$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7db34b35-db3b-3266-a9e0-1bebe48f4ace.roa File: 7db34b35-db3b-3266-a9e0-1bebe48f4ace.roa (raw, json) Hash identifier: NaE+RNWorg10iX4AOMweMgIxF0SYaRxwD3ekyVzvk38= Subject key identifier: 75:A1:11:73:27:C0:8D:E4:CB:B4:0E:4E:02:DC:38:48:F3:C5:F8:4A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EC63C72162A3A3827ABE424C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7db34b35-db3b-3266-a9e0-1bebe48f4ace.roa Signing time: Sun 09 Aug 2026 01:00:12 +0000 ROA not before: Sun 09 Aug 2026 01:00:12 +0000 ROA not after: Sat 07 Nov 2026 02:00:12 +0000 asID: 11798 IP address blocks: 108.165.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c6:3c:72:16:2a:3a:38:27:ab:e4:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 9 01:00:12 2026 GMT Not After : Nov 7 02:00:12 2026 GMT Subject: CN=a7ce44c6-44f0-44ff-bf04-01dc0e9bc4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:08:c0:5f:6f:53:7d:24:6b:35:ac:4b:a1: 54:de:15:25:d3:94:c4:5a:ad:56:19:a5:71:08:d0: 9e:6c:56:7c:bf:d9:21:eb:4f:51:2d:32:b8:f6:bc: 35:38:94:da:96:57:59:c9:ba:fc:ca:40:11:a4:87: a7:c6:f6:41:ad:99:9d:7a:d1:c8:24:6d:c2:a1:40: f2:e6:b0:d3:b8:f3:89:17:26:12:b7:5c:6f:61:5b: 25:06:37:09:97:6d:58:d9:81:d6:0b:02:a9:1b:c5: 76:cd:68:cb:b4:5f:fe:d8:c6:f2:55:1d:de:4c:6d: 37:78:d6:14:1d:c2:9d:db:29:e8:cd:db:67:fb:8f: d4:bf:6b:f6:4d:0e:53:86:6b:ad:83:95:e7:da:15: d7:3f:78:6e:2b:33:de:e7:06:01:fb:ef:2d:07:be: 6f:4e:c3:0f:aa:54:77:55:d8:1d:85:a7:cf:e8:0b: f0:5c:ba:48:b0:13:ec:df:48:ad:50:d8:52:4f:fe: 3d:53:3b:13:93:c5:f8:5c:9c:01:fc:94:f8:92:ec: 7b:a4:33:37:5a:1d:38:9d:3e:06:e4:ce:67:c0:8b: 2f:71:04:05:5e:3e:d3:93:2f:fd:cd:9a:c2:06:d5: 1e:f4:bf:51:b9:02:39:96:a2:a6:5e:e5:c0:d9:3a: b5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A1:11:73:27:C0:8D:E4:CB:B4:0E:4E:02:DC:38:48:F3:C5:F8:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7db34b35-db3b-3266-a9e0-1bebe48f4ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1b:60:d7:77:27:76:e2:28:09:c6:64:a2:a3:bf:e6:2a:ef: 36:ac:10:11:0c:89:a5:18:4c:b7:2f:74:52:dd:d8:8f:29:d3: 42:90:09:de:0a:b2:d0:a0:83:f5:a1:e5:08:d3:94:d6:55:4b: 4a:98:2b:4d:52:55:67:8c:a5:f5:34:b5:8a:47:21:82:d6:db: cc:21:1e:8f:e0:ff:3d:01:c1:2a:84:27:03:36:60:f0:1b:42: 42:57:bb:f5:e7:9a:15:ce:bc:48:1f:b9:43:31:09:28:90:c7: 9c:36:71:45:07:55:09:6d:e1:02:0f:d1:3a:84:cb:54:7e:dc: 21:70:fb:d7:bb:9f:29:f9:e3:ff:da:0e:23:11:48:1c:9c:9e: 1b:b7:68:21:22:27:f4:15:4d:f2:e6:0b:78:41:90:ff:40:31: c8:d5:94:2d:13:88:0c:16:f2:04:6d:c2:8d:52:3b:db:08:bb: 06:38:df:0f:ec:e5:24:3d:a3:06:6e:d0:08:23:14:d2:98:04: 8c:48:db:69:cb:2b:71:83:e6:f0:0e:e7:57:47:df:e8:3a:56: 68:95:dc:e5:8a:0d:c9:83:59:93:dd:53:fc:4c:81:75:b8:60: 30:9c:33:8f:78:38:25:f3:cf:6f:b2:79:ec:08:42:03:2c:17: 0b:25:80:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7GPHIWKjo4J6vkJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgwOTAxMDAxMloXDTI2MTEwNzAyMDAxMlowLzEtMCsGA1UEAxMk YTdjZTQ0YzYtNDRmMC00NGZmLWJmMDQtMDFkYzBlOWJjNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVIIwF9vU30kazWsS6FU3hUl05TEWq1WGaVx CNCebFZ8v9kh609RLTK49rw1OJTalldZybr8ykARpIenxvZBrZmdetHIJG3CoUDy 5rDTuPOJFyYSt1xvYVslBjcJl21Y2YHWCwKpG8V2zWjLtF/+2MbyVR3eTG03eNYU HcKd2ynozdtn+4/Uv2v2TQ5Thmutg5Xn2hXXP3huKzPe5wYB++8tB75vTsMPqlR3 VdgdhafP6AvwXLpIsBPs30itUNhST/49UzsTk8X4XJwB/JT4kux7pDM3Wh04nT4G 5M5nwIsvcQQFXj7Tky/9zZrCBtUe9L9RuQI5lqKmXuXA2Tq1pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWhEXMnwI3ky7QOTgLcOEjzxfhKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2RiMzRiMzUtZGIzYi0z MjY2LWE5ZTAtMWJlYmU0OGY0YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwbYNd3J3biKAnGZKKjv+Yq7zasEBEMiaUYTLcvdFLd2I8p00KQCd4K stCgg/Wh5QjTlNZVS0qYK01SVWeMpfU0tYpHIYLW28whHo/g/z0BwSqEJwM2YPAb QkJXu/XnmhXOvEgfuUMxCSiQx5w2cUUHVQlt4QIP0TqEy1R+3CFw+9e7nyn54//a DiMRSBycnhu3aCEiJ/QVTfLmC3hBkP9AMcjVlC0TiAwW8gRtwo1SO9sIuwY43w/s 5SQ9owZu0AgjFNKYBIxI22nLK3GD5vAO51dH3+g6VmiV3OWKDcmDWZPdU/xMgXW4 YDCcM494OCXzz2+yeewIQgMsFwslgJw= -----END CERTIFICATE-----Generated at Mon Sep 21 13:02:10 2026 by rpki-client