$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa File: d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa (raw, json) Hash identifier: 7wIkze94oIR210lBhnxVlpntaDd1VLb0U77Xn4XYUwo= Subject key identifier: 78:6F:43:4F:8B:F2:7F:39:54:67:10:07:06:C6:29:08:65:B6:C0:A4 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584E15E4A95257883EEDCADACE99 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 401152 IP address blocks: 108.165.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:a9:52:57:88:3e:ed:ca:da:ce:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=2f6075d7-eda8-474e-a94c-c37242867d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:14:3b:66:f4:40:ff:f2:79:76:d1:fa:c3: 28:36:58:af:a5:b7:ac:6a:1b:15:ec:48:cf:9f:81: 93:ac:90:e4:7a:7a:59:b9:ea:4b:61:c0:41:13:ae: b2:70:92:38:d9:ed:0c:05:ed:7d:78:44:bb:a5:fa: e9:50:9c:62:10:66:0b:bb:a4:2f:b5:cb:bd:b5:7f: fe:bf:d0:a9:ad:b4:b5:37:33:94:63:a9:61:35:a4: ee:2e:ba:f4:80:45:6b:90:f7:7e:dc:7b:b2:36:b1: d9:7b:dd:4d:fb:8e:42:ba:20:80:6e:cd:f0:64:e0: 05:16:47:06:0c:df:84:90:ef:c5:52:21:ab:57:ec: ee:19:d2:02:07:88:05:7b:33:ba:38:55:0c:5c:6a: 73:04:bd:86:b3:a5:a4:62:8c:4d:24:d0:39:be:55: 65:c1:bc:19:35:5c:d5:09:80:d2:53:7c:6c:8e:b3: 1c:6c:2d:f1:4d:b3:b7:81:a3:21:0c:9c:63:bb:e3: 6c:38:55:e2:b5:ad:c6:6e:a2:c2:50:6c:b5:d4:7a: 63:92:cb:35:2e:e1:2f:e0:44:07:ef:c2:b8:47:cf: 9a:c2:e5:6c:1a:c3:58:4f:2c:8e:ed:d9:f2:3e:f6: 25:af:6b:9f:11:c2:a5:d9:06:ad:48:3d:b0:ca:41: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6F:43:4F:8B:F2:7F:39:54:67:10:07:06:C6:29:08:65:B6:C0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b25b7e-3842-3dd9-8285-1aeeddb2197a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7e:47:ee:f5:90:9f:a5:65:dd:74:3f:c9:43:8d:c0:43:8b: df:1b:71:ba:4f:6c:01:97:a0:ea:fd:01:88:ab:ad:8a:6b:aa: 5b:08:9c:73:22:6a:88:ab:9f:30:62:67:47:e6:92:8e:0a:2e: ba:f7:de:83:d0:24:70:7a:41:ee:c1:d7:ad:4e:a0:43:ea:fc: c8:16:0a:bc:17:45:ca:23:02:fa:e9:d3:5b:ab:e9:6e:74:36: a3:e3:3c:32:ad:34:a2:02:67:5c:d7:f5:af:e3:29:11:51:76: 27:4b:71:11:dd:47:50:d6:3c:40:4b:03:41:80:14:d7:3f:34: 8f:4b:25:3b:ca:57:92:80:1c:99:1f:aa:6b:a0:eb:9b:44:0c: 5c:11:99:40:1e:9a:a7:3c:ef:71:89:ec:80:91:62:d6:6a:48: 39:67:7c:d3:8b:b6:15:05:5f:9f:38:73:3b:33:58:c6:14:fa: 5b:54:26:29:a6:c7:7e:42:cb:83:e8:ed:29:e8:e9:82:62:e9: 96:ba:e7:8d:c4:98:94:05:08:47:20:e9:b5:b7:55:fe:ab:4d: 2e:b4:e0:da:ab:97:91:dd:c0:80:65:b0:e4:b7:7c:46:b3:6d: 9c:b8:d0:c3:9b:1b:6a:37:65:e0:57:c8:00:54:25:ea:d9:dd: c3:84:0d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5KlSV4g+7crazpkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk MmY2MDc1ZDctZWRhOC00NzRlLWE5NGMtYzM3MjQyODY3ZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1gUO2b0QP/yeXbR+sMoNlivpbesahsV7EjP n4GTrJDkenpZuepLYcBBE66ycJI42e0MBe19eES7pfrpUJxiEGYLu6Qvtcu9tX/+ v9CprbS1NzOUY6lhNaTuLrr0gEVrkPd+3HuyNrHZe91N+45CuiCAbs3wZOAFFkcG DN+EkO/FUiGrV+zuGdICB4gFezO6OFUMXGpzBL2Gs6WkYoxNJNA5vlVlwbwZNVzV CYDSU3xsjrMcbC3xTbO3gaMhDJxju+NsOFXita3GbqLCUGy11Hpjkss1LuEv4EQH 78K4R8+awuVsGsNYTyyO7dnyPvYlr2ufEcKl2QatSD2wykFnyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhvQ0+L8n85VGcQBwbGKQhltsCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDliMjViN2UtMzg0Mi0z ZGQ5LTgyODUtMWFlZWRkYjIxOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV+R+71kJ+lZd10P8lDjcBDi98bcbpPbAGXoOr9AYirrYprqlsInHMi aoirnzBiZ0fmko4KLrr33oPQJHB6Qe7B161OoEPq/MgWCrwXRcojAvrp01ur6W50 NqPjPDKtNKICZ1zX9a/jKRFRdidLcRHdR1DWPEBLA0GAFNc/NI9LJTvKV5KAHJkf qmug65tEDFwRmUAemqc873GJ7ICRYtZqSDlnfNOLthUFX584czszWMYU+ltUJimm x35Cy4Po7Sno6YJi6Za6543EmJQFCEcg6bW3Vf6rTS604Nqrl5HdwIBlsOS3fEaz bZy40MObG2o3ZeBXyABUJerZ3cOEDZI= -----END CERTIFICATE-----Generated at Sat Jun 13 10:33:22 2026 by rpki-client