$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5395eab-72ef-3858-8d12-302e45231e1e.roa File: c5395eab-72ef-3858-8d12-302e45231e1e.roa (raw, json) Hash identifier: VGNvL8ZgbM3qfM90MAwe8CBWQxEb2xHjpNHKLkCC+gI= Subject key identifier: 0A:9B:FE:1F:D6:16:23:A9:3C:AD:1C:A0:11:70:95:69:DC:96:22:53 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BA9324CAE439CA3581A72AE40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5395eab-72ef-3858-8d12-302e45231e1e.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 401152 IP address blocks: 108.165.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:4c:ae:43:9c:a3:58:1a:72:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=3d9a6811-0ed4-4a86-a00f-019995b57f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:ae:87:05:15:1d:5e:c2:89:d7:11:b0:36: b7:6a:90:5e:ed:aa:f0:8d:4e:54:93:e9:74:71:3b: 8a:09:75:67:f0:fa:a0:89:a3:35:8c:ac:49:3f:99: 0a:4f:1e:26:b3:e0:01:42:b5:56:a9:62:ba:9d:0f: 70:73:0d:97:c6:21:28:64:ba:b6:f8:6d:62:5b:5f: 15:39:aa:a1:52:51:f4:99:2b:39:eb:fd:64:e7:06: 0e:c8:b5:1a:aa:61:f9:08:e1:c8:02:fe:50:ba:49: 0d:ac:d1:bc:6d:e8:c8:f4:40:2c:75:cb:45:ae:f4: 72:b9:66:31:52:d7:00:7e:e8:54:a9:a7:41:2b:5c: 3a:a9:16:18:6c:24:01:16:42:d5:7f:ad:f6:d7:7b: fc:46:0a:69:48:06:55:ae:3a:79:52:70:1e:68:24: 2c:ad:ea:82:65:e6:f3:8a:8a:bf:29:88:45:70:33: 13:04:1c:ae:38:d2:70:ae:a5:37:62:1f:8e:f7:ec: 11:76:9b:b2:d1:56:83:27:45:bb:6c:1c:da:58:37: a0:87:89:77:05:54:8a:75:d5:6d:55:f9:44:b9:6c: 78:46:65:9f:da:72:65:05:d2:b0:0d:3c:12:28:79: 9e:05:58:8d:41:4e:c5:ff:b5:66:36:9f:7e:f7:50: a8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9B:FE:1F:D6:16:23:A9:3C:AD:1C:A0:11:70:95:69:DC:96:22:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5395eab-72ef-3858-8d12-302e45231e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ba:91:c4:15:53:7e:ae:6d:26:0b:01:19:91:3c:42:b5:a4: 5a:bd:fa:a9:5b:a7:39:6a:29:4e:c5:9d:3f:4a:4b:0a:b8:fd: 37:3c:e9:bd:67:36:4d:39:af:ca:25:08:bb:91:e7:74:2f:4e: 36:51:10:0c:c5:fd:59:8b:1a:f6:6d:f1:d8:c7:60:5b:37:c0: 05:78:06:f8:c3:5a:dc:91:51:fe:98:b7:f2:f0:53:8d:49:68: 6e:b6:12:55:6a:f5:ae:05:2b:1a:95:07:e8:b9:0c:bf:c8:67: e7:bc:2b:4d:c2:34:ba:a6:a7:74:6e:e7:91:84:60:36:dc:6f: 6d:22:23:71:68:a7:82:cd:97:e9:be:c6:d1:0a:9c:d3:98:e6: 4b:9e:f9:99:c8:79:fb:5a:e9:a5:57:e7:cc:ea:d3:49:c9:3f: 37:0a:f6:79:c4:e5:4b:93:95:9d:10:1b:17:65:2d:5b:6e:d9: 1c:2d:c7:82:5b:7b:d1:53:15:d7:10:77:86:fe:b5:73:7c:90: 99:b1:2d:0f:4f:d8:7d:24:58:39:a7:99:32:14:e9:85:88:3c: 6a:47:c5:ed:da:95:f6:2f:75:22:62:74:ba:76:70:a7:3a:0b: f7:0c:cf:09:b5:c5:32:3d:e1:02:02:10:92:60:6a:d6:18:ac: 5a:ab:b4:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMkyuQ5yjWBpyrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk M2Q5YTY4MTEtMGVkNC00YTg2LWEwMGYtMDE5OTk1YjU3ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkieuhwUVHV7CidcRsDa3apBe7arwjU5Uk+l0 cTuKCXVn8PqgiaM1jKxJP5kKTx4ms+ABQrVWqWK6nQ9wcw2XxiEoZLq2+G1iW18V OaqhUlH0mSs56/1k5wYOyLUaqmH5COHIAv5QukkNrNG8bejI9EAsdctFrvRyuWYx UtcAfuhUqadBK1w6qRYYbCQBFkLVf63213v8RgppSAZVrjp5UnAeaCQsreqCZebz ioq/KYhFcDMTBByuONJwrqU3Yh+O9+wRdpuy0VaDJ0W7bBzaWDegh4l3BVSKddVt VflEuWx4RmWf2nJlBdKwDTwSKHmeBViNQU7F/7VmNp9+91Co1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqb/h/WFiOpPK0coBFwlWncliJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzUzOTVlYWItNzJlZi0z ODU4LThkMTItMzAyZTQ1MjMxZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa6kcQVU36ubSYLARmRPEK1pFq9+qlbpzlqKU7FnT9KSwq4/Tc86b1n Nk05r8olCLuR53QvTjZREAzF/VmLGvZt8djHYFs3wAV4BvjDWtyRUf6Yt/LwU41J aG62ElVq9a4FKxqVB+i5DL/IZ+e8K03CNLqmp3Ru55GEYDbcb20iI3Fop4LNl+m+ xtEKnNOY5kue+ZnIefta6aVX58zq00nJPzcK9nnE5UuTlZ0QGxdlLVtu2Rwtx4Jb e9FTFdcQd4b+tXN8kJmxLQ9P2H0kWDmnmTIU6YWIPGpHxe3alfYvdSJidLp2cKc6 C/cMzwm1xTI94QICEJJgatYYrFqrtJg= -----END CERTIFICATE-----Generated at Sun Nov 2 16:49:16 2025 by rpki-client