$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a920877a-26e2-3235-987b-ca2ef03be390.roa File: a920877a-26e2-3235-987b-ca2ef03be390.roa (raw, json) Hash identifier: pzYlXek0H45uegVAIqDbQXcxTCch7b27cfGTPHaVCp0= Subject key identifier: 26:D5:4D:1F:D0:5D:3C:28:A9:40:8D:E2:AB:3D:52:23:31:06:D2:05 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B99D7D704FE66BBBE950BBD34 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a920877a-26e2-3235-987b-ca2ef03be390.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 7018 IP address blocks: 108.165.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d7:04:fe:66:bb:be:95:0b:bd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f74d102c-43a3-40a4-8a6e-6a2e474a5ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e9:5c:5e:fa:b9:31:d7:19:54:2b:17:41:86: 84:ae:c4:55:2e:79:78:fe:7b:27:c3:25:e3:15:53: 8b:8a:d9:93:85:34:42:e5:da:e1:70:d7:78:0f:2e: c7:f5:a3:b4:5c:cf:f0:41:1f:1d:bb:50:2f:96:78: cf:f9:99:7a:4a:c8:60:b4:2a:42:04:d1:52:a4:9c: bd:c9:ef:66:a0:a7:ec:48:c8:ad:a3:ec:59:1c:3a: 72:fe:a4:94:3e:fa:74:97:2c:21:45:3d:7c:59:5c: c7:5c:ff:76:be:69:6d:89:ea:6a:65:8e:60:66:7f: fb:bf:af:dd:d8:62:03:27:3f:38:e8:e6:62:26:1f: 41:98:19:1d:db:ff:4b:60:1c:dc:54:8c:ff:bf:2a: 7b:ca:99:e4:94:28:67:ee:f6:ad:73:89:19:26:07: a6:df:8a:8f:69:75:61:17:05:98:93:20:a7:ac:6a: 4c:c4:b0:3a:bb:63:9e:ab:63:85:1e:6d:49:08:7c: 37:8e:30:e0:60:35:5f:a6:ce:b9:e2:ac:64:34:30: 6d:24:da:8c:f0:ed:b2:2c:26:9b:51:8b:c4:77:e5: 9c:b1:bc:cb:c9:15:94:e4:8a:35:56:d2:cd:b1:4a: 8a:f7:ea:37:3f:ec:5c:8d:83:06:a8:70:36:1f:9c: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D5:4D:1F:D0:5D:3C:28:A9:40:8D:E2:AB:3D:52:23:31:06:D2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a920877a-26e2-3235-987b-ca2ef03be390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:55:83:44:17:27:57:e9:fe:ec:94:3a:a2:a8:f4:1b:44:be: 79:a8:b0:f2:73:a6:99:8a:30:79:5e:e7:f9:04:31:71:78:93: 6f:74:51:39:5e:fa:5e:c0:0e:d1:c7:90:f1:02:50:31:71:74: 21:78:09:01:81:82:05:90:34:47:ba:51:0c:c3:24:bc:4f:01: f5:a2:af:52:65:17:24:30:2f:eb:70:09:f9:58:14:12:8f:cd: 6c:d7:b0:b3:18:5a:e7:7d:55:05:86:9b:7c:6b:e8:80:15:ba: f9:99:4a:d8:14:65:9b:ff:b0:d1:45:3d:f3:59:7d:11:d3:b1: db:ef:74:7e:2a:af:1c:f0:38:86:1a:95:3a:df:b4:a1:1d:43: 0f:e3:87:87:24:9e:d6:10:d8:3e:d8:c5:72:42:8d:8b:a1:04: 22:f6:f2:2a:54:60:f8:4a:40:fd:c7:df:8b:8b:11:69:2a:09: 68:82:31:47:1a:f8:1d:37:14:2b:81:60:95:a7:41:8b:36:fe: 0f:32:09:ed:81:e5:45:8d:a8:39:05:5b:3c:21:91:e1:b8:c4: 9f:0f:09:21:37:2c:eb:18:4f:da:61:95:61:45:90:3c:47:f8: bb:94:0e:1b:dd:cb:bc:0b:8f:56:4c:9d:2b:21:de:6e:32:1c: 71:97:e7:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ19cE/ma7vpULvTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Zjc0ZDEwMmMtNDNhMy00MGE0LThhNmUtNmEyZTQ3NGE1ZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOlcXvq5MdcZVCsXQYaErsRVLnl4/nsnwyXj FVOLitmThTRC5drhcNd4Dy7H9aO0XM/wQR8du1AvlnjP+Zl6SshgtCpCBNFSpJy9 ye9moKfsSMito+xZHDpy/qSUPvp0lywhRT18WVzHXP92vmltiepqZY5gZn/7v6/d 2GIDJz846OZiJh9BmBkd2/9LYBzcVIz/vyp7ypnklChn7vatc4kZJgem34qPaXVh FwWYkyCnrGpMxLA6u2Oeq2OFHm1JCHw3jjDgYDVfps654qxkNDBtJNqM8O2yLCab UYvEd+WcsbzLyRWU5Io1VtLNsUqK9+o3P+xcjYMGqHA2H5yP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbVTR/QXTwoqUCN4qs9UiMxBtIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTkyMDg3N2EtMjZlMi0z MjM1LTk4N2ItY2EyZWYwM2JlMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVVg0QXJ1fp/uyUOqKo9BtEvnmosPJzppmKMHle5/kEMXF4k290UTle +l7ADtHHkPECUDFxdCF4CQGBggWQNEe6UQzDJLxPAfWir1JlFyQwL+twCflYFBKP zWzXsLMYWud9VQWGm3xr6IAVuvmZStgUZZv/sNFFPfNZfRHTsdvvdH4qrxzwOIYa lTrftKEdQw/jh4ckntYQ2D7YxXJCjYuhBCL28ipUYPhKQP3H34uLEWkqCWiCMUca +B03FCuBYJWnQYs2/g8yCe2B5UWNqDkFWzwhkeG4xJ8PCSE3LOsYT9phlWFFkDxH +LuUDhvdy7wLj1ZMnSsh3m4yHHGX58I= -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:14 2025 by rpki-client