$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa File: 4fa1c770-c015-3149-af43-e2902ca5a962.roa (raw, json) Hash identifier: iKNc+UvNTYaIhJ6d9J8HDsDc5JY+GFkCcqPlyGxtGMo= Subject key identifier: FC:D5:88:D4:26:BB:77:DB:A9:94:4E:7F:B9:C5:D7:93:65:6D:AC:0E Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B76F22C1E96C35A2AF3654500 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 13768 IP address blocks: 108.165.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:2c:1e:96:c3:5a:2a:f3:65:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=2a058778-6a16-41f5-a8db-f1faa79ac3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:13:35:ad:47:5c:a3:8d:20:be:3b:35:10:6c: c7:08:a1:12:79:74:30:5c:99:6d:30:74:ac:bd:a8: 3b:ec:bf:de:21:fb:11:ce:b3:e7:8b:21:33:09:c6: 9f:a5:11:a9:c6:ba:d7:ae:54:03:de:f3:20:fd:08: 82:d1:f8:0f:96:3c:c0:15:8d:0d:72:08:cd:03:d8: f5:81:89:b3:0f:ea:1d:e0:d6:ef:7d:73:7b:ae:3b: 2f:09:60:7a:0a:08:df:7c:c0:76:77:ad:04:64:81: ca:29:59:6c:94:82:ae:2e:7f:20:51:1c:62:b5:37: f7:7b:f7:28:3f:81:d8:f3:62:73:3a:14:b1:3a:f5: d2:0c:7a:11:16:23:fe:07:a1:30:33:d0:4a:73:3b: 02:f7:89:6f:d8:86:43:70:c0:43:44:35:55:39:87: cf:64:2e:58:90:15:cb:25:66:16:ed:71:d8:9c:c8: 61:29:fa:2d:88:13:e6:e2:a8:20:c7:d9:ba:58:40: ea:9a:ab:0b:12:02:23:2d:91:29:9a:56:7f:bd:e8: 7d:1b:a0:70:91:52:49:cd:50:4f:5a:3e:38:5c:92: be:95:b8:9d:98:aa:f3:7b:ff:11:08:8f:b9:69:8a: 12:d4:5d:af:3a:c3:22:40:5a:5b:30:a0:11:af:bd: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D5:88:D4:26:BB:77:DB:A9:94:4E:7F:B9:C5:D7:93:65:6D:AC:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:fb:5d:78:67:8f:80:86:43:17:de:52:8e:29:d9:42:27:c7: 03:20:1c:34:bb:28:59:bc:10:a6:d1:a5:f5:28:c2:13:3c:df: b2:b1:9d:8e:21:f5:1d:f0:58:a1:ee:76:22:af:c8:44:4f:33: e7:a9:54:e8:d6:4d:48:24:e1:e4:97:f1:4a:29:5b:6d:82:a3: a6:29:b8:21:1c:2c:c6:5f:fb:3c:ad:6e:9f:2c:ca:4a:2d:d4: 3b:b2:2d:fd:9e:25:d4:12:b4:9c:79:b3:80:27:c7:0e:78:19: fb:71:d7:bd:5a:23:3d:67:ce:b7:6b:a5:35:4a:d1:64:4f:40: 15:61:b0:26:b6:44:2f:9b:b5:b3:55:cf:87:2c:df:f1:95:a6: 9b:f9:78:71:a1:25:9a:f6:72:b4:83:a9:c4:e2:1d:5a:a4:fc: ce:40:c1:77:29:c1:d9:c5:05:6d:83:c0:b0:c1:a1:2d:2a:d2: 59:52:06:da:59:f7:47:be:84:11:d0:51:70:f2:4b:8c:4c:af: 3e:6c:fb:8e:c9:72:10:60:04:43:8b:f7:0c:64:d9:e9:9e:1f: ef:e3:e6:32:6e:7c:9e:e4:c8:97:1f:f3:54:b9:7a:45:f5:9a: ed:28:b0:f4:0d:f4:23:f6:13:8e:c4:68:b8:04:0d:d9:fd:48: 92:f4:d9:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iwelsNaKvNlRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmEwNTg3NzgtNmExNi00MWY1LWE4ZGItZjFmYWE3OWFjM2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBM1rUdco40gvjs1EGzHCKESeXQwXJltMHSs vag77L/eIfsRzrPniyEzCcafpRGpxrrXrlQD3vMg/QiC0fgPljzAFY0NcgjNA9j1 gYmzD+od4NbvfXN7rjsvCWB6CgjffMB2d60EZIHKKVlslIKuLn8gURxitTf3e/co P4HY82JzOhSxOvXSDHoRFiP+B6EwM9BKczsC94lv2IZDcMBDRDVVOYfPZC5YkBXL JWYW7XHYnMhhKfotiBPm4qggx9m6WEDqmqsLEgIjLZEpmlZ/veh9G6BwkVJJzVBP Wj44XJK+lbidmKrze/8RCI+5aYoS1F2vOsMiQFpbMKARr72JswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzViNQmu3fbqZROf7nF15NlbawOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGZhMWM3NzAtYzAxNS0z MTQ5LWFmNDMtZTI5MDJjYTVhOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKXCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/7XXhnj4CGQxfeUo4p2UInxwMgHDS7KFm8EKbRpfUowhM837KxnY4h 9R3wWKHudiKvyERPM+epVOjWTUgk4eSX8UopW22Co6YpuCEcLMZf+zytbp8sykot 1DuyLf2eJdQStJx5s4Anxw54Gftx171aIz1nzrdrpTVK0WRPQBVhsCa2RC+btbNV z4cs3/GVppv5eHGhJZr2crSDqcTiHVqk/M5AwXcpwdnFBW2DwLDBoS0q0llSBtpZ 90e+hBHQUXDyS4xMrz5s+47JchBgBEOL9wxk2emeH+/j5jJufJ7kyJcf81S5ekX1 mu0osPQN9CP2E47EaLgEDdn9SJL02Vo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:04:07 2025 by rpki-client