$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bc20021-d905-3ec8-bbfd-896749510a77.roa File: 6bc20021-d905-3ec8-bbfd-896749510a77.roa (raw, json) Hash identifier: OtwqyPfE+wEL4tY1qnZA3IQvmP5yI0XZaBCUay8NQ80= Subject key identifier: 90:FC:36:04:D2:41:B1:5E:61:73:2E:40:FB:BF:F9:88:DD:70:36:60 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F35E7CBA7233B5AAD97692A00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bc20021-d905-3ec8-bbfd-896749510a77.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 21859 IP address blocks: 108.165.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:cb:a7:23:3b:5a:ad:97:69:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=dd284e7b-33d3-4e18-bc56-009d8c86d7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:db:d2:56:16:29:c7:d1:32:0d:79:d1:89:d6: c4:7a:f0:df:ff:ad:e3:9d:90:63:9c:51:07:1c:da: 7a:b9:3e:46:00:5b:f9:89:cc:07:74:52:3d:72:cf: 78:54:95:25:1b:a3:77:4a:17:63:1f:ce:b8:0f:b5: a4:14:94:26:21:25:33:1a:c5:1f:7e:f3:dd:f4:ae: 9d:3c:1e:ea:21:78:fd:9f:c6:d5:6e:99:9a:50:a6: 15:84:eb:be:a4:a3:d3:fa:b6:5d:8b:44:9a:87:30: be:2c:aa:e8:86:67:e3:a1:1e:b1:d1:2f:fc:18:31: 25:88:61:df:13:d7:08:79:7a:aa:31:26:4a:cf:d1: 02:d0:3d:1c:34:db:08:cb:35:24:3d:13:6c:7e:60: 45:69:de:5d:7e:51:1d:f8:18:f6:9e:5f:54:a8:d0: a0:05:5e:1d:4b:5e:f3:ab:b4:27:04:88:e4:92:3e: 38:bd:b0:17:8f:b7:8d:43:c7:dc:c2:32:3c:6f:7a: 56:a6:41:20:3a:ce:2d:92:0f:72:c4:3b:59:53:8f: 09:1b:11:36:28:e0:ac:d6:c1:8f:c0:fd:17:10:52: f1:d7:79:00:02:2d:e0:55:19:0c:6c:1d:89:8c:d1: 74:2d:ce:ff:f8:0b:06:c1:5f:a9:68:75:1e:d6:49: 61:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FC:36:04:D2:41:B1:5E:61:73:2E:40:FB:BF:F9:88:DD:70:36:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bc20021-d905-3ec8-bbfd-896749510a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e5:74:49:15:0a:b8:03:18:68:20:c3:95:d0:5e:d0:de:d7: 68:42:54:13:d5:9a:c1:1d:5a:e5:51:fe:c9:8b:9f:51:fa:1d: 31:49:21:85:20:04:25:ca:29:2b:6a:bc:5a:49:7f:db:76:23: 29:ec:88:e7:ab:8f:55:cf:1d:04:c1:ab:47:b2:5f:9e:8d:98: bc:9c:c5:9d:1e:7d:68:1b:bd:e2:e8:a9:e6:98:b3:60:bb:ec: b0:09:16:d0:48:29:96:b3:46:92:3e:bf:33:9a:01:8d:32:73: 56:cc:82:12:e2:3b:1c:8d:9c:e1:d4:8c:a9:64:7f:70:fc:e0: 86:e6:a1:f9:21:f7:06:19:81:f5:8c:df:96:df:17:39:47:34: ed:ec:ce:60:27:7d:fd:ab:20:54:67:95:c3:e1:c1:ae:18:28: db:de:a2:23:72:5a:0d:dd:03:d0:04:cc:ad:ff:cd:3a:3f:5d: 06:d2:73:14:e8:a1:36:e7:57:b0:1b:97:ef:c5:b1:3f:31:b1: 9c:75:03:9c:42:51:b3:d7:1c:9b:e3:c8:c6:39:95:46:63:e3: 65:ae:90:21:b3:ed:72:3a:64:37:ea:6c:72:c0:85:b2:30:a9: 12:6e:de:c8:de:d9:42:d4:42:65:86:b6:45:2f:63:a2:b1:4f: 32:b9:50:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158unIztarZdpKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk ZGQyODRlN2ItMzNkMy00ZTE4LWJjNTYtMDA5ZDhjODZkN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdvSVhYpx9EyDXnRidbEevDf/63jnZBjnFEH HNp6uT5GAFv5icwHdFI9cs94VJUlG6N3ShdjH864D7WkFJQmISUzGsUffvPd9K6d PB7qIXj9n8bVbpmaUKYVhOu+pKPT+rZdi0SahzC+LKrohmfjoR6x0S/8GDEliGHf E9cIeXqqMSZKz9EC0D0cNNsIyzUkPRNsfmBFad5dflEd+Bj2nl9UqNCgBV4dS17z q7QnBIjkkj44vbAXj7eNQ8fcwjI8b3pWpkEgOs4tkg9yxDtZU48JGxE2KOCs1sGP wP0XEFLx13kAAi3gVRkMbB2JjNF0Lc7/+AsGwV+paHUe1klhfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJD8NgTSQbFeYXMuQPu/+YjdcDZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmJjMjAwMjEtZDkwNS0z ZWM4LWJiZmQtODk2NzQ5NTEwYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDldEkVCrgDGGggw5XQXtDe12hCVBPVmsEdWuVR/smLn1H6HTFJIYUg BCXKKStqvFpJf9t2IynsiOerj1XPHQTBq0eyX56NmLycxZ0efWgbveLoqeaYs2C7 7LAJFtBIKZazRpI+vzOaAY0yc1bMghLiOxyNnOHUjKlkf3D84Ibmofkh9wYZgfWM 35bfFzlHNO3szmAnff2rIFRnlcPhwa4YKNveoiNyWg3dA9AEzK3/zTo/XQbScxTo oTbnV7Abl+/FsT8xsZx1A5xCUbPXHJvjyMY5lUZj42WukCGz7XI6ZDfqbHLAhbIw qRJu3sje2ULUQmWGtkUvY6KxTzK5UL4= -----END CERTIFICATE-----Generated at Tue Sep 22 00:23:44 2026 by rpki-client