$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1eba011-8a80-35bd-8938-7631ea52b2c8.roa File: c1eba011-8a80-35bd-8938-7631ea52b2c8.roa (raw, json) Hash identifier: V9apPxIfWqFgD5kID2GM3dGe1MBIYNcSAdv7+V3HQsE= Subject key identifier: A2:AD:6B:BB:53:92:AD:52:C7:35:5B:7E:36:00:AA:E3:08:2F:2E:2D Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B970CDF3B52D2109C3D4E9A30 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1eba011-8a80-35bd-8938-7631ea52b2c8.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 401152 IP address blocks: 108.165.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:df:3b:52:d2:10:9c:3d:4e:9a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=eef585e2-2f97-492e-8ccb-a13090769269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:15:3a:75:e6:6b:2c:88:e2:7e:56:20:18: 7a:c6:e8:aa:6f:de:6b:01:0b:1e:2c:e0:da:76:45: 6f:d9:9f:5c:59:de:05:0d:a8:cd:d7:cc:29:d5:a8: c4:6f:0b:68:55:b0:4f:77:ca:ff:24:0d:41:10:cd: 2b:b6:0b:a1:f6:14:cb:10:f4:82:9e:14:6c:32:72: e9:5e:1f:06:b9:ff:0f:e2:ba:70:fc:c4:f5:59:5b: d6:a5:a2:5b:0d:eb:9f:2c:de:e3:b4:7f:b2:d5:50: 60:d1:18:03:e3:24:f4:81:a1:8f:cd:f2:37:83:2c: bd:bb:8c:3b:41:8e:55:36:db:6d:00:f4:93:57:82: 21:0c:d5:fa:28:ca:d9:18:b9:9e:08:d7:8d:1c:48: a3:a3:fa:1b:c1:4e:01:80:66:c9:ae:f3:c3:99:77: cc:fb:a1:60:b7:cb:89:00:2a:f7:02:f4:37:0f:3f: 62:11:90:c8:59:6f:01:c2:65:6e:7b:4a:4d:10:70: 73:89:32:6b:05:56:b9:4c:f9:cd:eb:38:46:35:7c: c4:c9:f2:06:0e:db:d2:36:17:8f:54:b7:2c:9c:63: 42:d2:e7:73:28:a9:f4:54:19:87:14:49:a3:42:ff: 3e:7a:b9:2f:56:0f:40:29:ab:d7:ef:4e:79:66:06: 98:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AD:6B:BB:53:92:AD:52:C7:35:5B:7E:36:00:AA:E3:08:2F:2E:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1eba011-8a80-35bd-8938-7631ea52b2c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e6:63:3a:d0:92:8b:c2:a0:e2:de:b2:6f:f5:8f:27:6e:46: bf:8c:42:e9:be:ec:a3:67:fc:84:16:4c:38:f7:1b:15:65:5d: 79:36:a0:8b:7f:d1:bc:d4:e8:f4:30:2f:fa:dc:1b:59:a9:d5: 90:45:c8:73:fb:50:e2:8f:a2:9d:19:40:7c:78:bc:09:92:38: a4:6e:24:7f:f7:fb:0a:fa:39:2d:8c:2a:4a:44:30:7f:5f:48: 02:f6:0e:d6:3d:bf:de:46:81:61:2d:f7:e7:c9:f9:cf:68:70: 90:32:86:fc:57:a4:48:ef:0d:d4:2f:02:1f:4c:4b:71:da:e0: fb:02:b4:f0:a7:c7:b4:12:4e:79:99:8b:bd:29:87:dc:b6:0d: 9b:8c:56:92:65:69:9e:9e:b5:18:e3:17:4c:1d:8e:34:6b:c0: 99:01:f9:45:01:4a:c0:49:dd:e1:5a:ce:db:5c:24:eb:ac:ab: 46:ba:1a:6f:4b:b0:bb:87:17:b8:80:42:cc:5b:ae:fe:24:35: b4:61:f1:c1:06:94:8a:0d:67:a4:1a:1d:6d:7c:d4:b9:64:4f: bb:9f:17:59:13:d9:06:d0:6d:a4:f9:f4:0b:93:7d:80:ff:b8: cc:54:35:b7:db:b8:ce:11:fe:77:d8:39:f3:c2:07:d5:a2:6e: 87:dc:4d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDN87UtIQnD1OmjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZWVmNTg1ZTItMmY5Ny00OTJlLThjY2ItYTEzMDkwNzY5MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqIVOnXmayyI4n5WIBh6xuiqb95rAQseLODa dkVv2Z9cWd4FDajN18wp1ajEbwtoVbBPd8r/JA1BEM0rtguh9hTLEPSCnhRsMnLp Xh8Guf8P4rpw/MT1WVvWpaJbDeufLN7jtH+y1VBg0RgD4yT0gaGPzfI3gyy9u4w7 QY5VNtttAPSTV4IhDNX6KMrZGLmeCNeNHEijo/obwU4BgGbJrvPDmXfM+6Fgt8uJ ACr3AvQ3Dz9iEZDIWW8BwmVue0pNEHBziTJrBVa5TPnN6zhGNXzEyfIGDtvSNheP VLcsnGNC0udzKKn0VBmHFEmjQv8+erkvVg9AKavX7055ZgaYRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKta7tTkq1SxzVbfjYAquMILy4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzFlYmEwMTEtOGE4MC0z NWJkLTg5MzgtNzYzMWVhNTJiMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKUqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3mYzrQkovCoOLesm/1jyduRr+MQum+7KNn/IQWTDj3GxVlXXk2oIt/ 0bzU6PQwL/rcG1mp1ZBFyHP7UOKPop0ZQHx4vAmSOKRuJH/3+wr6OS2MKkpEMH9f SAL2DtY9v95GgWEt9+fJ+c9ocJAyhvxXpEjvDdQvAh9MS3Ha4PsCtPCnx7QSTnmZ i70ph9y2DZuMVpJlaZ6etRjjF0wdjjRrwJkB+UUBSsBJ3eFazttcJOusq0a6Gm9L sLuHF7iAQsxbrv4kNbRh8cEGlIoNZ6QaHW181LlkT7ufF1kT2QbQbaT59AuTfYD/ uMxUNbfbuM4R/nfYOfPCB9WibofcTR0= -----END CERTIFICATE-----Generated at Sun Nov 2 16:49:32 2025 by rpki-client