$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/da0ff670-f9b7-3879-90b6-1d71bf7f1217.roa File: da0ff670-f9b7-3879-90b6-1d71bf7f1217.roa (raw, json) Hash identifier: jzBkaxAMmDAUOlhBJcuL4I+ptMZj2tizoH5TRnPVbPE= Subject key identifier: C7:F7:DE:09:61:2B:44:B8:C4:CF:65:42:06:90:C1:E5:6A:55:6E:4F Certificate issuer: /CN=0153231e-bade-4c05-b3fd-55b65671daae Certificate serial: 010D0C9F4328584B5F377D20DAA84F4E7A460900 Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/da0ff670-f9b7-3879-90b6-1d71bf7f1217.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 395153 IP address blocks: 107.182.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:7d:20:da:a8:4f:4e:7a:46:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=cfb2da10-bad3-47af-a1a8-aa5d0b9c65da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fc:7a:95:71:ee:b5:dd:5c:bc:5e:5c:07:14: 7e:51:22:a0:f4:7a:ae:0b:bd:cb:17:2a:ee:dd:ef: fe:73:ac:8e:63:72:78:10:45:28:29:57:dd:53:09: 33:94:96:ca:49:ef:d0:cd:9d:73:87:63:b1:2e:9d: 4f:42:89:4b:dd:47:8e:8a:c8:ef:5d:af:f0:35:48: e5:bc:b8:8b:07:d8:41:84:b1:46:eb:74:36:71:f3: 40:e6:3e:b4:01:34:0f:7b:80:23:5c:6c:47:d3:f7: 28:ca:db:11:b3:78:e4:ed:72:a3:ad:be:bb:fe:1d: b0:27:4f:f6:63:19:03:59:40:8c:a2:2c:0e:b8:47: 29:11:11:bd:87:ef:fa:eb:97:a2:1e:5d:2f:53:7d: 6f:74:d7:e9:85:55:b4:4e:f7:54:30:55:75:85:0f: dd:0e:8b:f9:fd:e3:42:90:5c:72:0e:c4:cf:fd:2a: 9f:44:27:89:ff:82:d6:ed:29:ef:d0:51:d7:2a:c7: e3:53:57:a4:0f:a6:46:df:40:62:a5:d3:59:e8:28: ae:ac:44:56:c0:04:d2:2b:86:c4:1f:63:87:e7:c9: 9d:3c:56:e1:38:e3:68:c6:b2:1f:95:f4:71:19:89: bf:1e:de:20:0a:db:5e:58:eb:db:a8:7c:1d:77:6c: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F7:DE:09:61:2B:44:B8:C4:CF:65:42:06:90:C1:E5:6A:55:6E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/da0ff670-f9b7-3879-90b6-1d71bf7f1217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl X509v3 Authority Key Identifier: keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer sbgp-ipAddrBlock: critical IPv4: 107.182.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e5:c2:62:25:e0:9c:a4:c9:16:0f:78:6b:f0:d5:39:cf:f9: 22:fa:0c:eb:2e:55:02:9f:2f:ae:0e:be:47:33:0a:0c:1d:d1: 9f:d4:d0:49:31:b4:76:89:3b:cc:3f:6c:94:db:05:0d:fc:81: 07:75:75:2a:14:61:6b:a1:b1:55:3e:9e:4b:f1:6e:22:26:23: e4:f0:19:54:ee:0c:dd:9f:0b:6e:07:fd:d1:48:ca:63:53:76: a9:d2:8a:6f:44:bb:9b:eb:4e:10:ce:be:0c:49:6c:f1:2a:06: 9e:79:35:e4:04:f2:ce:42:d6:47:b6:ac:2a:7b:b7:c6:3f:8b: 0f:25:ce:bb:7c:c5:cc:fb:0a:66:03:c7:45:13:71:b5:4d:13: 35:dc:b1:8e:14:5e:74:df:78:93:23:db:74:4a:ab:62:12:eb: 63:31:b7:40:d2:02:ab:55:87:b1:53:2c:ed:77:0a:d5:d0:fd: e3:45:6c:a4:04:df:33:a8:13:d5:3d:f0:25:0b:89:99:13:a5: 10:fc:10:b7:66:9f:c6:20:b7:01:5e:af:ea:de:b2:8f:89:b6: f8:12:48:8c:bd:9e:53:4c:b9:7b:90:c2:33:16:30:c9:c9:bb: fc:80:f5:8a:c5:64:de:bd:30:b4:eb:94:fe:2a:95:b3:3b:56: 08:4c:d2:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN30g2qhPTnpGCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1MzIzMWUtYmFkZS00YzA1LWIzZmQtNTViNjU2NzFk YWFlMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Y2ZiMmRhMTAtYmFkMy00N2FmLWExYTgtYWE1ZDBiOWM2NWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/x6lXHutd1cvF5cBxR+USKg9HquC73LFyru 3e/+c6yOY3J4EEUoKVfdUwkzlJbKSe/QzZ1zh2OxLp1PQolL3UeOisjvXa/wNUjl vLiLB9hBhLFG63Q2cfNA5j60ATQPe4AjXGxH0/coytsRs3jk7XKjrb67/h2wJ0/2 YxkDWUCMoiwOuEcpERG9h+/665eiHl0vU31vdNfphVW0TvdUMFV1hQ/dDov5/eNC kFxyDsTP/SqfRCeJ/4LW7Snv0FHXKsfjU1ekD6ZG30BipdNZ6CiurERWwATSK4bE H2OH58mdPFbhOONoxrIflfRxGYm/Ht4gCtteWOvbqHwdd2wf8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMf33glhK0S4xM9lQgaQweVqVW5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMTUz MjMxZS1iYWRlLTRjMDUtYjNmZC01NWI2NTY3MWRhYWUvZGEwZmY2NzAtZjliNy0z ODc5LTkwYjYtMWQ3MWJmN2YxMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDE1MzIzMWUtYmFkZS00YzA1LWIz ZmQtNTViNjU2NzFkYWFlLzAxNTMyMzFlLWJhZGUtNGMwNS1iM2ZkLTU1YjY1Njcx ZGFhZS5jcmwwHwYDVR0jBBgwFoAUuaZdygdVfhEVZCkV6YisJ8ZxImgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMTUzMjMxZS1iYWRlLTRjMDUtYjNmZC01NWI2 NTY3MWRhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa7YMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPlwmIl4JykyRYPeGvw1TnP+SL6DOsuVQKfL64OvkczCgwd0Z/U0Ekx tHaJO8w/bJTbBQ38gQd1dSoUYWuhsVU+nkvxbiImI+TwGVTuDN2fC24H/dFIymNT dqnSim9Eu5vrThDOvgxJbPEqBp55NeQE8s5C1ke2rCp7t8Y/iw8lzrt8xcz7CmYD x0UTcbVNEzXcsY4UXnTfeJMj23RKq2IS62Mxt0DSAqtVh7FTLO13CtXQ/eNFbKQE 3zOoE9U98CULiZkTpRD8ELdmn8YgtwFer+reso+JtvgSSIy9nlNMuXuQwjMWMMnJ u/yA9YrFZN69MLTrlP4qlbM7VghM0gk= -----END CERTIFICATE-----Generated at Sat Oct 11 01:16:07 2025 by rpki-client