$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/08bef632-5db3-3d8f-b371-3ed8b23cc900.roa File: 08bef632-5db3-3d8f-b371-3ed8b23cc900.roa (raw, json) Hash identifier: twhGlcGajEqHk5JRDxOQWGSy/JPEZFmcemYBOaEq8Lc= Subject key identifier: 50:47:A1:4B:97:24:B6:43:F9:88:84:5A:5F:B5:0D:C3:E2:76:9D:E5 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AE63B3BF34219A7A35234E7C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/08bef632-5db3-3d8f-b371-3ed8b23cc900.roa Signing time: Mon 18 Aug 2025 16:56:02 +0000 ROA not before: Mon 18 Aug 2025 16:56:02 +0000 ROA not after: Sun 16 Nov 2025 17:56:02 +0000 asID: 7385 IP address blocks: 108.165.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:3b:3b:f3:42:19:a7:a3:52:34:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 18 16:56:02 2025 GMT Not After : Nov 16 17:56:02 2025 GMT Subject: CN=8d84be2b-fa38-43fa-b191-ee3e569cd184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:83:47:03:97:06:4c:f5:af:95:29:42:34:38: 3a:5c:ab:a7:a8:8a:9b:e6:f8:e1:c8:e7:79:e5:a3: 71:3b:dc:5e:12:9c:5e:77:6f:8e:f8:b3:5b:92:50: 62:15:d9:2d:0f:9d:7a:89:80:4e:75:ab:ff:db:8d: 35:c3:a9:83:73:31:a9:41:73:8a:ae:42:ce:75:62: a5:b8:c3:92:6f:7b:24:b7:f4:48:44:04:62:57:11: 97:e5:5e:4d:8b:a8:9c:50:d8:20:3f:de:77:49:87: a7:03:d2:f8:c8:1f:9b:33:7b:b7:30:0f:07:d8:5b: a9:a7:77:6f:d0:b3:d7:12:ec:fc:f7:93:43:60:74: 3e:8f:e9:1e:b6:28:6a:c5:21:fc:f0:d9:95:46:7f: 9f:09:40:bf:8b:80:16:80:dd:87:6c:84:68:4c:0e: 7d:2f:36:f2:91:50:c6:7c:56:d3:f5:b4:36:ed:41: 93:45:86:b3:97:d9:78:94:6a:8d:54:16:5d:a6:51: 66:97:28:42:d9:02:6c:ea:e6:88:2c:c6:51:ad:63: 69:74:79:2d:0e:08:d9:01:08:3b:11:20:37:6f:0c: 96:26:a6:e8:b4:15:6f:02:69:0a:aa:38:78:63:9e: d0:4e:51:b3:e6:f1:42:29:83:59:fe:cf:9b:f8:d0: 96:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:47:A1:4B:97:24:B6:43:F9:88:84:5A:5F:B5:0D:C3:E2:76:9D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/08bef632-5db3-3d8f-b371-3ed8b23cc900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:9c:0e:c9:00:8c:c2:80:42:a3:9e:de:e5:89:5f:a5:2b:61: ea:31:0d:bd:ec:9d:d3:42:41:21:b3:2a:33:2b:e5:10:c4:b8: 37:fa:b3:e1:3c:b0:c1:56:98:12:ed:7c:7b:ef:f6:b5:43:1e: 8c:71:1f:af:85:3e:d8:33:1a:86:31:47:62:57:e1:bb:8f:64: c1:1e:a1:fc:a2:76:2f:eb:68:49:18:07:7a:58:2c:a6:93:bb: bf:9c:bf:53:51:6a:3f:c0:d1:de:f2:42:0f:fd:93:95:53:a5: 6f:da:a3:90:88:91:dd:ed:4f:41:cd:44:6c:07:8f:57:b6:f3: 9d:c9:f4:ab:ef:e8:b5:38:76:83:67:90:03:ae:ef:b2:99:b4: 55:24:eb:8d:ff:aa:79:bb:92:b9:6f:92:09:59:83:5c:72:f6: 28:7b:e6:e1:e5:08:80:98:86:93:79:1c:19:24:72:fc:1c:6e: 17:77:f1:b9:2c:99:46:93:32:c5:58:f2:60:c2:ba:18:25:93: 06:54:26:80:08:d1:0c:24:70:77:76:ac:ec:a5:14:74:33:dd: eb:55:5f:0a:c4:07:9d:f2:09:9c:7d:e0:6b:4f:35:bd:4f:cb: cc:65:36:70:bf:32:f3:88:e5:e9:2c:49:24:b6:73:cc:ff:74: a3:34:7b:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmOzvzQhmno1I058AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgxODE2NTYwMloXDTI1MTExNjE3NTYwMlowLzEtMCsGA1UEAxMk OGQ4NGJlMmItZmEzOC00M2ZhLWIxOTEtZWUzZTU2OWNkMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4NHA5cGTPWvlSlCNDg6XKunqIqb5vjhyOd5 5aNxO9xeEpxed2+O+LNbklBiFdktD516iYBOdav/2401w6mDczGpQXOKrkLOdWKl uMOSb3skt/RIRARiVxGX5V5Ni6icUNggP953SYenA9L4yB+bM3u3MA8H2Fupp3dv 0LPXEuz895NDYHQ+j+ketihqxSH88NmVRn+fCUC/i4AWgN2HbIRoTA59LzbykVDG fFbT9bQ27UGTRYazl9l4lGqNVBZdplFmlyhC2QJs6uaILMZRrWNpdHktDgjZAQg7 ESA3bwyWJqbotBVvAmkKqjh4Y57QTlGz5vFCKYNZ/s+b+NCW8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBHoUuXJLZD+YiEWl+1DcPidp3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDhiZWY2MzItNWRiMy0z ZDhmLWIzNzEtM2VkOGIyM2NjOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACucDskAjMKAQqOe3uWJX6UrYeoxDb3sndNCQSGzKjMr5RDEuDf6s+E8 sMFWmBLtfHvv9rVDHoxxH6+FPtgzGoYxR2JX4buPZMEeofyidi/raEkYB3pYLKaT u7+cv1NRaj/A0d7yQg/9k5VTpW/ao5CIkd3tT0HNRGwHj1e2853J9Kvv6LU4doNn kAOu77KZtFUk643/qnm7krlvkglZg1xy9ih75uHlCICYhpN5HBkkcvwcbhd38bks mUaTMsVY8mDCuhglkwZUJoAI0QwkcHd2rOylFHQz3etVXwrEB53yCZx94GtPNb1P y8xlNnC/MvOI5eksSSS2c8z/dKM0e9g= -----END CERTIFICATE-----Generated at Wed Aug 20 13:16:07 2025 by rpki-client