$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f949c55e-9f70-3020-b1ee-7e76499b444e.roa File: f949c55e-9f70-3020-b1ee-7e76499b444e.roa (raw, json) Hash identifier: 8VrMTFs4a+1+McbvBG+mayBm52OiIlowEbIY2BeGG3k= Subject key identifier: 5D:9C:7F:3B:65:B4:C4:56:DD:A8:E3:72:AD:03:38:A0:35:BD:D2:4C Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F35E7C525471398C1A0820480 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f949c55e-9f70-3020-b1ee-7e76499b444e.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 21859 IP address blocks: 108.165.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c5:25:47:13:98:c1:a0:82:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=3b59a2b2-1965-42bd-abff-a6ee73260485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7f:69:b8:c7:94:b6:2e:0f:f9:60:fa:03:42: 70:93:31:b5:b3:29:b0:ee:6a:73:b7:ff:a0:cb:c4: e5:27:a6:a0:4e:bb:e3:7a:59:79:76:d5:54:97:c8: 9f:16:5a:32:40:b9:f6:89:5a:f3:66:61:5f:1c:8a: 52:25:95:45:3a:a1:fc:16:4a:2b:26:7c:a5:6b:53: 72:91:f8:b9:33:39:b9:a2:d4:ba:15:88:45:f3:4e: 79:d2:86:fc:2f:94:73:3e:39:1d:fa:a1:47:70:80: ea:87:46:33:a0:ad:c5:4c:c6:70:65:51:61:37:7e: 97:fd:a3:02:6d:a8:80:f7:7a:d1:25:bd:63:e6:96: bd:8e:79:44:5e:4c:f1:d1:20:33:36:37:c8:6e:3b: 08:0a:7f:15:20:ea:9f:77:83:0d:5b:ed:32:ef:d1: 12:47:38:e0:87:b2:b7:69:c9:b5:15:7e:ef:e2:9e: b4:0e:79:7b:ff:cb:fa:e6:d4:bb:f2:bd:d5:b6:14: 2a:ee:0a:c5:2e:27:97:b6:ca:e2:7b:24:15:94:4c: b1:10:2a:2b:63:cb:6e:51:66:2e:bf:d3:9f:c8:d7: 1b:19:d4:87:55:67:72:58:3e:5c:79:68:cf:5c:91: 03:52:2e:f3:c0:3a:b8:b7:79:a5:b7:1f:ff:96:68: 11:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9C:7F:3B:65:B4:C4:56:DD:A8:E3:72:AD:03:38:A0:35:BD:D2:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f949c55e-9f70-3020-b1ee-7e76499b444e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:66:3b:24:f4:76:ae:34:06:86:06:58:51:a5:f4:28:28:7c: ff:a3:e7:90:45:3c:1d:8b:b4:59:65:b5:89:90:6e:a8:66:2e: d0:a2:08:66:89:88:b1:41:f6:30:d7:c2:73:21:33:52:89:17: 96:ac:fe:9c:0e:d4:8c:61:e1:e7:a3:0a:dc:53:21:75:99:a6: 96:d8:84:83:e4:20:75:04:5c:97:69:0d:37:2e:f0:72:8a:66: e7:a4:3d:e8:92:05:01:6c:f1:b3:f5:a9:75:21:b0:f4:ec:58: de:45:ba:ae:91:5f:6b:6d:7c:61:ca:3a:77:53:70:a3:4a:c1: 1e:b7:94:21:00:2c:a3:58:1d:3e:14:91:4b:4b:83:db:a3:04: 05:ba:ad:69:33:ce:20:e5:cd:84:9c:2b:da:f8:30:ad:bd:0b: e9:6a:25:76:c9:01:ab:93:ce:35:81:38:96:db:26:24:36:43: ba:a6:42:4b:79:01:27:1c:e0:25:01:ff:27:f9:1e:00:9e:0e: ae:fa:26:b8:f3:29:9d:a9:2b:6e:a7:ff:9a:4b:97:a9:b4:f9: 8c:90:33:52:6b:50:b4:80:4e:ee:de:1c:bf:c5:c9:25:d1:81: 29:73:ec:49:06:51:c4:a3:ce:a7:04:51:78:28:b3:bc:ec:a9: e3:e8:7a:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158UlRxOYwaCCBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk M2I1OWEyYjItMTk2NS00MmJkLWFiZmYtYTZlZTczMjYwNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX9puMeUti4P+WD6A0JwkzG1symw7mpzt/+g y8TlJ6agTrvjell5dtVUl8ifFloyQLn2iVrzZmFfHIpSJZVFOqH8FkorJnyla1Ny kfi5Mzm5otS6FYhF80550ob8L5RzPjkd+qFHcIDqh0YzoK3FTMZwZVFhN36X/aMC baiA93rRJb1j5pa9jnlEXkzx0SAzNjfIbjsICn8VIOqfd4MNW+0y79ESRzjgh7K3 acm1FX7v4p60Dnl7/8v65tS78r3VthQq7grFLieXtsrieyQVlEyxECorY8tuUWYu v9OfyNcbGdSHVWdyWD5ceWjPXJEDUi7zwDq4t3mltx//lmgRwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2cfztltMRW3ajjcq0DOKA1vdJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjk0OWM1NWUtOWY3MC0z MDIwLWIxZWUtN2U3NjQ5OWI0NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKV2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1mOyT0dq40BoYGWFGl9CgofP+j55BFPB2LtFlltYmQbqhmLtCiCGaJ iLFB9jDXwnMhM1KJF5as/pwO1Ixh4eejCtxTIXWZppbYhIPkIHUEXJdpDTcu8HKK ZuekPeiSBQFs8bP1qXUhsPTsWN5Fuq6RX2ttfGHKOndTcKNKwR63lCEALKNYHT4U kUtLg9ujBAW6rWkzziDlzYScK9r4MK29C+lqJXbJAauTzjWBOJbbJiQ2Q7qmQkt5 AScc4CUB/yf5HgCeDq76JrjzKZ2pK26n/5pLl6m0+YyQM1JrULSATu7eHL/FySXR gSlz7EkGUcSjzqcEUXgos7zsqePoevI= -----END CERTIFICATE-----Generated at Tue Sep 22 14:12:35 2026 by rpki-client