$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa File: 05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa (raw, json) Hash identifier: q5emzveAsyXY9a4iAiHDxvDXWcMqD7/PtTv5D5nRRoE= Subject key identifier: 2C:49:F4:CA:00:AB:EE:BB:5F:E9:76:FD:19:25:5E:E8:16:96:63:3F Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BA93264BFC3E74040BB456560 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 401152 IP address blocks: 108.165.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:64:bf:c3:e7:40:40:bb:45:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=83acdb43-4973-4c55-8438-c3b90711e732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:17:8e:17:ff:28:f3:88:75:19:77:da:6a: ae:94:df:a3:49:56:a4:b9:10:d2:c6:e7:e9:5f:02: 6b:d8:3c:6b:ee:09:8c:a2:a0:7d:c8:3d:1c:91:4d: 83:d8:95:73:1e:eb:c6:01:20:ab:d8:54:ae:aa:89: 3f:5c:c2:ed:c0:fc:bb:8d:8a:34:ce:a0:79:ca:d0: 95:d7:be:6e:1e:04:68:45:62:2e:a5:6c:ff:c2:8f: 84:7e:5d:92:7e:e7:80:56:c4:55:e6:62:a0:11:af: 02:d8:2b:e7:23:bc:6c:9f:23:06:54:0f:4d:de:bf: e2:02:be:f7:19:4f:c0:b2:57:0c:90:04:8c:cc:3e: 03:52:be:2f:9e:d4:dc:dc:35:99:37:ae:95:a4:d0: fe:eb:13:e1:76:54:11:53:7e:e5:cb:3e:82:95:97: 97:7f:03:56:89:48:55:6f:70:a5:89:d5:a5:16:c5: 11:e8:a0:a1:93:2f:b3:4d:57:b0:5b:2b:2e:0a:81: 5f:19:bb:eb:de:df:80:f1:3d:76:a9:67:3d:44:7b: f6:fd:52:f4:c8:e4:cb:46:48:a7:1e:bf:10:2c:6a: fd:41:53:96:de:0b:78:4f:e5:c7:40:d7:e1:17:c1: 27:b4:94:63:2b:14:23:ed:70:3c:75:a2:20:c1:73: 0f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:49:F4:CA:00:AB:EE:BB:5F:E9:76:FD:19:25:5E:E8:16:96:63:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:a5:32:86:5a:68:e1:06:fe:37:49:70:5b:16:3e:4e:2a:7f: b9:0a:7c:74:94:05:32:79:9f:d5:b8:64:2d:a9:59:c8:ca:6d: ff:3e:04:76:20:2b:48:65:ea:d6:5f:04:3c:15:85:ad:6e:c9: 55:c2:bb:38:dc:a6:b9:5c:39:1f:2a:1f:1b:3e:f5:a7:61:fc: 03:a8:91:24:34:c6:2c:e5:b8:41:1b:a0:5f:8d:4e:9b:e8:42: d6:ee:14:ec:94:33:2d:84:d2:a5:48:40:1d:4a:55:18:1f:27: 28:72:b6:f1:d3:f8:72:51:47:89:0a:cd:30:94:e2:4f:34:6c: f8:f0:d1:37:4b:72:d8:ac:87:7e:f2:76:ee:52:cd:6b:f4:4f: 25:14:81:27:65:96:2c:5b:d5:26:51:c7:5f:2c:81:64:63:67: 3a:3f:28:ab:f7:82:47:fe:c2:4d:fb:61:11:d1:b3:ce:aa:b3: d7:46:bb:33:8b:ac:07:e5:e5:ac:90:42:ab:6a:63:7e:b9:15: ae:24:e2:41:64:89:0b:28:8d:44:78:53:67:71:a1:7a:8b:37: 24:1b:7f:3b:14:4b:22:52:5b:dc:ac:90:ea:48:bc:e2:bd:85: 81:0a:ef:76:ad:d3:27:f9:14:c7:01:10:a3:90:e4:21:b5:27: db:a2:3a:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmS/w+dAQLtFZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ODNhY2RiNDMtNDk3My00YzU1LTg0MzgtYzNiOTA3MTFlNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwYXjhf/KPOIdRl32mqulN+jSVakuRDSxufp XwJr2Dxr7gmMoqB9yD0ckU2D2JVzHuvGASCr2FSuqok/XMLtwPy7jYo0zqB5ytCV 175uHgRoRWIupWz/wo+Efl2SfueAVsRV5mKgEa8C2CvnI7xsnyMGVA9N3r/iAr73 GU/AslcMkASMzD4DUr4vntTc3DWZN66VpND+6xPhdlQRU37lyz6ClZeXfwNWiUhV b3ClidWlFsUR6KChky+zTVewWysuCoFfGbvr3t+A8T12qWc9RHv2/VL0yOTLRkin Hr8QLGr9QVOW3gt4T+XHQNfhF8EntJRjKxQj7XA8daIgwXMPYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxJ9MoAq+67X+l2/RklXugWlmM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDVlNmMwYjUtNmJiYy0z YWYyLWE4MTQtZmQ0NjVkOTczZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGlMoZaaOEG/jdJcFsWPk4qf7kKfHSUBTJ5n9W4ZC2pWcjKbf8+BHYg K0hl6tZfBDwVha1uyVXCuzjcprlcOR8qHxs+9adh/AOokSQ0xizluEEboF+NTpvo QtbuFOyUMy2E0qVIQB1KVRgfJyhytvHT+HJRR4kKzTCU4k80bPjw0TdLctish37y du5SzWv0TyUUgSdllixb1SZRx18sgWRjZzo/KKv3gkf+wk37YRHRs86qs9dGuzOL rAfl5ayQQqtqY365Fa4k4kFkiQsojUR4U2dxoXqLNyQbfzsUSyJSW9yskOpIvOK9 hYEK73at0yf5FMcBEKOQ5CG1J9uiOkw= -----END CERTIFICATE-----Generated at Sun Nov 2 16:45:41 2025 by rpki-client