$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa File: 9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa (raw, json) Hash identifier: tvqlPDmtwQigozXgpggJLs0iQN+PLFTs/liJQii6r9A= Subject key identifier: 5E:A2:9B:53:0F:AB:E1:AA:19:50:0C:CC:EF:44:CB:27:9E:9B:BF:64 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AF0F14F03F7BFAD20E37D2100 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 63801 IP address blocks: 108.165.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:4f:03:f7:bf:ad:20:e3:7d:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=bd562629-b57f-48cb-a6cd-8ea336884c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:a3:bd:66:2a:8c:45:21:15:e2:48:f1:fc: 1d:61:f6:a5:53:a9:54:9e:a0:49:98:96:91:24:42: bf:6c:f8:99:f0:b9:d9:56:01:18:03:5f:3a:cb:f4: 15:e7:24:e7:77:2f:a7:ed:0b:23:ea:e6:26:87:75: 6c:52:b6:7b:41:82:f4:90:f3:f1:d7:b9:8a:5b:44: 49:c5:5c:7a:7d:91:42:a3:8b:f8:c3:a5:39:54:8b: 88:f3:84:d4:58:74:c5:d1:60:14:ae:64:fa:c9:ac: 95:f6:e0:49:7d:12:a4:8a:f2:99:fc:92:e1:04:00: 8f:65:0d:44:1f:89:63:3b:6b:70:36:31:47:e1:1f: 6b:3d:5a:c5:af:17:e8:98:00:13:99:a3:7d:6d:6f: f1:76:ff:cd:0d:c7:18:71:ee:1a:eb:1a:65:ee:6b: e0:36:72:55:94:f9:db:44:96:99:24:05:64:4b:d2: a9:4e:4d:b2:28:e0:6a:e7:43:51:3f:8c:02:0a:0c: 5a:0a:01:a7:75:ab:0c:e7:89:db:33:42:0b:27:3b: 51:6a:73:83:04:67:52:54:34:e7:65:c3:86:0a:d7: 21:b0:09:0c:81:04:35:9a:96:12:a6:dc:00:29:f9: 90:1a:f8:5c:79:de:d8:bc:c5:e0:d6:b3:97:b5:f5: ec:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A2:9B:53:0F:AB:E1:AA:19:50:0C:CC:EF:44:CB:27:9E:9B:BF:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e6:09:fd:a1:7f:a6:98:76:44:f3:56:b7:df:b0:67:71:0f: ff:4b:dd:69:4c:6f:18:08:f0:a7:ae:7a:f7:90:f0:8d:65:36: c2:20:77:bb:1c:b1:f7:c4:98:33:a7:75:3c:f0:54:a3:bc:6e: 4f:6f:56:5b:a4:42:e0:44:b2:4b:49:e2:60:3c:ce:f6:34:9b: c2:96:36:fb:a1:48:27:c3:fd:71:1f:ba:77:00:e7:b5:50:a4: 14:1a:48:6e:1c:dd:f1:2c:d4:50:2b:6f:0c:32:fa:14:7c:a6: 75:80:6a:77:49:85:cd:66:c1:6a:73:a4:37:35:ac:24:d0:d2: 81:fc:58:19:1f:33:7f:92:40:7f:5a:2f:fb:2e:d0:75:e9:76: 6a:b4:a6:6c:bb:85:b7:0a:04:87:7b:81:1e:0e:55:79:09:b4: a9:d2:93:bf:07:ea:b6:8d:c3:51:9c:19:7b:0a:90:a3:38:6a: 87:ee:ae:4b:46:b2:3a:42:9d:39:c3:ad:27:75:2e:e8:c2:7c: 1f:3e:48:74:07:aa:36:8c:60:b4:d9:d2:66:8e:e8:83:24:3c: 59:03:60:b8:eb:94:1d:b5:e0:62:d5:79:7b:2f:ce:a9:26:18: 24:77:92:b2:42:8c:bd:23:8a:48:31:98:3c:76:57:26:d2:fa: 8c:90:2d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8U8D97+tION9IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YmQ1NjI2MjktYjU3Zi00OGNiLWE2Y2QtOGVhMzM2ODg0YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMKjvWYqjEUhFeJI8fwdYfalU6lUnqBJmJaR JEK/bPiZ8LnZVgEYA186y/QV5yTndy+n7Qsj6uYmh3VsUrZ7QYL0kPPx17mKW0RJ xVx6fZFCo4v4w6U5VIuI84TUWHTF0WAUrmT6yayV9uBJfRKkivKZ/JLhBACPZQ1E H4ljO2twNjFH4R9rPVrFrxfomAATmaN9bW/xdv/NDccYce4a6xpl7mvgNnJVlPnb RJaZJAVkS9KpTk2yKOBq50NRP4wCCgxaCgGndasM54nbM0ILJztRanODBGdSVDTn ZcOGCtchsAkMgQQ1mpYSptwAKfmQGvhced7YvMXg1rOXtfXsJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6im1MPq+GqGVAMzO9Eyyeem79kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWFjMTk0NDMtZDIyZC0z NGM2LWFhOWMtNzE2ZjExNGYzYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnmCf2hf6aYdkTzVrffsGdxD/9L3WlMbxgI8KeueveQ8I1lNsIgd7sc sffEmDOndTzwVKO8bk9vVlukQuBEsktJ4mA8zvY0m8KWNvuhSCfD/XEfuncA57VQ pBQaSG4c3fEs1FArbwwy+hR8pnWAandJhc1mwWpzpDc1rCTQ0oH8WBkfM3+SQH9a L/su0HXpdmq0pmy7hbcKBId7gR4OVXkJtKnSk78H6raNw1GcGXsKkKM4aofurktG sjpCnTnDrSd1LujCfB8+SHQHqjaMYLTZ0maO6IMkPFkDYLjrlB214GLVeXsvzqkm GCR3krJCjL0jikgxmDx2VybS+oyQLX8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:52 2025 by rpki-client