHkDG0jO6ziveqsVBLLOdrq T8XoMdXUhncfZn6OGC9t2b7TNRjUwYKwJvZpu+93wVscnPVAuURdBBf8+QNEIGP5 b6SxjnE6R/4uctHgr3o3CInheYXRd1snHW7hupUHrUptgi8kqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8OVvzel08TIz/J99otDNPvUYedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDc2YmQ4MDgtMjJlZS0z ZmI5LWE2NzItMDRiODQ5ZjQ3ZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYb4aFtSQS+LZv7zLxpkGxn/DyfnF44wOIW4fGVvK8uiIX7XlKwQ7Fz y5s/CBr8A0DRerW3mLlewXbbKA3JPUeaS0ZVotgB4oMHvW3Iws6Ntmo2c3NNAz23 TqTyJD5XFfJ3PvMzAFFNSEThcf2EnIBtF6qzqbId5uby7wc7IZe6gCKUl4Dody01 qdncFAD7tt3nASvnRiAlL3Bn5npW8DjBCiG9iSXeAIDPecDKICaCmPEHWs0q5AtX mxOZWXPADfPr9hU7kZuypgbS5yCc2N7CFGQCUbxEvqfDTsu8FUWxkyl//pNUXBcH O+YxQZ/1tBHTZXJW3ArJW2fWKcMkXs0= -----END CERTIFICATE-----Generated at Mon Sep 28 14:57:42 2026 by rpki-client