$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa File: a3c5e420-4acc-338e-851f-64549b2af3d4.roa (raw, json) Hash identifier: unB1ugbnJefwyRJt+/Ka8CcbFXZMDIVDFcij4YKYhug= Subject key identifier: 10:82:8B:04:D5:BA:B8:14:2B:BC:29:53:A9:0A:F8:EB:5A:D7:3C:6D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D3938B250367FE4F42C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:39:38:b2:50:36:7f:e4:f4:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=6b5ce77b-5081-47a4-819c-cba5a4405e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4f:25:b1:c5:13:28:7f:ab:00:a4:23:f7:b9: 3b:ad:0d:90:24:82:88:17:cf:38:83:4c:38:f5:ad: 62:c0:16:c6:51:41:b8:7a:9c:1c:74:db:90:c7:e5: ea:01:40:c6:00:84:df:32:42:46:e4:4d:9e:36:32: 8f:81:69:94:45:4c:dc:e9:ae:4a:55:cc:bf:05:dd: 2f:a2:02:11:2f:39:d2:05:67:55:c1:28:38:d6:a8: 7a:ff:72:8c:5e:52:27:50:63:5e:30:90:0e:d7:fa: 03:63:ab:48:09:06:89:9b:4b:97:0d:bf:fb:c5:6c: f7:b5:83:59:d6:5f:94:62:c5:99:f1:f3:53:d8:95: dd:20:e8:bd:95:e6:96:04:4e:3e:87:e4:12:74:c9: 6f:da:83:5a:8b:52:6b:9f:65:97:a4:f9:e2:ce:0b: 4e:3a:88:1c:0f:75:09:62:76:28:19:2c:19:90:f9: 4d:0d:2d:7b:3b:61:e8:2c:55:6e:b6:ab:5a:5f:9a: 46:54:52:4a:b7:eb:65:df:ac:6b:11:fa:7d:b5:bf: a4:57:2e:11:92:e0:aa:cc:8e:30:2a:50:64:54:f3: e6:8f:3f:22:22:0c:6d:a7:ac:8c:fe:7d:b4:19:e1: c9:4c:57:0c:25:26:3d:54:d5:74:4a:32:68:ee:75: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:82:8B:04:D5:BA:B8:14:2B:BC:29:53:A9:0A:F8:EB:5A:D7:3C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:7d:dd:23:56:17:4d:06:c7:da:f3:ce:67:28:ba:cf:36:5d: 79:78:eb:0b:a3:90:ee:37:62:b5:da:ce:be:9d:1a:9b:9e:63: c0:2d:f5:da:05:69:f7:59:3a:aa:cb:64:bc:a4:c9:2a:2e:dd: 37:27:04:36:a9:e6:cd:bb:01:42:96:5e:c9:b5:11:55:38:f7: 66:d8:72:25:2a:d0:1b:2c:6e:af:56:50:c6:79:f1:ec:83:68: e5:b3:0a:77:e0:82:56:75:18:f0:73:d0:91:22:c6:e8:17:3f: c2:e4:9f:5c:ca:b0:ea:4a:44:b7:02:9c:f1:45:c0:4e:e2:b8: 8a:c9:16:3b:31:f8:57:22:2a:ed:47:3e:1e:75:00:ce:fd:d5: e7:fb:d2:3a:d2:6f:4c:e6:1d:50:d0:51:8a:1b:fa:1a:e6:bd: 27:d3:43:4c:46:a2:68:ba:a8:00:01:07:5e:41:65:73:3a:93: ad:13:d6:9e:b7:69:f0:ca:b3:84:22:37:4d:54:05:5b:57:87: 15:00:2b:d6:0b:04:76:fe:75:3e:a2:c3:e4:df:7a:eb:e8:ad: 65:49:12:5e:18:88:8d:74:60:05:1d:43:30:d3:fe:eb:62:f8: e0:09:d5:e6:52:b9:1e:3b:44:9b:c7:d5:fd:f4:ad:2f:05:54: bf:06:af:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTk4slA2f+T0LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NmI1Y2U3N2ItNTA4MS00N2E0LTgxOWMtY2JhNWE0NDA1ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU8lscUTKH+rAKQj97k7rQ2QJIKIF884g0w4 9a1iwBbGUUG4epwcdNuQx+XqAUDGAITfMkJG5E2eNjKPgWmURUzc6a5KVcy/Bd0v ogIRLznSBWdVwSg41qh6/3KMXlInUGNeMJAO1/oDY6tICQaJm0uXDb/7xWz3tYNZ 1l+UYsWZ8fNT2JXdIOi9leaWBE4+h+QSdMlv2oNai1Jrn2WXpPnizgtOOogcD3UJ YnYoGSwZkPlNDS17O2HoLFVutqtaX5pGVFJKt+tl36xrEfp9tb+kVy4RkuCqzI4w KlBkVPPmjz8iIgxtp6yM/n20GeHJTFcMJSY9VNV0SjJo7nW0UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCCiwTVurgUK7wpU6kK+Ota1zxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNjNWU0MjAtNGFjYy0z MzhlLTg1MWYtNjQ1NDliMmFmM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJt93SNWF00Gx9rzzmcous82XXl46wujkO43YrXazr6dGpueY8At9doF afdZOqrLZLykySou3TcnBDap5s27AUKWXsm1EVU492bYciUq0Bssbq9WUMZ58eyD aOWzCnfgglZ1GPBz0JEixugXP8Lkn1zKsOpKRLcCnPFFwE7iuIrJFjsx+FciKu1H Ph51AM791ef70jrSb0zmHVDQUYob+hrmvSfTQ0xGomi6qAABB15BZXM6k60T1p63 afDKs4QiN01UBVtXhxUAK9YLBHb+dT6iw+TfeuvorWVJEl4YiI10YAUdQzDT/uti +OAJ1eZSuR47RJvH1f30rS8FVL8Gr8E= -----END CERTIFICATE-----Generated at Wed Nov 5 11:12:15 2025 by rpki-client