$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9b2afdb4-38ee-355b-955f-3737073c78b7.roa File: 9b2afdb4-38ee-355b-955f-3737073c78b7.roa (raw, json) Hash identifier: IJQWvfpgwOPhDNTHNBTwUHkHOFXbm61FVMWuRYyAc2k= Subject key identifier: D0:2B:97:CA:41:CD:40:32:B3:17:00:22:B7:8D:3B:92:DE:F2:D7:44 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A9E655F6F66EDE8DDB0DBD100 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9b2afdb4-38ee-355b-955f-3737073c78b7.roa Signing time: Wed 23 Jul 2025 23:22:44 +0000 ROA not before: Wed 23 Jul 2025 23:22:44 +0000 ROA not after: Tue 21 Oct 2025 23:22:44 +0000 asID: 7385 IP address blocks: 108.165.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:65:5f:6f:66:ed:e8:dd:b0:db:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 23 23:22:44 2025 GMT Not After : Oct 21 23:22:44 2025 GMT Subject: CN=c4ac978e-5cda-47c6-a07d-32ba07dca387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:43:22:1f:1f:71:33:f9:8a:7b:da:42:e4:9e: 7f:6c:81:ea:d8:4b:7e:61:86:d5:ff:b4:33:0d:7f: 0c:e5:80:73:16:81:59:3b:f3:72:d1:1c:51:e6:22: 0d:c2:66:8e:a7:49:4e:a9:12:db:f0:5f:17:dc:d2: 45:03:03:07:dc:13:4f:62:cc:05:36:8c:f7:f1:25: f8:a9:84:e6:b9:e7:92:4b:83:89:00:cd:17:ec:4b: 2c:8a:d5:1e:74:fe:e6:11:72:fe:18:bf:2e:02:25: 13:01:5a:c5:da:78:b7:c8:d8:ef:ab:8a:4a:e1:f7: 2e:54:48:18:ef:47:e1:87:fb:8e:01:37:ec:7e:c7: c6:75:6d:f3:c3:a8:c7:2d:fc:81:c9:84:bb:f8:f5: 66:a7:99:ac:d4:15:cb:4e:d1:5a:83:1c:1c:ef:0e: 5f:36:af:8c:2b:10:94:00:9f:79:df:7d:ad:b0:41: 05:66:ce:de:31:32:ba:2d:7f:f7:25:76:95:64:fa: 0f:46:c5:d3:ac:6d:17:4e:10:09:97:7f:ab:ef:47: 0d:7f:dd:59:b5:85:fe:93:21:07:86:35:6f:20:96: 0d:0c:8d:a0:1c:fc:99:a0:37:9d:ae:c6:e7:84:57: 87:6a:c7:3e:0d:2f:ec:6a:80:39:65:e4:07:1f:23: 77:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2B:97:CA:41:CD:40:32:B3:17:00:22:B7:8D:3B:92:DE:F2:D7:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9b2afdb4-38ee-355b-955f-3737073c78b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2b:b2:e0:cf:1e:03:cb:6d:ab:aa:fa:fa:b7:59:1f:c4:cc: d8:ed:81:c9:fe:86:58:1a:6a:13:5f:3d:0b:64:66:a3:d0:87: 5d:75:06:fa:c9:aa:15:75:43:49:3f:3d:aa:ed:41:8b:34:7e: 7d:81:70:6a:44:25:01:78:57:bb:21:35:59:7a:9e:d0:b0:38: 49:3c:90:42:46:9b:42:48:49:ca:a3:4f:64:de:8f:49:be:8a: f7:e6:da:fa:c0:73:e1:f4:82:db:7d:2d:cc:68:f0:d5:f0:66: cf:82:60:af:1d:4e:61:cb:c6:35:54:d3:28:b1:b7:45:75:86: 79:f7:13:d4:0d:4c:89:eb:dd:24:78:4e:78:c1:5b:cf:91:e8: fd:16:31:17:e6:f9:b4:d3:10:2a:6c:b0:01:d4:00:b1:20:59: 72:2d:eb:73:32:9b:0b:73:2b:22:b4:28:1a:b0:32:23:a3:17: 88:5a:df:58:97:a2:81:ce:6e:d2:1b:52:19:e3:24:40:88:fa: dc:56:5a:f2:28:5f:5b:8e:99:17:e0:cd:3b:35:1d:7f:1e:ed: 71:5b:d4:0a:1b:cb:b3:32:9b:b7:ee:ef:65:c0:d6:b3:21:2a: 3c:43:fd:1f:e3:59:e6:2b:d1:e0:b4:2a:ba:74:ac:2a:7d:33: 0a:e1:4c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeZV9vZu3o3bDb0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcyMzIzMjI0NFoXDTI1MTAyMTIzMjI0NFowLzEtMCsGA1UEAxMk YzRhYzk3OGUtNWNkYS00N2M2LWEwN2QtMzJiYTA3ZGNhMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEMiHx9xM/mKe9pC5J5/bIHq2Et+YYbV/7Qz DX8M5YBzFoFZO/Ny0RxR5iINwmaOp0lOqRLb8F8X3NJFAwMH3BNPYswFNoz38SX4 qYTmueeSS4OJAM0X7EssitUedP7mEXL+GL8uAiUTAVrF2ni3yNjvq4pK4fcuVEgY 70fhh/uOATfsfsfGdW3zw6jHLfyByYS7+PVmp5ms1BXLTtFagxwc7w5fNq+MKxCU AJ95332tsEEFZs7eMTK6LX/3JXaVZPoPRsXTrG0XThAJl3+r70cNf91ZtYX+kyEH hjVvIJYNDI2gHPyZoDedrsbnhFeHasc+DS/saoA5ZeQHHyN31QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNArl8pBzUAysxcAIreNO5Le8tdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWIyYWZkYjQtMzhlZS0z NTViLTk1NWYtMzczNzA3M2M3OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMrsuDPHgPLbauq+vq3WR/EzNjtgcn+hlgaahNfPQtkZqPQh111BvrJ qhV1Q0k/PartQYs0fn2BcGpEJQF4V7shNVl6ntCwOEk8kEJGm0JIScqjT2Tej0m+ ivfm2vrAc+H0gtt9Lcxo8NXwZs+CYK8dTmHLxjVU0yixt0V1hnn3E9QNTInr3SR4 TnjBW8+R6P0WMRfm+bTTECpssAHUALEgWXIt63MymwtzKyK0KBqwMiOjF4ha31iX ooHObtIbUhnjJECI+txWWvIoX1uOmRfgzTs1HX8e7XFb1Aoby7Mym7fu72XA1rMh KjxD/R/jWeYr0eC0Krp0rCp9MwrhTEE= -----END CERTIFICATE-----Generated at Sat Jul 26 13:11:10 2025 by rpki-client