$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/66b37a8a-f95e-39f5-9f7a-cac14298cdeb.roa File: 66b37a8a-f95e-39f5-9f7a-cac14298cdeb.roa (raw, json) Hash identifier: 2tLRDe8I8sO4Wh5qBPv/BkYYsaYualgk0eyTtFXwhPE= Subject key identifier: D4:AF:CD:CC:E8:11:C6:97:70:6F:F6:75:E5:02:8A:E1:4E:82:42:EC Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B89175DC63245B57F95F06100 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/66b37a8a-f95e-39f5-9f7a-cac14298cdeb.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 215595 IP address blocks: 107.158.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:5d:c6:32:45:b5:7f:95:f0:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=0b54f65d-691a-4f02-9298-046d3246047d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6d:f3:6a:a3:cf:0f:41:56:64:a1:43:af:b0: 80:23:22:58:1f:cb:28:de:e8:02:6a:58:d2:69:bb: 78:b4:0a:98:3c:cd:63:45:50:5c:b1:b8:37:3b:69: 6b:8a:3f:73:89:a0:35:25:1c:a5:d6:b4:d4:fd:58: 72:a9:7b:74:8b:d8:cb:98:e9:a4:74:91:fb:63:e7: cd:e1:d4:93:72:f6:d9:e8:bb:67:bd:53:5b:c9:aa: 4a:d1:20:a7:63:93:60:cf:0f:29:36:ab:07:0c:98: eb:35:61:18:6e:83:41:b6:64:11:37:77:a3:0f:02: 0a:00:37:1d:a8:46:fd:5d:92:1e:4d:d2:9a:36:92: e9:77:f3:5b:f5:eb:18:82:52:26:a4:9f:0d:4f:5b: 7c:90:3d:ed:01:6f:4c:97:e3:f2:92:44:3d:12:69: af:ef:c8:b1:47:f4:da:10:38:ed:5a:62:11:53:3d: 65:0d:31:50:90:d7:60:7f:83:ef:c7:31:60:f4:b7: dc:ea:c1:09:14:2a:c1:d4:b8:33:0e:45:41:b3:b3: 8c:94:5f:d8:5e:5f:50:c4:e3:c8:9d:62:8d:34:0b: f3:3c:ae:1c:ff:1e:d3:12:8f:a4:29:50:22:2f:d9: e8:1b:e1:22:de:46:87:98:3e:8a:52:b5:42:25:3c: f8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AF:CD:CC:E8:11:C6:97:70:6F:F6:75:E5:02:8A:E1:4E:82:42:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/66b37a8a-f95e-39f5-9f7a-cac14298cdeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:5d:42:dd:06:4f:9d:c4:64:5d:55:43:b6:97:fe:a1:67:60: ab:e8:a3:82:44:f9:b4:be:0d:af:c7:db:25:59:d3:02:af:ef: f3:92:ad:0c:dc:ab:34:5f:08:87:0a:ca:74:32:12:09:0f:44: 3f:77:cf:0c:e5:f4:ea:e9:10:25:10:46:16:90:83:27:01:72: 6f:8a:f2:90:ff:89:42:35:bd:eb:b2:4e:1f:d4:65:9c:42:ad: 34:28:ae:22:4c:17:b5:85:81:f4:de:04:d2:2a:e5:54:fd:00: 75:b7:e1:fb:c7:3a:3a:da:ef:b6:dc:7a:41:e7:de:0c:57:42: a3:41:80:4a:76:66:af:5f:40:ff:a8:18:ae:53:5e:6f:4f:2e: be:67:dc:80:68:c9:85:7b:da:22:31:05:c5:17:9d:31:3c:7d: 8f:e8:80:03:04:8c:8c:96:f6:70:40:40:17:b6:82:e2:34:6e: 87:cd:57:00:4b:93:74:3c:d8:43:86:98:07:99:97:e5:cd:6f: f0:80:5e:ea:19:4f:7f:a4:7a:52:36:d6:8a:ed:66:d4:f5:84: 6d:88:a2:3e:d1:32:84:8f:cd:9e:5e:81:c7:bb:3b:65:e7:1f: a4:84:8a:7d:32:80:b2:53:a0:e6:ec:e5:42:59:ce:66:ff:9d: c8:b8:45:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF13GMkW1f5XwYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MGI1NGY2NWQtNjkxYS00ZjAyLTkyOTgtMDQ2ZDMyNDYwNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh23zaqPPD0FWZKFDr7CAIyJYH8so3ugCaljS abt4tAqYPM1jRVBcsbg3O2lrij9ziaA1JRyl1rTU/VhyqXt0i9jLmOmkdJH7Y+fN 4dSTcvbZ6LtnvVNbyapK0SCnY5Ngzw8pNqsHDJjrNWEYboNBtmQRN3ejDwIKADcd qEb9XZIeTdKaNpLpd/Nb9esYglImpJ8NT1t8kD3tAW9Ml+PykkQ9Emmv78ixR/Ta EDjtWmIRUz1lDTFQkNdgf4PvxzFg9Lfc6sEJFCrB1LgzDkVBs7OMlF/YXl9QxOPI nWKNNAvzPK4c/x7TEo+kKVAiL9noG+Ei3kaHmD6KUrVCJTz47QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSvzczoEcaXcG/2deUCiuFOgkLsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNjZiMzdhOGEtZjk1ZS0z OWY1LTlmN2EtY2FjMTQyOThjZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa55iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKddQt0GT53EZF1VQ7aX/qFnYKvoo4JE+bS+Da/H2yVZ0wKv7/OSrQzc qzRfCIcKynQyEgkPRD93zwzl9OrpECUQRhaQgycBcm+K8pD/iUI1veuyTh/UZZxC rTQoriJMF7WFgfTeBNIq5VT9AHW34fvHOjra77bcekHn3gxXQqNBgEp2Zq9fQP+o GK5TXm9PLr5n3IBoyYV72iIxBcUXnTE8fY/ogAMEjIyW9nBAQBe2guI0bofNVwBL k3Q82EOGmAeZl+XNb/CAXuoZT3+kelI21ortZtT1hG2Ioj7RMoSPzZ5egce7O2Xn H6SEin0ygLJToObs5UJZzmb/nci4RZg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:27:42 2025 by rpki-client