$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6ee367b-1bc7-3cb8-b910-5e9aa9824948.roa File: a6ee367b-1bc7-3cb8-b910-5e9aa9824948.roa (raw, json) Hash identifier: 1A0+dq6Tg+psFYgxCd3bUG8YN/RMUGhc+Dol2tv59zo= Subject key identifier: 71:26:B4:86:3F:8A:D1:BE:CC:E0:33:58:30:0D:00:13:0B:F5:5D:77 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B970D065D6387C72CD450C900 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6ee367b-1bc7-3cb8-b910-5e9aa9824948.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 401152 IP address blocks: 108.165.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:06:5d:63:87:c7:2c:d4:50:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=8274a0ac-eb18-4248-8510-24cec25a3cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dc:90:78:cf:e8:1a:d3:4f:46:d9:f2:37:e5: ab:0f:57:5b:bd:1d:07:2d:c4:41:97:3e:1d:23:dd: a9:e4:9b:8e:d8:8f:6a:aa:68:aa:9f:c4:3b:38:e7: 42:87:97:c4:ff:77:c3:33:63:dc:9b:62:f2:aa:a9: e4:7b:3b:b3:9f:19:c6:bf:f7:79:fe:ec:ae:19:6f: 3d:90:eb:7f:48:a4:79:9a:28:58:1d:57:81:af:85: 4c:90:b0:dc:8b:e2:50:38:0b:60:c5:35:0c:b5:05: 1c:03:64:d1:f9:3a:77:cf:50:b8:02:ba:b6:d3:1b: 74:f7:2d:76:b4:e7:a5:e6:bb:eb:f6:61:e3:9a:ae: 5e:d1:65:3d:8d:e7:86:ec:b8:65:8b:6f:46:23:7f: 11:01:e0:f3:51:0c:5a:74:7d:d9:ce:89:1f:5d:32: 66:42:44:34:90:01:ad:b7:18:9a:6d:60:b2:c1:e0: 70:8c:34:c3:dd:61:da:47:c1:fe:4a:86:6b:27:4e: 6b:3b:da:03:68:58:80:71:3b:d5:bb:17:28:d1:f5: 76:fa:0f:82:27:2b:18:8c:11:4d:f3:55:46:ab:62: ae:6d:29:d2:ec:30:07:7b:82:d1:6c:ce:4b:a0:e1: df:89:2e:61:b6:ce:d1:6e:29:08:2b:22:b8:a3:2a: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:26:B4:86:3F:8A:D1:BE:CC:E0:33:58:30:0D:00:13:0B:F5:5D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6ee367b-1bc7-3cb8-b910-5e9aa9824948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c8:a9:73:76:1f:f9:52:16:b2:28:9f:b5:b8:0b:3e:9f:b6: 14:81:0f:3b:cb:0c:47:3c:24:ad:28:a7:dd:1e:24:be:aa:7b: bb:a9:3d:be:ac:b9:85:07:c0:d0:47:c8:1a:39:7e:ab:b3:16: 6d:4f:08:47:f6:c8:79:21:ba:19:04:40:57:ab:1f:aa:7b:bd: 08:12:ad:25:fe:4d:cc:12:19:33:56:02:23:44:cb:b3:11:53: 1e:03:9e:0c:64:da:32:ad:32:03:a1:35:43:70:6b:bb:cc:e5: 2f:1c:2b:7e:52:c2:71:f6:27:5d:e9:d8:d7:cf:fd:83:a4:98: 41:a7:3e:d7:4c:3b:94:fc:1e:2a:69:44:04:21:b7:22:2f:0e: c9:ca:e1:a8:26:26:d1:ef:ff:f7:85:0c:bb:af:96:28:2c:33: 2d:f5:cf:4c:b6:d9:56:ec:c5:0b:b5:77:5a:1f:7b:9a:0b:14: d8:1b:c6:29:15:0d:66:f7:0c:5c:84:f4:c7:08:b7:97:4c:06: 9c:b0:1a:89:57:d1:cf:2d:1f:68:8d:11:73:78:18:da:b0:7a: 14:cf:cb:ca:2f:6a:c2:0e:11:7d:fa:77:a2:9b:2d:86:db:70: ce:1b:6b:07:a4:b2:1f:94:65:89:9e:07:ad:7f:80:31:71:2e: 29:96:35:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDQZdY4fHLNRQyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ODI3NGEwYWMtZWIxOC00MjQ4LTg1MTAtMjRjZWMyNWEzY2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNyQeM/oGtNPRtnyN+WrD1dbvR0HLcRBlz4d I92p5JuO2I9qqmiqn8Q7OOdCh5fE/3fDM2Pcm2LyqqnkezuznxnGv/d5/uyuGW89 kOt/SKR5mihYHVeBr4VMkLDci+JQOAtgxTUMtQUcA2TR+Tp3z1C4Arq20xt09y12 tOel5rvr9mHjmq5e0WU9jeeG7Lhli29GI38RAeDzUQxadH3ZzokfXTJmQkQ0kAGt txiabWCyweBwjDTD3WHaR8H+SoZrJ05rO9oDaFiAcTvVuxco0fV2+g+CJysYjBFN 81VGq2KubSnS7DAHe4LRbM5LoOHfiS5hts7RbikIKyK4oyosvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEmtIY/itG+zOAzWDANABML9V13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTZlZTM2N2ItMWJjNy0z Y2I4LWI5MTAtNWU5YWE5ODI0OTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKX6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfIqXN2H/lSFrIon7W4Cz6fthSBDzvLDEc8JK0op90eJL6qe7upPb6s uYUHwNBHyBo5fquzFm1PCEf2yHkhuhkEQFerH6p7vQgSrSX+TcwSGTNWAiNEy7MR Ux4Dngxk2jKtMgOhNUNwa7vM5S8cK35SwnH2J13p2NfP/YOkmEGnPtdMO5T8Hipp RAQhtyIvDsnK4agmJtHv//eFDLuvligsMy31z0y22VbsxQu1d1ofe5oLFNgbxikV DWb3DFyE9McIt5dMBpywGolX0c8tH2iNEXN4GNqwehTPy8ovasIOEX36d6KbLYbb cM4baweksh+UZYmeB61/gDFxLimWNWs= -----END CERTIFICATE-----Generated at Wed Nov 5 01:25:53 2025 by rpki-client