$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa File: b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa (raw, json) Hash identifier: 95xwf5TfBpUVtWNburq2xIvjtiPW1gm3fV+ZO1kZ7kU= Subject key identifier: F8:52:DC:35:FC:19:6D:FE:96:CB:0C:0B:34:0A:FF:ED:31:A6:7A:49 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D16D8BE6348F213CAE558 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:16:d8:be:63:48:f2:13:ca:e5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=822a862c-23d1-4836-8244-6344f6971090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:eb:4e:5d:aa:64:75:e6:f2:a7:ae:31:7c:5d: ee:ca:ac:0c:0a:98:a2:30:82:81:ed:70:3f:42:29: 71:70:3f:40:58:6d:c5:4b:72:67:84:cd:40:f6:f9: 80:79:9a:72:42:b3:cd:93:0c:3b:35:9b:ee:27:27: 19:3d:47:ed:b2:13:03:85:f6:fa:c7:64:68:f9:3e: d9:e0:22:93:75:16:a9:b4:ab:1e:a8:ff:5c:b0:39: 7e:78:f2:8a:87:99:bc:0f:54:11:bc:48:a5:d5:0b: 69:6a:53:fc:e0:0e:8c:5b:b2:c4:e1:8c:7c:27:7d: d7:81:9a:1b:64:dc:a1:ae:9d:d0:29:43:41:a4:71: af:95:67:87:df:36:9e:e6:f1:7c:b1:df:2b:6a:f0: a5:fe:10:f2:bb:f8:2d:c1:52:f8:8b:8b:85:34:bd: 37:d7:fe:c3:d3:60:d9:3d:aa:93:7f:1e:fe:70:5e: 66:fb:e7:46:09:e1:d0:95:7a:54:b8:0c:11:99:28: da:5d:0f:31:ff:88:7c:0c:97:19:66:2b:46:31:5e: 92:02:86:96:f6:ec:48:a5:79:3c:e2:22:0d:ef:6e: ff:9e:82:c8:17:7e:dd:8a:72:75:1b:23:52:e9:93: 69:a6:91:6a:69:cb:4b:59:9a:f2:9d:e6:75:8f:02: 24:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:52:DC:35:FC:19:6D:FE:96:CB:0C:0B:34:0A:FF:ED:31:A6:7A:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9c:88:87:bf:50:0e:d8:af:fd:5d:9d:7b:ac:ad:32:cf:61: 62:79:e3:6b:0a:8d:fb:7e:30:82:c0:5b:cc:34:78:a0:c6:79: c2:10:a5:f2:7e:6e:79:ad:43:7e:70:1c:fc:ad:a8:70:7e:bb: d8:99:0f:58:10:94:cb:00:b5:6c:c6:1e:f5:9e:dd:f1:ac:ff: 80:aa:dd:86:20:b4:37:5e:80:d1:3e:03:35:32:cc:4b:a6:79: 76:51:60:2f:c3:4e:06:ad:ca:e3:89:a4:7a:45:6d:68:dd:b6: 68:af:bb:fb:34:e1:d5:89:af:97:f9:0e:05:36:04:e9:a2:a4: 2a:3a:81:9b:65:6c:44:04:6d:84:0f:e3:c3:76:b1:11:91:59: e6:1e:d5:67:43:23:0d:a6:b6:df:7a:27:7f:39:ff:ce:79:04: 2f:64:19:22:dd:d8:12:16:97:c5:19:b1:f3:9f:98:73:ef:41: fb:32:91:c5:23:dd:c3:5b:fb:aa:50:4f:2d:d2:e4:5d:93:06: 97:a6:be:94:73:c6:ec:ad:97:22:01:fb:05:b5:0e:db:49:c0: 39:3d:79:ff:26:f2:6f:58:90:c5:9b:d3:a7:78:df:04:7a:f8: 90:57:e0:41:3d:04:99:e8:17:3b:95:5e:76:5d:02:2c:44:76: 20:f5:ac:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRbYvmNI8hPK5VgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODIyYTg2MmMtMjNkMS00ODM2LTgyNDQtNjM0NGY2OTcxMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOtOXapkdebyp64xfF3uyqwMCpiiMIKB7XA/ QilxcD9AWG3FS3JnhM1A9vmAeZpyQrPNkww7NZvuJycZPUftshMDhfb6x2Ro+T7Z 4CKTdRaptKseqP9csDl+ePKKh5m8D1QRvEil1QtpalP84A6MW7LE4Yx8J33XgZob ZNyhrp3QKUNBpHGvlWeH3zae5vF8sd8ravCl/hDyu/gtwVL4i4uFNL031/7D02DZ PaqTfx7+cF5m++dGCeHQlXpUuAwRmSjaXQ8x/4h8DJcZZitGMV6SAoaW9uxIpXk8 4iIN727/noLIF37dinJ1GyNS6ZNpppFqactLWZryneZ1jwIk+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhS3DX8GW3+lssMCzQK/+0xpnpJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjJkN2I4YTItODZiYS0z NWFhLTliNzUtMTJkYzgyYTJjYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiciIe/UA7Yr/1dnXusrTLPYWJ542sKjft+MILAW8w0eKDGecIQpfJ+ bnmtQ35wHPytqHB+u9iZD1gQlMsAtWzGHvWe3fGs/4Cq3YYgtDdegNE+AzUyzEum eXZRYC/DTgatyuOJpHpFbWjdtmivu/s04dWJr5f5DgU2BOmipCo6gZtlbEQEbYQP 48N2sRGRWeYe1WdDIw2mtt96J385/855BC9kGSLd2BIWl8UZsfOfmHPvQfsykcUj 3cNb+6pQTy3S5F2TBpemvpRzxuytlyIB+wW1DttJwDk9ef8m8m9YkMWb06d43wR6 +JBX4EE9BJnoFzuVXnZdAixEdiD1rAc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:20:12 2025 by rpki-client