$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa File: 7a19c355-b852-3b4c-a5c8-e814f196e80e.roa (raw, json) Hash identifier: VkFroHtyYv9hv00HbIC62nYkWS7lwGLAQ9akuyyMlBo= Subject key identifier: 89:08:6C:21:9B:52:D7:18:A6:FF:C8:F3:23:54:30:86:35:2A:83:1F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D37E21B7A4EB318DC8080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:37:e2:1b:7a:4e:b3:18:dc:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=b9c824b2-aa7b-4a2d-bb20-b371a3331552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:42:84:b9:78:f3:51:41:ce:e9:82:9c:64:ad: 2d:cc:8e:ee:d2:28:6e:f6:4c:ac:f0:78:28:9d:9c: 1b:c9:64:ad:10:3e:10:29:b7:2e:65:05:c9:d5:82: 34:4e:93:9a:72:e2:11:7f:bc:14:3b:bb:0b:12:70: 49:80:78:c6:2c:e3:a3:65:78:80:e2:3f:9b:90:aa: 71:1d:71:65:85:2c:d8:a3:37:f5:09:c8:00:e9:22: 46:11:7e:0b:ce:92:0f:d5:4c:83:a4:c1:e4:3a:fa: b9:77:15:d2:60:95:56:da:16:d5:55:93:e0:cc:bf: a1:92:fe:df:59:53:cd:16:03:5c:e7:ea:87:7d:0b: 63:29:a0:63:15:20:8f:ba:14:28:0e:49:40:55:34: 22:b9:d8:83:59:31:02:0e:78:4c:97:45:82:3c:44: 7f:f1:ea:66:67:0d:3b:23:c8:63:c7:fc:55:23:da: bd:57:a2:77:b3:e5:51:a9:c8:ec:a8:42:5b:37:08: 89:d5:34:67:7f:4a:ed:41:13:63:2e:67:8b:5e:37: 7e:bf:65:cb:b6:73:60:71:41:b9:c5:42:78:78:9d: 39:48:66:de:01:03:b3:b6:09:7d:1a:96:61:17:cb: aa:7d:b1:d4:e5:d4:91:b3:ae:fb:fa:90:3e:14:03: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:08:6C:21:9B:52:D7:18:A6:FF:C8:F3:23:54:30:86:35:2A:83:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:44:bb:ca:9d:38:56:a9:71:d8:02:6f:8a:f0:81:a4:b3:23: 83:5b:b8:24:ab:99:2d:ed:17:d3:31:6d:3c:54:ca:43:d7:9e: 1c:bd:3e:48:da:dd:16:81:52:81:46:86:3e:e0:34:3d:90:22: 22:fd:e8:38:24:b0:2e:37:3a:5e:40:b9:e2:16:99:0d:e8:ca: 51:05:37:82:08:44:9c:26:4a:9c:75:41:da:78:6f:60:6f:8a: 4e:56:74:89:11:1f:7f:59:51:c7:a0:f1:04:75:8e:95:66:70: 57:05:6c:66:48:78:9e:fd:16:a9:74:d7:c9:c6:52:dc:73:4d: 36:b5:4c:16:e6:0b:65:ff:55:5c:13:7b:f0:8c:c5:e0:73:70: d0:08:db:2d:1e:b3:4e:10:12:cf:8a:46:f2:9f:d5:51:67:05: 70:66:93:3c:39:b5:8c:7a:37:05:eb:e1:83:6e:4d:09:5c:15: 85:50:de:ce:c4:07:40:ca:d0:91:40:8c:19:eb:21:55:db:e6: 29:e8:68:94:ad:0b:07:7d:09:c2:80:92:4b:b8:76:0d:e6:fa: f2:06:e3:46:45:f8:05:28:36:21:a7:83:f8:6a:62:a6:5f:69: a2:fc:16:5e:ac:8e:b7:2a:8f:89:62:b7:58:46:28:28:6a:cd: 90:59:48:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTfiG3pOsxjcgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YjljODI0YjItYWE3Yi00YTJkLWJiMjAtYjM3MWEzMzMxNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0KEuXjzUUHO6YKcZK0tzI7u0ihu9kys8Hgo nZwbyWStED4QKbcuZQXJ1YI0TpOacuIRf7wUO7sLEnBJgHjGLOOjZXiA4j+bkKpx HXFlhSzYozf1CcgA6SJGEX4LzpIP1UyDpMHkOvq5dxXSYJVW2hbVVZPgzL+hkv7f WVPNFgNc5+qHfQtjKaBjFSCPuhQoDklAVTQiudiDWTECDnhMl0WCPER/8epmZw07 I8hjx/xVI9q9V6J3s+VRqcjsqEJbNwiJ1TRnf0rtQRNjLmeLXjd+v2XLtnNgcUG5 xUJ4eJ05SGbeAQOztgl9GpZhF8uqfbHU5dSRs677+pA+FAObFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkIbCGbUtcYpv/I8yNUMIY1KoMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2ExOWMzNTUtYjg1Mi0z YjRjLWE1YzgtZTgxNGYxOTZlODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5Eu8qdOFapcdgCb4rwgaSzI4NbuCSrmS3tF9MxbTxUykPXnhy9Pkja 3RaBUoFGhj7gND2QIiL96DgksC43Ol5AueIWmQ3oylEFN4IIRJwmSpx1Qdp4b2Bv ik5WdIkRH39ZUceg8QR1jpVmcFcFbGZIeJ79Fql018nGUtxzTTa1TBbmC2X/VVwT e/CMxeBzcNAI2y0es04QEs+KRvKf1VFnBXBmkzw5tYx6NwXr4YNuTQlcFYVQ3s7E B0DK0JFAjBnrIVXb5inoaJStCwd9CcKAkku4dg3m+vIG40ZF+AUoNiGng/hqYqZf aaL8Fl6sjrcqj4lit1hGKChqzZBZSHk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:25:06 2025 by rpki-client