$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd9b3406-e58a-3e76-b380-a981041d71d1.roa File: bd9b3406-e58a-3e76-b380-a981041d71d1.roa (raw, json) Hash identifier: WJA8K4C0xinuew+QSDZjRvTlV+W2lU0+LeLRjmDpOts= Subject key identifier: 0A:C4:E0:74:D7:0B:CA:A1:41:33:3C:4E:6F:C7:F1:DB:9C:B7:04:64 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A82AB481C105C56E870BEB700 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd9b3406-e58a-3e76-b380-a981041d71d1.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 197450 IP address blocks: 108.165.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:48:1c:10:5c:56:e8:70:be:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=b6220057-a91c-4d69-b437-d0d4e4655dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:86:57:52:69:bf:1e:1d:be:ea:99:25:5e: 0e:57:67:4c:97:22:0a:65:53:89:8e:d8:d6:65:2b: 5d:a6:d0:d9:86:11:7d:a5:73:1f:b6:88:c2:da:08: c2:10:5e:49:ba:39:29:ed:00:97:70:85:59:d4:72: 84:f8:8e:65:a7:5b:62:41:07:8f:41:73:2f:7d:81: 69:28:b5:7f:64:31:4a:de:ed:ea:0a:43:2a:38:08: 4e:3c:2c:68:80:09:c1:a1:bf:8b:19:06:30:c5:03: c0:1c:21:89:08:50:6b:d0:dc:ee:5b:b4:c7:cd:89: e5:f3:05:a1:96:08:2d:e3:9b:71:b4:1a:bc:c3:81: 90:28:c4:2d:80:06:c8:76:26:18:02:e0:34:5f:29: 52:93:b1:a3:ce:76:e2:4e:77:4a:44:cc:25:6f:39: 00:b5:7d:e7:30:91:90:5f:c4:12:d1:17:3e:71:d9: 3e:36:6d:d7:0a:62:aa:dd:72:03:4c:23:f0:6e:5f: a5:46:77:b2:b0:e8:d0:21:99:a0:b5:46:d3:8b:6d: d2:4e:53:19:1f:3c:ef:1f:19:f9:a6:bb:73:9b:7f: 6d:8f:87:0f:b6:6c:df:66:26:53:37:a8:a5:00:81: 61:d0:f0:26:71:fb:5d:36:53:7e:af:ad:a3:03:33: 6e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C4:E0:74:D7:0B:CA:A1:41:33:3C:4E:6F:C7:F1:DB:9C:B7:04:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd9b3406-e58a-3e76-b380-a981041d71d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:48:79:a5:e7:3b:ab:11:de:99:ca:04:d3:d0:49:b7:1a:3f: 5c:02:f5:b5:36:a8:17:1b:29:4f:88:1f:b3:bb:2f:8f:d6:a5: 1c:b2:b8:1d:20:aa:a2:e9:24:27:06:b9:d9:d7:9f:91:0d:32: e5:fe:61:26:5f:8c:57:9a:c5:a2:fa:c7:62:94:87:76:51:0e: f7:c9:21:62:ea:1b:67:f8:32:dd:b0:99:96:f8:0b:6b:56:b6: 4f:e7:d2:25:6b:70:fc:f4:f1:9e:bc:83:de:a9:ad:07:a4:41: c5:8c:b0:81:dd:ef:e3:c3:10:59:3c:3c:da:c6:17:41:41:82: f5:96:3c:9b:c4:43:63:39:0c:c9:d9:55:f2:ff:ee:3c:8f:59: 61:8c:67:84:c9:38:66:43:65:b4:c4:ee:b5:5f:b4:9a:16:77: 09:69:0a:e7:e8:99:e1:c7:f1:8a:6c:e9:23:e4:db:90:f0:c5: 52:ed:71:24:96:67:41:0a:47:e7:8a:36:bc:fc:c4:c7:78:60: 66:e9:3a:30:2f:ac:0a:dc:61:d9:9c:7f:c7:8d:81:ed:e2:26: ec:40:f7:d1:16:b2:19:75:04:57:18:64:03:42:c3:ec:76:ad: f3:fc:d9:a8:24:e3:40:1c:b8:c2:db:f7:de:58:9b:54:16:e5: 31:2c:d9:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0gcEFxW6HC+twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk YjYyMjAwNTctYTkxYy00ZDY5LWI0MzctZDBkNGU0NjU1ZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnOGV1Jpvx4dvuqZJV4OV2dMlyIKZVOJjtjW ZStdptDZhhF9pXMftojC2gjCEF5Jujkp7QCXcIVZ1HKE+I5lp1tiQQePQXMvfYFp KLV/ZDFK3u3qCkMqOAhOPCxogAnBob+LGQYwxQPAHCGJCFBr0NzuW7THzYnl8wWh lggt45txtBq8w4GQKMQtgAbIdiYYAuA0XylSk7GjznbiTndKRMwlbzkAtX3nMJGQ X8QS0Rc+cdk+Nm3XCmKq3XIDTCPwbl+lRneysOjQIZmgtUbTi23STlMZHzzvHxn5 prtzm39tj4cPtmzfZiZTN6ilAIFh0PAmcftdNlN+r62jAzNuAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArE4HTXC8qhQTM8Tm/H8ductwRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmQ5YjM0MDYtZTU4YS0z ZTc2LWIzODAtYTk4MTA0MWQ3MWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpIeaXnO6sR3pnKBNPQSbcaP1wC9bU2qBcbKU+IH7O7L4/WpRyyuB0g qqLpJCcGudnXn5ENMuX+YSZfjFeaxaL6x2KUh3ZRDvfJIWLqG2f4Mt2wmZb4C2tW tk/n0iVrcPz08Z68g96prQekQcWMsIHd7+PDEFk8PNrGF0FBgvWWPJvEQ2M5DMnZ VfL/7jyPWWGMZ4TJOGZDZbTE7rVftJoWdwlpCufomeHH8Yps6SPk25DwxVLtcSSW Z0EKR+eKNrz8xMd4YGbpOjAvrArcYdmcf8eNge3iJuxA99EWshl1BFcYZANCw+x2 rfP82agk40AcuMLb995Ym1QW5TEs2Ro= -----END CERTIFICATE-----Generated at Mon Aug 4 08:18:19 2025 by rpki-client