$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa54a5a6-a0c8-35f6-93c5-a3666f7ae826.roa File: aa54a5a6-a0c8-35f6-93c5-a3666f7ae826.roa (raw, json) Hash identifier: BZc424WV78qnfTcsy7Ywfi5DO6YunmWPwnc+cI5vtek= Subject key identifier: AE:78:F1:C9:F7:54:6B:1C:8F:3F:54:E5:8D:8E:5A:95:B7:05:EC:E6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584D5024F65ED7E1C504C085CE80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa54a5a6-a0c8-35f6-93c5-a3666f7ae826.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 62240 IP address blocks: 166.1.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:f6:5e:d7:e1:c5:04:c0:85:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=da417ec2-0b49-4d8d-a129-99f2f9f6041c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:04:7a:b2:c4:0b:22:9f:8a:a5:18:1c:ab: 4f:81:f9:b1:25:4c:d8:d5:61:74:72:3f:c3:fa:0d: 5e:a3:d3:ce:ca:9c:84:35:ea:ce:b3:15:ee:cb:e6: 07:e1:8f:43:a9:5a:ba:10:c0:53:5e:75:ae:9b:cb: 43:85:42:b7:75:85:37:bd:44:4c:83:9f:78:17:33: 1c:15:03:75:e9:3c:30:42:3d:dc:50:7d:f4:34:bb: ad:2f:6f:a8:d2:36:92:9c:34:b4:c2:0d:d6:45:f0: a1:01:ac:c8:d6:f6:42:a6:59:c3:ef:1c:1c:34:4d: b4:15:d0:12:be:b1:de:5c:1f:ee:3b:58:66:9f:db: 43:e0:84:55:b2:54:54:09:81:28:84:4b:a6:ad:17: 29:04:de:9d:cb:7c:83:f5:c4:a3:13:df:cd:c7:30: f8:16:1b:82:d1:8b:19:b9:30:17:3c:23:14:1e:c3: 73:9b:4b:96:d2:c3:f1:5e:53:5d:57:c8:98:9a:f2: a1:4f:2b:23:9b:9c:85:25:66:d1:1b:5d:39:af:4e: c2:f6:b2:55:da:37:00:f2:9b:cf:a6:77:b6:a0:a6: 04:3a:81:31:34:cb:b0:72:f2:57:a9:29:01:46:45: 3b:75:7b:fc:f5:de:83:e5:35:5a:fa:5b:5d:e6:0a: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:78:F1:C9:F7:54:6B:1C:8F:3F:54:E5:8D:8E:5A:95:B7:05:EC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa54a5a6-a0c8-35f6-93c5-a3666f7ae826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f9:b4:0c:15:a5:e3:51:4d:b1:74:ce:75:ef:86:8d:ae:62: dd:4a:74:ae:6c:28:b9:96:7f:43:d7:7a:da:2c:7b:83:88:e9: 1f:b4:48:d9:ab:e5:19:5e:08:a4:68:e7:86:be:16:ca:84:32: ee:43:95:e0:16:b5:33:f1:de:16:51:b3:18:98:1b:0c:9b:7f: aa:d0:6c:c4:3e:da:9f:a8:8a:5f:41:0b:41:0b:8b:05:67:ac: ea:f6:97:b9:e9:b6:64:b9:f0:56:8e:88:f1:5c:a0:b4:30:bd: 94:b0:bd:d1:f8:78:17:4d:96:a2:d0:f6:7e:68:63:94:db:53: 52:b6:b1:93:53:a5:df:12:f1:9e:a2:e6:6a:33:97:11:dc:3a: be:33:f1:0f:ee:57:06:6e:be:11:24:13:c1:1c:13:a7:03:88: 1b:46:68:5c:03:91:5e:0a:33:be:e8:c2:50:ee:4f:7d:b9:99: 98:28:e1:a7:3c:20:73:5e:b8:9c:18:01:da:9c:00:8f:73:7d: 64:0e:29:6f:a7:1e:50:8a:d8:8d:e9:3e:1e:31:1f:fb:91:30: 45:44:83:fc:0d:0b:db:62:94:bd:2a:d4:ad:af:98:f0:e4:16: 62:5c:9c:72:1a:b0:bd:f4:5d:09:15:f9:14:34:28:26:6c:8b: 4d:a8:31:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJPZe1+HFBMCFzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk ZGE0MTdlYzItMGI0OS00ZDhkLWExMjktOTlmMmY5ZjYwNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1gEerLECyKfiqUYHKtPgfmxJUzY1WF0cj/D +g1eo9POypyENerOsxXuy+YH4Y9DqVq6EMBTXnWum8tDhUK3dYU3vURMg594FzMc FQN16TwwQj3cUH30NLutL2+o0jaSnDS0wg3WRfChAazI1vZCplnD7xwcNE20FdAS vrHeXB/uO1hmn9tD4IRVslRUCYEohEumrRcpBN6dy3yD9cSjE9/NxzD4FhuC0YsZ uTAXPCMUHsNzm0uW0sPxXlNdV8iYmvKhTysjm5yFJWbRG105r07C9rJV2jcA8pvP pne2oKYEOoExNMuwcvJXqSkBRkU7dXv89d6D5TVa+ltd5gpUrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK548cn3VGscjz9U5Y2OWpW3BezmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWE1NGE1YTYtYTBjOC0z NWY2LTkzYzUtYTM2NjZmN2FlODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgF0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP5tAwVpeNRTbF0znXvho2uYt1KdK5sKLmWf0PXetose4OI6R+0SNmr 5RleCKRo54a+FsqEMu5DleAWtTPx3hZRsxiYGwybf6rQbMQ+2p+oil9BC0ELiwVn rOr2l7nptmS58FaOiPFcoLQwvZSwvdH4eBdNlqLQ9n5oY5TbU1K2sZNTpd8S8Z6i 5mozlxHcOr4z8Q/uVwZuvhEkE8EcE6cDiBtGaFwDkV4KM77owlDuT325mZgo4ac8 IHNeuJwYAdqcAI9zfWQOKW+nHlCK2I3pPh4xH/uRMEVEg/wNC9tilL0q1K2vmPDk FmJcnHIasL30XQkV+RQ0KCZsi02oMUI= -----END CERTIFICATE-----Generated at Fri Apr 17 03:57:56 2026 by rpki-client