$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b860561a-0435-371c-a849-8af7b0fccfd9.roa File: b860561a-0435-371c-a849-8af7b0fccfd9.roa (raw, json) Hash identifier: w6UtWpFcPLLtXmeyH/kRlWSYLXiVcuYsmQt1VnZSXIw= Subject key identifier: B5:8D:21:29:8E:DF:29:6B:CB:AA:BB:2C:83:DA:EB:3E:BA:5E:34:CA Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BBE4048945A707DF6672A6780 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b860561a-0435-371c-a849-8af7b0fccfd9.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 46450 IP address blocks: 108.165.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:48:94:5a:70:7d:f6:67:2a:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=72123686-dfd2-4a5f-bf9a-a8f92fd0828c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:9e:3d:0b:53:5f:67:81:5f:4b:f8:7f:28: fb:7f:5f:ef:f7:73:1d:d8:fb:02:38:1d:71:df:2a: 0b:41:8c:67:c1:6c:a4:c7:62:5f:cd:74:15:3b:5c: 18:e9:8e:9a:12:aa:6d:7f:09:f9:ad:54:f8:7c:f7: ac:66:24:bf:bd:a0:6a:bc:e0:33:d6:5e:e9:b7:d8: 2c:0e:95:d9:8b:2c:cf:72:81:d6:da:47:84:73:1a: 3a:dc:79:15:06:2b:c3:78:be:d0:0e:08:03:31:c7: b9:4a:d8:76:83:e9:74:da:a8:c2:9e:6f:cb:88:ce: 43:8f:2f:fb:ef:b6:1b:ed:a7:ed:05:ea:62:1e:26: c7:4a:e7:dc:ae:e8:34:a9:6b:d4:b2:32:53:0b:05: 16:d5:be:84:71:f2:bc:dd:e6:6b:40:f4:4e:c6:06: 69:a8:11:83:a1:d0:fc:82:09:d2:ef:73:c4:91:02: 1b:0d:af:eb:c7:96:42:a8:22:d7:62:e7:c8:d9:7c: 03:87:a3:e5:53:6f:03:e1:dd:50:e2:9d:25:1c:4e: a7:fc:25:e9:b2:2b:4a:71:38:68:61:da:2e:e9:de: e0:0a:c0:e7:ec:54:79:87:0d:19:7b:1c:94:5e:34: 9c:f8:dd:ac:ee:1b:8b:12:76:03:8e:ab:93:ad:b9: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8D:21:29:8E:DF:29:6B:CB:AA:BB:2C:83:DA:EB:3E:BA:5E:34:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b860561a-0435-371c-a849-8af7b0fccfd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b9:26:24:a2:35:00:d0:25:a0:86:37:c1:5b:5e:c0:3b:f2: 78:fe:b4:8e:cd:4f:9c:d9:37:ff:d7:bc:d2:88:d2:fc:6a:3c: 2a:75:88:03:0e:2f:5f:4d:06:c4:66:92:56:fb:5f:e4:ef:d9: 1c:d1:8f:f1:81:f7:78:33:23:a0:25:51:1f:b1:03:03:2e:2f: 53:80:88:b5:b3:43:d5:63:8f:74:3a:36:86:84:15:70:f5:9e: fc:80:97:a3:06:3a:65:b4:4e:99:04:62:51:16:a0:3e:1a:fc: af:e2:2e:a9:d0:df:fb:c8:3e:16:f0:8e:7b:58:4a:f6:df:2d: fd:df:b3:01:ac:26:2c:41:e1:79:3b:b8:7f:14:6e:13:93:37: 00:05:6e:61:68:9d:b7:51:a0:00:e7:9c:9b:d1:54:d6:1c:3a: 44:67:3b:ce:e5:cc:b8:dc:1d:f3:2f:a1:5e:3c:ed:b9:d5:56: c5:0c:40:ad:77:70:f4:84:c6:46:5c:1d:bf:8b:fa:c0:42:4e: 3c:6c:e2:5f:d9:15:5a:17:65:cf:95:17:61:a4:1c:a2:78:51: dd:cd:5b:05:1e:ed:ab:45:96:8a:c5:9b:e8:7c:db:cd:26:08: 3e:ee:c0:97:a8:75:75:ea:87:64:f8:fc:6a:11:f4:17:23:fb: d1:22:00:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEiUWnB99mcqZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NzIxMjM2ODYtZGZkMi00YTVmLWJmOWEtYThmOTJmZDA4MjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzqePQtTX2eBX0v4fyj7f1/v93Md2PsCOB1x 3yoLQYxnwWykx2JfzXQVO1wY6Y6aEqptfwn5rVT4fPesZiS/vaBqvOAz1l7pt9gs DpXZiyzPcoHW2keEcxo63HkVBivDeL7QDggDMce5Sth2g+l02qjCnm/LiM5Djy/7 77Yb7aftBepiHibHSufcrug0qWvUsjJTCwUW1b6EcfK83eZrQPROxgZpqBGDodD8 ggnS73PEkQIbDa/rx5ZCqCLXYufI2XwDh6PlU28D4d1Q4p0lHE6n/CXpsitKcTho Ydou6d7gCsDn7FR5hw0ZexyUXjSc+N2s7huLEnYDjquTrbkd7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWNISmO3ylry6q7LIPa6z66XjTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjg2MDU2MWEtMDQzNS0z NzFjLWE4NDktOGFmN2IwZmNjZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKXeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa5JiSiNQDQJaCGN8FbXsA78nj+tI7NT5zZN//XvNKI0vxqPCp1iAMO L19NBsRmklb7X+Tv2RzRj/GB93gzI6AlUR+xAwMuL1OAiLWzQ9Vjj3Q6NoaEFXD1 nvyAl6MGOmW0TpkEYlEWoD4a/K/iLqnQ3/vIPhbwjntYSvbfLf3fswGsJixB4Xk7 uH8UbhOTNwAFbmFonbdRoADnnJvRVNYcOkRnO87lzLjcHfMvoV487bnVVsUMQK13 cPSExkZcHb+L+sBCTjxs4l/ZFVoXZc+VF2GkHKJ4Ud3NWwUe7atFlorFm+h8280m CD7uwJeodXXqh2T4/GoR9Bcj+9EiAIo= -----END CERTIFICATE-----Generated at Tue Nov 4 08:05:13 2025 by rpki-client