$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/417dbdf3-edb9-31ea-8083-255bd02a57b3.roa File: 417dbdf3-edb9-31ea-8083-255bd02a57b3.roa (raw, json) Hash identifier: G51g1w1EsHBmZSmMFCE25xGqO9FKVNPDoI7ftDVjG0A= Subject key identifier: 85:A7:86:07:35:CE:54:B1:D4:0A:4C:9E:03:4B:34:FA:1B:10:8D:AD Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B944222EF73230FBBE1EC0080 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/417dbdf3-edb9-31ea-8083-255bd02a57b3.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 401152 IP address blocks: 108.165.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:22:ef:73:23:0f:bb:e1:ec:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=447db418-a7ed-4696-a3d1-4669e8f1ec0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e3:b4:4f:bb:ce:ca:35:c1:d2:9a:af:bb:e9: ff:29:be:82:ea:cc:e7:53:aa:5b:02:f8:43:90:d9: 03:51:d5:8a:b4:e0:13:aa:2d:97:32:f4:fd:74:09: 46:2f:50:0c:45:99:7b:56:b0:c4:ab:e4:01:c9:1d: be:de:33:81:3c:c5:a3:1f:e4:04:c6:ba:92:21:23: 0a:05:31:85:2a:29:18:f3:be:8f:81:38:f5:61:37: 84:7e:bf:19:d8:88:97:71:9b:73:19:ee:3f:b4:43: 4d:15:37:b9:d5:fa:71:53:e0:0a:87:45:60:3d:77: b5:e3:e6:8a:e5:e7:d9:79:7d:76:87:4d:f4:8d:0d: 2d:24:ae:29:a9:0a:11:81:c7:b7:08:ac:0c:32:5e: 88:b9:6a:15:93:6c:47:a8:af:26:f0:62:af:96:3e: fb:a9:56:95:de:c8:b5:72:68:31:bc:9a:81:f5:72: 7b:7b:9b:3f:f8:d2:59:8c:da:40:ab:e3:69:9c:01: 77:45:6d:48:e3:ef:2c:3d:0a:17:db:24:f7:64:85: ac:ed:3d:51:3f:8b:70:47:16:08:00:c3:18:49:a8: 84:dc:da:b1:99:ba:81:8d:41:66:33:30:32:bf:ee: fa:6c:6f:f4:51:1d:52:9b:86:0a:c4:17:bb:0e:dd: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A7:86:07:35:CE:54:B1:D4:0A:4C:9E:03:4B:34:FA:1B:10:8D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/417dbdf3-edb9-31ea-8083-255bd02a57b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8e:a9:0c:e9:b8:ce:f8:f1:31:32:bf:9a:f9:5c:8d:9e:5c: 0b:21:a9:19:df:32:1e:0f:10:bd:cf:3c:1c:83:e1:fe:2d:6b: ed:ab:ed:a8:52:78:2c:31:9d:0c:d9:c3:f8:da:63:4d:15:5f: 12:a5:46:92:8c:2d:8c:44:80:f0:dd:3a:a6:54:00:ec:fb:e3: 18:f8:c4:ad:26:2b:cc:64:98:4b:9b:7a:10:36:4b:7b:e3:54: 55:52:4f:82:db:db:85:3d:a2:c6:1b:30:19:19:e0:e6:fe:ac: 15:57:d7:3a:00:88:91:8d:ad:9d:af:88:40:f1:f3:fb:fd:45: 09:03:45:b8:94:6c:b2:be:3d:67:62:cd:a5:b9:b5:21:ae:79: 6d:d4:cc:86:d2:6d:42:54:b0:dd:0b:05:c4:fa:c6:d6:e4:1b: dc:55:ec:32:0f:60:4f:6a:65:80:5d:a2:d8:8e:e3:e4:8e:18: 80:d6:5d:f0:a1:bf:06:7d:02:37:36:a6:2a:95:29:af:a4:d0: 0e:a0:22:0e:3b:03:3b:ba:9d:22:f1:bf:06:7e:b1:23:14:25: 1b:17:03:d6:74:25:f0:84:64:b5:a5:60:60:8e:c2:eb:a0:f3: 28:db:bc:69:21:78:21:18:9a:64:7f:65:35:50:e1:b4:ea:c4: 68:30:42:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiLvcyMPu+HsAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk NDQ3ZGI0MTgtYTdlZC00Njk2LWEzZDEtNDY2OWU4ZjFlYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+OO0T7vOyjXB0pqvu+n/Kb6C6sznU6pbAvhD kNkDUdWKtOATqi2XMvT9dAlGL1AMRZl7VrDEq+QByR2+3jOBPMWjH+QExrqSISMK BTGFKikY876PgTj1YTeEfr8Z2IiXcZtzGe4/tENNFTe51fpxU+AKh0VgPXe14+aK 5efZeX12h030jQ0tJK4pqQoRgce3CKwMMl6IuWoVk2xHqK8m8GKvlj77qVaV3si1 cmgxvJqB9XJ7e5s/+NJZjNpAq+NpnAF3RW1I4+8sPQoX2yT3ZIWs7T1RP4twRxYI AMMYSaiE3NqxmbqBjUFmMzAyv+76bG/0UR1Sm4YKxBe7Dt3ohQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWnhgc1zlSx1ApMngNLNPobEI2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDE3ZGJkZjMtZWRiOS0z MWVhLTgwODMtMjU1YmQwMmE1N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCOqQzpuM748TEyv5r5XI2eXAshqRnfMh4PEL3PPByD4f4ta+2r7ahS eCwxnQzZw/jaY00VXxKlRpKMLYxEgPDdOqZUAOz74xj4xK0mK8xkmEubehA2S3vj VFVST4Lb24U9osYbMBkZ4Ob+rBVX1zoAiJGNrZ2viEDx8/v9RQkDRbiUbLK+PWdi zaW5tSGueW3UzIbSbUJUsN0LBcT6xtbkG9xV7DIPYE9qZYBdotiO4+SOGIDWXfCh vwZ9Ajc2piqVKa+k0A6gIg47Azu6nSLxvwZ+sSMUJRsXA9Z0JfCEZLWlYGCOwuug 8yjbvGkheCEYmmR/ZTVQ4bTqxGgwQsk= -----END CERTIFICATE-----Generated at Mon Nov 3 11:16:20 2025 by rpki-client