$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa File: 00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa (raw, json) Hash identifier: tc5UdYsehhXl1hBIZlM+X4reUoernnSn9dO1McOOnCU= Subject key identifier: B4:C5:D8:48:A2:A8:3F:68:E5:A8:B2:AD:FB:50:EE:19:51:BC:6B:B6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39CF1EDC57ED847374B7800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f1:ed:c5:7e:d8:47:37:4b:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=5d3342a9-5b71-450d-ade2-981e38189842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:a1:95:9f:9e:b9:8d:af:ff:02:25:c5:9e: e1:40:77:f3:ef:ca:f1:1f:fb:11:7d:26:cc:16:98: 0d:20:d7:e5:6b:bf:32:89:93:ff:21:5b:70:10:c5: 97:4a:91:61:ac:97:ee:57:e2:71:d3:4a:47:7a:34: c4:db:6f:2c:9e:36:9c:d4:ca:bb:c1:6a:0f:81:41: 15:8c:37:3f:11:58:ad:33:cc:64:2c:1c:f4:4a:6f: c0:e8:e5:0d:c0:e9:1e:68:80:95:a9:69:1f:6f:0c: a5:7a:fc:25:14:a0:62:d7:9e:a1:0a:83:93:cd:61: 1e:6d:17:06:23:ee:1d:68:33:58:fe:04:78:09:0a: f8:e2:d9:fc:4f:a3:75:0f:f2:50:3b:99:7d:8c:9d: 82:69:bc:09:12:2a:7c:c6:ee:4d:cd:56:3b:80:9e: 53:60:ce:65:9f:38:e7:4d:ef:03:10:0a:f4:5b:60: 5b:26:6b:fd:c7:ab:d4:f2:eb:70:28:7d:52:19:59: 39:bc:9d:6d:b8:52:28:c7:b9:f3:e7:67:da:d3:ab: 62:c7:2b:69:a8:74:33:7f:cd:db:8c:fb:34:13:65: 1a:9b:b8:e5:7c:65:e4:59:99:98:bb:73:be:85:33: ed:8b:20:ef:c3:22:37:a6:da:a0:78:67:c5:87:d3: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C5:D8:48:A2:A8:3F:68:E5:A8:B2:AD:FB:50:EE:19:51:BC:6B:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:45:ae:c5:0a:67:87:8a:66:de:75:c5:d5:31:1a:01:4c:6c: 8f:13:d7:c1:a3:6e:81:3e:1c:72:65:ee:ba:27:92:09:56:7e: db:4c:53:7c:1b:5c:6e:19:93:1a:76:eb:97:92:f7:ea:56:7c: fb:85:4b:35:9d:c4:d0:aa:88:ab:6d:ec:66:14:55:04:ae:59: 14:14:c6:37:4b:d7:10:65:fb:61:87:12:4c:58:66:16:b9:aa: 3c:a9:cf:99:51:56:28:d9:0d:d0:3d:4c:96:67:6c:2e:a0:4e: ae:b8:d1:b1:49:84:62:74:b7:64:4d:31:8d:bc:b3:44:8e:1b: 2a:d7:cf:10:72:f4:3b:f1:84:c9:c1:34:8c:44:b3:4b:03:b3: 53:a7:9d:14:65:bc:d4:47:80:1d:ef:a6:be:61:b8:7f:d9:1d: ca:c1:c7:b0:62:52:dc:57:89:b7:79:1b:43:9f:46:0e:9a:56: 88:60:53:5e:fa:24:94:0d:96:48:31:35:79:51:17:46:4f:5d: 38:7f:1c:2e:29:e9:48:19:29:6f:37:e4:b0:93:70:7b:cd:dd: e2:58:09:12:9f:56:04:e6:24:9f:73:59:e4:e6:ab:d3:b9:40: eb:6e:16:e4:d5:58:cd:7e:0d:76:a2:db:71:67:19:fc:1a:e7: 45:5d:40:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPHtxX7YRzdLeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NWQzMzQyYTktNWI3MS00NTBkLWFkZTItOTgxZTM4MTg5ODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+WhlZ+euY2v/wIlxZ7hQHfz78rxH/sRfSbM FpgNINfla78yiZP/IVtwEMWXSpFhrJfuV+Jx00pHejTE228snjac1Mq7wWoPgUEV jDc/EVitM8xkLBz0Sm/A6OUNwOkeaICVqWkfbwylevwlFKBi156hCoOTzWEebRcG I+4daDNY/gR4CQr44tn8T6N1D/JQO5l9jJ2CabwJEip8xu5NzVY7gJ5TYM5lnzjn Te8DEAr0W2BbJmv9x6vU8utwKH1SGVk5vJ1tuFIox7nz52fa06tixytpqHQzf83b jPs0E2Uam7jlfGXkWZmYu3O+hTPtiyDvwyI3ptqgeGfFh9PL/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTF2EiiqD9o5aiyrftQ7hlRvGu2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDBiZmNiNGQtMzFkNC0z Yjg0LTgwNjUtMzhhZTI3YWU4NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZFrsUKZ4eKZt51xdUxGgFMbI8T18GjboE+HHJl7ronkglWfttMU3wb XG4Zkxp265eS9+pWfPuFSzWdxNCqiKtt7GYUVQSuWRQUxjdL1xBl+2GHEkxYZha5 qjypz5lRVijZDdA9TJZnbC6gTq640bFJhGJ0t2RNMY28s0SOGyrXzxBy9DvxhMnB NIxEs0sDs1OnnRRlvNRHgB3vpr5huH/ZHcrBx7BiUtxXibd5G0OfRg6aVohgU176 JJQNlkgxNXlRF0ZPXTh/HC4p6UgZKW835LCTcHvN3eJYCRKfVgTmJJ9zWeTmq9O5 QOtuFuTVWM1+DXai23FnGfwa50VdQBs= -----END CERTIFICATE-----Generated at Wed Nov 5 03:20:10 2025 by rpki-client