$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6c95d6d-add0-3f3c-adc6-6481bf89d4ca.roa File: d6c95d6d-add0-3f3c-adc6-6481bf89d4ca.roa (raw, json) Hash identifier: PPQibjudWKsk9lLZTgjU2qgAqm9iS5j3rPdx/5rhjwU= Subject key identifier: 7E:F1:06:8F:88:64:6B:2D:44:48:27:34:54:2A:26:CF:C0:82:5C:BD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D17DE0C666826F30D20E0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6c95d6d-add0-3f3c-adc6-6481bf89d4ca.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:17:de:0c:66:68:26:f3:0d:20:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=3d7830d0-c6be-4767-b8e2-f71302c4166b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:a3:4f:76:b1:25:aa:8b:75:0f:9c:a1:82: 9b:44:c2:33:0e:2b:6d:94:21:76:f2:d7:e7:73:6a: e0:6b:00:e0:d1:3c:36:7a:d2:24:c6:1f:bc:87:37: 57:65:05:bd:cf:85:fb:d0:99:f0:fe:2f:0b:34:e9: 87:2f:68:6b:ee:c4:8f:58:1c:39:87:05:3e:f2:72: 96:e0:f6:d2:72:36:9e:1b:c4:30:15:9d:de:f3:4e: 7a:09:80:45:f8:a5:cb:a7:a2:97:74:33:21:3d:ed: c8:46:89:e7:d3:71:36:4d:3f:ee:d1:5f:40:df:ab: 29:34:31:56:4f:36:c1:b8:ef:12:6d:48:12:b8:37: 19:2e:22:2b:2d:11:37:a2:97:d0:ba:16:ff:bb:a7: 00:7a:38:1a:00:28:8b:72:c8:64:70:a0:78:44:cc: d7:32:43:c9:c9:d3:22:b2:03:28:c7:bf:47:f6:f9: c1:f6:a8:2f:69:45:bf:ae:08:b1:69:18:82:52:3f: 26:44:fa:e7:88:78:19:f3:a7:73:39:ec:2c:6f:17: 0c:38:a0:94:2e:85:ed:d5:fc:01:8c:f7:51:aa:e2: 83:81:8d:af:12:3c:05:3f:ad:e7:e9:1a:d6:e1:5a: f3:1d:bd:f5:04:53:9d:47:90:de:98:fc:00:ac:c4: db:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F1:06:8F:88:64:6B:2D:44:48:27:34:54:2A:26:CF:C0:82:5C:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6c95d6d-add0-3f3c-adc6-6481bf89d4ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:39:e9:5b:2b:7f:9d:d2:fc:b5:93:0e:94:a4:87:f7:81:90: 45:dd:75:ad:f7:07:18:ad:41:a2:1a:28:00:dd:33:6f:ac:39: 5f:24:d4:41:60:e7:84:08:07:ff:0f:8b:c2:2d:df:b6:d8:54: df:ff:c7:91:ac:bc:78:64:dd:50:12:77:b6:13:d5:44:0e:68: 7a:29:92:49:31:e9:6f:6d:dc:28:71:ad:70:ea:34:ef:52:b8: b7:ad:5d:19:62:20:ad:f2:ae:03:b2:33:c5:0a:58:46:93:da: 66:1e:dc:e7:c7:b2:0f:bf:bb:c5:32:6f:64:74:75:e9:8d:73: 04:89:e9:fa:1f:a4:79:a8:00:e2:2a:e1:83:46:b8:72:f5:83: 9e:6b:a2:09:97:f8:4c:bb:e6:03:55:38:78:bd:45:3c:83:2f: 8a:b1:b5:2d:cd:6f:a5:3a:24:20:83:c6:cd:67:94:57:48:a6: f1:43:a6:77:ee:c2:bb:b0:52:2e:45:af:2b:e4:76:c6:f4:98: bd:b5:ed:69:6c:e3:43:54:a3:83:86:93:98:af:a1:74:14:5b: 45:e8:b9:e2:f0:26:aa:79:72:e5:b1:36:3f:d9:51:e9:26:99: 4c:a0:0e:47:c3:3a:43:35:ab:17:10:cc:ca:98:4b:24:df:7d: c2:e7:c2:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRfeDGZoJvMNIOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk M2Q3ODMwZDAtYzZiZS00NzY3LWI4ZTItZjcxMzAyYzQxNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ6jT3axJaqLdQ+coYKbRMIzDittlCF28tfn c2rgawDg0Tw2etIkxh+8hzdXZQW9z4X70Jnw/i8LNOmHL2hr7sSPWBw5hwU+8nKW 4PbScjaeG8QwFZ3e8056CYBF+KXLp6KXdDMhPe3IRonn03E2TT/u0V9A36spNDFW TzbBuO8SbUgSuDcZLiIrLRE3opfQuhb/u6cAejgaACiLcshkcKB4RMzXMkPJydMi sgMox79H9vnB9qgvaUW/rgixaRiCUj8mRPrniHgZ86dzOewsbxcMOKCULoXt1fwB jPdRquKDgY2vEjwFP63n6RrW4VrzHb31BFOdR5DemPwArMTbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7xBo+IZGstREgnNFQqJs/Agly9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDZjOTVkNmQtYWRkMC0z ZjNjLWFkYzYtNjQ4MWJmODlkNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM56Vsrf53S/LWTDpSkh/eBkEXdda33BxitQaIaKADdM2+sOV8k1EFg 54QIB/8Pi8It37bYVN//x5GsvHhk3VASd7YT1UQOaHopkkkx6W9t3ChxrXDqNO9S uLetXRliIK3yrgOyM8UKWEaT2mYe3OfHsg+/u8Uyb2R0demNcwSJ6fofpHmoAOIq 4YNGuHL1g55rogmX+Ey75gNVOHi9RTyDL4qxtS3Nb6U6JCCDxs1nlFdIpvFDpnfu wruwUi5Fryvkdsb0mL217Wls40NUo4OGk5ivoXQUW0XoueLwJqp5cuWxNj/ZUekm mUygDkfDOkM1qxcQzMqYSyTffcLnwsg= -----END CERTIFICATE-----Generated at Wed Nov 5 01:00:42 2025 by rpki-client