$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa File: 10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa (raw, json) Hash identifier: aH1zrr7wbjeC6GO6BB5DF7777/QgpJ2zDxqn4VbOqHg= Subject key identifier: F8:E7:85:E1:FD:CE:10:1F:A6:B8:31:68:3B:93:7C:D3:84:0B:C3:FD Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B4E7710B83E74BEDB4AA6E200 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 211373 IP address blocks: 108.165.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:10:b8:3e:74:be:db:4a:a6:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=af1457d4-0803-4dd4-b0dc-dc4f6927ee97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fc:55:60:d4:57:bd:76:45:7d:cb:8c:b3:8b: 44:c6:07:da:28:2f:71:c2:5d:09:2d:fc:68:43:18: 4b:b7:ac:3f:3f:4d:7b:5b:4b:c5:84:79:fa:56:f3: 4e:28:f8:0c:52:eb:d5:84:62:07:af:d2:ee:b3:b5: 2f:f2:e6:35:b8:2e:5f:fe:4a:e1:9b:31:f6:f9:4a: d8:87:86:91:0e:6c:63:d6:a1:fb:f0:9e:9d:7d:2d: 04:f7:74:70:18:6a:54:5e:e2:1a:19:9e:14:73:a3: 2a:f4:a0:b8:cc:ab:ff:61:4a:53:9b:f6:17:9d:9a: a3:19:f4:ce:d5:ed:fc:2b:10:b2:eb:3a:91:8c:4d: 37:75:a5:06:a1:4a:d6:be:12:1f:d3:52:32:8a:6e: 5b:fe:9b:24:fd:7c:f7:4d:1a:88:13:8e:f0:b6:79: d5:e3:dc:ee:66:10:fa:c9:10:a6:4f:bf:f6:c1:ba: 3c:e2:03:05:c7:e4:79:23:b8:42:43:3d:7f:17:cc: 01:29:49:2c:5d:74:53:9d:3d:1f:52:b9:7d:94:eb: a1:99:ae:bd:fb:94:d8:08:ca:b6:53:67:6f:be:8e: 8d:7a:1e:88:27:bd:d4:70:ea:a8:ea:1a:4c:95:05: c5:87:75:bd:d4:7c:bd:d7:48:81:02:54:48:54:8c: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E7:85:E1:FD:CE:10:1F:A6:B8:31:68:3B:93:7C:D3:84:0B:C3:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ac:cf:45:ea:45:61:f7:ea:ac:f9:db:9b:4f:d0:af:b9:f5: a7:ad:6e:7d:29:13:55:f6:b0:96:5e:d8:c5:35:80:8e:c9:40: 6f:ac:26:0a:56:e1:f7:9d:89:94:7c:de:26:cf:94:39:00:b2: df:24:bd:68:e3:f2:23:77:8a:4a:52:45:c5:23:92:96:f6:39: 84:7b:61:f8:92:53:b4:86:0a:12:92:21:18:c5:ad:89:5e:8f: 9c:38:0d:d9:7d:0a:73:b7:02:6d:c0:dc:6d:9d:18:b9:71:73: 00:04:06:ba:05:da:1f:f3:73:98:c3:a5:02:48:e3:b0:d7:a3: 28:1b:85:16:84:00:86:a9:d9:97:51:95:58:d4:f8:10:ef:35: 0e:1d:dc:a3:c7:22:4b:79:66:1c:76:1a:fa:1f:b8:09:6a:db: 89:94:5a:55:16:24:0b:77:b9:e7:44:8d:4e:82:d1:24:50:12: 52:eb:1d:32:b2:77:39:7f:e2:c7:a9:a9:79:05:fc:0b:d7:9e: f4:b4:0a:7e:d3:61:2d:2f:06:24:09:4f:bd:da:8d:a4:cc:b0: 19:a7:af:e2:88:9d:8c:d9:da:80:e2:00:77:5c:3a:ff:7b:3b: a0:be:4a:b6:b7:5b:d5:36:2c:36:c9:1f:ae:cd:4e:b3:70:6a: 1b:c2:b7:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxC4PnS+20qm4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YWYxNDU3ZDQtMDgwMy00ZGQ0LWIwZGMtZGM0ZjY5MjdlZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfxVYNRXvXZFfcuMs4tExgfaKC9xwl0JLfxo QxhLt6w/P017W0vFhHn6VvNOKPgMUuvVhGIHr9Lus7Uv8uY1uC5f/krhmzH2+UrY h4aRDmxj1qH78J6dfS0E93RwGGpUXuIaGZ4Uc6Mq9KC4zKv/YUpTm/YXnZqjGfTO 1e38KxCy6zqRjE03daUGoUrWvhIf01Iyim5b/psk/Xz3TRqIE47wtnnV49zuZhD6 yRCmT7/2wbo84gMFx+R5I7hCQz1/F8wBKUksXXRTnT0fUrl9lOuhma69+5TYCMq2 U2dvvo6Neh6IJ73UcOqo6hpMlQXFh3W91Hy910iBAlRIVIyuKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjnheH9zhAfprgxaDuTfNOEC8P9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTBkMjc2YWItZjc1MS0z NWYwLWEzZTktNTc1ZDhmMmNlYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCsz0XqRWH36qz525tP0K+59aetbn0pE1X2sJZe2MU1gI7JQG+sJgpW 4fediZR83ibPlDkAst8kvWjj8iN3ikpSRcUjkpb2OYR7YfiSU7SGChKSIRjFrYle j5w4Ddl9CnO3Am3A3G2dGLlxcwAEBroF2h/zc5jDpQJI47DXoygbhRaEAIap2ZdR lVjU+BDvNQ4d3KPHIkt5Zhx2GvofuAlq24mUWlUWJAt3uedEjU6C0SRQElLrHTKy dzl/4sepqXkF/AvXnvS0Cn7TYS0vBiQJT73ajaTMsBmnr+KInYzZ2oDiAHdcOv97 O6C+Sra3W9U2LDbJH67NTrNwahvCt8U= -----END CERTIFICATE-----Generated at Sun Nov 2 16:47:37 2025 by rpki-client