$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3011cef-8ab3-3a46-a6ca-135ff7565dae.roa File: f3011cef-8ab3-3a46-a6ca-135ff7565dae.roa (raw, json) Hash identifier: I4eRl8NP9zxTpYoR7kQZV4L3ltLBVdnb/WhoMd5p6DY= Subject key identifier: CA:2C:20:C9:D4:29:88:30:E7:72:9E:96:73:0D:80:7E:37:D0:A6:F8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39CF41EE07FD0E2720A3600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3011cef-8ab3-3a46-a6ca-135ff7565dae.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 108.166.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f4:1e:e0:7f:d0:e2:72:0a:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=2052279f-bd6f-4601-8e17-adcc62dc8e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:fe:65:a8:ee:03:29:50:c8:96:54:47:7a: 0b:f1:c7:7f:c4:c3:4e:5f:66:79:44:9b:0e:05:3f: cb:02:e4:70:08:b8:bf:7c:79:69:cb:c8:8c:7a:c4: 6a:92:3c:97:df:88:31:42:48:15:99:36:f8:c8:8c: 05:96:e9:10:a1:d5:be:cd:43:3f:c7:c4:14:92:1d: 08:cd:90:f8:f4:f7:f2:aa:02:6d:a5:ef:2e:65:fb: ca:fb:1e:2f:53:84:da:ff:27:e0:1c:79:da:46:5b: f5:85:b5:3d:93:51:68:44:d4:d9:3c:35:20:66:2c: 00:76:82:21:c8:c3:e9:94:14:57:9e:e7:2d:c7:95: 13:91:78:07:b9:8f:39:bf:b4:c5:19:84:18:cb:8a: 62:b8:a7:de:20:ca:fa:4a:f1:76:5e:b9:ab:25:b8: 1e:18:97:dc:3a:5b:ea:0f:15:cf:a9:e2:80:a6:78: 06:25:fa:9b:54:a4:7c:34:16:2b:54:1c:22:b9:91: 7a:0b:01:74:d6:ed:ce:65:94:13:7f:39:79:4e:14: 73:c9:22:ad:93:69:a4:49:ec:5b:78:2c:2d:ec:fc: 6a:b9:b6:b3:e2:12:66:86:8b:99:0b:76:5b:da:d6: 5f:79:89:e4:e6:4e:97:af:73:a7:43:04:9e:60:b8: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2C:20:C9:D4:29:88:30:E7:72:9E:96:73:0D:80:7E:37:D0:A6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3011cef-8ab3-3a46-a6ca-135ff7565dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:a8:36:5d:17:5a:42:68:f9:b6:87:f2:8c:8a:9b:75:a8:10: 59:f5:a9:5a:9c:c3:01:08:3a:e3:6a:06:0d:aa:84:8d:31:15: d8:4a:ba:ad:38:df:bb:86:24:e5:25:5d:4b:c1:3f:27:f9:60: 63:37:82:d2:1d:ca:c6:6a:c1:81:3c:0d:ed:6c:cc:9c:ba:90: 41:c8:e6:34:49:94:c5:6c:09:14:74:b9:5c:6f:7a:c3:6a:6f: 3f:ec:19:06:4c:88:c6:18:df:8b:cd:1a:2f:ca:26:72:04:57: ce:5b:bb:21:ce:90:ab:4e:1b:39:eb:33:50:8b:5b:08:0a:93: c3:52:cf:91:06:ce:88:89:a3:fe:2e:48:31:0e:bc:b1:79:ae: ed:62:97:98:e8:73:80:9f:63:25:37:77:9c:ee:cd:23:fa:97: 9c:b7:a6:74:89:0c:ad:c6:19:59:12:61:14:44:6e:bd:24:9d: 13:13:57:b8:f3:6b:f8:4d:4d:db:bd:1e:d0:6e:67:b1:fc:06: 8a:2b:a7:b8:d6:18:b4:14:4e:31:c4:e2:56:ba:97:a1:32:e3: e5:4b:f9:b4:2d:58:cc:88:c6:a9:9b:49:93:d3:2e:c5:91:f5: d3:ed:e4:45:ab:ca:d1:fa:ae:c7:09:92:12:1c:a0:e0:9a:39: 46:a2:c8:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPQe4H/Q4nIKNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MjA1MjI3OWYtYmQ2Zi00NjAxLThlMTctYWRjYzYyZGM4ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq/+ZajuAylQyJZUR3oL8cd/xMNOX2Z5RJsO BT/LAuRwCLi/fHlpy8iMesRqkjyX34gxQkgVmTb4yIwFlukQodW+zUM/x8QUkh0I zZD49PfyqgJtpe8uZfvK+x4vU4Ta/yfgHHnaRlv1hbU9k1FoRNTZPDUgZiwAdoIh yMPplBRXnuctx5UTkXgHuY85v7TFGYQYy4piuKfeIMr6SvF2XrmrJbgeGJfcOlvq DxXPqeKApngGJfqbVKR8NBYrVBwiuZF6CwF01u3OZZQTfzl5ThRzySKtk2mkSexb eCwt7Pxqubaz4hJmhouZC3Zb2tZfeYnk5k6Xr3OnQwSeYLi0NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMosIMnUKYgw53KelnMNgH430Kb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjMwMTFjZWYtOGFiMy0z YTQ2LWE2Y2EtMTM1ZmY3NTY1ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJioNl0XWkJo+baH8oyKm3WoEFn1qVqcwwEIOuNqBg2qhI0xFdhKuq04 37uGJOUlXUvBPyf5YGM3gtIdysZqwYE8De1szJy6kEHI5jRJlMVsCRR0uVxvesNq bz/sGQZMiMYY34vNGi/KJnIEV85buyHOkKtOGznrM1CLWwgKk8NSz5EGzoiJo/4u SDEOvLF5ru1il5joc4CfYyU3d5zuzSP6l5y3pnSJDK3GGVkSYRREbr0knRMTV7jz a/hNTdu9HtBuZ7H8Boorp7jWGLQUTjHE4la6l6Ey4+VL+bQtWMyIxqmbSZPTLsWR 9dPt5EWrytH6rscJkhIcoOCaOUaiyHc= -----END CERTIFICATE-----Generated at Wed Nov 5 06:31:31 2025 by rpki-client