$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa File: 3725b52d-21b1-360d-acbc-9771dcda46e5.roa (raw, json) Hash identifier: DBKcTtOKyEC/pSAn4+IaTfE7UaC3kq3/X2XzmJqWFkg= Subject key identifier: DF:46:6E:DB:F5:19:13:30:0D:24:D5:68:55:58:B2:6C:E3:17:10:A4 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BCD9B0947780FA815659ECB00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 19437 IP address blocks: 108.165.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:09:47:78:0f:a8:15:65:9e:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=15ebec9d-ea2b-439e-b2d6-6f8364dd681d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:ed:4a:e2:78:92:41:4a:f6:cf:f7:40:dd: 3c:6e:ad:c0:f5:0c:8f:bb:83:05:0b:bb:7a:08:a4: cd:ca:a2:b4:e3:0d:00:7a:6c:00:17:ce:cc:cb:c3: 94:30:d7:fc:49:24:4c:8c:25:7e:07:00:2b:66:ee: 54:5f:69:02:53:e1:de:73:37:59:cf:7a:ca:b2:27: 3a:24:79:6f:c4:63:23:9d:2f:9d:46:51:2e:33:7c: 76:e0:63:62:b9:5d:4b:75:39:0f:17:29:b3:76:2a: c7:cc:f2:46:96:6e:4c:cb:16:48:4b:dd:4c:b6:2e: a5:79:52:cf:e7:6e:b2:e5:47:3f:d5:f1:f0:bd:70: 9c:93:6a:b9:13:fc:9b:53:90:dd:f3:84:72:d9:80: d6:14:93:f1:d5:21:9c:8d:c3:27:9c:a6:dd:61:44: e9:38:62:22:ac:80:13:37:c3:bb:71:f0:49:52:c1: a6:4d:59:c7:e6:3c:78:b7:79:a0:52:ce:06:0f:e2: 1c:17:c0:60:fc:f8:79:61:3e:f6:55:e7:57:9e:dd: ca:c7:83:59:75:7e:90:ea:f9:5d:f6:9d:90:7a:b7: c1:8d:bc:57:fb:85:c0:d4:2b:98:72:7b:53:8f:4d: 9b:41:d8:83:76:f6:ff:92:97:97:09:58:be:ef:6a: cb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:46:6E:DB:F5:19:13:30:0D:24:D5:68:55:58:B2:6C:E3:17:10:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:1d:1d:53:03:e7:08:91:46:b0:a9:6e:46:8f:5b:86:82:0b: dc:34:ac:30:bb:6b:88:76:32:22:fa:1c:f4:29:4a:f3:0f:c6: ed:77:f4:6c:ef:b5:8c:c6:2b:79:a0:71:97:72:08:1f:2a:73: d5:5a:b1:6a:71:5f:89:d2:db:c5:4b:19:8d:62:9a:a4:e0:4d: 3c:2a:e8:a5:72:20:63:ec:b8:40:9f:c1:27:38:12:5e:26:d3: b2:73:e6:2a:9d:1d:41:a3:77:0a:cb:b7:c5:2e:46:94:87:28: 98:5a:44:70:da:75:56:af:9d:d9:e1:aa:bb:9a:d7:4d:97:eb: 7c:a9:33:d4:96:85:c3:f7:66:d6:79:55:e8:af:21:05:19:52: d8:8d:35:06:f6:07:14:84:d6:2c:1c:70:35:73:b4:dd:9a:b7: 6e:2c:06:ed:73:67:74:5e:2f:f8:43:78:d2:9b:e6:54:8c:6d: f3:7f:d7:4b:ad:7b:e2:b9:43:9d:81:1e:6d:9f:99:1f:ac:c8: f8:43:ad:96:d5:88:20:65:74:04:de:23:a3:4e:6a:4a:8f:07: 9c:fb:5a:e7:df:cd:43:27:3d:68:0b:cd:f7:0f:df:06:80:52: 7f:5a:4b:b2:b8:73:c5:fc:be:3f:0e:25:33:2b:ac:8a:e9:32: 3f:15:0d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmwlHeA+oFWWeywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTVlYmVjOWQtZWEyYi00MzllLWIyZDYtNmY4MzY0ZGQ2ODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzPtSuJ4kkFK9s/3QN08bq3A9QyPu4MFC7t6 CKTNyqK04w0AemwAF87My8OUMNf8SSRMjCV+BwArZu5UX2kCU+HeczdZz3rKsic6 JHlvxGMjnS+dRlEuM3x24GNiuV1LdTkPFymzdirHzPJGlm5MyxZIS91Mti6leVLP 526y5Uc/1fHwvXCck2q5E/ybU5Dd84Ry2YDWFJPx1SGcjcMnnKbdYUTpOGIirIAT N8O7cfBJUsGmTVnH5jx4t3mgUs4GD+IcF8Bg/Ph5YT72VedXnt3Kx4NZdX6Q6vld 9p2QerfBjbxX+4XA1CuYcntTj02bQdiDdvb/kpeXCVi+72rLowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9Gbtv1GRMwDSTVaFVYsmzjFxCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzcyNWI1MmQtMjFiMS0z NjBkLWFjYmMtOTc3MWRjZGE0NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsdHVMD5wiRRrCpbkaPW4aCC9w0rDC7a4h2MiL6HPQpSvMPxu139Gzv tYzGK3mgcZdyCB8qc9VasWpxX4nS28VLGY1imqTgTTwq6KVyIGPsuECfwSc4El4m 07Jz5iqdHUGjdwrLt8UuRpSHKJhaRHDadVavndnhqrua102X63ypM9SWhcP3ZtZ5 VeivIQUZUtiNNQb2BxSE1iwccDVztN2at24sBu1zZ3ReL/hDeNKb5lSMbfN/10ut e+K5Q52BHm2fmR+syPhDrZbViCBldATeI6NOakqPB5z7WuffzUMnPWgLzfcP3waA Un9aS7K4c8X8vj8OJTMrrIrpMj8VDdo= -----END CERTIFICATE-----Generated at Sun Nov 16 13:56:58 2025 by rpki-client