$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c1b693b-a133-3cab-9b5d-c979a05ad6c5.roa File: 2c1b693b-a133-3cab-9b5d-c979a05ad6c5.roa (raw, json) Hash identifier: dNHcTJctWFGGzaSrokdInNv+9NltE8ZGh19wN7U2mBE= Subject key identifier: 8F:69:40:E7:FD:CA:0A:38:D4:71:0B:CD:A7:A4:D6:B4:07:14:6D:6F Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A682607889F5D9C8493F974C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c1b693b-a133-3cab-9b5d-c979a05ad6c5.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 21859 IP address blocks: 108.165.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:07:88:9f:5d:9c:84:93:f9:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=f5b373f0-17f4-4ab2-90f5-bbc42fed7ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:d0:b6:39:28:23:11:0e:eb:07:1b:13:e6: c7:46:c8:30:3f:91:2b:44:61:6b:92:c0:22:4c:4d: 4c:bb:4e:9c:3f:e8:2e:32:90:65:fc:15:06:dd:4e: 04:e6:61:66:cd:68:c8:6c:9a:de:ae:e6:b0:a8:47: 15:ee:9d:67:1b:71:f2:a9:9e:4d:2d:f6:12:28:e5: ea:3e:29:be:ac:24:9b:1d:32:d9:6f:73:70:84:9c: 1d:b4:37:c8:0e:f3:d8:6c:67:0f:6e:1a:71:dd:6e: 7c:a7:e7:21:e5:b9:26:85:d8:3b:01:31:16:8e:d4: 25:26:3e:4f:3d:4f:51:ed:62:31:8f:eb:d9:b9:d5: 21:4e:cd:e5:72:e7:3e:d7:30:54:0b:38:fe:a3:9c: 6a:0a:27:ae:23:64:5f:3e:f2:4e:0c:cf:62:05:1e: cf:66:9b:3b:e6:a2:4d:c6:b2:83:2d:70:d3:b9:f6: f9:77:6b:10:7f:38:09:f6:bf:dd:de:d3:26:77:24: 27:0c:bf:6c:b4:71:e9:00:e0:d5:61:3b:46:ae:b8: 64:af:7b:3a:33:29:75:54:dd:21:15:e5:0c:87:ec: e9:24:af:29:7e:0f:88:df:fb:96:6b:cd:81:4d:ab: 77:33:b2:a4:14:3b:1f:70:2f:a7:df:51:d2:b3:94: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:69:40:E7:FD:CA:0A:38:D4:71:0B:CD:A7:A4:D6:B4:07:14:6D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c1b693b-a133-3cab-9b5d-c979a05ad6c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:03:f4:8f:35:c7:5c:7c:69:14:30:79:74:c8:a4:ca:ed:a0: 2e:2f:25:22:87:81:a4:3e:3b:7e:8c:45:5f:ae:63:d2:f6:a0: 5e:e0:cd:fa:ff:8e:31:2a:94:50:2b:a4:1f:1f:ec:cb:d9:08: 29:57:d9:db:71:22:33:bf:df:51:9a:a5:a6:35:01:49:b3:98: 0c:ab:01:5f:74:3f:f2:30:7a:b5:1c:d9:b1:ce:10:d7:67:96: a7:88:1a:d5:3c:d9:f8:5a:5f:34:22:b7:f4:8a:cc:ba:8d:ac: 6f:57:08:4c:93:f9:32:13:ed:c9:76:c1:f1:cf:63:fc:dd:e0: ee:f9:81:8d:ca:62:74:09:e8:75:07:72:64:7c:b5:17:1c:01: 4c:05:82:cd:b9:0e:78:09:93:ac:a6:85:b4:ec:aa:d5:d1:d0: bc:a9:5b:ef:a4:76:33:42:bb:1e:aa:c6:d7:f0:7e:c1:9e:b5: 46:a4:36:55:42:e6:eb:8f:60:9f:57:01:7b:78:93:34:51:42: f3:02:5a:12:84:28:9d:b1:b9:89:5a:84:ce:43:cc:95:4b:ed: 66:00:d9:1c:f3:12:b5:3c:3e:57:d2:d5:22:32:81:9c:19:23: ac:8c:14:49:a3:7e:fb:bc:90:86:34:08:59:1f:1b:55:90:a9: 25:c4:27:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgeIn12chJP5dMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZjViMzczZjAtMTdmNC00YWIyLTkwZjUtYmJjNDJmZWQ3Y2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt3QtjkoIxEO6wcbE+bHRsgwP5ErRGFrksAi TE1Mu06cP+guMpBl/BUG3U4E5mFmzWjIbJreruawqEcV7p1nG3HyqZ5NLfYSKOXq Pim+rCSbHTLZb3NwhJwdtDfIDvPYbGcPbhpx3W58p+ch5bkmhdg7ATEWjtQlJj5P PU9R7WIxj+vZudUhTs3lcuc+1zBUCzj+o5xqCieuI2RfPvJODM9iBR7PZps75qJN xrKDLXDTufb5d2sQfzgJ9r/d3tMmdyQnDL9stHHpAODVYTtGrrhkr3s6Myl1VN0h FeUMh+zpJK8pfg+I3/uWa82BTat3M7KkFDsfcC+n31HSs5TpBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9pQOf9ygo41HELzaek1rQHFG1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmMxYjY5M2ItYTEzMy0z Y2FiLTliNWQtYzk3OWEwNWFkNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoD9I81x1x8aRQweXTIpMrtoC4vJSKHgaQ+O36MRV+uY9L2oF7gzfr/ jjEqlFArpB8f7MvZCClX2dtxIjO/31GapaY1AUmzmAyrAV90P/IwerUc2bHOENdn lqeIGtU82fhaXzQit/SKzLqNrG9XCEyT+TIT7cl2wfHPY/zd4O75gY3KYnQJ6HUH cmR8tRccAUwFgs25DngJk6ymhbTsqtXR0LypW++kdjNCux6qxtfwfsGetUakNlVC 5uuPYJ9XAXt4kzRRQvMCWhKEKJ2xuYlahM5DzJVL7WYA2RzzErU8PlfS1SIygZwZ I6yMFEmjfvu8kIY0CFkfG1WQqSXEJzc= -----END CERTIFICATE-----Generated at Mon Aug 4 07:56:02 2025 by rpki-client