$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/794e595d-97cd-32aa-8bc3-4db5b70a797b.roa File: 794e595d-97cd-32aa-8bc3-4db5b70a797b.roa (raw, json) Hash identifier: 1pIFGHu/ZA8BW5rSUWGIeTnA0Bxg5xsiYPH5Ny6/Lw4= Subject key identifier: D9:C5:FC:5C:3F:09:32:FE:71:8C:C0:5A:A3:96:35:7D:7C:D9:D3:1B Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BBE405A824AD167360F9B3820 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/794e595d-97cd-32aa-8bc3-4db5b70a797b.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7979 IP address blocks: 108.165.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:5a:82:4a:d1:67:36:0f:9b:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=dd300f53-b1a8-46f4-8066-e6048e1ccbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cf:df:c1:5f:91:8b:ee:01:72:6a:f6:10:18: 81:ab:98:1b:93:e5:03:9a:b6:05:9b:ea:5d:55:78: e5:2d:5e:e4:a9:5e:4b:f1:69:d7:38:ba:0a:68:43: 4f:9e:54:78:9d:59:9a:2a:44:43:d9:1d:fd:be:30: ee:44:50:80:e0:64:60:42:c3:01:1e:45:9a:bf:d5: 0c:66:33:f6:97:65:25:a9:22:78:d2:07:72:ce:f6: 6b:6e:5d:ee:f7:da:19:65:b2:10:1d:4a:a1:75:05: 13:9e:c3:0a:11:48:05:41:4d:11:8c:c1:bb:45:e6: 63:7d:a1:90:9d:9f:27:cf:19:8f:58:b4:7a:02:74: 95:70:35:e0:42:02:1f:bc:02:10:e9:02:2f:51:8c: 6b:f4:32:d2:dc:47:45:27:75:b0:98:c1:cc:6e:4b: 12:a4:26:12:08:54:5a:f3:96:b8:3a:60:5e:74:cb: bc:2d:19:7a:51:a4:25:12:36:b0:b7:d8:d8:c6:68: 69:10:1d:c1:30:19:a1:58:ba:14:b0:1f:69:6c:2e: be:82:e1:c5:23:ab:3b:e5:21:10:54:8a:ca:c8:3b: aa:aa:91:d6:53:ad:f2:70:f2:0b:29:ea:83:2b:69: b8:f1:71:e0:72:3e:54:3d:b9:2e:91:1f:1b:a6:b4: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C5:FC:5C:3F:09:32:FE:71:8C:C0:5A:A3:96:35:7D:7C:D9:D3:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/794e595d-97cd-32aa-8bc3-4db5b70a797b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6d:72:c7:dd:b7:3b:16:90:62:dd:27:35:bc:8b:12:73:70: cd:1b:63:71:09:21:1f:2b:75:b6:bc:52:c3:fb:44:2d:b7:b3: c2:e5:78:72:88:bf:74:7f:8a:35:07:47:91:d0:23:cb:b5:73: 58:2a:cc:df:81:17:54:72:ab:37:bb:51:28:72:1c:bd:c7:a0: 57:71:ed:c8:3c:64:59:0b:e8:30:8f:d8:f2:53:16:70:e3:be: 47:55:a2:f7:cf:7f:75:36:e3:54:5f:31:6f:73:3d:77:28:e2: bd:f7:c8:54:d0:db:57:11:e4:ef:15:94:22:83:8a:10:30:e5: 6f:b5:68:4f:bf:19:32:33:78:eb:20:3a:76:de:2e:1d:a8:fd: 13:d2:a1:1f:c6:ea:ea:9c:fc:8b:a3:d8:ef:05:17:11:ba:35: af:e3:61:a0:98:74:eb:30:54:09:66:0c:30:4b:6e:ee:1b:50: 68:a2:4e:6f:aa:b9:77:45:1a:9d:9a:45:9b:ff:57:c6:7f:c8: 96:ff:00:71:dd:6f:32:91:fa:62:25:8d:e6:63:71:28:c7:67: d2:7b:af:5b:b2:f7:df:a0:fb:f2:0e:e5:c9:2f:cc:9f:01:10: d5:b9:73:17:f4:45:62:27:bf:00:d0:e6:c9:39:c0:16:64:00: ea:b6:57:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFqCStFnNg+bOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZGQzMDBmNTMtYjFhOC00NmY0LTgwNjYtZTYwNDhlMWNjYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM/fwV+Ri+4Bcmr2EBiBq5gbk+UDmrYFm+pd VXjlLV7kqV5L8WnXOLoKaENPnlR4nVmaKkRD2R39vjDuRFCA4GRgQsMBHkWav9UM ZjP2l2UlqSJ40gdyzvZrbl3u99oZZbIQHUqhdQUTnsMKEUgFQU0RjMG7ReZjfaGQ nZ8nzxmPWLR6AnSVcDXgQgIfvAIQ6QIvUYxr9DLS3EdFJ3WwmMHMbksSpCYSCFRa 85a4OmBedMu8LRl6UaQlEjawt9jYxmhpEB3BMBmhWLoUsB9pbC6+guHFI6s75SEQ VIrKyDuqqpHWU63ycPILKeqDK2m48XHgcj5UPbkukR8bprTufQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnF/Fw/CTL+cYzAWqOWNX182dMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzk0ZTU5NWQtOTdjZC0z MmFhLThiYzMtNGRiNWI3MGE3OTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRtcsfdtzsWkGLdJzW8ixJzcM0bY3EJIR8rdba8UsP7RC23s8LleHKI v3R/ijUHR5HQI8u1c1gqzN+BF1Ryqze7UShyHL3HoFdx7cg8ZFkL6DCP2PJTFnDj vkdVovfPf3U241RfMW9zPXco4r33yFTQ21cR5O8VlCKDihAw5W+1aE+/GTIzeOsg OnbeLh2o/RPSoR/G6uqc/Iuj2O8FFxG6Na/jYaCYdOswVAlmDDBLbu4bUGiiTm+q uXdFGp2aRZv/V8Z/yJb/AHHdbzKR+mIljeZjcSjHZ9J7r1uy99+g+/IO5ckvzJ8B ENW5cxf0RWInvwDQ5sk5wBZkAOq2Vz8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:48 2025 by rpki-client