$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa File: 2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa (raw, json) Hash identifier: 5D0teXAYqLeYaCCXkAoGzEAEzDCg1Y5jyWN4fNzC05I= Subject key identifier: 22:87:79:1D:FC:42:6E:34:41:10:BF:F6:54:F1:A9:4D:D2:84:B9:03 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D38136E62795B18ED9700 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:38:13:6e:62:79:5b:18:ed:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=9aba8100-edd7-4630-b51e-45251f1fd323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d4:a6:40:f2:bf:2a:64:d2:b5:dd:e9:f7:09: 53:cf:aa:18:9a:8f:be:f3:c1:2e:d3:66:8c:ed:c8: 8f:b4:c6:a3:3f:5a:dd:87:80:6e:7e:5e:f3:32:78: 3b:f7:60:33:b0:c6:9a:cf:6a:6c:b7:ac:05:b6:c7: d9:c6:94:d5:ca:9e:da:de:3d:fe:69:3a:4c:1a:79: 5a:7a:25:52:ce:2a:8b:07:88:a6:85:07:c5:3b:3b: 8f:a6:c0:95:ac:ed:89:24:12:33:80:f7:da:f8:67: 29:b6:a7:0d:db:30:0a:c1:ca:07:0e:65:b0:aa:1c: 8d:d4:6d:53:77:be:1b:0b:cb:4c:1e:05:4a:27:96: 75:a7:6c:84:1c:a8:46:bb:0c:56:82:86:71:6e:b5: a7:1f:e4:d4:54:94:97:81:8e:48:36:d7:3e:ca:b4: f9:01:d8:24:a8:24:29:a2:0e:f2:40:72:cc:af:9f: c9:98:37:af:72:8a:f5:b6:64:73:bc:50:6f:1a:f1: e7:ff:32:33:e0:aa:b2:2d:7d:2c:dd:7a:5d:66:28: 82:12:fe:a3:45:44:e1:88:7d:31:74:c3:b9:a0:82: 1d:d4:b1:b1:b0:35:3c:0d:9a:2b:d7:b4:2c:e3:df: a2:b0:5c:85:5f:9e:c2:54:83:d6:73:49:5c:ba:c7: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:87:79:1D:FC:42:6E:34:41:10:BF:F6:54:F1:A9:4D:D2:84:B9:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:3f:76:6f:0d:c5:75:b5:26:a5:4b:82:e7:af:e9:64:a6:45: c7:1d:e0:5d:f9:1e:50:14:60:80:ce:9c:9a:37:c7:5e:b1:f3: e9:05:b1:17:1b:97:c1:9d:3d:13:ec:42:57:82:b1:9a:6e:fd: 75:8e:f0:3d:99:d8:86:fe:9d:5d:b5:2d:59:0a:51:e1:4d:b9: 4b:3e:09:7e:1b:de:32:0f:79:78:57:cb:f0:81:ae:4e:0f:ac: bf:03:4a:87:0b:d4:7c:fa:a2:c4:84:25:83:0f:20:e1:c7:b1: 22:22:c9:35:5b:30:9a:1f:58:ff:00:96:58:de:58:80:9b:77: 61:01:bb:8b:24:9b:24:59:e5:ee:5e:a8:1e:5f:86:f9:13:bf: da:08:04:04:8c:d1:cc:aa:58:ac:3e:30:2a:b6:23:a4:f7:ac: 78:05:d4:d8:9e:e8:84:f3:80:15:6a:27:ff:f3:65:43:0b:9e: d6:3a:f5:ba:c7:2d:5f:5d:51:b2:3b:33:05:a6:16:7c:77:83: 25:db:64:c0:00:4f:c5:71:2e:93:33:b4:22:be:c5:63:df:1c: 0a:b8:20:59:d4:b8:03:06:c8:bc:0f:78:37:5d:81:4d:4f:3a: 82:0f:ef:29:c8:b3:96:b4:16:9b:91:66:12:7a:02:83:98:c0: 4f:74:c3:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTgTbmJ5WxjtlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OWFiYTgxMDAtZWRkNy00NjMwLWI1MWUtNDUyNTFmMWZkMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtSmQPK/KmTStd3p9wlTz6oYmo++88Eu02aM 7ciPtMajP1rdh4Bufl7zMng792AzsMaaz2pst6wFtsfZxpTVyp7a3j3+aTpMGnla eiVSziqLB4imhQfFOzuPpsCVrO2JJBIzgPfa+GcptqcN2zAKwcoHDmWwqhyN1G1T d74bC8tMHgVKJ5Z1p2yEHKhGuwxWgoZxbrWnH+TUVJSXgY5INtc+yrT5AdgkqCQp og7yQHLMr5/JmDevcor1tmRzvFBvGvHn/zIz4KqyLX0s3XpdZiiCEv6jRUThiH0x dMO5oIId1LGxsDU8DZor17Qs49+isFyFX57CVIPWc0lcusfIxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKHeR38Qm40QRC/9lTxqU3ShLkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmE3MWRkOGMtZmMzNi0z MzI4LThkMmItZGMxZjExN2FlYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE/dm8NxXW1JqVLguev6WSmRccd4F35HlAUYIDOnJo3x16x8+kFsRcb l8GdPRPsQleCsZpu/XWO8D2Z2Ib+nV21LVkKUeFNuUs+CX4b3jIPeXhXy/CBrk4P rL8DSocL1Hz6osSEJYMPIOHHsSIiyTVbMJofWP8AlljeWICbd2EBu4skmyRZ5e5e qB5fhvkTv9oIBASM0cyqWKw+MCq2I6T3rHgF1Nie6ITzgBVqJ//zZUMLntY69brH LV9dUbI7MwWmFnx3gyXbZMAAT8VxLpMztCK+xWPfHAq4IFnUuAMGyLwPeDddgU1P OoIP7ynIs5a0FpuRZhJ6AoOYwE90wz0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:23 2025 by rpki-client