$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/60eed75d-7064-34bb-a4b9-b4135d48551b.roa File: 60eed75d-7064-34bb-a4b9-b4135d48551b.roa (raw, json) Hash identifier: xLBlHsI4WbX0aqUVC655d+NJsL6kXzL2AFp7o//tB+0= Subject key identifier: 85:8D:BF:32:3C:20:42:F9:7E:8D:C2:33:01:BF:EC:7B:E6:C5:F9:2D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D3B9B1CD67B54960C8380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/60eed75d-7064-34bb-a4b9-b4135d48551b.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3b:9b:1c:d6:7b:54:96:0c:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=b117a84d-b1e9-4d58-946c-79520ac68d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:c9:86:0c:51:91:7c:5f:11:0f:9d:53:c9: 96:a2:29:ee:1c:0b:7e:8e:87:6f:9c:a7:f5:05:34: ea:6a:a1:2f:48:2a:01:34:a3:14:12:46:e8:67:b6: ea:fc:be:b0:a4:12:7b:39:56:a6:dd:c1:bf:1f:83: 4e:39:40:06:de:c8:8a:bc:47:df:97:1e:aa:6e:f3: 12:86:78:4a:14:37:77:31:43:83:07:6e:bc:75:db: e9:15:91:6e:ef:6a:98:5f:08:2c:a6:ad:7f:66:04: 99:03:81:6e:c2:63:e9:5c:94:8b:34:2f:1b:59:0d: 50:55:14:93:8f:65:ed:a9:3f:a1:72:03:a2:e3:b1: db:d9:4b:15:57:19:b4:c4:1e:cd:f6:ce:53:54:bc: 96:43:d3:28:03:a9:12:f3:0e:0d:b4:d5:b2:b5:c4: dc:ed:89:fb:78:5e:0b:cd:61:af:f6:8f:73:3b:37: b4:c7:91:b6:ea:ea:0c:7e:a6:8c:8c:db:74:a4:99: 0a:77:67:fb:4f:76:83:c0:eb:20:ab:fa:02:cc:d2: 92:a4:25:e1:dc:3a:10:9c:95:9f:b1:a6:2a:a8:c4: d0:f3:f6:2e:f9:59:17:6f:ba:ea:c2:dd:ba:c2:66: d5:4d:92:08:77:4a:76:d0:e5:53:c7:1b:5e:02:13: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8D:BF:32:3C:20:42:F9:7E:8D:C2:33:01:BF:EC:7B:E6:C5:F9:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/60eed75d-7064-34bb-a4b9-b4135d48551b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:39:2a:34:5f:95:87:a1:33:e3:29:f9:00:cb:02:7a:60:41: 0c:b9:21:50:d9:37:81:35:9b:c5:d4:a7:71:d0:05:88:f7:7a: ef:07:07:3b:28:6f:c4:23:53:fb:85:e0:93:9b:7b:82:ac:1b: 57:bd:02:5c:02:48:f4:95:f8:41:b1:7e:95:c6:ef:8a:72:47: b7:fb:90:d0:f5:3e:2a:1c:41:ff:df:7b:73:26:a1:22:50:d2: eb:52:a7:46:94:98:08:1b:96:ec:8c:0f:2a:d8:30:f3:24:ad: 34:8b:b5:33:85:f4:6d:40:bc:d8:10:d3:ea:cf:c2:fb:2c:a0: 7a:7e:b4:b5:5a:5e:96:df:20:60:ab:fc:bc:90:9f:c5:37:9c: 12:b4:84:73:01:e8:2f:0e:97:fa:56:56:d5:4b:21:64:d8:87: 87:76:cf:e9:3f:0e:bd:77:ad:65:a7:56:99:9d:28:6a:12:b8: f0:08:df:30:3c:f4:ca:56:84:dd:54:df:d8:ba:ce:7f:74:1a: 16:64:55:31:83:64:df:14:5b:fd:66:a0:b8:7a:af:55:54:6c: 2f:fd:d3:de:cb:ac:3a:cf:ba:f7:76:fa:83:ed:42:bb:c9:4e: 05:f2:f8:7d:c0:24:4f:4d:19:fc:4e:30:57:40:72:df:99:c4: af:c4:ca:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTubHNZ7VJYMg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YjExN2E4NGQtYjFlOS00ZDU4LTk0NmMtNzk1MjBhYzY4ZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT3JhgxRkXxfEQ+dU8mWoinuHAt+jodvnKf1 BTTqaqEvSCoBNKMUEkboZ7bq/L6wpBJ7OVam3cG/H4NOOUAG3siKvEfflx6qbvMS hnhKFDd3MUODB268ddvpFZFu72qYXwgspq1/ZgSZA4FuwmPpXJSLNC8bWQ1QVRST j2XtqT+hcgOi47Hb2UsVVxm0xB7N9s5TVLyWQ9MoA6kS8w4NtNWytcTc7Yn7eF4L zWGv9o9zOze0x5G26uoMfqaMjNt0pJkKd2f7T3aDwOsgq/oCzNKSpCXh3DoQnJWf saYqqMTQ8/Yu+VkXb7rqwt26wmbVTZIId0p20OVTxxteAhOGqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWNvzI8IEL5fo3CMwG/7HvmxfktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjBlZWQ3NWQtNzA2NC0z NGJiLWE0YjktYjQxMzVkNDg1NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE5KjRflYehM+Mp+QDLAnpgQQy5IVDZN4E1m8XUp3HQBYj3eu8HBzso b8QjU/uF4JObe4KsG1e9AlwCSPSV+EGxfpXG74pyR7f7kND1PiocQf/fe3MmoSJQ 0utSp0aUmAgbluyMDyrYMPMkrTSLtTOF9G1AvNgQ0+rPwvssoHp+tLVaXpbfIGCr /LyQn8U3nBK0hHMB6C8Ol/pWVtVLIWTYh4d2z+k/Dr13rWWnVpmdKGoSuPAI3zA8 9MpWhN1U39i6zn90GhZkVTGDZN8UW/1moLh6r1VUbC/9097LrDrPuvd2+oPtQrvJ TgXy+H3AJE9NGfxOMFdAct+ZxK/EytE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:19:04 2025 by rpki-client