$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bf2297a-6cc7-3d4a-8347-3601dc875827.roa File: 4bf2297a-6cc7-3d4a-8347-3601dc875827.roa (raw, json) Hash identifier: IWz6wk5B0mrz1ha2ulLfiPa9lcbp+/77MaS1FgVYYoI= Subject key identifier: 66:B1:7B:C6:AE:4E:D9:13:B2:87:B5:2C:AC:BA:36:0E:57:F6:96:90 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D5024F8D9A609D367C063F500 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bf2297a-6cc7-3d4a-8347-3601dc875827.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 62240 IP address blocks: 166.1.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:f8:d9:a6:09:d3:67:c0:63:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=b12cce95-add5-4de7-bd5f-195b3fa0075d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:57:c0:38:2d:23:02:8f:1e:67:72:f4:73:5a: 21:b2:8b:17:b7:c2:e5:7f:d0:7d:ac:da:fe:2e:4c: 07:4b:81:25:e4:cb:33:07:46:64:8f:9c:3c:1b:9b: 94:3d:f6:f8:5d:f2:ce:c9:b3:42:b3:6f:0b:a6:2a: b9:dc:0e:93:4c:e6:92:f0:16:52:60:ab:06:d6:5e: 15:8c:8c:ed:03:16:8b:51:a3:aa:bc:e4:6e:f7:fb: bf:77:e9:de:90:12:89:e0:a5:88:e6:5a:40:cb:dc: 7b:b8:63:3e:bf:9f:09:c8:8c:16:a0:93:10:8f:12: b3:9a:2c:e8:3b:06:70:3f:2f:78:a7:a5:ba:c4:76: ef:48:12:9c:d6:df:0a:e7:b9:68:21:ca:9e:c9:2e: 00:29:4b:c5:b7:85:7d:4f:44:66:82:1f:4e:a8:46: ac:fe:d4:52:99:1a:13:22:8b:63:07:b8:cd:53:84: 56:58:ac:ce:a6:5c:e7:49:1d:79:b8:60:b3:0a:db: b6:5d:7d:c1:61:f0:98:e1:06:e4:2b:bd:32:89:5f: af:2a:40:81:7e:de:bb:90:2b:d9:8e:62:2e:92:9a: b1:c5:7d:f8:33:f4:ad:78:68:42:07:bf:1c:6e:31: c1:ae:a3:f1:5d:98:61:c3:1e:11:8d:ea:c2:30:2d: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B1:7B:C6:AE:4E:D9:13:B2:87:B5:2C:AC:BA:36:0E:57:F6:96:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bf2297a-6cc7-3d4a-8347-3601dc875827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:1b:a2:aa:cd:6a:22:64:7a:9a:e1:24:f5:36:7d:40:70:cd: 9f:1e:c2:23:c8:cc:09:39:a8:fd:70:54:a9:1e:29:3c:3a:82: 45:b3:5c:ec:09:4c:ee:c5:71:a1:31:1b:5b:ab:4c:a7:d6:2d: 46:42:f5:31:af:e9:8a:db:0b:a5:1e:c4:de:01:ce:fd:31:e2: 37:40:0b:84:f5:0c:fb:58:4c:6e:84:f2:28:1e:cf:30:04:bf: 20:f1:2b:bb:46:c4:10:41:aa:40:34:59:08:66:0a:42:a3:00: 78:59:03:76:83:ed:1d:58:13:29:d4:23:07:9a:47:c4:31:93: a1:1b:8a:3f:f5:f1:a9:e5:be:b4:59:4f:5f:6a:89:65:82:fe: 46:ea:f7:8f:42:cf:2b:40:52:f0:39:ba:21:56:04:5b:28:c7: 15:31:fa:59:f4:1a:74:e4:d2:ae:bd:b4:be:e7:cd:39:7e:6c: 67:56:0f:32:c7:59:84:b1:ab:a2:ec:ee:78:19:2b:7c:01:6c: 95:bc:cd:e6:09:00:f1:8e:c5:a1:b7:cb:d9:92:d4:bb:96:1d: eb:70:a0:cc:57:a5:9b:bf:e8:ce:00:d4:5f:90:b2:5d:99:0c: 61:fb:d1:a4:48:ff:0b:42:0e:c1:c5:fa:9e:5c:2d:7b:77:a4: e3:d2:14:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJPjZpgnTZ8Bj9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk YjEyY2NlOTUtYWRkNS00ZGU3LWJkNWYtMTk1YjNmYTAwNzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFfAOC0jAo8eZ3L0c1ohsosXt8Llf9B9rNr+ LkwHS4El5MszB0Zkj5w8G5uUPfb4XfLOybNCs28Lpiq53A6TTOaS8BZSYKsG1l4V jIztAxaLUaOqvORu9/u/d+nekBKJ4KWI5lpAy9x7uGM+v58JyIwWoJMQjxKzmizo OwZwPy94p6W6xHbvSBKc1t8K57loIcqeyS4AKUvFt4V9T0Rmgh9OqEas/tRSmRoT IotjB7jNU4RWWKzOplznSR15uGCzCtu2XX3BYfCY4QbkK70yiV+vKkCBft67kCvZ jmIukpqxxX34M/SteGhCB78cbjHBrqPxXZhhwx4RjerCMC0KSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaxe8auTtkTsoe1LKy6Ng5X9paQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGJmMjI5N2EtNmNjNy0z ZDRhLTgzNDctMzYwMWRjODc1ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMboqrNaiJkeprhJPU2fUBwzZ8ewiPIzAk5qP1wVKkeKTw6gkWzXOwJ TO7FcaExG1urTKfWLUZC9TGv6YrbC6UexN4Bzv0x4jdAC4T1DPtYTG6E8igezzAE vyDxK7tGxBBBqkA0WQhmCkKjAHhZA3aD7R1YEynUIweaR8Qxk6Ebij/18anlvrRZ T19qiWWC/kbq949CzytAUvA5uiFWBFsoxxUx+ln0GnTk0q69tL7nzTl+bGdWDzLH WYSxq6Ls7ngZK3wBbJW8zeYJAPGOxaG3y9mS1LuWHetwoMxXpZu/6M4A1F+Qsl2Z DGH70aRI/wtCDsHF+p5cLXt3pOPSFME= -----END CERTIFICATE-----Generated at Fri Apr 17 14:34:14 2026 by rpki-client