$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa File: f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa (raw, json) Hash identifier: nmq5qeukc1TKM45dSKwNlyjpdtXm7PWMXa5WBY/WOmk= Subject key identifier: D5:8F:C9:C1:2C:09:B5:2D:10:51:57:7F:17:A5:9A:11:5D:00:7D:CE Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584B5B073BD96E8D2FA099833220 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 266820 IP address blocks: 107.166.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3b:d9:6e:8d:2f:a0:99:83:32:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=98638e84-e0ce-42a6-a1f9-25485947cf15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:d7:c9:3c:50:fa:08:fa:a9:7d:01:89:16: 7a:27:4d:53:03:d9:26:75:6b:60:55:99:6c:27:db: 43:57:fd:a7:c5:c0:e4:7c:e5:29:08:23:c0:a9:02: 5e:b1:dc:c2:26:eb:ea:de:0c:b5:43:fd:91:e7:b2: 09:8d:ed:9e:57:62:41:2c:0d:da:49:fe:ec:a5:c8: 09:c6:64:8f:55:35:e7:4e:70:ef:8d:68:0e:03:51: 99:a8:f5:20:c3:d3:dc:69:6b:30:fe:45:76:ef:e8: 5d:1a:14:9e:5a:13:b4:c6:02:0a:7b:3b:75:79:13: 6e:7a:35:aa:cb:9d:90:ab:43:4e:6a:42:c4:d3:fc: 35:90:1a:07:52:6e:84:ce:df:f2:d7:fc:97:7d:d3: e1:14:2f:2f:5b:35:06:14:d7:2c:bb:77:af:6a:e5: aa:db:34:6c:70:fc:f3:86:a0:64:66:fe:cb:5a:f0: 3f:40:3b:f9:e8:f9:0e:bc:f6:21:0e:7f:7c:c0:18: 16:78:07:36:eb:a3:f9:fb:c1:b6:e1:5d:0a:ce:79: b1:be:c2:6f:a2:7b:cc:3e:43:f1:83:61:7e:6e:68: 69:88:1b:36:9c:f8:cf:e4:ba:1a:52:da:8c:f0:b9: 57:d5:1e:e5:35:fa:d9:9a:6a:8a:e1:09:49:ef:44: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8F:C9:C1:2C:09:B5:2D:10:51:57:7F:17:A5:9A:11:5D:00:7D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 107.166.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:84:33:c5:4f:a5:bc:57:1e:9d:55:8f:54:bf:7c:09:fb:bc: d5:d0:e3:d7:f0:17:01:c3:7d:94:22:20:67:77:2a:0a:1b:02: 3c:cb:33:06:91:e0:7c:2c:43:ca:34:df:62:0a:2b:39:ad:c1: 43:38:d3:2e:59:c3:ee:56:9d:06:ed:d4:1d:a6:d7:bf:83:e4: 35:15:b4:03:86:ea:c2:19:30:4f:9e:cc:e4:00:53:e5:36:07: d7:91:a9:f1:06:e5:0e:fc:d6:df:ac:16:fc:49:65:65:d0:e0: 0f:0f:90:c8:ac:2d:80:59:bb:7a:08:05:9d:d3:5d:23:3e:71: 70:fe:4b:e1:87:5a:a8:0d:2c:a4:9d:3e:15:5f:6b:bc:3a:5a: 33:f2:59:f9:6f:d5:98:c5:30:bc:05:7a:52:ad:1d:66:3d:80: 77:5e:70:6c:d6:f7:e6:f1:4a:2a:72:21:46:ee:d4:a2:96:58: 19:83:52:10:34:83:52:e4:c1:12:9f:52:c3:1d:91:06:da:40: 9b:c6:03:ec:91:b7:af:ab:a1:7d:c7:44:34:1c:36:5c:84:1c: e2:e9:a6:21:48:d1:f0:19:49:63:d2:73:92:cc:ac:51:7d:34: a3:82:0e:cf:b5:d8:5e:96:90:18:eb:38:60:54:63:7c:d5:45: c2:88:57:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzvZbo0voJmDMiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OTg2MzhlODQtZTBjZS00MmE2LWExZjktMjU0ODU5NDdjZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOfXyTxQ+gj6qX0BiRZ6J01TA9kmdWtgVZls J9tDV/2nxcDkfOUpCCPAqQJesdzCJuvq3gy1Q/2R57IJje2eV2JBLA3aSf7spcgJ xmSPVTXnTnDvjWgOA1GZqPUgw9PcaWsw/kV27+hdGhSeWhO0xgIKezt1eRNuejWq y52Qq0NOakLE0/w1kBoHUm6Ezt/y1/yXfdPhFC8vWzUGFNcsu3evauWq2zRscPzz hqBkZv7LWvA/QDv56PkOvPYhDn98wBgWeAc266P5+8G24V0KznmxvsJvonvMPkPx g2F+bmhpiBs2nPjP5LoaUtqM8LlX1R7lNfrZmmqK4QlJ70TfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWPycEsCbUtEFFXfxelmhFdAH3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZjJjNDNhNmYtM2E5Ny0z OTc4LWI3Y2UtODNkMzVmMWUwZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa6YEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOEM8VPpbxXHp1Vj1S/fAn7vNXQ49fwFwHDfZQiIGd3KgobAjzLMwaR 4HwsQ8o032IKKzmtwUM40y5Zw+5WnQbt1B2m17+D5DUVtAOG6sIZME+ezOQAU+U2 B9eRqfEG5Q781t+sFvxJZWXQ4A8PkMisLYBZu3oIBZ3TXSM+cXD+S+GHWqgNLKSd PhVfa7w6WjPyWflv1ZjFMLwFelKtHWY9gHdecGzW9+bxSipyIUbu1KKWWBmDUhA0 g1LkwRKfUsMdkQbaQJvGA+yRt6+roX3HRDQcNlyEHOLppiFI0fAZSWPSc5LMrFF9 NKOCDs+12F6WkBjrOGBUY3zVRcKIV9E= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:42 2025 by rpki-client