$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa File: e5a2b901-93aa-343b-bf32-8a23a333f069.roa (raw, json) Hash identifier: l1uWFnUBeG+s+ctSQtPGjmBijcxJMR3VDxl5SOXCb0E= Subject key identifier: B9:1D:D6:15:21:3F:B9:6F:1F:97:B0:16:2C:2D:1B:98:DD:CE:21:D8 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A94D0DC167B060BCFDEB3FE80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 21859 IP address blocks: 108.165.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:dc:16:7b:06:0b:cf:de:b3:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=d7e2149c-2c4d-4a3c-8f51-456b62987651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1b:a8:fe:ad:f3:73:64:e0:58:d8:66:1f:54: 3d:43:db:88:2b:c6:87:bb:e6:8a:bb:96:1f:b9:08: 57:59:dc:f5:0b:3a:a6:70:34:5a:f9:03:1e:74:22: 3b:01:87:d8:e4:62:f7:03:0d:94:a4:ca:57:76:5e: 3a:d8:ff:f0:4e:cc:bc:00:76:b7:21:2f:8b:28:41: 56:28:d4:7a:6b:31:89:09:b8:51:f2:0d:09:5b:7c: e7:9b:4e:ad:2c:46:ac:51:e4:6e:d1:77:d4:9e:0d: ed:f8:b5:61:69:c2:ee:70:85:42:8d:6a:32:c9:3e: b8:96:78:ea:24:cd:7c:83:ca:65:6e:7c:fe:c2:fb: 83:7d:ef:3f:7a:24:d7:9f:28:99:b4:fb:0b:fa:e5: fa:3d:7e:a8:cf:0e:0b:c3:90:3b:67:5a:f2:4d:49: 82:69:d7:73:92:f7:ba:df:04:2a:13:3f:5a:4a:4b: 85:38:13:78:27:60:90:5e:ee:48:f0:ce:ae:aa:78: 91:1d:26:2b:7f:e1:fd:38:07:0e:5a:44:16:1b:44: e6:15:7b:27:b1:bb:52:cd:52:bb:21:46:aa:b5:2a: a6:c3:ab:1e:7d:26:2e:f5:07:4d:c7:da:50:99:98: 5f:7e:d0:c8:8c:63:9f:ac:47:37:09:fb:74:d0:3d: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1D:D6:15:21:3F:B9:6F:1F:97:B0:16:2C:2D:1B:98:DD:CE:21:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ef:51:39:f9:c2:7e:08:47:c1:0d:2d:8c:b0:3b:44:7a:03: 13:63:8f:74:b7:55:01:4c:4a:83:08:65:00:24:3b:cf:27:8f: 28:c0:05:54:ba:ac:73:56:16:35:42:1a:e0:13:1e:ee:50:26: 44:8c:31:83:5e:09:70:b2:b2:74:7b:ce:6f:f0:ae:51:2f:b8: 30:8b:a1:c0:c9:81:42:6b:77:f9:4a:75:6d:51:c0:f4:41:85: 3c:99:a5:9f:a0:d4:dc:a5:9b:f7:b0:59:a0:e4:15:b0:eb:a9: 04:97:e2:59:c1:63:24:3a:d8:00:d9:d7:ab:38:cc:fa:3a:a8: 88:4b:1b:7a:a7:1d:ad:61:32:1a:e6:6e:1f:75:a5:48:12:14: f2:ad:36:23:75:29:48:0f:2e:a1:83:10:0f:a4:3a:22:f7:e4: 5a:79:8a:9e:d3:33:a1:16:8e:58:37:a0:de:ab:e1:e8:9b:d3: 80:6d:4b:91:99:69:d8:c0:54:ed:b4:35:89:aa:46:3a:17:8d: a2:4d:42:70:db:56:e5:26:c7:8a:b0:16:c9:7c:2e:b8:1d:a0: a2:fe:0b:45:1a:ad:ba:c8:2c:be:c5:ac:bd:69:a7:13:6f:2c: 54:64:8f:23:a9:7b:14:48:e1:de:18:61:21:92:af:11:7d:b9: 5f:73:07:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NwWewYLz96z/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk ZDdlMjE0OWMtMmM0ZC00YTNjLThmNTEtNDU2YjYyOTg3NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRuo/q3zc2TgWNhmH1Q9Q9uIK8aHu+aKu5Yf uQhXWdz1CzqmcDRa+QMedCI7AYfY5GL3Aw2UpMpXdl462P/wTsy8AHa3IS+LKEFW KNR6azGJCbhR8g0JW3znm06tLEasUeRu0XfUng3t+LVhacLucIVCjWoyyT64lnjq JM18g8plbnz+wvuDfe8/eiTXnyiZtPsL+uX6PX6ozw4Lw5A7Z1ryTUmCaddzkve6 3wQqEz9aSkuFOBN4J2CQXu5I8M6uqniRHSYrf+H9OAcOWkQWG0TmFXsnsbtSzVK7 IUaqtSqmw6sefSYu9QdNx9pQmZhfftDIjGOfrEc3Cft00D0D5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkd1hUhP7lvH5ewFiwtG5jdziHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTVhMmI5MDEtOTNhYS0z NDNiLWJmMzItOGEyM2EzMzNmMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3vUTn5wn4IR8ENLYywO0R6AxNjj3S3VQFMSoMIZQAkO88njyjABVS6 rHNWFjVCGuATHu5QJkSMMYNeCXCysnR7zm/wrlEvuDCLocDJgUJrd/lKdW1RwPRB hTyZpZ+g1Nylm/ewWaDkFbDrqQSX4lnBYyQ62ADZ16s4zPo6qIhLG3qnHa1hMhrm bh91pUgSFPKtNiN1KUgPLqGDEA+kOiL35Fp5ip7TM6EWjlg3oN6r4eib04BtS5GZ adjAVO20NYmqRjoXjaJNQnDbVuUmx4qwFsl8LrgdoKL+C0UarbrILL7FrL1ppxNv LFRkjyOpexRI4d4YYSGSrxF9uV9zB3E= -----END CERTIFICATE-----Generated at Wed Aug 6 11:12:53 2025 by rpki-client