$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e2829480-ab10-3a64-9e86-a56c8cb2dfde.roa File: e2829480-ab10-3a64-9e86-a56c8cb2dfde.roa (raw, json) Hash identifier: H4/zhHckiUOiXOKf40k0u9lYDwOs9VO8D/Bk3oLdvwg= Subject key identifier: 25:33:ED:46:04:38:72:03:91:85:1A:7F:70:60:0A:41:A0:6F:A8:B5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39CF381A09AF1D449211400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e2829480-ab10-3a64-9e86-a56c8cb2dfde.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f3:81:a0:9a:f1:d4:49:21:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=0af114bf-5ca5-4271-b828-a80cdb492f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a9:3c:7e:55:b6:97:74:75:85:90:12:21:25: 1b:93:26:4e:1e:db:bd:1a:3f:ab:c9:f5:a2:02:c2: 03:40:1f:24:72:bf:38:a5:39:26:a4:0b:ba:9e:94: 42:15:eb:8e:59:1c:09:34:ef:61:ae:b0:90:0e:6d: 1d:c6:04:f5:d2:cc:dd:bb:24:e3:0a:af:c3:7b:74: df:a0:54:ae:e0:0b:44:42:fb:58:bc:2b:70:61:e9: 39:e5:ec:46:d9:99:14:07:0f:a3:73:69:e9:ed:26: 63:84:17:d8:c3:e7:c9:2b:5e:3f:8e:97:82:69:a6: 30:2d:f1:69:30:f3:4a:c0:28:74:9d:5e:e3:03:1a: 68:9f:82:6d:79:d0:f3:9f:6b:57:8d:a7:81:a0:cd: 97:57:80:16:3d:09:a0:6e:ab:4c:84:89:b4:3a:db: 93:c4:80:ae:3f:96:ed:05:c3:81:01:76:01:6e:33: 3e:ed:16:3c:b2:12:cc:ae:2c:54:f7:5b:7f:0a:e7: 09:58:09:4a:4a:1d:fe:8c:f7:da:9d:77:3b:34:85: 45:45:02:b7:c6:16:15:a4:92:24:f7:eb:11:9a:80: fa:5d:0d:be:45:0c:95:52:af:4e:d4:e2:86:b9:30: a4:c0:8f:84:f2:66:74:53:0a:95:c1:0e:17:1f:b7: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:33:ED:46:04:38:72:03:91:85:1A:7F:70:60:0A:41:A0:6F:A8:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e2829480-ab10-3a64-9e86-a56c8cb2dfde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:05:9f:fc:01:50:5c:b0:b9:09:64:87:4a:c2:9d:84:d6:e9: d6:5b:2a:fd:ae:eb:6e:a1:b2:6c:c7:94:b2:e4:ae:1c:f7:00: a8:a4:a8:6a:e5:98:9c:fb:59:9f:6f:f8:4e:a4:ae:6d:cc:7e: c2:63:83:2b:7b:91:ba:e3:e3:34:a5:d4:1b:b5:34:a1:00:ab: 17:79:b8:27:65:ec:d8:c0:4d:f4:87:e2:df:5a:6e:d8:cd:af: 83:67:f0:bd:e7:ee:93:e2:cd:26:88:c0:5b:44:0e:bb:84:8a: f1:8c:d4:3e:dc:fb:bf:25:c7:74:6f:a1:af:45:a0:66:2b:eb: da:53:33:1d:a4:f9:af:0b:6c:72:54:5f:71:ac:df:11:a5:3a: 1e:e5:6d:3f:69:63:b6:4b:62:69:07:e0:15:08:4f:1c:82:3c: 13:a5:a5:11:f3:ec:0d:e1:a6:c0:19:a7:7b:e0:4c:c8:63:49: a2:8c:62:13:0a:67:37:a6:eb:97:46:1b:29:60:18:74:a7:e2: 3a:70:6a:ca:b7:a2:45:4d:8d:9c:a7:30:f6:4d:ff:3a:ae:8e: 87:79:76:c1:53:7b:8d:b7:ce:3b:bd:37:70:f8:4f:80:fd:62: 39:4d:2d:32:20:b2:f8:c0:8a:de:c7:88:a0:ea:31:e4:56:4b: a8:d6:f7:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPOBoJrx1EkhFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MGFmMTE0YmYtNWNhNS00MjcxLWI4MjgtYTgwY2RiNDkyZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiak8flW2l3R1hZASISUbkyZOHtu9Gj+ryfWi AsIDQB8kcr84pTkmpAu6npRCFeuOWRwJNO9hrrCQDm0dxgT10szduyTjCq/De3Tf oFSu4AtEQvtYvCtwYek55exG2ZkUBw+jc2np7SZjhBfYw+fJK14/jpeCaaYwLfFp MPNKwCh0nV7jAxpon4JtedDzn2tXjaeBoM2XV4AWPQmgbqtMhIm0OtuTxICuP5bt BcOBAXYBbjM+7RY8shLMrixU91t/CucJWAlKSh3+jPfanXc7NIVFRQK3xhYVpJIk 9+sRmoD6XQ2+RQyVUq9O1OKGuTCkwI+E8mZ0UwqVwQ4XH7fyuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUz7UYEOHIDkYUaf3BgCkGgb6i1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTI4Mjk0ODAtYWIxMC0z YTY0LTllODYtYTU2YzhjYjJkZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEFn/wBUFywuQlkh0rCnYTW6dZbKv2u626hsmzHlLLkrhz3AKikqGrl mJz7WZ9v+E6krm3MfsJjgyt7kbrj4zSl1Bu1NKEAqxd5uCdl7NjATfSH4t9abtjN r4Nn8L3n7pPizSaIwFtEDruEivGM1D7c+78lx3Rvoa9FoGYr69pTMx2k+a8LbHJU X3Gs3xGlOh7lbT9pY7ZLYmkH4BUITxyCPBOlpRHz7A3hpsAZp3vgTMhjSaKMYhMK Zzem65dGGylgGHSn4jpwasq3okVNjZynMPZN/zqujod5dsFTe423zju9N3D4T4D9 YjlNLTIgsvjAit7HiKDqMeRWS6jW9xw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:39:22 2025 by rpki-client