$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa File: 02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa (raw, json) Hash identifier: hJlMDLN1lNrg8R9olMk5cJMsycTfdHvpgm8/kRq0dI4= Subject key identifier: 70:7F:22:5F:B7:E4:6D:88:A4:9F:EA:63:1A:E6:6D:78:DD:5A:CC:9C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E11BC3BC86382A0002C940 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1b:c3:bc:86:38:2a:00:02:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=52aec724-473c-4d83-99e8-61304a4b2c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:4a:f7:3b:28:ce:94:d5:9c:da:7a:4b:b7: 1e:6b:86:00:e8:bf:b1:2f:e5:79:dd:f0:1d:b5:0e: e0:a4:3d:2f:67:a9:a1:6b:0e:fb:d4:65:e7:fa:b4: 8e:5c:78:7d:9d:ed:f7:87:b7:47:a6:b4:20:8c:06: eb:ef:18:af:49:ea:ad:b5:53:77:8a:d4:68:a2:6e: bb:20:07:b1:5c:b1:77:0e:55:2c:ed:6a:0f:59:25: 55:32:3e:4d:6d:c6:1b:30:a6:30:85:6b:eb:18:78: b3:35:db:1f:56:06:1d:1d:63:e8:00:94:4c:ab:b8: 58:43:45:da:ec:0a:d9:5b:be:36:92:f4:4b:44:a3: 52:09:72:e9:72:e3:23:96:69:16:d3:ba:b2:5a:0d: 61:d6:c4:b5:dd:be:44:46:81:2c:6d:70:75:5b:bb: 3a:db:15:0c:56:7f:50:ae:fc:17:1e:84:d2:e2:83: 8b:e7:57:3d:dc:a4:c2:e9:34:ae:b9:4f:00:15:89: ef:51:c0:4c:1c:3f:17:b3:28:e2:7d:d8:71:23:d5: 12:79:4a:ea:51:08:63:91:a3:23:bd:f2:97:71:bc: 01:55:ca:a8:b4:b0:2c:5e:13:8b:17:ce:2d:cb:c8: f3:e0:dd:fe:b1:f8:86:2a:1c:8c:3b:53:fb:ff:13: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7F:22:5F:B7:E4:6D:88:A4:9F:EA:63:1A:E6:6D:78:DD:5A:CC:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ea:d6:6d:4c:d8:12:fd:1f:09:bc:1f:c9:75:69:61:ec:2e: 2f:05:e6:70:2b:b2:be:30:b6:48:c1:f8:2d:aa:6e:de:86:00: 81:f7:46:74:67:61:19:a0:82:ac:52:9b:c8:d2:36:f5:37:7b: 0d:e5:9d:34:56:d5:b7:38:a1:09:b7:57:01:bf:5d:27:72:66: a7:da:3f:ab:96:31:39:55:dc:96:29:93:10:da:3a:5a:43:1e: e9:f2:db:98:92:af:69:55:c7:cd:98:ae:02:4f:4d:f3:e5:ab: b4:f3:4b:7e:08:c3:27:09:b3:e1:ec:59:1b:d4:a9:00:5c:a0: b1:d9:c8:57:8b:bf:3d:20:6b:98:9b:67:29:45:36:68:c5:f4: 2d:70:59:17:1e:18:49:a7:cf:7c:da:bf:d5:bf:3c:81:b4:d9: 7b:6d:f1:92:f3:cf:62:97:6d:c4:95:c5:1f:39:40:59:e5:6d: 92:e0:a7:a1:06:c9:c9:fb:83:9e:91:bd:67:03:e6:e7:b4:49: 54:e4:a7:41:ff:0e:69:37:16:73:f3:77:60:12:40:1b:99:2a: ae:43:61:ce:25:ce:02:f1:fc:96:c6:76:11:52:6d:9d:d3:1e: 8e:59:7a:6a:20:7c:44:03:bb:e5:cd:58:3a:38:f6:8f:bd:1a: f4:d1:2b:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RvDvIY4KgACyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NTJhZWM3MjQtNDczYy00ZDgzLTk5ZTgtNjEzMDRhNGIyYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv49K9zsozpTVnNp6S7cea4YA6L+xL+V53fAd tQ7gpD0vZ6mhaw771GXn+rSOXHh9ne33h7dHprQgjAbr7xivSeqttVN3itRoom67 IAexXLF3DlUs7WoPWSVVMj5NbcYbMKYwhWvrGHizNdsfVgYdHWPoAJRMq7hYQ0Xa 7ArZW742kvRLRKNSCXLpcuMjlmkW07qyWg1h1sS13b5ERoEsbXB1W7s62xUMVn9Q rvwXHoTS4oOL51c93KTC6TSuuU8AFYnvUcBMHD8XsyjifdhxI9USeUrqUQhjkaMj vfKXcbwBVcqotLAsXhOLF84ty8jz4N3+sfiGKhyMO1P7/xPeeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB/Il+35G2IpJ/qYxrmbXjdWsycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDJiNjYwNzMtMzlmMS0z MjUyLWI5YzUtZDlhNGNkMTNkMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLq1m1M2BL9Hwm8H8l1aWHsLi8F5nArsr4wtkjB+C2qbt6GAIH3RnRn YRmggqxSm8jSNvU3ew3lnTRW1bc4oQm3VwG/XSdyZqfaP6uWMTlV3JYpkxDaOlpD Huny25iSr2lVx82YrgJPTfPlq7TzS34IwycJs+HsWRvUqQBcoLHZyFeLvz0ga5ib ZylFNmjF9C1wWRceGEmnz3zav9W/PIG02Xtt8ZLzz2KXbcSVxR85QFnlbZLgp6EG ycn7g56RvWcD5ue0SVTkp0H/Dmk3FnPzd2ASQBuZKq5DYc4lzgLx/JbGdhFSbZ3T Ho5ZemogfEQDu+XNWDo49o+9GvTRKyg= -----END CERTIFICATE-----Generated at Thu Aug 7 01:21:27 2025 by rpki-client