$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa File: 906dd976-e486-3c9e-8eba-5d9aec5ba475.roa (raw, json) Hash identifier: nOQL73I670wZ+cAbgvx4mPPoqMbwAuWEc+bGdS8uvhw= Subject key identifier: 9D:89:6E:2A:C5:36:E5:F6:53:56:7E:21:BC:6D:7E:F3:43:E4:82:35 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D39F9234D3316044C1600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:39:f9:23:4d:33:16:04:4c:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=def7fc06-a81c-4542-bb52-7d46e14d005c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b8:3b:d0:27:76:4f:6f:35:7e:68:2f:87:d0: 72:53:e6:2a:81:84:71:47:ea:92:73:12:0b:99:ae: 3c:75:1b:c1:8e:fb:61:01:61:4f:ba:cd:e1:98:21: 2e:92:a7:3b:d8:e7:88:cb:e7:61:12:05:84:37:00: 3a:7e:67:4f:29:99:64:ea:bc:50:63:a3:32:90:f8: f2:c8:d4:95:0e:3e:df:c8:1e:ab:02:df:f0:14:15: 5e:81:72:13:1e:38:de:57:1e:c1:96:d3:f5:6e:1e: 6b:16:c8:79:9b:70:d9:1b:85:fc:9f:96:e8:93:e8: 81:33:4b:fd:39:a1:cc:2f:3c:c1:95:c8:33:2a:1b: a1:39:60:95:ce:c5:da:9a:79:d9:b9:7c:c8:24:bd: 0a:ad:54:eb:0a:71:21:cf:86:c2:10:d2:37:fa:a4: 2e:07:91:e6:ec:31:aa:aa:2e:55:f9:c5:5f:98:56: a7:5e:08:44:12:2d:68:c6:57:42:e1:41:8e:3d:6c: 89:4d:09:4f:9a:af:15:45:8b:88:28:d1:e2:81:01: 87:7f:db:15:ec:eb:5d:e6:29:2e:e0:bc:e6:8d:d5: 86:3e:6f:4b:83:46:5f:3d:6c:c6:30:92:8b:3f:28: 6c:b9:54:ad:7d:7f:b3:37:2e:0f:08:9e:67:50:50: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:89:6E:2A:C5:36:E5:F6:53:56:7E:21:BC:6D:7E:F3:43:E4:82:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d5:bc:19:60:fd:0c:29:ea:a2:5e:dd:74:bf:c3:33:d0:5a: 6c:de:66:b6:d7:b5:05:11:87:d8:d7:d6:38:96:2f:cd:dd:73: b4:36:cc:3b:5b:1f:27:35:37:99:a8:ba:ee:80:8e:91:d4:af: 3a:07:09:81:0e:9c:ee:be:6f:37:d8:37:f2:08:62:02:50:71: f6:0b:eb:20:61:a9:5b:58:89:5d:27:53:be:09:a5:b9:50:fa: d1:9a:2d:76:d3:5f:bb:aa:2a:86:d7:fb:5a:cf:7e:26:0a:4c: 62:6e:3d:5e:fb:46:2a:78:24:8a:4d:3f:87:71:2a:c6:58:d5: 46:5b:97:5d:cf:f7:97:a0:d0:ad:01:89:8e:32:9a:51:a4:81: 47:d5:1c:07:8a:59:72:e8:3e:ae:d2:69:8f:50:75:d1:51:f2: fc:27:45:89:1e:e8:0c:3d:e4:fa:8f:77:4f:14:85:78:be:5f: 0e:c3:ec:78:0d:e3:8d:51:3e:6b:08:e2:ec:7d:49:97:fd:ac: 9e:14:26:28:8d:cb:a7:c8:b3:9b:49:66:9b:68:77:1e:59:9f: 6f:da:65:52:9c:41:55:10:b1:54:92:80:a7:7a:64:c3:3d:e1: b5:3b:00:73:60:9a:21:b1:05:fd:84:21:3e:a9:68:d9:81:03: bb:f9:8d:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTn5I00zFgRMFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZGVmN2ZjMDYtYTgxYy00NTQyLWJiNTItN2Q0NmUxNGQwMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rg70Cd2T281fmgvh9ByU+YqgYRxR+qScxIL ma48dRvBjvthAWFPus3hmCEukqc72OeIy+dhEgWENwA6fmdPKZlk6rxQY6MykPjy yNSVDj7fyB6rAt/wFBVegXITHjjeVx7BltP1bh5rFsh5m3DZG4X8n5bok+iBM0v9 OaHMLzzBlcgzKhuhOWCVzsXamnnZuXzIJL0KrVTrCnEhz4bCENI3+qQuB5Hm7DGq qi5V+cVfmFanXghEEi1oxldC4UGOPWyJTQlPmq8VRYuIKNHigQGHf9sV7Otd5iku 4LzmjdWGPm9Lg0ZfPWzGMJKLPyhsuVStfX+zNy4PCJ5nUFC/sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2JbirFNuX2U1Z+IbxtfvND5II1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTA2ZGQ5NzYtZTQ4Ni0z YzllLThlYmEtNWQ5YWVjNWJhNDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHVvBlg/Qwp6qJe3XS/wzPQWmzeZrbXtQURh9jX1jiWL83dc7Q2zDtb Hyc1N5mouu6AjpHUrzoHCYEOnO6+bzfYN/IIYgJQcfYL6yBhqVtYiV0nU74JpblQ +tGaLXbTX7uqKobX+1rPfiYKTGJuPV77Rip4JIpNP4dxKsZY1UZbl13P95eg0K0B iY4ymlGkgUfVHAeKWXLoPq7SaY9QddFR8vwnRYke6Aw95PqPd08UhXi+Xw7D7HgN 441RPmsI4ux9SZf9rJ4UJiiNy6fIs5tJZptodx5Zn2/aZVKcQVUQsVSSgKd6ZMM9 4bU7AHNgmiGxBf2EIT6paNmBA7v5jZY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:44:10 2025 by rpki-client