$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8bce6b4-d240-34f3-9441-c437da430b1c.roa File: c8bce6b4-d240-34f3-9441-c437da430b1c.roa (raw, json) Hash identifier: nLSNjRDtJmBbGYPpkGeqW4raRuEm3ILSQqt2Ijgyqts= Subject key identifier: 5F:3B:1D:67:5C:CF:0D:C3:73:F9:9F:3A:CA:B8:C8:F6:A5:D8:DA:8F Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B1349A0614AE348CB010B7B4C Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8bce6b4-d240-34f3-9441-c437da430b1c.roa Signing time: Wed 03 Sep 2025 20:16:24 +0000 ROA not before: Wed 03 Sep 2025 20:16:24 +0000 ROA not after: Tue 02 Dec 2025 21:16:24 +0000 asID: 21859 IP address blocks: 108.165.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:49:a0:61:4a:e3:48:cb:01:0b:7b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 3 20:16:24 2025 GMT Not After : Dec 2 21:16:24 2025 GMT Subject: CN=129af8e3-60cc-488a-b8a6-a82380cb2614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:09:49:8c:c4:4f:f0:38:51:3a:29:3f:15:8a: e4:ce:3f:c0:57:03:56:78:29:80:09:42:31:eb:7e: 78:2b:27:46:ed:38:e6:59:3a:bd:64:ed:90:8d:ee: 1e:99:16:eb:2a:24:fb:cc:96:15:d6:1e:e0:2d:20: d0:62:31:48:a0:b5:19:f9:02:43:24:e9:fe:c2:20: 1d:81:0d:d5:28:03:02:4c:66:02:47:4a:13:11:2d: 05:5a:5c:9f:88:f2:2f:b8:b8:9e:01:96:b6:1a:a3: 9d:81:67:ed:05:a6:84:c9:4b:e8:af:45:fc:0e:02: eb:29:35:58:d3:02:4d:32:68:6c:c1:23:0d:6a:b3: fe:18:d9:39:49:2c:d6:2e:5c:1e:fb:c1:b6:df:e3: b2:d9:34:22:97:a3:d0:15:08:8b:87:14:9c:03:10: f9:e7:5d:37:c7:d8:cf:13:85:44:ee:1e:bb:f6:8b: 0d:05:b2:e0:68:a4:43:a0:6c:82:09:45:4d:69:1b: 87:95:5e:22:c2:63:d5:b3:9b:1f:b9:e7:db:ac:a2: 6a:76:12:bf:9d:14:b5:d1:08:a9:49:00:2b:25:a2: a5:39:84:f9:08:06:d6:31:ab:68:d0:fc:a1:04:21: 33:99:ad:8f:a8:69:03:72:30:96:47:db:3e:32:05: fc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3B:1D:67:5C:CF:0D:C3:73:F9:9F:3A:CA:B8:C8:F6:A5:D8:DA:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8bce6b4-d240-34f3-9441-c437da430b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:7a:c6:e4:da:15:b5:b7:2b:c0:1d:ce:45:13:95:ba:d0:1b: 07:1c:44:55:dd:ca:81:dd:a0:16:40:4c:a0:91:2b:dd:dc:d4: 10:2b:ca:6b:be:1e:d5:ce:78:ea:2d:df:bc:59:f5:76:29:e2: 67:7d:b2:bb:88:36:64:22:d8:65:33:6e:00:c6:2c:76:4f:71: 4f:39:66:a9:1e:60:d2:f3:78:8e:4c:93:ce:ec:ff:5f:96:79: dd:8e:4a:78:85:ee:4f:25:04:d1:53:85:c1:26:05:e6:7a:16: 62:20:04:cf:44:e9:21:93:de:e3:52:f3:a3:0a:1f:6e:9f:f5: e0:8d:c5:d5:86:bd:f1:12:42:72:b6:03:a1:5c:c8:71:ad:97: 17:e8:6d:ac:2f:31:80:f0:f4:e8:08:22:f8:c9:7b:cd:54:0f: d4:b9:24:d5:8f:30:84:5c:9f:10:c5:97:6c:df:ca:b3:7f:7d: db:5a:62:e5:1d:89:6a:32:50:b7:73:53:71:7e:e2:b3:d5:62: e0:ff:aa:1d:44:dc:7a:a3:c6:85:01:9e:e7:87:62:0e:db:40: 40:c0:ca:70:d4:8a:93:7f:61:49:50:6c:55:32:6a:0a:a2:73: c0:9c:f7:80:f4:a8:cb:d2:a5:b1:8d:29:09:a6:ee:04:c4:71: 7a:f3:ae:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsTSaBhSuNIywELe0wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDkwMzIwMTYyNFoXDTI1MTIwMjIxMTYyNFowLzEtMCsGA1UEAxMk MTI5YWY4ZTMtNjBjYy00ODhhLWI4YTYtYTgyMzgwY2IyNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAlJjMRP8DhROik/FYrkzj/AVwNWeCmACUIx 6354KydG7TjmWTq9ZO2Qje4emRbrKiT7zJYV1h7gLSDQYjFIoLUZ+QJDJOn+wiAd gQ3VKAMCTGYCR0oTES0FWlyfiPIvuLieAZa2GqOdgWftBaaEyUvor0X8DgLrKTVY 0wJNMmhswSMNarP+GNk5SSzWLlwe+8G23+Oy2TQil6PQFQiLhxScAxD55103x9jP E4VE7h679osNBbLgaKRDoGyCCUVNaRuHlV4iwmPVs5sfuefbrKJqdhK/nRS10Qip SQArJaKlOYT5CAbWMato0PyhBCEzma2PqGkDcjCWR9s+MgX8UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF87HWdczw3Dc/mfOsq4yPal2NqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzhiY2U2YjQtZDI0MC0z NGYzLTk0NDEtYzQzN2RhNDMwYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF6xuTaFbW3K8AdzkUTlbrQGwccRFXdyoHdoBZATKCRK93c1BArymu+ HtXOeOot37xZ9XYp4md9sruINmQi2GUzbgDGLHZPcU85ZqkeYNLzeI5Mk87s/1+W ed2OSniF7k8lBNFThcEmBeZ6FmIgBM9E6SGT3uNS86MKH26f9eCNxdWGvfESQnK2 A6FcyHGtlxfobawvMYDw9OgIIvjJe81UD9S5JNWPMIRcnxDFl2zfyrN/fdtaYuUd iWoyULdzU3F+4rPVYuD/qh1E3HqjxoUBnueHYg7bQEDAynDUipN/YUlQbFUyagqi c8Cc94D0qMvSpbGNKQmm7gTEcXrzrtw= -----END CERTIFICATE-----Generated at Mon Nov 3 09:32:38 2025 by rpki-client