$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/649cf080-fdb1-317b-9379-24fcb092bbc1.roa File: 649cf080-fdb1-317b-9379-24fcb092bbc1.roa (raw, json) Hash identifier: tK4KrOWHvwyocP4VJ2JIYKvQXJXEcOxjA0U7bd3fyRM= Subject key identifier: 85:AC:9A:C2:D8:CF:33:6C:04:10:A5:72:67:CC:B4:8A:22:A5:BD:80 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D4D5A931371D36DC073C47EC0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/649cf080-fdb1-317b-9379-24fcb092bbc1.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 5065 IP address blocks: 108.165.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:93:13:71:d3:6d:c0:73:c4:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=1a76d370-b15b-4fb8-a8a5-903fb52fef28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:15:ba:6e:1a:d1:31:da:f4:29:78:ed:a8: bd:1b:bf:6d:4b:ee:58:21:f3:59:3e:61:14:9b:49: 3e:ad:2f:99:6f:3c:4a:20:0f:7c:79:b3:6b:30:ce: c7:11:66:8e:dd:aa:74:d4:1e:ea:86:2b:33:14:ef: f5:b5:08:7a:53:6e:a6:29:e1:3b:76:12:38:24:41: b9:0e:43:a7:a0:78:e9:ad:84:1a:80:7d:2d:17:69: a4:b8:a3:41:d7:62:3e:f3:84:d4:61:b3:d4:6f:7c: aa:d7:a0:36:6a:1d:19:42:9a:4d:fc:9e:ed:53:b9: bb:62:c6:48:7e:5f:9b:3f:f7:da:1d:8d:62:1f:aa: 97:5b:61:c6:bc:07:f0:ce:a7:de:99:23:30:96:89: 17:cf:cc:54:4b:fb:1d:c9:9b:22:3f:cb:56:9e:77: 6e:d2:88:ee:a0:6f:ac:b0:0c:09:8a:9b:e9:6e:3e: a7:cc:59:03:aa:00:17:d1:57:9e:40:86:64:18:59: 3d:39:75:fd:e1:6d:ec:bf:5b:7d:e9:74:1c:d5:6a: 83:f5:6e:f9:8e:76:de:05:62:79:b2:0f:3d:bb:a9: 9a:80:cf:a3:53:47:8d:9d:75:ae:ff:71:cc:23:f0: a2:c3:1b:9d:87:50:b6:8f:97:ae:8e:09:35:9e:c2: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AC:9A:C2:D8:CF:33:6C:04:10:A5:72:67:CC:B4:8A:22:A5:BD:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/649cf080-fdb1-317b-9379-24fcb092bbc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:83:16:1b:a0:28:ac:ad:d4:5b:1c:91:82:11:4d:6a:4a:28: 26:55:a7:d5:b0:ad:05:ce:10:f0:4a:29:f9:ef:ff:b3:72:46: 3f:1e:21:42:0d:29:6f:4c:56:a6:21:c4:91:e6:bf:03:c2:0f: 86:47:5b:a8:42:06:ab:15:6a:15:3a:53:49:b0:bd:0b:45:e4: bc:c3:a1:39:18:50:a7:17:3f:5b:19:dd:0f:3b:b5:85:1f:ed: 80:68:b2:67:9b:e2:19:f2:f3:6b:99:11:4a:83:b9:40:36:08: 71:6f:2b:0d:75:5a:0a:f9:82:96:6a:43:b7:c8:ff:f0:32:4d: 67:a9:e9:30:a8:c6:3d:ad:63:4d:c5:8f:c5:78:64:a9:9a:6a: 44:f3:90:1a:1e:a7:8d:dc:85:69:f8:a6:a9:f1:70:62:7d:7a: ff:da:bd:32:ee:ac:37:71:c5:66:0a:3f:3a:7e:56:ef:ef:73: 8f:f2:2c:c1:41:49:25:c0:e1:eb:02:00:fd:b2:69:4a:88:c1: ce:07:6b:dd:c7:dd:08:9f:fa:72:ab:14:2a:db:3a:aa:2d:37: 81:52:31:ae:49:19:6c:19:a9:a8:41:ad:59:f3:6a:6b:13:48: 29:f4:85:aa:67:5d:0f:49:da:d2:2d:a0:cc:06:f5:88:26:e8: 16:a0:d5:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWpMTcdNtwHPEfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MWE3NmQzNzAtYjE1Yi00ZmI4LWE4YTUtOTAzZmI1MmZlZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0MVum4a0THa9Cl47ai9G79tS+5YIfNZPmEU m0k+rS+ZbzxKIA98ebNrMM7HEWaO3ap01B7qhiszFO/1tQh6U26mKeE7dhI4JEG5 DkOnoHjprYQagH0tF2mkuKNB12I+84TUYbPUb3yq16A2ah0ZQppN/J7tU7m7YsZI fl+bP/faHY1iH6qXW2HGvAfwzqfemSMwlokXz8xUS/sdyZsiP8tWnndu0ojuoG+s sAwJipvpbj6nzFkDqgAX0VeeQIZkGFk9OXX94W3sv1t96XQc1WqD9W75jnbeBWJ5 sg89u6magM+jU0eNnXWu/3HMI/Ciwxudh1C2j5eujgk1nsLl+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWsmsLYzzNsBBClcmfMtIoipb2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjQ5Y2YwODAtZmRiMS0z MTdiLTkzNzktMjRmY2IwOTJiYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyDFhugKKyt1FsckYIRTWpKKCZVp9WwrQXOEPBKKfnv/7NyRj8eIUIN KW9MVqYhxJHmvwPCD4ZHW6hCBqsVahU6U0mwvQtF5LzDoTkYUKcXP1sZ3Q87tYUf 7YBosmeb4hny82uZEUqDuUA2CHFvKw11Wgr5gpZqQ7fI//AyTWep6TCoxj2tY03F j8V4ZKmaakTzkBoep43chWn4pqnxcGJ9ev/avTLurDdxxWYKPzp+Vu/vc4/yLMFB SSXA4esCAP2yaUqIwc4Ha93H3Qif+nKrFCrbOqotN4FSMa5JGWwZqahBrVnzamsT SCn0hapnXQ9J2tItoMwG9Ygm6Bag1Vg= -----END CERTIFICATE-----Generated at Fri Apr 17 14:49:30 2026 by rpki-client