$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/821d9d61-326f-35c2-9972-78a3e2052112.roa File: 821d9d61-326f-35c2-9972-78a3e2052112.roa (raw, json) Hash identifier: o8mOGji6rEldg4H1EtMMo5tZ6DaozNz6rWtKIzBnrTU= Subject key identifier: 88:14:A2:40:B4:30:BC:C1:4E:41:4A:58:49:4F:D9:82:E9:7B:0D:BD Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EE4F1EEC4A4E2FE845BD1A9C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/821d9d61-326f-35c2-9972-78a3e2052112.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 10753 IP address blocks: 108.165.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:ee:c4:a4:e2:fe:84:5b:d1:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=f912dedc-9483-4ddf-8779-3b82c2210cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8b:9f:aa:c5:3e:33:f9:9e:57:61:8f:5e:ea: b9:60:c5:68:45:63:04:9d:8f:80:c6:ac:f4:b2:ea: 1e:7c:e0:51:ff:8e:01:57:48:af:50:9b:b6:d2:00: b3:a2:e3:64:ea:d9:2a:38:11:fe:38:c9:e5:e6:2d: f9:fa:00:fb:69:b8:1f:85:c3:c8:7c:9f:a2:c6:06: 1a:2d:5a:2b:b1:35:b1:6f:ae:30:91:68:e2:c6:37: a7:48:c6:c3:2f:bd:ca:34:fe:c7:21:9c:5e:5b:d3: 93:a6:2e:2d:0b:f4:fc:fb:f3:6f:d9:a8:7f:98:f1: dd:c4:6e:86:09:ab:b7:35:10:a2:68:b4:24:85:a0: d9:56:07:ca:0e:5b:4b:a4:26:47:10:88:e8:ce:04: 55:40:99:5d:7f:ec:d4:85:1b:ae:89:72:c8:ea:31: 11:35:8d:f4:fb:2b:14:5b:a1:83:74:a6:8d:fa:a1: d9:c8:28:8f:b5:2f:9a:eb:34:da:45:40:e4:16:27: 4a:c8:40:27:a9:eb:85:62:b7:ba:b8:6e:d8:4a:ad: fa:32:ed:64:4c:71:28:e5:ae:7c:3d:4b:77:f8:37: 20:79:f0:7b:0b:c1:ab:da:1c:cf:9f:f5:de:4d:4b: a5:c4:fc:ef:66:58:ba:84:15:54:9e:a4:82:d9:0a: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:14:A2:40:B4:30:BC:C1:4E:41:4A:58:49:4F:D9:82:E9:7B:0D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/821d9d61-326f-35c2-9972-78a3e2052112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:72:4a:40:11:e6:65:83:d1:33:32:7c:13:e6:02:bf:1e:34: 43:33:b0:13:67:2b:f6:4b:d5:3c:7a:d2:5a:2a:af:f7:fa:a8: 8c:c3:c6:be:68:5d:2f:6a:1d:49:a0:52:8e:18:14:e9:bc:b3: b1:f3:29:a9:05:26:c8:97:a5:e9:af:7b:c5:5a:64:42:da:a5: b3:82:dd:91:40:64:82:4b:06:bc:43:fe:fb:f7:b3:3c:10:93: 34:00:7e:c6:90:af:75:dc:f7:61:bc:fc:4c:bd:b2:c9:1e:26: e1:ad:c7:de:8a:71:b4:57:7e:be:7a:7f:8c:2e:bc:9d:7b:ba: 4b:d4:74:ba:be:b8:fd:d4:b1:e4:6f:7e:0d:f4:17:ea:d2:f1: 55:ff:8f:cc:91:d0:1c:22:44:34:5b:82:46:8a:37:47:dd:4b: 35:a5:25:59:ae:a7:e3:f0:73:2d:dc:29:69:8d:ec:3a:a3:52: d0:f0:06:f4:67:44:8f:b0:e3:53:c9:ae:1f:b1:8b:da:34:de: 63:e7:0a:8f:b1:a0:e9:80:5e:02:23:8a:e9:88:d8:8b:95:d4: 4f:4d:b6:f7:4e:b0:1e:63:46:fc:10:2c:33:24:33:16:be:ed: c2:d2:85:b9:f3:f5:c9:7b:d0:b5:61:a3:43:63:9f:91:f5:2f: 26:0c:c5:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8e7EpOL+hFvRqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk ZjkxMmRlZGMtOTQ4My00ZGRmLTg3NzktM2I4MmMyMjEwY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoufqsU+M/meV2GPXuq5YMVoRWMEnY+Axqz0 suoefOBR/44BV0ivUJu20gCzouNk6tkqOBH+OMnl5i35+gD7abgfhcPIfJ+ixgYa LVorsTWxb64wkWjixjenSMbDL73KNP7HIZxeW9OTpi4tC/T8+/Nv2ah/mPHdxG6G Cau3NRCiaLQkhaDZVgfKDltLpCZHEIjozgRVQJldf+zUhRuuiXLI6jERNY30+ysU W6GDdKaN+qHZyCiPtS+a6zTaRUDkFidKyEAnqeuFYre6uG7YSq36Mu1kTHEo5a58 PUt3+DcgefB7C8Gr2hzPn/XeTUulxPzvZli6hBVUnqSC2QryGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgUokC0MLzBTkFKWElP2YLpew29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODIxZDlkNjEtMzI2Zi0z NWMyLTk5NzItNzhhM2UyMDUyMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxySkAR5mWD0TMyfBPmAr8eNEMzsBNnK/ZL1Tx60loqr/f6qIzDxr5o XS9qHUmgUo4YFOm8s7HzKakFJsiXpemve8VaZELapbOC3ZFAZIJLBrxD/vv3szwQ kzQAfsaQr3Xc92G8/Ey9sskeJuGtx96KcbRXfr56f4wuvJ17ukvUdLq+uP3UseRv fg30F+rS8VX/j8yR0BwiRDRbgkaKN0fdSzWlJVmup+Pwcy3cKWmN7DqjUtDwBvRn RI+w41PJrh+xi9o03mPnCo+xoOmAXgIjiumI2IuV1E9NtvdOsB5jRvwQLDMkMxa+ 7cLShbnz9cl70LVho0Njn5H1LyYMxYY= -----END CERTIFICATE-----Generated at Tue Sep 22 06:38:29 2026 by rpki-client