$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c1282c1-4ff8-3569-8092-748b843df696.roa File: 1c1282c1-4ff8-3569-8092-748b843df696.roa (raw, json) Hash identifier: Mp6mpQIN0vfmF7ALeWnKoZjbAtmZkhG9DLWsDHayah0= Subject key identifier: A6:B9:C9:E0:67:38:67:A9:F1:50:9F:AE:64:BB:89:5C:4F:22:1E:B4 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B9E07CB938F5ED5426895C5F0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c1282c1-4ff8-3569-8092-748b843df696.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 401152 IP address blocks: 108.165.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cb:93:8f:5e:d5:42:68:95:c5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=d3db6fbc-fd78-4c3b-a005-dc5334142e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:58:77:45:ea:e8:8f:e3:79:80:9f:35:aa: dc:76:43:c8:18:2e:a2:39:bd:e1:7f:90:66:4f:8d: 55:75:13:a9:59:59:e1:67:5a:1a:b8:95:50:6b:87: 7a:90:ce:7a:03:03:0d:7f:ca:b4:0a:f3:6c:74:7b: 5b:bd:0b:46:25:2d:cd:0b:7f:36:b3:9e:20:f3:83: cd:e1:12:01:3a:b3:ad:81:4d:6f:ae:79:81:78:52: 00:80:e9:a0:1c:16:c0:f2:6f:73:65:99:7a:ff:0d: 5c:59:cb:7f:ce:cc:67:87:f8:cd:23:5b:c0:98:c6: 41:81:66:7d:3d:d9:6d:46:70:f2:5d:f7:48:a0:7e: 5d:7a:7c:36:46:53:6d:b3:20:21:75:4e:76:04:25: a5:2d:b0:3d:d0:a5:fa:c4:cb:cd:bf:30:83:06:82: 76:98:b8:32:de:ef:78:66:46:23:ca:42:09:45:e8: 87:90:f5:2b:29:bf:9a:2a:ca:e8:6c:4e:e4:8b:b7: fa:34:c2:c7:d2:ed:14:5e:ea:d0:b6:bf:80:ea:08: 99:c2:75:ec:69:0c:01:6c:51:2c:c7:dc:48:51:21: be:21:45:42:9e:da:c4:ff:80:fa:14:98:bb:6a:c8: 4b:55:52:7a:d3:c9:7b:ea:33:1b:da:80:4f:95:7a: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B9:C9:E0:67:38:67:A9:F1:50:9F:AE:64:BB:89:5C:4F:22:1E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c1282c1-4ff8-3569-8092-748b843df696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:aa:c8:98:56:39:99:b9:b7:fb:7f:28:0a:ac:db:99:c9:10: 74:bc:b0:c4:cd:0d:84:46:37:ac:60:90:10:ad:69:d6:ab:f3: 24:c1:68:14:a8:68:87:8b:b6:2d:bb:86:71:17:a2:b9:2d:ea: 2a:f6:3c:59:a5:5c:4b:cf:fd:bb:0b:16:f8:7c:67:6f:a4:1b: 6a:5c:5f:65:23:9a:19:bd:0a:d8:75:9c:03:de:f5:82:4f:2d: b1:5d:a5:da:6f:98:64:2e:00:ec:42:4a:e8:f4:28:ab:a7:ae: ab:5f:51:7d:4f:32:74:cf:59:c6:a9:bf:32:ae:ee:c9:5c:e0: d2:66:6d:29:57:8c:62:b8:6c:2b:72:4a:ca:10:f6:1d:2c:8b: 9c:05:81:1d:b0:05:e5:dc:81:f6:9e:48:22:06:9c:97:07:2d: 49:c3:ca:ad:cf:9e:ae:5e:f6:a9:2e:18:40:9e:17:d6:ee:6a: 79:f4:e3:65:78:c0:b2:65:c9:0c:fe:4c:63:c5:49:c0:ae:f9: a0:2b:d9:ea:7d:25:4a:0f:7b:09:3d:f0:a6:e4:04:b9:cf:d6: c0:bb:1b:6b:c4:89:4c:7a:a8:dd:35:4b:f0:97:36:d5:85:97: 56:20:50:52:ca:f3:b1:59:e1:6c:6d:10:e1:60:56:15:28:45: 37:63:d6:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8uTj17VQmiVxfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDNkYjZmYmMtZmQ3OC00YzNiLWEwMDUtZGM1MzM0MTQyZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFlYd0Xq6I/jeYCfNarcdkPIGC6iOb3hf5Bm T41VdROpWVnhZ1oauJVQa4d6kM56AwMNf8q0CvNsdHtbvQtGJS3NC382s54g84PN 4RIBOrOtgU1vrnmBeFIAgOmgHBbA8m9zZZl6/w1cWct/zsxnh/jNI1vAmMZBgWZ9 PdltRnDyXfdIoH5denw2RlNtsyAhdU52BCWlLbA90KX6xMvNvzCDBoJ2mLgy3u94 ZkYjykIJReiHkPUrKb+aKsrobE7ki7f6NMLH0u0UXurQtr+A6giZwnXsaQwBbFEs x9xIUSG+IUVCntrE/4D6FJi7ashLVVJ608l76jMb2oBPlXrFOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa5yeBnOGep8VCfrmS7iVxPIh60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWMxMjgyYzEtNGZmOC0z NTY5LTgwOTItNzQ4Yjg0M2RmNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOqyJhWOZm5t/t/KAqs25nJEHS8sMTNDYRGN6xgkBCtadar8yTBaBSo aIeLti27hnEXorkt6ir2PFmlXEvP/bsLFvh8Z2+kG2pcX2Ujmhm9Cth1nAPe9YJP LbFdpdpvmGQuAOxCSuj0KKunrqtfUX1PMnTPWcapvzKu7slc4NJmbSlXjGK4bCty SsoQ9h0si5wFgR2wBeXcgfaeSCIGnJcHLUnDyq3Pnq5e9qkuGECeF9buann042V4 wLJlyQz+TGPFScCu+aAr2ep9JUoPewk98KbkBLnP1sC7G2vEiUx6qN01S/CXNtWF l1YgUFLK87FZ4WxtEOFgVhUoRTdj1hA= -----END CERTIFICATE-----Generated at Sun Nov 2 16:49:19 2025 by rpki-client