$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94c2cd0e-20c7-321f-a30e-d248bd1b3639.roa File: 94c2cd0e-20c7-321f-a30e-d248bd1b3639.roa (raw, json) Hash identifier: 2FbRdc7MkB+fDr5odU+HaNKBRtaDTzfOxNBQnfH34V0= Subject key identifier: E6:CB:64:7D:49:6F:F7:F5:C0:67:D9:D4:52:84:7B:3A:FB:91:8A:92 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BD9597CB4A4C05BE5A4A18BB0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94c2cd0e-20c7-321f-a30e-d248bd1b3639.roa Signing time: Thu 13 Nov 2025 18:58:25 +0000 ROA not before: Thu 13 Nov 2025 18:58:25 +0000 ROA not after: Wed 11 Feb 2026 18:58:25 +0000 asID: 215728 IP address blocks: 108.165.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d9:59:7c:b4:a4:c0:5b:e5:a4:a1:8b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 13 18:58:25 2025 GMT Not After : Feb 11 18:58:25 2026 GMT Subject: CN=cf9923d2-20b9-4c2b-8a8c-bb7b0e1ca6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:32:ae:75:e9:f4:c5:6a:ec:cb:1b:8c:f4:d6: b2:0f:f0:bc:ec:2c:f2:a3:c2:c2:b2:19:13:1d:c9: 39:6e:35:60:7e:97:94:fb:62:2c:4e:e8:82:33:d0: 05:3d:1d:2b:91:60:dd:c9:0a:02:2d:f7:e2:18:32: 80:ac:d5:9b:f1:22:04:f2:c4:64:45:b7:ed:63:e9: 7b:2b:1b:b5:1e:ec:c7:d8:66:d1:e7:64:19:28:44: c7:02:c0:d0:8b:b2:d0:07:a0:90:4f:ee:a9:8d:2b: 25:cb:c7:e4:51:fe:40:e6:46:c4:2b:85:27:63:47: ea:3e:a3:75:1e:57:13:98:77:37:97:10:33:e5:1f: a5:bd:42:d2:e9:e4:2b:7f:ab:98:6d:65:2b:45:65: e7:e2:91:3c:ee:a1:03:2f:44:2f:e5:d9:9e:06:5c: f5:70:b3:d4:7d:3a:ca:15:08:b5:cc:65:a9:5a:dd: 5d:38:97:69:de:cb:ad:9d:f7:71:db:a1:05:c5:51: d7:a0:57:0c:e6:a6:b6:c2:88:3e:9d:6b:cb:d7:bd: c4:00:de:7d:63:5e:69:37:95:ec:c5:9d:d7:c5:55: ca:7c:54:37:9f:6e:ee:f7:5c:73:94:be:ea:1c:bf: d7:a6:dd:98:55:24:eb:5f:4b:ea:35:ed:b3:82:df: 69:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CB:64:7D:49:6F:F7:F5:C0:67:D9:D4:52:84:7B:3A:FB:91:8A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94c2cd0e-20c7-321f-a30e-d248bd1b3639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:2b:45:8e:01:37:df:02:d2:b6:ad:e1:48:5a:4d:96:05:4a: 34:a9:9d:cd:a9:25:31:0e:dd:5e:dd:bc:f1:05:12:20:36:18: 75:e3:00:ac:2e:1c:03:46:d0:f5:ca:ef:c0:4d:c8:f1:02:49: 1d:79:47:d6:b6:99:0e:c9:bd:9a:bb:83:1e:91:3c:cb:17:c7: ad:e9:f2:5a:f0:7c:0c:d6:3d:63:38:3b:da:e6:79:eb:c7:ce: ac:0d:e7:a4:ae:f7:f1:78:39:5d:ef:2f:97:ce:3b:ce:24:f9: c3:ba:82:30:8f:51:93:54:2c:26:21:e3:b7:c9:d2:6d:45:cd: 22:9b:a1:47:71:cc:d2:48:f0:db:2f:ef:a8:44:67:c4:b9:08: 4a:39:cc:67:cf:a9:34:03:e7:0a:71:74:15:bc:9b:01:7c:e7: 7e:31:d9:08:74:7a:08:4a:45:9f:ea:ea:49:d2:02:f0:1b:4a: 9f:83:ed:04:71:9a:51:9a:18:40:1d:60:7d:de:78:6d:00:b6: e9:32:53:fa:36:37:e7:9b:b1:77:b2:30:1d:2b:5b:9c:2f:40: e6:84:b9:f9:84:bc:12:4a:c0:27:7e:9f:fc:b2:cd:5a:08:23: 69:ad:6a:b6:ba:4e:cd:b4:70:03:04:6b:6e:29:e5:14:3b:29: 3d:ca:c6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvZWXy0pMBb5aShi7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTExMzE4NTgyNVoXDTI2MDIxMTE4NTgyNVowLzEtMCsGA1UEAxMk Y2Y5OTIzZDItMjBiOS00YzJiLThhOGMtYmI3YjBlMWNhNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jKuden0xWrsyxuM9NayD/C87Czyo8LCshkT Hck5bjVgfpeU+2IsTuiCM9AFPR0rkWDdyQoCLffiGDKArNWb8SIE8sRkRbftY+l7 Kxu1HuzH2GbR52QZKETHAsDQi7LQB6CQT+6pjSsly8fkUf5A5kbEK4UnY0fqPqN1 HlcTmHc3lxAz5R+lvULS6eQrf6uYbWUrRWXn4pE87qEDL0Qv5dmeBlz1cLPUfTrK FQi1zGWpWt1dOJdp3sutnfdx26EFxVHXoFcM5qa2wog+nWvL173EAN59Y15pN5Xs xZ3XxVXKfFQ3n27u91xzlL7qHL/Xpt2YVSTrX0vqNe2zgt9pXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObLZH1Jb/f1wGfZ1FKEezr7kYqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTRjMmNkMGUtMjBjNy0z MjFmLWEzMGUtZDI0OGJkMWIzNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcrRY4BN98C0rat4UhaTZYFSjSpnc2pJTEO3V7dvPEFEiA2GHXjAKwu HANG0PXK78BNyPECSR15R9a2mQ7JvZq7gx6RPMsXx63p8lrwfAzWPWM4O9rmeevH zqwN56Su9/F4OV3vL5fOO84k+cO6gjCPUZNULCYh47fJ0m1FzSKboUdxzNJI8Nsv 76hEZ8S5CEo5zGfPqTQD5wpxdBW8mwF8534x2Qh0eghKRZ/q6knSAvAbSp+D7QRx mlGaGEAdYH3eeG0AtukyU/o2N+ebsXeyMB0rW5wvQOaEufmEvBJKwCd+n/yyzVoI I2mtara6Ts20cAMEa24p5RQ7KT3Kxrs= -----END CERTIFICATE-----Generated at Sun Nov 16 13:53:29 2025 by rpki-client