$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa File: 0917c851-a40a-30a1-a39b-23f91f1ca480.roa (raw, json) Hash identifier: XOekVvFHdHy4JfqueWfG0LSDQZKXnMbcv8n5cQGeQsA= Subject key identifier: BF:02:18:92:A8:51:69:2C:6F:E0:24:C5:D9:1F:37:9C:F2:63:88:FA Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BB45D44C62483BBB0E2380800 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 49770 IP address blocks: 108.165.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:44:c6:24:83:bb:b0:e2:38:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=977d6792-cc12-478d-8310-d99cc8c8d900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7b:fe:25:90:cc:03:35:9f:a3:1c:cb:7a:a2: a0:f2:d6:99:64:d6:53:5d:7e:ab:2b:20:c5:f1:f9: ca:ee:54:68:57:c3:7f:be:ed:fe:81:58:57:6c:a0: 50:3e:b7:c5:5d:de:b8:c4:2c:d0:09:ac:cb:9c:14: 4e:ca:34:d0:3f:46:5b:36:56:9b:2d:6d:3f:15:44: c5:c0:cc:3b:0c:6d:da:d8:b7:52:1b:99:97:fe:09: c2:87:ac:de:8d:52:7f:a4:24:f5:9b:eb:fe:a8:56: 7c:9e:59:81:fe:40:42:84:73:38:2d:dd:d4:57:fa: 6a:c6:fc:2f:6a:16:83:e5:c5:9e:e0:de:87:20:1b: b7:1c:7c:17:d4:34:f6:bc:79:b8:04:84:4a:ae:2d: f7:ef:9c:7e:2f:46:ed:c5:bf:0f:bf:35:27:75:d9: 3c:d5:ef:24:08:b6:a4:98:52:3b:d2:de:9c:03:39: 49:ef:93:ae:cf:5c:ac:64:db:31:45:9e:69:e6:3a: 43:27:16:3d:00:c4:92:67:49:6f:43:29:a3:47:9a: 1d:12:56:39:ed:18:50:67:b4:d9:db:ac:9e:ed:8e: f5:58:42:d0:2f:6b:54:2a:25:50:0a:6e:32:c0:1a: 39:55:01:9c:91:cd:16:63:8c:92:e6:f1:d6:5a:f9: c6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:02:18:92:A8:51:69:2C:6F:E0:24:C5:D9:1F:37:9C:F2:63:88:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0917c851-a40a-30a1-a39b-23f91f1ca480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e6:6b:38:b8:d7:b8:66:d1:48:da:14:b1:f4:f7:24:8d:48: 55:1f:1c:74:3d:87:5f:fc:dd:8f:80:e5:e3:62:cb:27:75:ea: 94:95:7f:21:e9:60:f3:0f:83:8c:bb:32:ea:72:29:71:0a:4e: 6e:6e:2c:dd:e0:95:0e:59:2d:9e:fa:29:90:0d:76:b3:7c:4e: cf:01:dd:13:a0:fc:9e:a4:95:11:c0:d6:ed:30:f2:79:e4:a8: eb:c2:c4:47:1a:74:06:6e:f3:01:cd:d1:45:c9:56:30:cd:f0: b9:c9:d3:5b:a1:7c:a8:19:93:ce:e3:58:3f:0a:ce:9a:eb:1c: e0:20:93:a2:03:15:36:53:72:a8:2f:9a:04:10:a9:cb:9c:eb: a1:1b:5b:77:56:7f:97:33:e4:08:e0:d9:aa:07:5f:b5:a9:ec: 0b:6e:5c:15:0a:10:42:bc:94:99:aa:39:91:58:7d:67:9c:af: a0:56:53:c0:0e:2c:87:1e:f4:a4:92:f5:64:2b:e2:2c:c1:41: 86:a7:25:00:77:07:07:49:4b:12:83:57:e0:2f:df:8a:d0:15: 08:91:45:ad:0c:d4:55:43:86:22:3e:4a:58:96:f4:88:04:0d: f1:44:06:4d:e7:1c:0d:56:17:a5:36:8d:00:05:c3:07:68:45: 23:d2:39:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUTGJIO7sOI4CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OTc3ZDY3OTItY2MxMi00NzhkLTgzMTAtZDk5Y2M4YzhkOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnv+JZDMAzWfoxzLeqKg8taZZNZTXX6rKyDF 8fnK7lRoV8N/vu3+gVhXbKBQPrfFXd64xCzQCazLnBROyjTQP0ZbNlabLW0/FUTF wMw7DG3a2LdSG5mX/gnCh6zejVJ/pCT1m+v+qFZ8nlmB/kBChHM4Ld3UV/pqxvwv ahaD5cWe4N6HIBu3HHwX1DT2vHm4BIRKri3375x+L0btxb8PvzUnddk81e8kCLak mFI70t6cAzlJ75Ouz1ysZNsxRZ5p5jpDJxY9AMSSZ0lvQymjR5odElY57RhQZ7TZ 26ye7Y71WELQL2tUKiVQCm4ywBo5VQGckc0WY4yS5vHWWvnGgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8CGJKoUWksb+AkxdkfN5zyY4j6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDkxN2M4NTEtYTQwYS0z MGExLWEzOWItMjNmOTFmMWNhNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLmazi417hm0UjaFLH09ySNSFUfHHQ9h1/83Y+A5eNiyyd16pSVfyHp YPMPg4y7MupyKXEKTm5uLN3glQ5ZLZ76KZANdrN8Ts8B3ROg/J6klRHA1u0w8nnk qOvCxEcadAZu8wHN0UXJVjDN8LnJ01uhfKgZk87jWD8KzprrHOAgk6IDFTZTcqgv mgQQqcuc66EbW3dWf5cz5Ajg2aoHX7Wp7AtuXBUKEEK8lJmqOZFYfWecr6BWU8AO LIce9KSS9WQr4izBQYanJQB3BwdJSxKDV+Av34rQFQiRRa0M1FVDhiI+SliW9IgE DfFEBk3nHA1WF6U2jQAFwwdoRSPSOfY= -----END CERTIFICATE-----Generated at Sun Nov 2 16:45:42 2025 by rpki-client