$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa File: bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa (raw, json) Hash identifier: kRaafr/bC0l2bQ49x6Ru29T9VAj7z0Yd7E+uX5R23ZI= Subject key identifier: 1E:81:8F:D2:89:EA:63:33:83:44:8B:D2:51:E8:92:61:50:C6:17:56 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B7DECA4C0C58B97A5CCB785C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 211440 IP address blocks: 108.165.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a4:c0:c5:8b:97:a5:cc:b7:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=eb26c5ee-d3cf-4603-85c3-9526035d6a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d7:8f:6c:40:6f:84:43:90:24:c4:9a:4a:1a: 99:55:65:ed:41:ab:f9:25:02:8d:84:71:91:05:d2: 69:79:49:9d:f9:8a:77:a3:e0:12:f2:d4:52:76:15: 40:b4:1a:7b:24:4c:46:6e:bb:b2:7a:ea:0e:27:d2: ab:89:61:33:6d:40:ae:8a:5b:90:fe:93:10:e5:30: 54:ea:10:69:0e:3e:94:6f:26:64:22:59:1a:f8:fa: 79:cf:f3:f5:dd:bf:ce:e6:c8:80:a0:a2:62:a2:7b: 61:d1:de:dc:a6:6e:b9:4d:3e:17:8c:6b:f6:b2:84: cb:60:9d:22:12:23:b5:3c:4a:5f:6c:07:ad:1e:51: 64:2b:2e:25:64:25:87:29:80:55:eb:12:af:bc:5b: 0e:5a:c0:6c:26:00:3c:41:80:68:c0:84:0a:b6:7a: 73:84:78:84:f8:30:98:42:95:32:bf:96:03:40:4f: b7:54:b5:09:64:5e:cc:30:6a:c0:d8:3f:d8:c9:bb: 45:7f:f8:cf:64:fb:4e:cc:53:7b:aa:ea:7e:56:13: a5:cc:3c:01:1f:0e:07:af:28:85:43:92:77:22:9d: 65:7d:db:66:db:e3:f8:93:06:6d:28:80:c0:7f:85: 7f:6a:3a:e4:e1:d2:91:5b:b7:f9:22:fe:46:f8:5d: 99:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:81:8F:D2:89:EA:63:33:83:44:8B:D2:51:E8:92:61:50:C6:17:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b5:c2:a6:73:c0:9b:75:bf:42:37:48:97:b3:82:f6:1b:d9: 25:af:90:fc:90:fe:79:81:d2:f9:92:b8:31:c3:ad:03:76:53: fc:25:93:aa:df:2c:c7:80:0f:6c:ee:6c:25:c3:0e:5f:9c:af: 45:08:19:d4:35:66:02:23:7d:8a:48:81:1b:51:4b:2d:16:20: 7a:3c:ff:e2:37:76:37:76:33:d7:7e:66:9b:9d:79:50:7b:6a: 6a:08:27:3c:20:44:dd:6e:77:eb:03:de:61:02:4d:0b:2f:b8: fb:de:c7:bd:1b:36:ec:4e:50:e5:5e:6c:5f:df:59:ec:fc:8a: 47:fd:21:23:07:a8:61:a6:d3:e2:3f:60:65:85:56:f0:6e:4f: 10:7f:ec:3d:c9:ce:fe:8d:6f:07:8c:1f:96:28:37:46:5a:db: 0f:a0:94:28:10:a6:58:8c:ab:46:cf:8f:8f:4e:85:c9:bd:8b: 70:54:e1:eb:e7:81:c3:c0:7f:ed:65:dc:70:39:1a:47:73:15: fd:47:e3:50:45:fb:bd:df:5b:ef:e3:6a:06:d4:5e:e3:d0:54: b8:f4:61:7d:63:e6:ce:c9:d7:95:31:38:89:28:fd:65:27:a1: 95:36:46:0a:d0:df:f2:40:4f:00:e5:e9:53:5d:7a:25:43:19: fa:94:30:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KTAxYuXpcy3hcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZWIyNmM1ZWUtZDNjZi00NjAzLTg1YzMtOTUyNjAzNWQ2YTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NePbEBvhEOQJMSaShqZVWXtQav5JQKNhHGR BdJpeUmd+Yp3o+AS8tRSdhVAtBp7JExGbruyeuoOJ9KriWEzbUCuiluQ/pMQ5TBU 6hBpDj6UbyZkIlka+Pp5z/P13b/O5siAoKJionth0d7cpm65TT4XjGv2soTLYJ0i EiO1PEpfbAetHlFkKy4lZCWHKYBV6xKvvFsOWsBsJgA8QYBowIQKtnpzhHiE+DCY QpUyv5YDQE+3VLUJZF7MMGrA2D/YybtFf/jPZPtOzFN7qup+VhOlzDwBHw4HryiF Q5J3Ip1lfdtm2+P4kwZtKIDAf4V/ajrk4dKRW7f5Iv5G+F2ZaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6Bj9KJ6mMzg0SL0lHokmFQxhdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmNhZjEzMDUtMWUwZi0z OGY3LWE3YzQtNDViNzgyMGY0ZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm1wqZzwJt1v0I3SJezgvYb2SWvkPyQ/nmB0vmSuDHDrQN2U/wlk6rf LMeAD2zubCXDDl+cr0UIGdQ1ZgIjfYpIgRtRSy0WIHo8/+I3djd2M9d+ZpudeVB7 amoIJzwgRN1ud+sD3mECTQsvuPvex70bNuxOUOVebF/fWez8ikf9ISMHqGGm0+I/ YGWFVvBuTxB/7D3Jzv6NbweMH5YoN0Za2w+glCgQpliMq0bPj49Ohcm9i3BU4evn gcPAf+1l3HA5GkdzFf1H41BF+73fW+/jagbUXuPQVLj0YX1j5s7J15UxOIko/WUn oZU2RgrQ3/JATwDl6VNdeiVDGfqUMOo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:51:12 2025 by rpki-client