$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/085d0c93-b015-32ec-a1df-9cfadfdb9f52.roa File: 085d0c93-b015-32ec-a1df-9cfadfdb9f52.roa (raw, json) Hash identifier: dlkeA+7KUztmZBD4YbCcfePFehZaYVFOk+Bhc/9Cpns= Subject key identifier: 4D:4F:1E:6F:48:64:0F:95:25:4D:27:B1:CB:B3:E6:66:F6:86:8C:C0 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AEE2699C05C92E8DBEEBAA120 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/085d0c93-b015-32ec-a1df-9cfadfdb9f52.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 152179 IP address blocks: 108.165.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:99:c0:5c:92:e8:db:ee:ba:a1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=ebc12027-c096-41cb-8d66-a19728c1d74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:cc:74:d6:78:da:c9:53:01:6c:10:4a:4d: 71:b8:e6:a4:65:fa:7e:85:87:b2:3a:d1:a7:17:63: 8b:73:73:fa:be:29:a7:1e:20:c7:f0:7a:79:05:69: f3:b4:6f:41:4a:e3:08:f6:07:fb:2f:e5:df:05:2d: 7d:e0:bc:5e:c5:7a:0c:09:d9:35:bf:ae:66:15:8d: 8f:7c:38:ac:22:ba:22:66:f1:91:1a:18:03:35:96: ae:f0:58:ad:6e:5f:53:ac:c7:a2:2c:24:35:b6:b8: 4b:1b:a7:ab:ce:49:96:41:3f:6d:1f:5f:f2:cb:10: 71:34:fe:f8:9b:20:ea:76:91:78:28:a0:40:01:f7: a5:6f:89:a2:0f:cc:87:a7:7f:1a:94:31:8b:ba:ba: 55:b4:8f:22:18:47:97:f1:0d:20:f6:33:bb:d7:15: 7f:9a:99:9e:de:44:44:af:8d:6f:c9:d3:d4:b9:2d: be:1a:03:a6:57:ba:87:c3:96:f8:99:28:e8:4f:88: 65:cc:92:09:40:17:dd:c3:cf:7f:90:95:b2:6e:fe: 90:db:01:e3:9a:3c:03:31:29:5d:7d:0f:55:d0:82: d8:f6:ef:dd:81:03:f6:a1:a9:a3:8d:97:50:c4:fb: 89:62:ed:c6:cb:b3:fc:81:b9:b4:05:fe:0f:5d:30: 1b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4F:1E:6F:48:64:0F:95:25:4D:27:B1:CB:B3:E6:66:F6:86:8C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/085d0c93-b015-32ec-a1df-9cfadfdb9f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:2d:3d:02:12:53:7e:08:c1:60:2b:49:4d:66:16:21:13:06: 24:62:30:15:c1:16:a8:3a:d2:fd:e4:49:b8:e5:ba:ba:f7:b7: 06:75:52:d9:66:42:22:85:4f:62:8c:0b:37:2a:2b:71:a7:02: 96:26:94:e5:46:3b:5e:1f:c3:03:6b:4c:36:d0:68:e0:68:2d: 6e:08:38:31:75:a2:9e:dc:27:f3:33:2f:98:41:5f:72:e5:47: 44:57:8a:ab:1e:d9:b4:a1:a4:a2:b3:05:4e:7b:23:4d:18:6f: 8d:2d:3a:bb:6c:7f:ac:a5:2c:d4:95:b1:f9:10:90:64:4f:44: 64:5e:3e:42:c4:30:e0:a6:ac:40:b0:1f:f1:d9:94:03:8d:02: 36:79:d7:8e:e6:27:25:41:45:87:05:5a:ca:2c:c9:7a:28:77: 19:79:99:6e:97:dc:e5:4f:77:8b:f9:da:b4:da:fe:a3:a9:36: ce:01:6e:d1:69:d0:e1:10:1d:34:ce:24:f3:eb:77:26:61:dc: a6:46:b1:71:35:51:23:0d:96:43:f7:19:7b:16:c0:d9:cc:0b: d0:ed:65:71:8f:c0:d9:f8:5c:c0:3b:6c:fc:ad:13:d2:df:cc: 87:6c:73:fc:40:ce:a3:c8:0d:a0:fd:03:7c:c6:f1:86:02:0f: a7:11:9a:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpnAXJLo2+66oSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZWJjMTIwMjctYzA5Ni00MWNiLThkNjYtYTE5NzI4YzFkNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kXMdNZ42slTAWwQSk1xuOakZfp+hYeyOtGn F2OLc3P6vimnHiDH8Hp5BWnztG9BSuMI9gf7L+XfBS194LxexXoMCdk1v65mFY2P fDisIroiZvGRGhgDNZau8Fitbl9TrMeiLCQ1trhLG6erzkmWQT9tH1/yyxBxNP74 myDqdpF4KKBAAfelb4miD8yHp38alDGLurpVtI8iGEeX8Q0g9jO71xV/mpme3kRE r41vydPUuS2+GgOmV7qHw5b4mSjoT4hlzJIJQBfdw89/kJWybv6Q2wHjmjwDMSld fQ9V0ILY9u/dgQP2oamjjZdQxPuJYu3Gy7P8gbm0Bf4PXTAbhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1PHm9IZA+VJU0nscuz5mb2hozAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDg1ZDBjOTMtYjAxNS0z MmVjLWExZGYtOWNmYWRmZGI5ZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKctPQISU34IwWArSU1mFiETBiRiMBXBFqg60v3kSbjlurr3twZ1Utlm QiKFT2KMCzcqK3GnApYmlOVGO14fwwNrTDbQaOBoLW4IODF1op7cJ/MzL5hBX3Ll R0RXiqse2bShpKKzBU57I00Yb40tOrtsf6ylLNSVsfkQkGRPRGRePkLEMOCmrECw H/HZlAONAjZ5147mJyVBRYcFWsosyXoodxl5mW6X3OVPd4v52rTa/qOpNs4BbtFp 0OEQHTTOJPPrdyZh3KZGsXE1USMNlkP3GXsWwNnMC9DtZXGPwNn4XMA7bPytE9Lf zIdsc/xAzqPIDaD9A3zG8YYCD6cRmkY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:01:01 2025 by rpki-client