$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa File: 58c3f291-5363-3855-b3c5-3f69313bfec0.roa (raw, json) Hash identifier: fRTgeoXKbi3FaGRpY/cDkCOVq8z0zXojPraxPMRQN40= Subject key identifier: 5A:7C:AE:F9:DD:B9:7C:D3:AD:9B:35:C7:AD:09:51:A9:9E:72:02:18 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D36CB709CF0306BD40E40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:36:cb:70:9c:f0:30:6b:d4:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=c6f8ebb3-c755-445d-b923-a61cc6f28f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:64:60:0d:a9:a6:31:3e:e8:92:0e:b5:29: 7c:ac:5f:ae:0b:45:c0:8c:f6:73:29:57:5e:09:ba: 38:2c:85:d9:ca:75:b0:65:4e:20:0f:ff:6e:15:52: 7c:84:84:92:1b:5d:cc:d9:fa:0d:e5:60:a3:e8:b7: 98:c2:42:2e:28:22:f8:f8:3e:29:e8:8d:0c:b5:83: d4:16:e5:4e:ae:f9:dd:a5:db:40:9f:de:c6:63:79: c1:c7:a8:40:80:b8:37:38:96:90:25:cc:ab:1b:84: 7a:09:04:a0:36:1c:72:eb:99:03:48:94:d7:2d:ba: fe:a4:19:24:ab:82:60:77:fa:8c:fb:17:82:0a:6c: 26:0e:6e:5a:5a:c1:24:6b:a3:ff:5f:01:83:f7:5d: 57:54:7a:54:39:64:49:af:11:6b:52:f6:63:fe:e9: ef:83:c2:9a:28:bc:f5:ce:7c:7b:e7:56:fd:6a:8f: d3:63:1e:ad:04:eb:e0:6a:0c:24:67:09:3e:db:a4: 6e:ca:d8:06:a1:39:b7:dc:9f:f9:f2:3f:6a:fe:16: 45:3a:d8:35:ca:5f:c5:15:5a:b7:35:2a:29:94:a7: c6:06:0f:b0:ec:52:db:4b:21:81:e9:04:a2:f5:6e: 7d:c9:1b:ee:ff:5d:1b:d1:a5:d8:d6:dd:30:b1:8a: 46:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7C:AE:F9:DD:B9:7C:D3:AD:9B:35:C7:AD:09:51:A9:9E:72:02:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:cf:2a:e9:e9:d5:aa:f9:57:9a:70:ad:f6:90:fc:4c:07:4f: b5:12:30:97:c0:70:5a:ae:57:28:1c:79:ed:31:61:28:b4:c3: 5f:2d:12:3f:a3:f9:04:2b:13:85:86:e0:df:0b:ef:0f:17:5f: 54:1c:35:fe:37:bd:e0:a8:af:8c:1c:e1:94:24:46:3a:30:98: 18:da:72:08:b6:19:58:f9:cb:6f:49:81:00:89:d4:3e:3d:b4: f5:90:26:c1:25:63:77:a1:09:2f:da:96:f0:c7:a1:61:35:2d: 87:21:9b:c0:52:5b:13:c5:78:23:11:e4:c0:d3:ea:b7:cd:7c: 62:3e:64:df:13:23:7b:f3:8e:fb:9f:8f:93:e3:22:6f:77:b9: cd:6e:cc:78:b3:5c:d6:19:e3:38:37:6a:a9:ea:2d:a4:1f:91: 62:59:b1:bf:f9:45:6a:ee:85:c8:ed:3a:63:60:00:5f:cb:19: de:3f:8b:e1:7d:bf:72:cc:74:63:00:30:2f:6a:b3:cf:47:d6: 2d:e7:9f:c3:73:2f:89:b2:e2:41:bb:38:79:10:c6:36:11:bc: 4f:2d:08:a5:78:6a:c0:43:30:4d:1d:17:70:d0:51:95:11:4c: 07:39:c7:36:30:af:cd:09:ab:7c:cc:ff:30:33:27:4a:77:f2: 8a:be:10:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTbLcJzwMGvUDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YzZmOGViYjMtYzc1NS00NDVkLWI5MjMtYTYxY2M2ZjI4ZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkZkYA2ppjE+6JIOtSl8rF+uC0XAjPZzKVde Cbo4LIXZynWwZU4gD/9uFVJ8hISSG13M2foN5WCj6LeYwkIuKCL4+D4p6I0MtYPU FuVOrvndpdtAn97GY3nBx6hAgLg3OJaQJcyrG4R6CQSgNhxy65kDSJTXLbr+pBkk q4Jgd/qM+xeCCmwmDm5aWsEka6P/XwGD911XVHpUOWRJrxFrUvZj/unvg8KaKLz1 znx751b9ao/TYx6tBOvgagwkZwk+26RuytgGoTm33J/58j9q/hZFOtg1yl/FFVq3 NSoplKfGBg+w7FLbSyGB6QSi9W59yRvu/10b0aXY1t0wsYpGvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp8rvnduXzTrZs1x60JUamecgIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNThjM2YyOTEtNTM2My0z ODU1LWIzYzUtM2Y2OTMxM2JmZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjPKunp1ar5V5pwrfaQ/EwHT7USMJfAcFquVygcee0xYSi0w18tEj+j +QQrE4WG4N8L7w8XX1QcNf43veCor4wc4ZQkRjowmBjacgi2GVj5y29JgQCJ1D49 tPWQJsElY3ehCS/alvDHoWE1LYchm8BSWxPFeCMR5MDT6rfNfGI+ZN8TI3vzjvuf j5PjIm93uc1uzHizXNYZ4zg3aqnqLaQfkWJZsb/5RWruhcjtOmNgAF/LGd4/i+F9 v3LMdGMAMC9qs89H1i3nn8NzL4my4kG7OHkQxjYRvE8tCKV4asBDME0dF3DQUZUR TAc5xzYwr80Jq3zM/zAzJ0p38oq+EGs= -----END CERTIFICATE-----Generated at Wed Nov 5 03:18:03 2025 by rpki-client