$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23516b7e-a145-3ca6-8364-956407da0040.roa File: 23516b7e-a145-3ca6-8364-956407da0040.roa (raw, json) Hash identifier: fS/aVMIfrZfCTvdE/lQ95ZAAQXxMBI6WC7++HzSGl3k= Subject key identifier: 32:1C:03:2A:D1:B7:4C:3F:9D:C7:BC:51:EC:25:F0:90:DA:22:B8:86 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A63F5BF7C1C09976D78AF8FC0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23516b7e-a145-3ca6-8364-956407da0040.roa Signing time: Thu 03 Jul 2025 01:00:48 +0000 ROA not before: Thu 03 Jul 2025 01:00:48 +0000 ROA not after: Wed 01 Oct 2025 01:00:48 +0000 asID: 14618 IP address blocks: 108.165.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:f5:bf:7c:1c:09:97:6d:78:af:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 3 01:00:48 2025 GMT Not After : Oct 1 01:00:48 2025 GMT Subject: CN=3bd14a60-ded8-4a0e-96f5-255b19e35a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:02:ee:3c:26:23:e3:5e:6c:b5:3d:5e:36: b1:56:2b:04:fd:77:dc:96:10:58:45:07:52:bc:b3: e9:45:b7:2e:ac:41:c3:7c:ee:28:a1:b2:b0:1e:dc: 1e:92:64:d9:e8:e1:04:a6:42:22:68:d6:b0:eb:f2: 16:f8:04:56:36:0e:ce:ad:88:fd:8b:ff:e6:56:5e: a0:9b:b4:f5:82:ca:2e:47:6c:18:35:2d:c1:cf:e9: 6d:d7:42:d7:be:99:3c:47:81:eb:8f:23:26:ff:c0: f6:0f:6a:cc:75:c5:2c:27:5a:40:ea:97:be:11:e4: f3:ab:e7:0d:39:2b:7d:2d:2c:4e:45:f8:9f:71:47: 64:36:60:0c:87:4a:59:09:99:24:3e:95:22:19:41: 53:7f:78:5c:0c:66:47:33:1b:cc:82:50:a2:16:6d: 28:8a:bf:a9:02:06:d4:60:63:bb:c4:ac:b7:cc:dc: 26:48:ec:13:4c:d2:db:8b:1d:14:48:2a:43:4f:40: fe:bb:d5:5f:d9:b7:77:fb:e6:96:d8:3c:91:57:1a: 94:48:00:b6:15:f8:0b:50:73:eb:0a:e0:bd:eb:cf: e8:85:2c:ce:9a:5a:ce:62:7c:85:59:d7:73:34:2d: af:af:41:15:df:fd:f9:2e:b6:25:91:a9:db:eb:18: 47:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1C:03:2A:D1:B7:4C:3F:9D:C7:BC:51:EC:25:F0:90:DA:22:B8:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23516b7e-a145-3ca6-8364-956407da0040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:83:c7:b4:9c:4a:91:e0:03:7e:43:f7:00:a2:d7:af:f8:c4: d2:bd:03:fd:cc:c6:ef:f0:e4:81:39:2e:16:36:48:a1:a8:ab: 95:51:db:71:2e:e8:fd:a2:9e:f0:ad:62:f5:88:70:5d:4b:07: b1:e0:29:69:ca:61:8f:1b:5b:68:98:1b:dc:81:81:ff:d3:ac: f1:45:02:26:6f:7a:b8:8a:52:b6:45:53:4f:d3:f7:ea:6f:06: 74:56:31:45:c4:69:1c:1a:11:d3:cf:fc:49:60:59:e3:bf:14: e2:6b:32:55:ff:c8:f9:39:1e:69:bf:fd:f0:3b:08:36:b4:c9: 74:8a:41:73:fe:15:33:5b:5f:be:31:b9:1c:94:a6:80:1d:3d: 80:b7:c8:1d:8f:14:3d:3d:6f:42:4e:7a:00:33:a0:75:3f:1c: 95:3f:6b:22:b3:4c:6b:09:cc:79:f0:53:da:b0:95:da:35:11: e3:d0:d2:da:ca:f5:05:0d:a6:47:db:46:c5:f0:f4:55:b3:df: f9:d9:9e:6f:c5:5e:4e:ba:06:d1:cf:a0:03:7e:8c:46:92:71: 2d:21:93:9e:48:49:71:c2:50:ed:1b:37:f2:57:84:20:70:34: 51:25:5a:d9:fd:2d:67:ff:52:77:e3:41:99:b9:6b:36:06:a7: 3d:c8:96:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9b98HAmXbXivj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk M2JkMTRhNjAtZGVkOC00YTBlLTk2ZjUtMjU1YjE5ZTM1YTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuoC7jwmI+NebLU9XjaxVisE/XfclhBYRQdS vLPpRbcurEHDfO4oobKwHtwekmTZ6OEEpkIiaNaw6/IW+ARWNg7OrYj9i//mVl6g m7T1gsouR2wYNS3Bz+lt10LXvpk8R4HrjyMm/8D2D2rMdcUsJ1pA6pe+EeTzq+cN OSt9LSxORfifcUdkNmAMh0pZCZkkPpUiGUFTf3hcDGZHMxvMglCiFm0oir+pAgbU YGO7xKy3zNwmSOwTTNLbix0USCpDT0D+u9Vf2bd3++aW2DyRVxqUSAC2FfgLUHPr CuC968/ohSzOmlrOYnyFWddzNC2vr0EV3/35LrYlkanb6xhHnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIcAyrRt0w/nce8Uewl8JDaIriGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjM1MTZiN2UtYTE0NS0z Y2E2LTgzNjQtOTU2NDA3ZGEwMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuDx7ScSpHgA35D9wCi16/4xNK9A/3Mxu/w5IE5LhY2SKGoq5VR23Eu 6P2invCtYvWIcF1LB7HgKWnKYY8bW2iYG9yBgf/TrPFFAiZveriKUrZFU0/T9+pv BnRWMUXEaRwaEdPP/ElgWeO/FOJrMlX/yPk5Hmm//fA7CDa0yXSKQXP+FTNbX74x uRyUpoAdPYC3yB2PFD09b0JOegAzoHU/HJU/ayKzTGsJzHnwU9qwldo1EePQ0trK 9QUNpkfbRsXw9FWz3/nZnm/FXk66BtHPoAN+jEaScS0hk55ISXHCUO0bN/JXhCBw NFElWtn9LWf/UnfjQZm5azYGpz3Ilm0= -----END CERTIFICATE-----Generated at Wed Aug 6 14:21:32 2025 by rpki-client