$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6a28421f-97b4-3d54-b7fb-239986b71f20.roa File: 6a28421f-97b4-3d54-b7fb-239986b71f20.roa (raw, json) Hash identifier: Dhb3c1/WYoXtHaIZ0PBe3UJ2MLgEO6m/gw0GZlAWLmw= Subject key identifier: 34:46:ED:DC:81:27:31:9F:B5:D3:C2:D4:CF:A0:D4:D2:D2:58:89:94 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AD3A127A539351E220123FEC0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6a28421f-97b4-3d54-b7fb-239986b71f20.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 108.165.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:27:a5:39:35:1e:22:01:23:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=4cf36447-f6dd-48bd-a68f-ea10729c4046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:a8:e4:db:a7:e8:23:85:af:97:28:bf:44: 8c:30:0f:27:99:40:d8:ca:42:1b:ad:1c:94:67:a7: af:e3:10:00:71:c7:b6:d2:e8:9a:c8:72:f9:ee:6a: 83:6c:13:a7:42:a1:5c:8e:49:ec:dc:21:4e:65:0b: 01:52:13:bc:0b:9a:f5:41:3f:24:7d:79:19:c2:db: 32:b1:a7:4f:c9:26:ec:58:cd:86:b0:df:c1:49:29: 5c:67:25:cb:c2:96:2f:89:b5:3b:b5:35:ed:4c:82: 34:02:ab:9d:7b:64:e5:ec:9f:44:8b:81:c5:3c:90: a4:cd:36:e1:b1:cc:3c:c8:2c:08:ff:b9:d0:18:de: 2d:7c:52:4e:8a:0e:4a:9b:19:64:d8:98:dc:22:57: 77:91:07:12:32:95:08:5e:63:d5:0e:f0:04:09:fe: a3:cd:88:d1:cc:14:82:9c:8d:4f:81:da:a5:54:a5: 72:2a:20:cb:e4:bb:6b:73:c8:8a:c8:e8:4b:a9:47: 57:65:0f:cd:57:7b:5a:34:7d:bf:73:f2:d8:7f:dc: e6:ff:fe:8f:52:c5:e8:cf:6b:a2:55:4a:e2:65:3c: c3:98:40:81:57:e2:82:da:43:f1:8e:44:02:a1:cf: 42:05:2c:59:71:3b:ec:1c:58:6c:db:88:a5:f1:f8: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:46:ED:DC:81:27:31:9F:B5:D3:C2:D4:CF:A0:D4:D2:D2:58:89:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6a28421f-97b4-3d54-b7fb-239986b71f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:dc:af:6e:9d:87:2a:b0:51:b3:02:fc:d6:d7:d5:14:07:26: 58:ce:01:0d:e6:3d:b6:7a:48:90:fe:a3:4b:66:a6:68:28:62: de:10:62:68:44:82:6e:90:08:83:e4:f0:db:ba:e1:c4:60:41: b2:0a:5d:47:b6:3e:6e:ca:b4:82:b9:6a:62:b7:39:26:c1:c2: b3:83:4b:49:22:07:11:ee:d4:5f:ba:20:c3:2d:09:9f:09:15: 11:91:5c:a5:ae:61:12:d6:03:6f:60:f5:bd:a8:39:cb:6c:b8: 51:42:75:b5:89:e6:0e:00:08:33:32:be:72:22:20:54:6d:3c: d2:4d:47:52:f1:4a:32:64:83:20:e2:b3:a4:9e:27:b1:d3:31: b2:c9:0b:89:5e:49:aa:c7:bb:4c:29:78:99:f3:22:7a:c9:61: 0f:90:14:19:cc:1c:c3:a5:b8:6a:5c:1a:78:d9:a8:bc:f4:85: ab:77:94:ca:c6:3d:18:68:d8:99:5f:d2:7e:c1:c4:e3:96:d4: ac:29:d8:c9:7f:cb:de:4b:f7:98:7b:96:a0:94:b9:5a:5e:ef: ee:92:86:99:51:71:10:fa:c3:00:58:eb:12:1e:50:4e:b5:7d: e4:f6:39:32:e5:1a:df:7b:42:bf:be:63:f8:12:d8:10:a4:0d: 8c:d2:48:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSelOTUeIgEj/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NGNmMzY0NDctZjZkZC00OGJkLWE2OGYtZWExMDcyOWM0MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE6o5Nun6COFr5cov0SMMA8nmUDYykIbrRyU Z6ev4xAAcce20uiayHL57mqDbBOnQqFcjkns3CFOZQsBUhO8C5r1QT8kfXkZwtsy sadPySbsWM2GsN/BSSlcZyXLwpYvibU7tTXtTII0Aqude2Tl7J9Ei4HFPJCkzTbh scw8yCwI/7nQGN4tfFJOig5Kmxlk2JjcIld3kQcSMpUIXmPVDvAECf6jzYjRzBSC nI1PgdqlVKVyKiDL5Ltrc8iKyOhLqUdXZQ/NV3taNH2/c/LYf9zm//6PUsXoz2ui VUriZTzDmECBV+KC2kPxjkQCoc9CBSxZcTvsHFhs24il8fhZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRG7dyBJzGftdPC1M+g1NLSWImUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmEyODQyMWYtOTdiNC0z ZDU0LWI3ZmItMjM5OTg2YjcxZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDcr26dhyqwUbMC/NbX1RQHJljOAQ3mPbZ6SJD+o0tmpmgoYt4QYmhE gm6QCIPk8Nu64cRgQbIKXUe2Pm7KtIK5amK3OSbBwrODS0kiBxHu1F+6IMMtCZ8J FRGRXKWuYRLWA29g9b2oOctsuFFCdbWJ5g4ACDMyvnIiIFRtPNJNR1LxSjJkgyDi s6SeJ7HTMbLJC4leSarHu0wpeJnzInrJYQ+QFBnMHMOluGpcGnjZqLz0hat3lMrG PRho2Jlf0n7BxOOW1Kwp2Ml/y95L95h7lqCUuVpe7+6ShplRcRD6wwBY6xIeUE61 feT2OTLlGt97Qr++Y/gS2BCkDYzSSHM= -----END CERTIFICATE-----Generated at Wed Aug 20 10:49:54 2025 by rpki-client