$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9b295e99-5a56-3306-8873-1db503641c53.roa File: 9b295e99-5a56-3306-8873-1db503641c53.roa (raw, json) Hash identifier: 2zXDDyeK9vW3V2CBPuQfTXUm0L50Rs+Lx0PjiB32kkg= Subject key identifier: 89:61:E8:85:3A:08:8E:7A:85:74:42:D1:58:25:F8:2A:D8:53:B0:D8 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AEE267D11A0E8FD00AEB31100 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9b295e99-5a56-3306-8873-1db503641c53.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 401152 IP address blocks: 108.165.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:7d:11:a0:e8:fd:00:ae:b3:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=792fe08a-1e4d-4a95-b763-3c5edd69d9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ed:ae:fb:91:88:bb:d1:ea:95:2f:62:c8:da: 5f:37:45:8b:52:5e:c8:3a:05:81:cc:e7:98:e6:6d: ed:5a:26:b0:31:9c:1b:3d:03:97:38:4a:cb:fd:85: 13:27:ea:4f:8d:ec:73:f5:fb:69:dc:23:fb:91:52: 59:34:e4:94:81:39:f7:e1:d2:1c:35:9b:fd:20:33: b1:73:5f:4b:6e:bb:86:19:50:c0:7c:ba:0e:05:17: 97:69:b9:fd:ba:25:fc:c2:f4:78:16:74:a6:62:09: fe:08:8c:fe:e3:a8:fe:14:b6:3a:35:05:f0:a5:4d: 6b:98:69:ea:93:c2:d5:63:c2:3f:95:30:6f:38:96: 9c:e3:c5:d9:12:67:be:bb:dd:f5:af:e9:f3:e1:f3: 21:57:25:8a:19:e7:92:6b:2d:66:fd:72:10:a4:b2: 33:5f:fa:28:80:a7:76:f9:33:fb:1b:03:35:db:32: 72:85:16:72:ec:a1:ac:0a:d4:6e:06:4f:60:8f:54: 43:e9:7d:88:bc:e6:13:f2:33:2a:2f:68:a2:c0:6b: ae:b0:15:71:2a:5f:98:c0:74:50:2a:3b:2a:eb:01: 64:06:d8:26:dd:6d:e9:64:51:9e:21:47:e4:e9:8d: 3e:aa:4a:39:5f:25:e1:28:27:7b:be:88:2f:8a:6f: 0e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:61:E8:85:3A:08:8E:7A:85:74:42:D1:58:25:F8:2A:D8:53:B0:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9b295e99-5a56-3306-8873-1db503641c53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f7:eb:a8:34:9e:a8:0c:4c:63:4b:bd:d8:4a:61:8a:e6:a8: 7d:87:83:ed:84:df:92:3f:dc:bd:d3:c1:ec:3d:aa:8d:e5:d8: 03:2c:bf:d5:ba:f0:d4:8e:a9:6e:99:59:3c:ce:64:0b:9c:d0: a4:db:c8:b6:e9:33:f9:b5:ef:4b:2f:9a:6a:6f:6c:c1:a1:04: 2c:b2:d3:9a:41:b7:7c:f7:1d:f8:4d:b4:82:25:ff:55:2d:77: ea:91:76:57:77:fc:22:b4:94:ff:c2:93:b7:01:b4:60:fe:77: 6e:b6:32:d3:9a:54:7c:cd:d9:fd:8b:09:52:9b:e7:25:19:12: e1:66:12:43:55:9f:0c:ca:b6:c0:d4:e6:c6:b7:a0:70:fd:b7: 69:cc:2d:1f:dc:68:1a:e4:12:04:2b:33:06:86:1e:8c:45:0b: 4f:27:72:87:70:60:06:b3:c9:b5:94:99:82:fe:f9:bc:3f:fd: 2d:b8:27:5f:1b:fa:47:c3:8e:16:84:da:8a:fa:d8:45:af:a7: 8d:eb:c0:48:49:65:b1:c6:56:35:e8:f1:a0:a8:e7:b5:af:a9: 25:c3:dc:9f:ec:10:3f:f8:75:d8:5a:7b:5e:9f:ec:e0:6d:9d: 85:40:22:fc:5f:78:bd:94:18:28:ce:87:22:d6:8b:19:1a:39: 26:ed:f4:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJn0RoOj9AK6zEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NzkyZmUwOGEtMWU0ZC00YTk1LWI3NjMtM2M1ZWRkNjlkOWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre2u+5GIu9HqlS9iyNpfN0WLUl7IOgWBzOeY 5m3tWiawMZwbPQOXOErL/YUTJ+pPjexz9ftp3CP7kVJZNOSUgTn34dIcNZv9IDOx c19LbruGGVDAfLoOBReXabn9uiX8wvR4FnSmYgn+CIz+46j+FLY6NQXwpU1rmGnq k8LVY8I/lTBvOJac48XZEme+u931r+nz4fMhVyWKGeeSay1m/XIQpLIzX/oogKd2 +TP7GwM12zJyhRZy7KGsCtRuBk9gj1RD6X2IvOYT8jMqL2iiwGuusBVxKl+YwHRQ Kjsq6wFkBtgm3W3pZFGeIUfk6Y0+qko5XyXhKCd7vogvim8OowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlh6IU6CI56hXRC0Vgl+CrYU7DYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWIyOTVlOTktNWE1Ni0z MzA2LTg4NzMtMWRiNTAzNjQxYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT366g0nqgMTGNLvdhKYYrmqH2Hg+2E35I/3L3Twew9qo3l2AMsv9W6 8NSOqW6ZWTzOZAuc0KTbyLbpM/m170svmmpvbMGhBCyy05pBt3z3HfhNtIIl/1Ut d+qRdld3/CK0lP/Ck7cBtGD+d262MtOaVHzN2f2LCVKb5yUZEuFmEkNVnwzKtsDU 5sa3oHD9t2nMLR/caBrkEgQrMwaGHoxFC08ncodwYAazybWUmYL++bw//S24J18b +kfDjhaE2or62EWvp43rwEhJZbHGVjXo8aCo57WvqSXD3J/sED/4ddhae16f7OBt nYVAIvxfeL2UGCjOhyLWixkaOSbt9DU= -----END CERTIFICATE-----Generated at Sun Aug 24 00:33:55 2025 by rpki-client