$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3ca4236-1fa7-3fdc-9592-a09572ab517a.roa File: b3ca4236-1fa7-3fdc-9592-a09572ab517a.roa (raw, json) Hash identifier: 4tOOzJP/odvJGGjnkkU+eEstPTVHaum8H5rNUJp3cn0= Subject key identifier: CE:BC:0E:35:A1:BE:B9:6F:C1:B9:64:48:EC:2E:18:7B:69:8C:9B:D8 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584EE7BCCDAB0049CB3916860F40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3ca4236-1fa7-3fdc-9592-a09572ab517a.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 9009 IP address blocks: 166.1.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:cd:ab:00:49:cb:39:16:86:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=48e9ecd8-feb2-4c0a-9cb7-c0cdd3ee34a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:56:d1:39:65:3a:6f:14:97:4b:6a:64:69:ae: b7:24:a2:52:9a:19:2d:51:6b:fb:00:cc:19:a0:8a: f6:6b:8b:c6:40:9c:9f:77:93:bb:33:86:1f:6f:68: 4c:2a:04:62:3b:6f:51:66:ed:fc:9c:d1:a1:ea:34: 08:48:04:57:3b:1c:01:df:18:8d:57:f9:8a:02:a2: bb:80:07:64:95:44:47:ef:7f:df:1f:3f:eb:6b:30: 94:c7:df:f9:c9:dd:9a:29:49:31:bc:da:0b:b1:9b: 0b:82:c3:e2:19:fa:5f:75:1a:b5:22:48:c6:09:20: 3e:0d:5d:39:f0:f4:4f:96:3d:d3:9e:fb:27:69:5e: c5:cd:1f:33:21:03:34:c0:bc:92:75:24:77:96:55: da:56:b3:95:e0:88:08:d3:cf:eb:10:a5:f8:01:a2: 08:76:59:6a:66:8d:67:85:c4:d0:3a:f4:6f:7d:25: e9:64:99:7a:3c:06:99:35:1e:ce:1c:5a:65:84:28: 05:a7:27:78:86:af:72:4d:7b:2f:5b:a6:0e:82:70: d7:13:d9:ac:20:a0:42:7f:a4:fc:75:ac:b5:e0:52: dd:bb:d3:56:29:a0:37:a6:c3:b1:c3:79:38:97:d0: 93:47:a5:85:a8:29:2c:3d:ec:1d:63:68:74:82:86: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BC:0E:35:A1:BE:B9:6F:C1:B9:64:48:EC:2E:18:7B:69:8C:9B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3ca4236-1fa7-3fdc-9592-a09572ab517a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:65:03:d3:2f:b4:11:7f:b9:2c:65:d8:53:23:50:c1:53:6b: ee:8c:b1:7d:f7:4b:30:00:f4:7b:d9:db:b2:b8:00:4c:57:0f: 43:c8:cf:34:ea:d1:64:e4:10:a5:7f:9b:87:28:fb:d4:2a:c5: 8d:45:a8:51:c7:3a:3a:be:9a:dc:58:52:b9:70:44:7a:c7:23: 17:a2:07:1c:f2:29:5d:3c:32:1c:92:9a:67:ed:74:d6:16:4d: 72:b8:04:ad:a0:4f:cf:93:80:e2:27:10:b3:ff:0f:22:2d:2d: 85:b3:7e:b2:9b:78:f2:57:ba:b9:b0:95:0b:e5:af:91:6b:f1: 9e:0b:91:08:73:80:79:a4:8e:5e:82:79:91:c1:55:92:76:96: 6c:b1:29:fc:48:ca:f3:e9:cd:4c:11:be:22:b1:76:ce:cc:92: de:8c:39:9c:81:13:4c:3e:df:1d:bf:95:dc:93:e4:19:6f:7a: 7b:78:d0:0b:48:09:11:27:07:39:a5:b8:b6:ae:af:79:2e:d6: da:5d:3c:0c:7d:b7:21:be:b5:f3:7c:2a:cf:14:2d:60:c3:32: bd:4e:f0:61:f5:ea:e9:d7:1b:ac:7d:d9:80:33:b9:60:3c:72: 77:d9:58:59:cb:94:f3:d6:fd:27:1e:c0:a0:2e:9d:dd:97:40: 19:83:8f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvM2rAEnLORaGD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk NDhlOWVjZDgtZmViMi00YzBhLTljYjctYzBjZGQzZWUzNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1bROWU6bxSXS2pkaa63JKJSmhktUWv7AMwZ oIr2a4vGQJyfd5O7M4Yfb2hMKgRiO29RZu38nNGh6jQISARXOxwB3xiNV/mKAqK7 gAdklURH73/fHz/razCUx9/5yd2aKUkxvNoLsZsLgsPiGfpfdRq1IkjGCSA+DV05 8PRPlj3TnvsnaV7FzR8zIQM0wLySdSR3llXaVrOV4IgI08/rEKX4AaIIdllqZo1n hcTQOvRvfSXpZJl6PAaZNR7OHFplhCgFpyd4hq9yTXsvW6YOgnDXE9msIKBCf6T8 day14FLdu9NWKaA3psOxw3k4l9CTR6WFqCksPewdY2h0gobyWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM68DjWhvrlvwblkSOwuGHtpjJvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjNjYTQyMzYtMWZhNy0z ZmRjLTk1OTItYTA5NTcyYWI1MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExlA9MvtBF/uSxl2FMjUMFTa+6MsX33SzAA9HvZ27K4AExXD0PIzzTq 0WTkEKV/m4co+9QqxY1FqFHHOjq+mtxYUrlwRHrHIxeiBxzyKV08MhySmmftdNYW TXK4BK2gT8+TgOInELP/DyItLYWzfrKbePJXurmwlQvlr5Fr8Z4LkQhzgHmkjl6C eZHBVZJ2lmyxKfxIyvPpzUwRviKxds7Mkt6MOZyBE0w+3x2/ldyT5Blvent40AtI CREnBzmluLaur3ku1tpdPAx9tyG+tfN8Ks8ULWDDMr1O8GH16unXG6x92YAzuWA8 cnfZWFnLlPPW/ScewKAund2XQBmDj7w= -----END CERTIFICATE-----Generated at Mon Sep 21 23:00:09 2026 by rpki-client