$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2da6ba5c-0e24-34a4-9298-ffcaa7f800c2.roa File: 2da6ba5c-0e24-34a4-9298-ffcaa7f800c2.roa (raw, json) Hash identifier: 8jea8+65SasqPZgC5ESPwqYMs9kX4EMrft3lmuq2VHw= Subject key identifier: CA:70:41:98:3C:CB:E9:3A:04:F8:58:1A:E5:9A:25:32:94:5E:3C:3C Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AD3A1299BBF260FF98B7DF720 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2da6ba5c-0e24-34a4-9298-ffcaa7f800c2.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 49770 IP address blocks: 108.165.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:29:9b:bf:26:0f:f9:8b:7d:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=3875c867-d104-42c7-996b-6ef2c0832d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cd:1d:99:d1:01:de:e5:ed:97:03:02:2c:fc: b2:dd:d4:e9:fa:f5:e5:3e:a0:ea:e5:cd:22:91:e6: b0:01:15:92:8f:c9:2e:f8:cb:b2:5b:0b:2c:24:42: 87:e6:21:73:ee:35:45:fe:a8:8a:26:c8:e2:dc:1f: 47:d6:0e:32:cc:13:c6:75:f0:be:9f:1a:3c:09:b4: 79:a1:6b:6d:a2:5e:b3:48:0e:68:06:be:af:ac:cf: 25:d3:72:97:b3:9e:e4:fe:28:ef:70:f7:e7:e2:c7: 20:e8:bd:c4:b1:87:47:b1:97:2f:db:cc:86:24:c3: 57:51:d4:b1:07:87:99:e3:68:20:d2:2d:06:be:5c: cc:98:cf:02:77:2a:a0:c2:ee:f0:28:7a:05:aa:dd: cd:e3:9a:95:c8:37:19:4a:f1:72:94:ea:41:c3:01: ea:0a:5a:cf:20:d1:93:5f:a8:f2:cb:18:d2:07:25: 07:1f:07:cd:48:d7:6f:ca:ac:ca:0c:15:3e:f8:e1: 4d:60:ef:50:58:ea:4f:72:bc:a6:c7:09:e9:de:c9: 8f:d2:62:65:1d:eb:62:e5:a9:7e:86:a4:7b:8d:f6: dd:c9:74:8d:cb:2b:ea:18:44:f2:5b:cd:18:de:09: ad:4c:2e:97:15:6e:d8:78:5f:e6:a9:30:81:3d:3b: 1d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:70:41:98:3C:CB:E9:3A:04:F8:58:1A:E5:9A:25:32:94:5E:3C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2da6ba5c-0e24-34a4-9298-ffcaa7f800c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:cf:56:bc:7d:1a:f2:74:57:e8:bc:df:00:a8:d1:f5:e0:10: 08:2f:2a:90:ba:21:c7:be:aa:40:e8:84:e5:fd:42:f3:d7:36: c6:49:3d:52:17:8b:a5:a4:29:bd:a2:b3:ac:81:3b:5a:2d:71: 35:31:d4:0c:38:5d:91:7a:39:e5:18:18:34:16:b9:dd:cc:75: dc:33:61:7f:75:38:a8:1c:75:05:16:72:44:94:df:bb:38:0e: 25:2d:24:c9:81:97:a1:e9:ff:bd:1d:01:4e:3e:0d:ab:0d:08: f6:cc:13:10:b8:1b:5d:40:88:e2:ff:5f:41:1c:fd:f1:08:6b: 70:1f:f4:ff:d4:ac:37:86:01:c5:b2:94:ea:30:8d:8f:72:9b: 5f:99:00:32:ed:d8:a6:dc:65:a6:c5:9b:93:3c:e9:99:7d:43: 14:17:d1:98:26:e5:a3:92:82:2e:91:1e:44:48:1c:f1:31:84: 77:da:f7:2b:f7:e7:75:47:11:01:9a:97:69:33:68:3b:6a:a5: 38:20:36:2e:fe:03:dc:a7:7a:a5:68:75:8a:0e:12:b3:4b:36: 48:5c:ed:93:7e:86:1e:15:ff:0f:cb:39:95:dd:e7:4e:21:4d: 8a:c6:98:9e:75:54:17:bd:37:e7:d0:93:e5:7c:cc:4a:30:e4: 24:1d:3b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSmbvyYP+Yt99yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk Mzg3NWM4NjctZDEwNC00MmM3LTk5NmItNmVmMmMwODMyZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA180dmdEB3uXtlwMCLPyy3dTp+vXlPqDq5c0i keawARWSj8ku+MuyWwssJEKH5iFz7jVF/qiKJsji3B9H1g4yzBPGdfC+nxo8CbR5 oWttol6zSA5oBr6vrM8l03KXs57k/ijvcPfn4scg6L3EsYdHsZcv28yGJMNXUdSx B4eZ42gg0i0GvlzMmM8Cdyqgwu7wKHoFqt3N45qVyDcZSvFylOpBwwHqClrPINGT X6jyyxjSByUHHwfNSNdvyqzKDBU++OFNYO9QWOpPcrymxwnp3smP0mJlHeti5al+ hqR7jfbdyXSNyyvqGETyW80Y3gmtTC6XFW7YeF/mqTCBPTsdzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpwQZg8y+k6BPhYGuWaJTKUXjw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmRhNmJhNWMtMGUyNC0z NGE0LTkyOTgtZmZjYWE3ZjgwMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvPVrx9GvJ0V+i83wCo0fXgEAgvKpC6Ice+qkDohOX9QvPXNsZJPVIX i6WkKb2is6yBO1otcTUx1Aw4XZF6OeUYGDQWud3MddwzYX91OKgcdQUWckSU37s4 DiUtJMmBl6Hp/70dAU4+DasNCPbMExC4G11AiOL/X0Ec/fEIa3Af9P/UrDeGAcWy lOowjY9ym1+ZADLt2KbcZabFm5M86Zl9QxQX0Zgm5aOSgi6RHkRIHPExhHfa9yv3 53VHEQGal2kzaDtqpTggNi7+A9yneqVodYoOErNLNkhc7ZN+hh4V/w/LOZXd504h TYrGmJ51VBe9N+fQk+V8zEow5CQdO6g= -----END CERTIFICATE-----Generated at Sat Aug 23 14:55:46 2025 by rpki-client