$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8bce6b4-d240-34f3-9441-c437da430b1c.roa File: c8bce6b4-d240-34f3-9441-c437da430b1c.roa (raw, json) Hash identifier: 2AmYcRMkMNxBXOOXlc60yRuPFFRQVHRzTuhvaps68aI= Subject key identifier: 68:3B:8B:CF:D1:04:00:EB:7A:D0:0E:A6:9D:B8:3D:2B:1E:51:F7:7D Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584CD2A1EF241BBD8378C33E3500 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8bce6b4-d240-34f3-9441-c437da430b1c.roa Signing time: Wed 11 Feb 2026 02:00:32 +0000 ROA not before: Wed 11 Feb 2026 02:00:32 +0000 ROA not after: Tue 12 May 2026 01:00:32 +0000 asID: 21859 IP address blocks: 108.165.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d2:a1:ef:24:1b:bd:83:78:c3:3e:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 11 02:00:32 2026 GMT Not After : May 12 01:00:32 2026 GMT Subject: CN=773bf55d-8cfa-487d-ad86-e117aad88960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:c2:4f:1a:f3:e3:0b:9e:6e:ce:8f:b5:82: 66:95:02:68:15:b2:1b:5e:65:3f:8d:88:4e:90:85: 26:3b:26:a8:3c:d2:53:28:83:65:14:cd:ad:45:f3: 5b:a4:f9:fd:f1:90:6d:bf:e3:dd:5d:91:43:2a:7e: f0:0d:f9:3c:0f:aa:91:7e:e2:61:e0:71:12:f0:51: 20:69:a0:b6:19:2a:3c:ba:6f:a9:12:c3:82:1a:26: 3d:1c:4e:ba:c0:58:1c:4b:59:89:ee:b4:87:83:57: 1e:55:fc:61:12:f6:bb:ac:ef:38:00:ec:89:24:1b: af:1d:d5:c3:b2:8a:9e:27:d6:b3:eb:81:19:13:95: 31:cd:91:bd:21:c2:14:a7:a1:5d:34:70:52:5d:c0: 48:b1:64:64:f9:22:eb:29:b1:e4:de:b0:e8:7d:00: 2d:14:e3:8a:a4:53:cc:16:a9:ab:07:fd:3d:02:f0: 41:57:ac:59:80:6b:8d:d1:9d:d4:ab:26:9c:4b:09: 3c:46:b0:2d:06:55:e9:ab:aa:c1:93:c3:16:4b:19: 3e:d9:2f:22:cf:21:f1:b8:e8:59:5c:72:3c:d7:fb: 10:d0:ba:6c:6d:3d:fa:bc:c3:dd:40:13:6b:40:a4: f5:bf:6e:19:8b:c8:ec:1d:35:62:e4:84:a8:3c:78: f5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3B:8B:CF:D1:04:00:EB:7A:D0:0E:A6:9D:B8:3D:2B:1E:51:F7:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8bce6b4-d240-34f3-9441-c437da430b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ff:06:dc:73:2a:be:be:79:74:52:7e:a5:b8:12:1b:8f:fe: 5c:2b:b0:02:46:e8:8d:39:b2:7c:ff:23:bb:4d:99:dc:e6:f5: b1:1b:3e:ea:02:a6:36:5b:88:fb:75:a4:75:a0:49:2d:bb:56: ff:da:9c:29:34:5a:08:31:d2:39:ee:48:58:46:b3:39:72:36: 5a:36:37:f6:33:2b:6b:62:d7:d9:48:07:37:af:bd:f0:44:91: e5:50:98:de:75:b9:6d:3f:65:8e:a5:23:95:29:48:97:a3:f1: 1c:a8:5e:90:be:d2:4f:24:01:98:07:76:c2:7a:e4:50:44:03: 1f:f8:42:f0:cf:75:52:16:71:bb:fc:e6:7a:7a:94:f3:8c:cd: 3b:54:15:33:96:40:3e:f7:e2:91:24:b1:a7:29:ba:cd:eb:37: 1e:7a:06:3c:d7:f2:57:af:4a:19:c5:80:9b:79:c0:61:fe:61: d0:75:01:ea:73:bf:cc:aa:e3:8c:50:ae:f1:11:58:25:32:3d: 2f:23:60:1a:9c:2c:c2:72:77:29:48:b6:3a:1e:4c:2e:5f:2c: 0f:58:79:48:ed:28:0e:33:f8:04:18:26:a9:ad:c3:2b:56:25: ee:06:46:f4:21:b4:30:e9:ac:6d:02:c0:d4:b3:88:2b:06:7b: f9:4d:1f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzSoe8kG72DeMM+NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk NzczYmY1NWQtOGNmYS00ODdkLWFkODYtZTExN2FhZDg4OTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRfCTxrz4wuebs6PtYJmlQJoFbIbXmU/jYhO kIUmOyaoPNJTKINlFM2tRfNbpPn98ZBtv+PdXZFDKn7wDfk8D6qRfuJh4HES8FEg aaC2GSo8um+pEsOCGiY9HE66wFgcS1mJ7rSHg1ceVfxhEva7rO84AOyJJBuvHdXD soqeJ9az64EZE5UxzZG9IcIUp6FdNHBSXcBIsWRk+SLrKbHk3rDofQAtFOOKpFPM FqmrB/09AvBBV6xZgGuN0Z3UqyacSwk8RrAtBlXpq6rBk8MWSxk+2S8izyHxuOhZ XHI81/sQ0LpsbT36vMPdQBNrQKT1v24Zi8jsHTVi5ISoPHj11QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg7i8/RBADretAOpp24PSseUfd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzhiY2U2YjQtZDI0MC0z NGYzLTk0NDEtYzQzN2RhNDMwYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD/BtxzKr6+eXRSfqW4EhuP/lwrsAJG6I05snz/I7tNmdzm9bEbPuoC pjZbiPt1pHWgSS27Vv/anCk0Wggx0jnuSFhGszlyNlo2N/YzK2ti19lIBzevvfBE keVQmN51uW0/ZY6lI5UpSJej8RyoXpC+0k8kAZgHdsJ65FBEAx/4QvDPdVIWcbv8 5np6lPOMzTtUFTOWQD734pEksacpus3rNx56BjzX8levShnFgJt5wGH+YdB1Aepz v8yq44xQrvERWCUyPS8jYBqcLMJydylItjoeTC5fLA9YeUjtKA4z+AQYJqmtwytW Je4GRvQhtDDprG0CwNSziCsGe/lNH+s= -----END CERTIFICATE-----Generated at Sun Mar 1 23:09:15 2026 by rpki-client