$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e596bd5c-3262-3cdc-8290-5dbfcedef796.roa File: e596bd5c-3262-3cdc-8290-5dbfcedef796.roa (raw, json) Hash identifier: LpDgjcfz0QIQ0HaCrRZ6TPNV19SwxJJR48vrLxNCRZE= Subject key identifier: 5B:CD:8E:B0:35:32:9E:85:FE:F1:27:10:0D:13:CA:B2:73:D5:31:BF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D15CB5940450CA1C72E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e596bd5c-3262-3cdc-8290-5dbfcedef796.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:15:cb:59:40:45:0c:a1:c7:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=69145d92-c923-44dd-a481-a4a52ecd2c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:48:f1:8d:9d:ee:55:b5:1a:ff:53:98:dd: ca:37:ef:f6:fc:bb:52:b8:bc:18:86:39:9e:91:43: f8:3f:76:e6:f2:a1:2f:14:99:5d:4c:bc:16:d8:8f: 39:a7:39:c4:41:ce:f6:09:40:65:30:07:0a:ae:c8: fe:73:2c:0b:54:30:7a:57:5f:f0:18:c6:88:c5:d0: 41:d7:f1:4b:90:36:d7:34:fc:67:78:d8:04:2d:b8: db:88:28:61:1a:a4:54:60:e4:45:a0:50:7b:48:7d: b3:5a:58:70:01:3b:7e:2a:4a:ce:2d:d2:da:c8:18: 61:42:a6:d6:c5:27:37:0c:df:30:8d:88:bf:99:b5: e4:f2:68:d0:36:f3:49:f5:7d:4c:35:e9:de:43:84: 5c:0e:f0:c5:74:0b:55:84:57:6b:46:30:ea:ce:10: 00:2b:3b:69:10:38:19:32:1a:e0:01:5b:f4:4e:ea: 38:7e:41:32:de:70:a9:66:92:14:94:08:c7:c2:f1: 9f:ab:0f:74:c4:0c:9e:bb:d0:49:a1:8e:f2:3e:d2: 79:5d:d2:45:64:6a:7e:28:8f:ee:5a:d9:a7:94:a8: 99:e0:85:cc:a8:93:48:38:3c:a7:5d:75:a0:75:25: c9:61:fa:e0:8d:2a:47:98:44:50:29:37:fd:dc:98: 00:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CD:8E:B0:35:32:9E:85:FE:F1:27:10:0D:13:CA:B2:73:D5:31:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e596bd5c-3262-3cdc-8290-5dbfcedef796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:85:5c:4f:33:66:26:63:8b:04:90:c1:c2:1d:a4:4f:3f:c4: db:20:b6:92:14:72:6e:03:fa:83:b3:cf:e4:be:ad:81:64:10: 5c:48:6a:7c:e9:c5:f6:9e:50:b4:07:2b:32:58:28:32:73:5a: a8:0d:00:aa:21:e2:63:ee:a3:a5:25:88:64:b4:03:63:c6:c5: ca:12:7d:a9:a9:1c:c5:c1:95:ad:59:a5:6f:12:07:2f:78:02: e8:3d:9d:2f:69:f4:3d:da:84:61:27:c4:e9:8f:3d:50:6b:b4: 39:e6:c0:59:b9:54:cd:98:c8:e7:54:7e:b0:89:11:46:cf:dd: 7e:12:25:6e:14:0e:93:90:c8:f2:63:8a:1c:e0:bb:f0:4b:23: 64:cb:5e:50:4b:f1:df:d2:48:84:45:3b:86:3d:fa:86:f5:91: b1:90:02:88:b0:49:5a:80:91:7e:9f:b9:24:b5:0b:14:f3:aa: cb:34:83:85:41:bb:7e:28:b5:f5:f0:70:28:d8:eb:bc:72:79: 98:6c:af:48:18:31:b0:53:51:af:31:5a:2a:28:35:29:a6:8b: cb:f6:bd:ae:e0:6d:32:80:92:6c:79:71:67:46:66:4f:e5:a3: ba:ad:f8:e8:25:50:45:6c:d0:f0:5a:1b:43:8d:1d:1b:e1:42: 50:b7:d2:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRXLWUBFDKHHLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjkxNDVkOTItYzkyMy00NGRkLWE0ODEtYTRhNTJlY2QyYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmNI8Y2d7lW1Gv9TmN3KN+/2/LtSuLwYhjme kUP4P3bm8qEvFJldTLwW2I85pznEQc72CUBlMAcKrsj+cywLVDB6V1/wGMaIxdBB 1/FLkDbXNPxneNgELbjbiChhGqRUYORFoFB7SH2zWlhwATt+KkrOLdLayBhhQqbW xSc3DN8wjYi/mbXk8mjQNvNJ9X1MNeneQ4RcDvDFdAtVhFdrRjDqzhAAKztpEDgZ MhrgAVv0Tuo4fkEy3nCpZpIUlAjHwvGfqw90xAyeu9BJoY7yPtJ5XdJFZGp+KI/u WtmnlKiZ4IXMqJNIODynXXWgdSXJYfrgjSpHmERQKTf93JgAewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvNjrA1Mp6F/vEnEA0TyrJz1TG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTU5NmJkNWMtMzI2Mi0z Y2RjLTgyOTAtNWRiZmNlZGVmNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaFXE8zZiZjiwSQwcIdpE8/xNsgtpIUcm4D+oOzz+S+rYFkEFxIanzp xfaeULQHKzJYKDJzWqgNAKoh4mPuo6UliGS0A2PGxcoSfampHMXBla1ZpW8SBy94 Aug9nS9p9D3ahGEnxOmPPVBrtDnmwFm5VM2YyOdUfrCJEUbP3X4SJW4UDpOQyPJj ihzgu/BLI2TLXlBL8d/SSIRFO4Y9+ob1kbGQAoiwSVqAkX6fuSS1CxTzqss0g4VB u34otfXwcCjY67xyeZhsr0gYMbBTUa8xWiooNSmmi8v2va7gbTKAkmx5cWdGZk/l o7qt+OglUEVs0PBaG0ONHRvhQlC30p0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:46:05 2025 by rpki-client