$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/394f5762-829f-3b65-96b0-b2ed0711c251.roa File: 394f5762-829f-3b65-96b0-b2ed0711c251.roa (raw, json) Hash identifier: 87DrUBSTcgbXaqC6SA/C9zV47Pt1xV6rA8ZmkzVIn7M= Subject key identifier: 5F:4F:56:0C:E1:79:89:28:B4:02:21:8F:75:EF:F9:33:64:17:E6:30 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B7B2208CE8B9C36A527AE71A0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/394f5762-829f-3b65-96b0-b2ed0711c251.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 7385 IP address blocks: 108.165.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:08:ce:8b:9c:36:a5:27:ae:71:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=51a3a8e0-a4a8-4c99-b787-24d5228cbf50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f4:75:8e:15:ed:30:10:63:b2:e6:ec:3e:a9: 84:e4:65:7e:0e:f8:a5:34:aa:c4:ef:b1:b4:e2:3d: c0:f3:ce:3d:2c:f5:a2:4f:c3:82:10:d6:2d:05:2f: 49:15:c8:40:ed:0e:e5:28:4b:64:62:2b:5d:45:e7: ec:23:d9:5d:d9:5b:f7:a3:6a:98:a9:16:b6:9e:d4: 8a:b7:9d:50:99:26:7b:57:ea:a7:3e:cd:6e:f9:6a: a6:fc:c2:5e:5f:17:54:d2:bd:11:ac:46:d0:cd:4b: ba:64:42:cb:82:ea:6a:52:a8:cb:20:ae:e1:1b:1b: b1:53:99:2a:47:49:fb:9b:b1:a4:e3:07:79:39:5d: d9:43:35:e5:11:85:2e:ef:ee:ff:25:26:5c:c6:68: 01:b9:3e:c2:42:21:db:fa:8a:ee:5e:07:dd:47:45: ee:e0:ce:d9:98:ba:46:81:81:ab:fd:d0:b1:e5:5c: 68:15:02:68:b0:dc:79:7c:7f:4d:c8:e1:77:bd:4c: 78:fb:f3:44:92:b5:72:59:ff:12:91:ad:5b:ad:c0: 55:bf:d3:2d:f7:67:d0:4c:35:24:1e:c0:c2:6b:13: a3:c0:ec:4c:10:55:34:87:20:7f:e1:5a:7f:74:35: 6d:66:6b:c2:8c:4c:34:51:03:25:b3:ba:e5:09:24: dc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4F:56:0C:E1:79:89:28:B4:02:21:8F:75:EF:F9:33:64:17:E6:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/394f5762-829f-3b65-96b0-b2ed0711c251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ff:92:71:f1:e7:44:fe:62:c3:73:9b:6f:e6:11:ab:c3:eb: a5:cd:89:d3:bf:e5:f4:c7:8e:04:98:9c:e8:cd:bb:ab:d0:e4: 43:c3:d7:21:09:75:5d:7c:32:89:4b:64:86:5a:54:70:c3:7a: e5:d7:a3:8b:9e:da:8b:ed:af:44:49:6d:e8:ee:56:46:24:e9: 94:92:56:e9:11:f0:9b:46:52:c8:3e:e3:94:6a:4d:67:2e:07: f1:a7:26:37:36:83:01:c8:43:77:32:b4:73:3a:57:b5:fa:b1: 2e:24:0a:09:59:f4:40:a7:39:56:3b:7b:8c:55:ed:a6:8b:b4: dc:4e:e2:07:a3:6e:01:11:90:01:f2:b1:ac:d8:9b:34:ec:11: 30:b0:d6:3b:5a:5a:85:d5:76:ca:a2:52:ab:b6:19:2e:75:c5: 43:1e:d9:21:6d:e6:a1:6a:2b:d9:15:79:fd:39:ee:f1:04:bb: f6:9b:83:cc:1e:6a:3e:ad:31:34:5a:93:71:28:d5:e6:0f:78: 96:80:f5:fa:3b:7b:09:0b:75:ad:76:23:ee:7f:98:85:90:f8: 94:c6:07:1e:f9:7a:ba:6f:43:6d:ff:6b:b3:c2:db:c2:c6:51: 8e:cc:be:29:73:6d:e7:38:b9:d9:99:93:23:56:d6:93:12:c6: d0:f5:d5:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgjOi5w2pSeucaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk NTFhM2E4ZTAtYTRhOC00Yzk5LWI3ODctMjRkNTIyOGNiZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvR1jhXtMBBjsubsPqmE5GV+DvilNKrE77G0 4j3A8849LPWiT8OCENYtBS9JFchA7Q7lKEtkYitdRefsI9ld2Vv3o2qYqRa2ntSK t51QmSZ7V+qnPs1u+Wqm/MJeXxdU0r0RrEbQzUu6ZELLgupqUqjLIK7hGxuxU5kq R0n7m7Gk4wd5OV3ZQzXlEYUu7+7/JSZcxmgBuT7CQiHb+oruXgfdR0Xu4M7ZmLpG gYGr/dCx5VxoFQJosNx5fH9NyOF3vUx4+/NEkrVyWf8Ska1brcBVv9Mt92fQTDUk HsDCaxOjwOxMEFU0hyB/4Vp/dDVtZmvCjEw0UQMls7rlCSTcAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9PVgzheYkotAIhj3Xv+TNkF+YwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzk0ZjU3NjItODI5Zi0z YjY1LTk2YjAtYjJlZDA3MTFjMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz/knHx50T+YsNzm2/mEavD66XNidO/5fTHjgSYnOjNu6vQ5EPD1yEJ dV18MolLZIZaVHDDeuXXo4ue2ovtr0RJbejuVkYk6ZSSVukR8JtGUsg+45RqTWcu B/GnJjc2gwHIQ3cytHM6V7X6sS4kCglZ9ECnOVY7e4xV7aaLtNxO4gejbgERkAHy sazYmzTsETCw1jtaWoXVdsqiUqu2GS51xUMe2SFt5qFqK9kVef057vEEu/abg8we aj6tMTRak3Eo1eYPeJaA9fo7ewkLda12I+5/mIWQ+JTGBx75erpvQ23/a7PC28LG UY7Mvilzbec4udmZkyNW1pMSxtD11Ys= -----END CERTIFICATE-----Generated at Sun Oct 19 20:20:07 2025 by rpki-client