$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa File: d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa (raw, json) Hash identifier: N9Xr0GW6uTCW0JofSo1kMVU7EIjz6w2JagJKD+8Sl3E= Subject key identifier: 51:90:39:2F:2C:44:32:01:42:07:14:E3:17:98:B6:37:08:2C:6F:4E Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584CCFD746E5623982BCE4DF5E80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa Signing time: Tue 10 Feb 2026 02:00:31 +0000 ROA not before: Tue 10 Feb 2026 02:00:31 +0000 ROA not after: Mon 11 May 2026 01:00:31 +0000 asID: 8881 IP address blocks: 166.0.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:d7:46:e5:62:39:82:bc:e4:df:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 10 02:00:31 2026 GMT Not After : May 11 01:00:31 2026 GMT Subject: CN=f85f9eb5-072c-4180-80af-a303def6b2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:67:06:d0:35:56:2a:1a:e4:0c:3a:6e:c8: ca:55:c5:c6:2e:e1:f6:cc:4d:87:ed:4c:01:72:20: 7d:59:84:a3:d7:19:41:5b:58:34:5b:5f:85:7b:ca: 66:ec:3e:1d:00:ee:b9:95:94:84:e9:bb:56:0f:62: b0:3b:46:f2:36:28:f5:a8:2c:3b:42:59:f6:cf:05: 8b:f1:c0:1f:3f:b8:7e:19:72:06:91:57:08:fd:1a: 42:78:94:b8:74:58:80:8a:39:8c:60:43:e9:9b:59: 5a:64:04:7d:fd:87:b3:79:67:57:bf:22:cc:8c:6d: 68:07:57:7e:87:1b:db:cd:95:bc:81:b9:52:90:15: 6d:a2:5d:c7:a6:1a:e8:a5:83:19:31:a6:25:64:c2: 38:60:3d:43:8b:d0:83:f1:25:c4:73:b2:59:14:bd: 0b:2e:33:8e:4f:76:73:e6:5a:b0:e7:87:8b:b9:c2: f1:bc:11:ab:ae:9d:d5:cb:8a:95:b1:48:86:66:e0: f7:83:25:cf:c4:00:21:02:7d:f4:1e:65:93:2e:9e: 21:d4:ae:cf:e0:6d:54:2e:e9:db:e5:04:0b:b9:9b: b6:08:f4:62:a6:97:85:34:7a:cd:9d:9b:da:52:ae: 83:a4:02:cc:86:17:e4:7a:f2:af:93:fe:57:1d:55: d1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:90:39:2F:2C:44:32:01:42:07:14:E3:17:98:B6:37:08:2C:6F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:5b:04:21:02:91:6d:6d:de:06:aa:e7:ab:5d:0e:1f:60:d0: 4a:1c:47:0d:12:de:a1:f2:81:16:13:22:3e:6c:75:d7:00:0e: c4:3a:24:76:cf:96:d6:56:50:10:79:3c:a7:cf:20:4b:1f:0e: 59:12:1d:37:7f:24:f2:85:56:2d:41:8b:46:80:dc:28:fb:ca: 62:04:ca:4d:2d:42:e4:e0:82:4c:58:25:49:43:99:3a:3b:ba: 1a:b8:f2:ba:e5:5a:95:17:d8:75:7b:18:1c:a4:a7:34:1d:ba: 7a:97:1b:22:da:c7:0a:0d:f3:ff:34:c0:9f:eb:fc:b5:cb:01: 79:0f:2e:02:d1:f8:6e:6f:76:5d:15:af:af:04:03:bb:d2:2e: 1a:cf:55:17:2d:a3:86:c4:1f:3c:52:1c:87:bb:5a:b2:79:9e: 5e:14:57:ff:2c:2f:a9:c5:35:30:96:3c:cd:93:a3:86:35:71: 84:97:08:44:74:41:69:03:a8:40:f1:8f:12:f8:a5:21:f8:69: 56:64:62:7a:85:1a:6c:6a:3e:3b:a3:66:43:11:c5:d7:c8:56: 02:18:d2:1c:97:3f:e4:d7:30:c1:f8:b8:bb:c3:f1:5f:3b:b0: fa:3c:b0:e8:94:3a:0e:bc:6e:5c:b2:ee:c1:c9:ec:dd:73:b3: 1a:9f:e5:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP10blYjmCvOTfXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk Zjg1ZjllYjUtMDcyYy00MTgwLTgwYWYtYTMwM2RlZjZiMmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvpnBtA1Vioa5Aw6bsjKVcXGLuH2zE2H7UwB ciB9WYSj1xlBW1g0W1+Fe8pm7D4dAO65lZSE6btWD2KwO0byNij1qCw7Qln2zwWL 8cAfP7h+GXIGkVcI/RpCeJS4dFiAijmMYEPpm1laZAR9/YezeWdXvyLMjG1oB1d+ hxvbzZW8gblSkBVtol3HphropYMZMaYlZMI4YD1Di9CD8SXEc7JZFL0LLjOOT3Zz 5lqw54eLucLxvBGrrp3Vy4qVsUiGZuD3gyXPxAAhAn30HmWTLp4h1K7P4G1ULunb 5QQLuZu2CPRippeFNHrNnZvaUq6DpALMhhfkevKvk/5XHVXR/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGQOS8sRDIBQgcU4xeYtjcILG9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDY4ZDZkMzItYzVhOS0z ZmY4LTllMWItZmMxZWM1ZDNmYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9bBCECkW1t3gaq56tdDh9g0EocRw0S3qHygRYTIj5sddcADsQ6JHbP ltZWUBB5PKfPIEsfDlkSHTd/JPKFVi1Bi0aA3Cj7ymIEyk0tQuTggkxYJUlDmTo7 uhq48rrlWpUX2HV7GBykpzQdunqXGyLaxwoN8/80wJ/r/LXLAXkPLgLR+G5vdl0V r68EA7vSLhrPVRcto4bEHzxSHIe7WrJ5nl4UV/8sL6nFNTCWPM2To4Y1cYSXCER0 QWkDqEDxjxL4pSH4aVZkYnqFGmxqPjujZkMRxdfIVgIY0hyXP+TXMMH4uLvD8V87 sPo8sOiUOg68blyy7sHJ7N1zsxqf5TA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:32:20 2026 by rpki-client