$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5898752-7c76-3ed0-8e1e-f6d5d9a90169.roa File: d5898752-7c76-3ed0-8e1e-f6d5d9a90169.roa (raw, json) Hash identifier: 8sil8b3mMt/cx3z87cLIiwGbnX6TDrjfzO9LbZAvpRY= Subject key identifier: 69:11:38:D4:F5:B4:78:F1:8C:75:69:C0:87:79:1F:87:D3:5D:26:88 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D396E61AA42D5E86CFE80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5898752-7c76-3ed0-8e1e-f6d5d9a90169.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:39:6e:61:aa:42:d5:e8:6c:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=21c34a81-1c4b-444a-8257-eb640fd1de94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d1:84:e1:d9:ca:92:8b:08:0d:f7:27:65:92: 0e:b7:8c:bf:78:b1:ca:16:93:39:67:19:0b:69:df: 23:d7:12:11:84:08:26:dd:44:3a:b0:bf:1e:1c:c5: 65:cd:ed:dc:78:6e:d7:c6:a5:d7:1b:cd:53:74:bf: c9:9e:2a:71:15:bf:f1:81:41:8d:0f:84:8a:55:7f: 67:8c:d1:d2:f0:47:e1:ee:f6:c3:59:74:21:c0:58: 9f:f9:db:0a:44:1f:d1:b8:c7:4d:df:84:ae:e8:0b: 14:43:51:ae:59:07:47:e4:03:db:6d:b0:65:1e:4f: 30:b0:9c:e3:b8:4a:c5:90:ff:3f:7d:35:0b:90:dd: d1:23:6e:b5:4d:2f:f4:f0:16:bf:3e:1d:0c:8f:98: 5c:de:2e:e4:e5:d0:5e:a6:40:46:5b:ca:bd:45:23: eb:c8:80:b4:17:54:8a:60:af:a6:fb:24:86:ab:5c: 54:74:3e:c6:9a:78:60:fa:d5:cb:c6:75:d0:22:7f: 35:97:9e:bb:10:00:de:f9:11:2d:1b:a3:f2:74:13: 7a:2c:57:3a:27:22:27:00:b5:fd:76:91:c3:a8:60: 21:49:fe:a8:a2:46:0f:ce:55:76:9b:cc:af:7e:f4: ee:96:57:20:45:33:4b:20:f6:19:01:4a:4a:38:a7: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:11:38:D4:F5:B4:78:F1:8C:75:69:C0:87:79:1F:87:D3:5D:26:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5898752-7c76-3ed0-8e1e-f6d5d9a90169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:63:54:d3:84:b0:bc:36:b6:63:21:b5:7f:7c:1b:2b:12:54: 65:a9:eb:fa:38:8b:54:db:c2:71:32:60:64:61:17:0d:12:ea: b1:33:8b:1c:9f:9e:d7:d6:2b:d6:a5:0c:de:8d:d8:0a:1f:de: d8:26:9a:dd:a5:15:2b:12:bb:0b:14:65:36:b7:3e:43:30:77: 99:6c:c2:58:79:a6:bc:a8:20:68:fe:15:70:d6:66:cc:5b:86: 78:14:bb:08:9e:10:f3:31:5c:a8:5c:7e:3a:c2:c3:ad:ed:95: da:5d:f1:bf:45:c7:83:e6:49:4a:75:5b:58:ae:14:37:71:cc: 87:07:6a:56:f0:cd:14:15:64:46:6a:2a:d0:96:57:2f:1e:ce: 92:ec:03:ff:49:84:e5:72:18:86:74:46:b4:1d:16:b5:2c:b6: 23:55:62:2d:69:69:80:3a:14:e4:e5:80:b5:f9:ab:2a:24:5e: 72:0a:4a:47:5e:5a:a2:1e:e4:ef:cb:57:bf:de:b7:83:2e:eb: 65:ff:c3:21:25:ab:5e:94:b0:1d:21:59:e7:51:05:00:23:4f: 7e:41:6d:3c:c0:8c:7c:8c:04:52:55:d4:76:92:c0:1d:95:b4: d1:2d:a3:ae:be:9d:b3:49:2e:f6:b8:3f:48:01:da:e7:b9:b2: 46:6b:b6:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTluYapC1ehs/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MjFjMzRhODEtMWM0Yi00NDRhLTgyNTctZWI2NDBmZDFkZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9GE4dnKkosIDfcnZZIOt4y/eLHKFpM5ZxkL ad8j1xIRhAgm3UQ6sL8eHMVlze3ceG7XxqXXG81TdL/JnipxFb/xgUGND4SKVX9n jNHS8Efh7vbDWXQhwFif+dsKRB/RuMdN34Su6AsUQ1GuWQdH5APbbbBlHk8wsJzj uErFkP8/fTULkN3RI261TS/08Ba/Ph0Mj5hc3i7k5dBepkBGW8q9RSPryIC0F1SK YK+m+ySGq1xUdD7Gmnhg+tXLxnXQIn81l567EADe+REtG6PydBN6LFc6JyInALX9 dpHDqGAhSf6ookYPzlV2m8yvfvTullcgRTNLIPYZAUpKOKfXLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkRONT1tHjxjHVpwId5H4fTXSaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDU4OTg3NTItN2M3Ni0z ZWQwLThlMWUtZjZkNWQ5YTkwMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFjVNOEsLw2tmMhtX98GysSVGWp6/o4i1TbwnEyYGRhFw0S6rEzixyf ntfWK9alDN6N2Aof3tgmmt2lFSsSuwsUZTa3PkMwd5lswlh5pryoIGj+FXDWZsxb hngUuwieEPMxXKhcfjrCw63tldpd8b9Fx4PmSUp1W1iuFDdxzIcHalbwzRQVZEZq KtCWVy8ezpLsA/9JhOVyGIZ0RrQdFrUstiNVYi1paYA6FOTlgLX5qyokXnIKSkde WqIe5O/LV7/et4Mu62X/wyElq16UsB0hWedRBQAjT35BbTzAjHyMBFJV1HaSwB2V tNEto66+nbNJLva4P0gB2ue5skZrto8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:12:55 2025 by rpki-client