$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/84f591e2-29b0-34f2-bf1d-02a48a67e082.roa File: 84f591e2-29b0-34f2-bf1d-02a48a67e082.roa (raw, json) Hash identifier: 7DegO1ZM5sgsjwF4ld+3/4OOMx/t4JN1wE0A7UFcDDo= Subject key identifier: E2:41:86:59:77:4F:9F:B8:9E:66:07:6E:2A:B9:A6:00:87:97:C9:58 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B7B220896B84219DDBF0270C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/84f591e2-29b0-34f2-bf1d-02a48a67e082.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 7385 IP address blocks: 108.165.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:08:96:b8:42:19:dd:bf:02:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=1623cb44-4f69-4c7c-94ad-0f638ed238c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8f:df:52:e4:fb:b6:0c:24:80:15:a3:b1:61: d9:48:e4:f3:72:08:67:4a:06:fe:a0:69:14:8e:ad: 13:4e:7b:fe:03:4e:35:19:e1:74:3a:aa:89:32:4b: 86:ee:11:b5:c5:aa:74:47:34:8e:40:b3:7d:2e:de: f5:ef:05:11:d1:48:ca:a5:2e:1b:05:3b:34:bf:a8: 38:96:36:9b:bf:34:b3:50:4d:36:f9:d2:e9:61:42: 14:30:a8:3e:6c:fb:bd:c0:97:f7:01:a0:d0:46:41: 47:78:db:c1:d0:68:b9:97:c0:5b:b6:22:19:0c:54: 65:22:3d:f4:41:bf:ac:5e:95:7e:d5:4c:f6:f8:c8: ad:d3:11:c4:80:2b:fc:74:b5:c9:3b:a6:f0:2e:f2: 53:af:3b:10:44:39:87:cb:dd:7d:3e:e8:c7:cb:ca: 7d:3a:87:a2:ab:40:33:58:7b:ea:a8:09:15:5e:cd: 44:b2:01:54:2f:d2:4a:b5:e3:a4:05:93:26:61:77: fc:f6:a2:3c:2c:ee:55:0a:0f:ac:5e:06:22:bf:fa: f9:e7:3f:9e:12:98:bf:f4:ac:61:03:8f:9a:e7:11: 46:51:34:e5:47:61:3a:65:83:b0:da:eb:50:2b:62: 91:99:35:d3:6a:77:94:92:f1:5a:5d:fd:28:20:bb: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:41:86:59:77:4F:9F:B8:9E:66:07:6E:2A:B9:A6:00:87:97:C9:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/84f591e2-29b0-34f2-bf1d-02a48a67e082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b7:64:85:5c:47:8b:b7:c1:30:4c:bb:97:a1:2d:23:e5:f0: 8f:65:e4:e8:33:2b:93:d8:48:52:d5:f4:50:68:8e:06:ac:a2: f3:b3:ad:04:6c:ec:48:58:34:02:cc:1b:d6:9d:a3:fd:9d:06: bc:63:bc:bd:50:c8:34:d7:42:ac:42:8c:75:24:2e:61:05:78: dc:de:5d:03:fa:38:d7:f4:0a:0d:62:8b:e7:bf:a3:19:51:15: 1c:98:0d:d6:81:bb:b2:6d:02:fd:2c:58:0c:29:e3:ee:ce:16: 06:a5:f1:76:4e:0c:ae:72:89:e0:c8:14:95:30:64:ec:22:20: ce:34:d6:14:6d:53:0a:c2:67:fa:9b:95:c8:c3:f0:9d:51:28: 4a:e7:be:03:e0:cc:8b:b3:31:cb:f3:98:e6:71:69:e1:7d:23: e9:31:74:1b:55:dd:de:3b:1a:9a:51:de:f8:c7:dc:f2:b6:a1: b4:d0:27:9a:ce:17:4c:d5:b5:f3:3f:18:20:b4:58:24:5f:2e: 6a:ee:0d:79:b2:cf:b2:bf:54:fb:d6:1f:de:fe:bf:8a:76:75: 68:c7:b9:12:19:97:54:bc:fb:7d:48:65:0d:8a:20:68:24:fd: fd:48:21:dd:77:8c:aa:83:5d:23:4f:0c:ab:0b:ea:44:27:52: ce:17:c8:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgiWuEIZ3b8CcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk MTYyM2NiNDQtNGY2OS00YzdjLTk0YWQtMGY2MzhlZDIzOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI/fUuT7tgwkgBWjsWHZSOTzcghnSgb+oGkU jq0TTnv+A041GeF0OqqJMkuG7hG1xap0RzSOQLN9Lt717wUR0UjKpS4bBTs0v6g4 ljabvzSzUE02+dLpYUIUMKg+bPu9wJf3AaDQRkFHeNvB0Gi5l8BbtiIZDFRlIj30 Qb+sXpV+1Uz2+Mit0xHEgCv8dLXJO6bwLvJTrzsQRDmHy919PujHy8p9Ooeiq0Az WHvqqAkVXs1EsgFUL9JKteOkBZMmYXf89qI8LO5VCg+sXgYiv/r55z+eEpi/9Kxh A4+a5xFGUTTlR2E6ZYOw2utQK2KRmTXTaneUkvFaXf0oILuRkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJBhll3T5+4nmYHbiq5pgCHl8lYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODRmNTkxZTItMjliMC0z NGYyLWJmMWQtMDJhNDhhNjdlMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa3ZIVcR4u3wTBMu5ehLSPl8I9l5OgzK5PYSFLV9FBojgasovOzrQRs 7EhYNALMG9ado/2dBrxjvL1QyDTXQqxCjHUkLmEFeNzeXQP6ONf0Cg1ii+e/oxlR FRyYDdaBu7JtAv0sWAwp4+7OFgal8XZODK5yieDIFJUwZOwiIM401hRtUwrCZ/qb lcjD8J1RKErnvgPgzIuzMcvzmOZxaeF9I+kxdBtV3d47GppR3vjH3PK2obTQJ5rO F0zVtfM/GCC0WCRfLmruDXmyz7K/VPvWH97+v4p2dWjHuRIZl1S8+31IZQ2KIGgk /f1IId13jKqDXSNPDKsL6kQnUs4XyEY= -----END CERTIFICATE-----Generated at Sun Nov 2 16:47:39 2025 by rpki-client