$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa File: 192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa (raw, json) Hash identifier: 0SC6NvOExqWWzBYqqQueqkhrUFh31YGkZZdIgsoa8C8= Subject key identifier: EF:16:42:A7:CC:6C:3D:82:F4:BA:B8:EE:C9:70:54:CE:20:23:26:33 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D3780875EFE26EF36A380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:37:80:87:5e:fe:26:ef:36:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=1b014a5a-8cda-4425-ba5f-835ead1ff200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7d:da:64:74:1d:5d:0b:92:98:e1:bf:2c:8b: 3b:79:fd:18:aa:91:59:99:d4:f5:91:19:e5:a9:e8: df:39:68:f5:71:4a:e2:c6:55:8d:d1:fb:44:75:1c: 5c:90:a8:fa:92:bb:f7:7b:5f:22:44:9a:99:60:e7: 55:0f:bc:66:40:f8:1d:ed:58:bd:26:64:f8:2d:b1: d2:4e:48:1c:88:84:15:57:ed:fe:a8:8a:6b:67:af: b6:c6:4f:5f:02:07:57:40:4d:da:b5:24:2c:32:73: 0b:52:96:71:70:6e:c4:04:a8:6f:6f:63:95:eb:1c: d1:73:18:ab:0b:a5:bf:d0:8d:58:ac:95:80:6a:32: e3:c1:9e:62:66:6c:c0:1b:7f:72:b8:2e:a6:e2:e3: 49:8a:9c:b4:a4:d3:65:1b:b1:a8:3e:62:61:79:00: ef:73:3c:ba:d4:e5:c8:67:ad:44:fa:4b:64:0d:b4: a7:8b:78:6a:80:2d:3d:71:69:b8:c6:73:61:af:6c: db:2b:d9:12:6a:de:96:95:cf:15:09:9c:f1:c3:99: 71:1e:4f:f6:8f:fb:90:ac:7d:f1:a3:6a:38:0c:78: a2:f7:dc:ab:ec:7d:95:47:e7:02:ee:65:e7:7a:ef: a1:75:2a:92:69:f3:48:61:50:0e:a0:7a:ee:18:32: 5d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:16:42:A7:CC:6C:3D:82:F4:BA:B8:EE:C9:70:54:CE:20:23:26:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c0:79:a5:fa:ad:a7:c8:f6:14:6b:0c:6c:f0:f2:50:2f:41: 16:ab:32:5c:96:5e:9b:76:75:0a:93:8e:36:f9:ec:65:0f:0c: e0:33:fc:37:3d:87:28:81:9f:89:1e:13:65:ec:bc:cb:2f:b2: 4a:01:88:92:be:f9:fa:e5:fb:70:48:72:93:3c:d5:91:45:1c: ba:03:cd:6d:68:4d:55:51:14:fe:02:27:7b:3d:ca:e7:fc:f0: 54:b1:b1:04:a9:ba:95:2c:18:5f:78:11:a1:49:d7:12:32:5d: 4e:65:c4:a6:5c:8c:23:49:5e:52:d3:f3:30:15:97:40:ea:90: 90:0a:9e:fd:a2:62:3c:ae:f6:91:35:71:93:40:0b:b9:3e:76: d9:31:0d:46:2f:58:3a:d6:4f:80:d4:78:64:15:dc:51:e9:ac: 53:38:7a:1f:38:d3:fd:f9:74:52:d4:78:80:93:70:3c:3a:19: 29:77:37:8e:28:5b:3c:ed:d4:ba:76:ed:b5:64:37:83:2e:20: 7a:3c:1c:a1:71:92:a9:4e:1d:5f:c3:f2:72:ff:08:4b:68:f6: ac:57:d7:39:00:33:ac:e8:dd:50:a9:1e:9d:ef:4f:3a:c8:c6: d9:06:2e:70:98:93:0b:31:3d:83:04:fd:6c:0f:22:6e:9b:8a: 7c:93:f7:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTeAh17+Ju82o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MWIwMTRhNWEtOGNkYS00NDI1LWJhNWYtODM1ZWFkMWZmMjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH3aZHQdXQuSmOG/LIs7ef0YqpFZmdT1kRnl qejfOWj1cUrixlWN0ftEdRxckKj6krv3e18iRJqZYOdVD7xmQPgd7Vi9JmT4LbHS TkgciIQVV+3+qIprZ6+2xk9fAgdXQE3atSQsMnMLUpZxcG7EBKhvb2OV6xzRcxir C6W/0I1YrJWAajLjwZ5iZmzAG39yuC6m4uNJipy0pNNlG7GoPmJheQDvczy61OXI Z61E+ktkDbSni3hqgC09cWm4xnNhr2zbK9kSat6Wlc8VCZzxw5lxHk/2j/uQrH3x o2o4DHii99yr7H2VR+cC7mXneu+hdSqSafNIYVAOoHruGDJdeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8WQqfMbD2C9Lq47slwVM4gIyYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTkyNzM4ZDUtOTNiNi0z ZWQyLWE5Y2YtZjNjZWZmMmE1ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKabMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrAeaX6rafI9hRrDGzw8lAvQRarMlyWXpt2dQqTjjb57GUPDOAz/Dc9 hyiBn4keE2XsvMsvskoBiJK++frl+3BIcpM81ZFFHLoDzW1oTVVRFP4CJ3s9yuf8 8FSxsQSpupUsGF94EaFJ1xIyXU5lxKZcjCNJXlLT8zAVl0DqkJAKnv2iYjyu9pE1 cZNAC7k+dtkxDUYvWDrWT4DUeGQV3FHprFM4eh840/35dFLUeICTcDw6GSl3N44o Wzzt1Lp27bVkN4MuIHo8HKFxkqlOHV/D8nL/CEto9qxX1zkAM6zo3VCpHp3vTzrI xtkGLnCYkwsxPYME/WwPIm6binyT97s= -----END CERTIFICATE-----Generated at Tue Nov 4 23:27:02 2025 by rpki-client