$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f5ba5bb-b675-3252-867d-042fc5360e20.roa File: 3f5ba5bb-b675-3252-867d-042fc5360e20.roa (raw, json) Hash identifier: 2EtvNXYfnj427uyM3RwwOcLvme+kAIFtbiMrjfuFnqw= Subject key identifier: E4:F9:3F:16:A7:59:64:DE:AE:FA:0F:31:C4:5B:BA:ED:86:02:77:F4 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A936B57B93F99B476742C4700 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f5ba5bb-b675-3252-867d-042fc5360e20.roa Signing time: Sun 20 Jul 2025 01:00:50 +0000 ROA not before: Sun 20 Jul 2025 01:00:50 +0000 ROA not after: Sat 18 Oct 2025 01:00:50 +0000 asID: 263812 IP address blocks: 108.165.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:6b:57:b9:3f:99:b4:76:74:2c:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 20 01:00:50 2025 GMT Not After : Oct 18 01:00:50 2025 GMT Subject: CN=163f39b6-9c04-4449-af89-3f739a32f556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:ef:3d:b3:b5:76:ed:aa:aa:6e:37:95:2f: ed:e1:ab:85:8f:8c:4f:aa:f8:b3:b8:47:95:6f:4f: e4:08:a5:10:48:d7:2b:22:68:4f:f0:46:6a:bc:1c: ee:15:73:35:c0:92:47:0c:c4:33:6b:07:3a:96:85: f9:e2:13:cf:65:d6:45:89:e9:dc:54:5a:7e:f8:2f: 8d:84:1b:a8:cf:3f:45:e9:68:8c:12:51:e4:7b:b6: 58:31:28:84:ef:d8:ce:06:91:44:b1:c6:3f:45:71: 27:fd:94:03:f3:55:49:e9:c0:4a:1f:d8:c0:75:ad: 33:0a:da:42:59:a4:d9:b6:3b:27:f4:8e:64:24:eb: 11:fe:55:22:da:fd:1f:8f:1b:b4:66:2f:9c:ea:0b: e1:88:47:18:ae:0f:4e:99:1c:e7:6e:11:a3:65:3c: 7c:3f:3f:16:48:21:37:a6:fa:fc:cb:27:d7:1e:7b: 7a:0b:13:b6:3e:75:03:30:1b:5c:7d:98:70:b3:c3: 46:47:42:da:5a:ed:57:f9:7a:74:a9:df:f7:ec:f2: 33:97:e1:c3:6b:8b:82:33:7d:0f:ee:3d:3a:37:9a: 96:0d:70:fe:87:cc:f1:92:bd:ed:4e:22:f9:87:8d: 50:16:96:10:35:d1:db:61:b1:b1:e7:d7:fa:3f:f5: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F9:3F:16:A7:59:64:DE:AE:FA:0F:31:C4:5B:BA:ED:86:02:77:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f5ba5bb-b675-3252-867d-042fc5360e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1a:a0:c2:6a:3c:d7:e4:c4:77:49:d0:20:5b:38:9c:a9:34: 22:e9:cb:27:5a:6b:5c:bf:1d:95:ca:c4:27:be:c1:de:0a:16: 0e:28:27:cd:eb:80:d3:e5:21:3e:09:d1:3a:4d:3e:c4:68:b7: be:fc:b2:79:ad:72:65:fc:6e:ff:96:6a:ee:9c:ad:b7:dd:65: 4b:28:cd:03:d7:8b:32:f1:ca:91:c4:97:a9:a8:0f:b8:ce:2f: 23:c1:b5:94:57:73:21:85:af:ea:23:1d:e4:e9:39:00:27:57: 27:21:04:04:2e:b3:ac:8c:0e:dc:0b:d6:a7:59:3f:22:a8:3b: 61:a5:27:f1:da:40:8a:74:a5:d5:0f:21:ff:0f:fe:6f:2b:e1: b5:fb:7a:65:63:26:2e:60:22:df:47:2d:93:30:7a:b2:2d:5e: ac:b7:01:2d:59:26:03:b4:a7:4f:46:26:72:db:d8:24:42:ef: 8c:a6:20:36:18:93:da:07:c2:c4:05:e3:2e:52:a5:c2:ce:25: 60:2b:5e:7f:da:75:b0:64:ec:e7:e5:ce:33:b2:03:1a:f2:b9: 4c:42:f0:1e:d4:15:bd:82:06:1e:7b:41:53:1a:21:7d:1d:6b: fe:e9:b5:09:c8:77:c3:04:de:e8:1c:a5:6d:65:3c:30:11:c8: 88:e5:f5:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqTa1e5P5m0dnQsRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk MTYzZjM5YjYtOWMwNC00NDQ5LWFmODktM2Y3MzlhMzJmNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3/vPbO1du2qqm43lS/t4auFj4xPqvizuEeV b0/kCKUQSNcrImhP8EZqvBzuFXM1wJJHDMQzawc6loX54hPPZdZFiencVFp++C+N hBuozz9F6WiMElHke7ZYMSiE79jOBpFEscY/RXEn/ZQD81VJ6cBKH9jAda0zCtpC WaTZtjsn9I5kJOsR/lUi2v0fjxu0Zi+c6gvhiEcYrg9OmRznbhGjZTx8Pz8WSCE3 pvr8yyfXHnt6CxO2PnUDMBtcfZhws8NGR0LaWu1X+Xp0qd/37PIzl+HDa4uCM30P 7j06N5qWDXD+h8zxkr3tTiL5h41QFpYQNdHbYbGx59f6P/VHQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT5PxanWWTervoPMcRbuu2GAnf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2Y1YmE1YmItYjY3NS0z MjUyLTg2N2QtMDQyZmM1MzYwZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4aoMJqPNfkxHdJ0CBbOJypNCLpyydaa1y/HZXKxCe+wd4KFg4oJ83r gNPlIT4J0TpNPsRot778snmtcmX8bv+Wau6crbfdZUsozQPXizLxypHEl6moD7jO LyPBtZRXcyGFr+ojHeTpOQAnVychBAQus6yMDtwL1qdZPyKoO2GlJ/HaQIp0pdUP If8P/m8r4bX7emVjJi5gIt9HLZMwerItXqy3AS1ZJgO0p09GJnLb2CRC74ymIDYY k9oHwsQF4y5SpcLOJWArXn/adbBk7OflzjOyAxryuUxC8B7UFb2CBh57QVMaIX0d a/7ptQnId8ME3ugcpW1lPDARyIjl9cI= -----END CERTIFICATE-----Generated at Wed Jul 23 14:09:22 2025 by rpki-client