$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb891d0f-51d7-3449-9ff8-e8851927508a.roa File: bb891d0f-51d7-3449-9ff8-e8851927508a.roa (raw, json) Hash identifier: juPaaeOgD04P+C7NVD0UOAWLXGUn1PGsWDE4vlwflzY= Subject key identifier: C6:29:CF:DA:21:84:BB:79:D9:43:56:A3:C3:BE:A7:E6:F6:F7:15:07 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AD23BB39259EB8FC09AD52700 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb891d0f-51d7-3449-9ff8-e8851927508a.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 401152 IP address blocks: 108.165.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b3:92:59:eb:8f:c0:9a:d5:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=9d7cd521-62fa-465a-8627-f353cd4d90f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:79:07:a3:df:6c:67:58:45:4f:76:20:9a:e8: 0a:47:1e:41:b3:1f:b7:84:a7:0c:f9:50:69:f0:53: 33:39:51:53:9c:b7:86:9d:51:2d:e5:dc:13:c5:d8: 69:c3:07:f2:0c:eb:3f:2b:a2:6e:0b:4b:97:a6:c7: f5:8f:b7:95:aa:c9:35:cc:07:33:da:f5:7a:c2:7a: b8:29:d2:f4:76:23:32:4f:fe:89:18:45:b8:6a:f1: f4:f1:82:f2:b8:11:a0:75:41:d8:ec:c1:65:47:1e: df:e9:45:0f:75:bc:f0:82:2d:e5:57:3b:c9:9b:9d: 05:7f:06:94:81:ee:6f:c8:1f:18:eb:55:3c:a6:13: 0c:85:24:78:77:d6:50:4e:57:a9:fe:5f:19:2c:e5: 4f:25:d2:1a:81:28:39:bb:11:f4:b4:e7:08:2c:77: 3b:1e:a5:7a:de:dc:9c:c0:2c:53:f0:c6:9a:e7:52: e0:7f:c5:84:09:d8:13:3e:6c:69:9f:2a:19:bb:5c: bb:72:b4:9a:fb:df:ea:ed:92:68:34:a5:7d:61:1a: 8b:b6:fb:ed:c9:6f:d7:e7:e8:1b:82:56:a8:c0:8c: ae:45:b7:46:cc:a6:13:ab:a1:c8:42:39:7e:93:9e: 61:5e:f2:9c:a8:db:2e:61:50:7e:d6:98:34:97:09: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:29:CF:DA:21:84:BB:79:D9:43:56:A3:C3:BE:A7:E6:F6:F7:15:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb891d0f-51d7-3449-9ff8-e8851927508a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:5b:63:93:0e:bb:17:97:2f:01:88:88:20:13:19:1f:79:28: 74:1a:c6:64:53:f5:ba:d3:2b:ce:23:d0:47:4a:22:04:ea:63: 82:ef:c5:a4:bf:2b:06:3d:0f:c8:73:a7:fb:3e:43:eb:5c:c2: cd:cd:97:16:0d:4e:53:13:b3:0d:88:0d:ef:03:98:09:e4:f6: d0:23:60:f5:96:b1:4d:27:81:9d:62:a9:35:d4:34:84:de:4e: 72:f1:24:e2:83:cf:7c:0c:80:4c:57:98:c3:68:ec:aa:f7:3c: 1f:6e:17:e2:03:17:e8:31:5a:86:6b:c8:47:62:f9:f5:16:91: 72:59:87:92:d6:0c:81:f1:f8:9e:6e:75:9f:f2:91:f2:66:46: 23:1c:21:f2:52:71:2e:3e:d8:4e:e0:b7:62:b8:85:a2:6e:22: f2:15:d1:49:e0:41:b3:ce:22:23:b6:a7:50:12:68:5a:2b:51: 72:69:0e:d2:d6:41:66:0e:12:1f:8b:bc:70:31:21:44:2e:6d: 32:58:8b:51:d6:b3:1c:78:75:13:20:97:50:06:6d:dc:1a:2c: ec:0c:fe:f6:c6:eb:c5:d5:43:6e:fd:00:ab:aa:6c:7f:7e:b2: b7:f9:80:6b:29:f6:c0:80:cc:a6:44:42:87:3d:33:6d:42:c5: 3f:a5:f9:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7OSWeuPwJrVJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OWQ3Y2Q1MjEtNjJmYS00NjVhLTg2MjctZjM1M2NkNGQ5MGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknkHo99sZ1hFT3YgmugKRx5Bsx+3hKcM+VBp 8FMzOVFTnLeGnVEt5dwTxdhpwwfyDOs/K6JuC0uXpsf1j7eVqsk1zAcz2vV6wnq4 KdL0diMyT/6JGEW4avH08YLyuBGgdUHY7MFlRx7f6UUPdbzwgi3lVzvJm50FfwaU ge5vyB8Y61U8phMMhSR4d9ZQTlep/l8ZLOVPJdIagSg5uxH0tOcILHc7HqV63tyc wCxT8Maa51Lgf8WECdgTPmxpnyoZu1y7crSa+9/q7ZJoNKV9YRqLtvvtyW/X5+gb glaowIyuRbdGzKYTq6HIQjl+k55hXvKcqNsuYVB+1pg0lwnEDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYpz9ohhLt52UNWo8O+p+b29xUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmI4OTFkMGYtNTFkNy0z NDQ5LTlmZjgtZTg4NTE5Mjc1MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZbY5MOuxeXLwGIiCATGR95KHQaxmRT9brTK84j0EdKIgTqY4LvxaS/ KwY9D8hzp/s+Q+tcws3NlxYNTlMTsw2IDe8DmAnk9tAjYPWWsU0ngZ1iqTXUNITe TnLxJOKDz3wMgExXmMNo7Kr3PB9uF+IDF+gxWoZryEdi+fUWkXJZh5LWDIHx+J5u dZ/ykfJmRiMcIfJScS4+2E7gt2K4haJuIvIV0UngQbPOIiO2p1ASaForUXJpDtLW QWYOEh+LvHAxIUQubTJYi1HWsxx4dRMgl1AGbdwaLOwM/vbG68XVQ279AKuqbH9+ srf5gGsp9sCAzKZEQoc9M21CxT+l+X4= -----END CERTIFICATE-----Generated at Wed Aug 20 13:17:16 2025 by rpki-client