$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eae8807d-585a-387e-b061-8b98df2ec581.roa File: eae8807d-585a-387e-b061-8b98df2ec581.roa (raw, json) Hash identifier: onZtD5DkTi6vDrl6Yp4pzFJ8kHJv9S8u19KhkWk1fcQ= Subject key identifier: A7:4B:7A:63:96:52:2C:37:5B:CF:E2:0E:71:A7:E4:9D:39:E6:0B:BC Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B7B2208F7C4F82C9B9C55AA80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eae8807d-585a-387e-b061-8b98df2ec581.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 7385 IP address blocks: 108.165.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:08:f7:c4:f8:2c:9b:9c:55:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=7a663111-7cba-4764-8f3c-9b3f1646a65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:fb:15:7b:46:3a:c1:76:66:c8:88:e1:c2: d5:b7:61:bb:86:c7:2c:65:cc:57:58:89:ad:ae:ec: 6d:d8:17:2f:49:4d:9e:27:3f:a2:87:dd:5a:c3:f4: 2f:d9:15:46:d4:34:1a:fb:80:81:a7:84:01:0d:4c: 57:5a:2f:12:49:44:09:91:9f:fe:63:07:45:5d:da: 48:6f:f9:42:04:29:e6:0f:28:4b:23:63:e8:a0:f6: 6e:07:f2:68:fd:a4:3f:ca:70:dc:fd:18:cf:6b:bd: e5:1a:c2:e6:b5:37:f3:9f:59:cb:e1:13:ae:bc:ed: b9:76:88:e4:aa:aa:80:02:42:eb:2e:41:e2:45:4b: 1f:35:1d:b2:a1:91:89:e3:0b:12:8e:17:70:40:33: 73:8f:85:d3:9c:3a:dd:cb:60:c1:69:8b:1a:0e:06: f6:a7:84:92:be:23:c3:38:6c:cb:5b:51:fd:8f:e3: b7:f8:a3:6f:07:ce:28:fb:06:ce:21:9a:f0:1d:d6: 0b:67:a8:f5:5d:bf:48:25:be:26:1f:87:d5:b7:3d: ea:72:23:91:7c:fe:cb:29:6a:79:29:de:70:55:4e: ee:f1:c2:85:52:e9:91:b2:28:0a:f4:76:86:e6:99: d0:f2:8f:4f:14:db:e0:a9:24:df:5d:33:2a:a8:24: 59:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4B:7A:63:96:52:2C:37:5B:CF:E2:0E:71:A7:E4:9D:39:E6:0B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eae8807d-585a-387e-b061-8b98df2ec581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:5b:fb:ab:67:c1:4f:15:80:a9:e2:c4:a8:11:13:d0:b4:07: 6b:63:ea:f4:c5:0e:cd:b8:e5:a5:0d:4f:3e:58:9a:28:17:1d: 51:a6:bb:a0:7d:cd:50:ae:38:f7:cb:a1:e7:0f:db:0c:ba:b7: f5:cf:ea:3f:14:bc:5b:3e:72:c3:74:f4:2c:19:ea:88:bf:dc: 58:24:b3:0c:21:0a:dd:35:bc:68:fb:0a:66:e3:5e:b1:9f:04: e2:73:0b:00:a9:d1:87:ae:57:06:9c:19:7b:1b:61:aa:c4:af: 19:30:2d:e3:21:37:7f:43:98:78:4a:83:6d:e0:df:51:bd:05: c7:28:8c:b8:51:13:50:e0:b8:7d:d5:81:31:ed:72:6f:c6:b3: a3:6a:05:72:02:88:25:99:55:8f:af:c8:13:8f:39:04:59:77: 61:8c:af:6e:88:d3:2b:49:a7:90:af:29:54:66:bc:6c:7e:99: 45:5a:8e:c0:8a:91:aa:7b:6d:a8:f2:b1:e1:bf:30:3b:5d:e5: a0:fa:6c:3c:4c:dd:90:e5:06:78:11:39:aa:02:96:19:8b:75: a2:28:61:38:6d:89:32:21:d2:3e:3c:27:0b:c6:26:07:91:4a: 6e:4f:13:74:96:0e:d3:e5:28:49:6d:df:96:2a:bf:f3:74:4e: 8d:e5:ab:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7Igj3xPgsm5xVqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk N2E2NjMxMTEtN2NiYS00NzY0LThmM2MtOWIzZjE2NDZhNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnab7FXtGOsF2ZsiI4cLVt2G7hscsZcxXWImt ruxt2BcvSU2eJz+ih91aw/Qv2RVG1DQa+4CBp4QBDUxXWi8SSUQJkZ/+YwdFXdpI b/lCBCnmDyhLI2PooPZuB/Jo/aQ/ynDc/RjPa73lGsLmtTfzn1nL4ROuvO25dojk qqqAAkLrLkHiRUsfNR2yoZGJ4wsSjhdwQDNzj4XTnDrdy2DBaYsaDgb2p4SSviPD OGzLW1H9j+O3+KNvB84o+wbOIZrwHdYLZ6j1Xb9IJb4mH4fVtz3qciORfP7LKWp5 Kd5wVU7u8cKFUumRsigK9HaG5pnQ8o9PFNvgqSTfXTMqqCRZAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdLemOWUiw3W8/iDnGn5J055gu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWFlODgwN2QtNTg1YS0z ODdlLWIwNjEtOGI5OGRmMmVjNTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlb+6tnwU8VgKnixKgRE9C0B2tj6vTFDs245aUNTz5YmigXHVGmu6B9 zVCuOPfLoecP2wy6t/XP6j8UvFs+csN09CwZ6oi/3FgkswwhCt01vGj7CmbjXrGf BOJzCwCp0YeuVwacGXsbYarErxkwLeMhN39DmHhKg23g31G9BccojLhRE1DguH3V gTHtcm/Gs6NqBXICiCWZVY+vyBOPOQRZd2GMr26I0ytJp5CvKVRmvGx+mUVajsCK kap7bajyseG/MDtd5aD6bDxM3ZDlBngROaoClhmLdaIoYThtiTIh0j48JwvGJgeR Sm5PE3SWDtPlKElt35Yqv/N0To3lq0E= -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:26 2025 by rpki-client