$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa File: acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa (raw, json) Hash identifier: eHcQLKNhd1nSW49zmhnMa/TrgzaDdt8McaqTF3DPKc0= Subject key identifier: 34:E8:FA:C3:77:83:4C:5F:D3:EF:4D:09:51:DB:6B:10:3D:B7:BD:4F Certificate issuer: /CN=0153231e-bade-4c05-b3fd-55b65671daae Certificate serial: 010D0C9F4328584B4E77474BD3AB9AE7642FC900 Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 395153 IP address blocks: 107.182.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:47:4b:d3:ab:9a:e7:64:2f:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=9ea42da7-25e8-4e96-a9df-ff2949ef0182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:ca:72:36:da:70:28:04:dc:7b:02:89:bd: 3d:a5:83:13:92:ad:df:c0:aa:1b:ef:59:c2:8d:e0: 69:22:87:46:b4:ab:74:d9:4d:b0:6e:a6:f7:23:c3: d8:5f:74:58:4f:26:bc:27:04:17:db:2d:69:79:bb: 92:ed:fa:63:2b:fc:0f:c0:57:46:80:b9:dc:0d:86: 77:7a:64:94:9b:85:1a:cd:61:09:6a:ad:4b:7c:02: c1:b7:c4:7a:31:13:cf:fb:6f:15:f2:f0:4b:63:4e: 38:7c:87:e6:2d:93:fe:c5:02:0a:2e:ba:00:84:b4: 09:1b:38:34:1d:11:42:b9:7a:c3:5b:05:4e:21:af: 62:db:31:c4:0b:86:80:5d:ed:a3:cd:b5:3a:ce:58: 03:07:94:c3:ee:33:37:42:f2:20:38:3a:a2:ff:f4: 77:ee:b9:cd:1e:84:df:ec:9e:b2:8f:43:41:07:2e: 61:97:fc:4b:9e:0e:44:45:8b:38:34:c0:bf:48:a9: fb:19:a7:d7:4d:96:9a:2b:87:ce:ac:68:f3:f7:08: 27:a4:ec:74:2c:03:90:97:54:e9:12:d1:45:12:38: 25:d2:14:dd:f2:6f:13:a6:da:16:7e:69:53:21:2d: 4b:4f:c2:ce:dc:b6:35:5d:27:35:2b:6f:22:cc:0a: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E8:FA:C3:77:83:4C:5F:D3:EF:4D:09:51:DB:6B:10:3D:B7:BD:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl X509v3 Authority Key Identifier: keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer sbgp-ipAddrBlock: critical IPv4: 107.182.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2f:25:0e:81:3a:66:71:4d:08:61:46:9c:e1:c4:78:27:d9: 6f:32:0c:22:7a:88:73:32:4a:39:92:e2:40:7c:20:8a:6b:a2: 44:68:e2:11:9b:29:76:3e:ae:b8:9c:e4:aa:f0:27:a7:63:d8: 3c:a1:be:d8:44:7b:c6:f5:2b:bf:ae:05:85:b8:a6:c5:4f:7b: 90:ca:b2:db:34:a5:b8:33:5a:b9:b9:5a:05:05:f5:93:ad:86: ab:86:16:bd:c8:aa:ab:eb:15:e4:a7:98:93:2a:67:44:b8:da: 0f:42:ed:44:72:8e:34:f7:de:f4:a5:71:8e:fa:1a:da:ac:83: 82:e2:3e:5e:70:c0:06:d7:5c:2b:a7:e7:f6:77:f3:16:f8:21: 60:08:7b:bb:7f:a6:91:e8:ee:2e:27:63:63:b2:1b:58:d1:a6: 95:f0:c1:06:37:b3:cc:f2:62:17:76:65:57:36:af:9b:b3:4a: 4b:d9:21:1f:ca:a8:af:db:a9:2d:ab:b5:ab:99:fb:3a:35:e2: de:f4:60:ba:d1:0d:73:99:9f:ff:b1:ef:d8:77:f4:b5:5c:53: 27:e5:fe:64:12:0b:ea:de:61:e6:94:08:d4:d6:27:c5:81:24: bb:34:87:aa:1a:ea:6c:fa:be:a2:0a:32:74:75:a8:a2:9d:dc: d2:ee:47:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOd0dL06ua52QvyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1MzIzMWUtYmFkZS00YzA1LWIzZmQtNTViNjU2NzFk YWFlMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk OWVhNDJkYTctMjVlOC00ZTk2LWE5ZGYtZmYyOTQ5ZWYwMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8zKcjbacCgE3HsCib09pYMTkq3fwKob71nC jeBpIodGtKt02U2wbqb3I8PYX3RYTya8JwQX2y1pebuS7fpjK/wPwFdGgLncDYZ3 emSUm4UazWEJaq1LfALBt8R6MRPP+28V8vBLY044fIfmLZP+xQIKLroAhLQJGzg0 HRFCuXrDWwVOIa9i2zHEC4aAXe2jzbU6zlgDB5TD7jM3QvIgODqi//R37rnNHoTf 7J6yj0NBBy5hl/xLng5ERYs4NMC/SKn7GafXTZaaK4fOrGjz9wgnpOx0LAOQl1Tp EtFFEjgl0hTd8m8TptoWfmlTIS1LT8LO3LY1XSc1K28izAr/dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTo+sN3g0xf0+9NCVHbaxA9t71PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMTUz MjMxZS1iYWRlLTRjMDUtYjNmZC01NWI2NTY3MWRhYWUvYWNmYWE4N2YtNTdiYy0z ZTNiLWJmYzMtNTNlOTY4MWRkMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDE1MzIzMWUtYmFkZS00YzA1LWIz ZmQtNTViNjU2NzFkYWFlLzAxNTMyMzFlLWJhZGUtNGMwNS1iM2ZkLTU1YjY1Njcx ZGFhZS5jcmwwHwYDVR0jBBgwFoAUuaZdygdVfhEVZCkV6YisJ8ZxImgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMTUzMjMxZS1iYWRlLTRjMDUtYjNmZC01NWI2 NTY3MWRhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa7YIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQvJQ6BOmZxTQhhRpzhxHgn2W8yDCJ6iHMySjmS4kB8IIprokRo4hGb KXY+rric5KrwJ6dj2DyhvthEe8b1K7+uBYW4psVPe5DKsts0pbgzWrm5WgUF9ZOt hquGFr3IqqvrFeSnmJMqZ0S42g9C7URyjjT33vSlcY76Gtqsg4LiPl5wwAbXXCun 5/Z38xb4IWAIe7t/ppHo7i4nY2OyG1jRppXwwQY3s8zyYhd2ZVc2r5uzSkvZIR/K qK/bqS2rtauZ+zo14t70YLrRDXOZn/+x79h39LVcUyfl/mQSC+reYeaUCNTWJ8WB JLs0h6oa6mz6vqIKMnR1qKKd3NLuRxw= -----END CERTIFICATE-----Generated at Sat Oct 11 01:07:45 2025 by rpki-client