$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa File: 53ff869c-cd2e-306b-a270-97070a097b4b.roa (raw, json) Hash identifier: X+xdL5r0y/Oq1321aDyxUkCF4aISh+7+iJ+7DXpAxWo= Subject key identifier: 6F:8C:80:39:77:E0:19:22:61:5A:7B:14:1F:1B:C8:B5:64:6E:FD:E8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C4D3CDCE82073CC041B80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 107.188.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:4d:3c:dc:e8:20:73:cc:04:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=7e25e880-04ff-46a2-b0c6-4e6fe0fcf524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:d7:ad:6e:d6:f6:e5:0a:81:91:b9:4d:60: fb:35:ae:6a:77:db:2f:33:71:ac:cb:b5:30:60:42: fc:a3:f2:53:ef:a3:81:cf:65:98:73:48:f1:b1:fb: dc:50:75:29:fe:26:27:07:32:40:47:6a:45:87:28: df:fc:f1:c8:5b:72:c9:92:4f:3f:3a:51:da:39:93: d5:56:9b:4c:ca:27:c9:c4:b9:f7:75:41:13:bd:93: 67:5f:a2:21:92:c7:92:f8:66:17:da:f5:66:35:41: 79:80:17:7a:c3:ab:5a:87:8f:fb:80:1f:13:ef:fd: c4:c5:b6:b0:e9:18:df:ea:d6:66:f0:22:35:ba:e7: bd:37:5c:e3:0f:dd:2a:9c:cc:80:63:5e:c4:5d:7d: 4b:ab:a4:ab:4c:ec:59:1a:72:7d:ee:1c:59:6b:38: 9a:98:d8:80:0d:21:12:29:61:34:99:a0:e6:1e:09: 37:2c:b1:64:10:d7:c0:5d:90:e2:00:ae:24:21:2d: 9f:7e:67:24:16:50:15:9f:0b:de:ba:4b:62:8f:62: 76:6c:d9:f3:28:80:35:07:d7:95:67:13:6e:15:35: 9d:ab:92:14:92:6f:9a:1e:97:5f:31:ff:47:0b:1b: 73:c8:8e:ae:1a:16:bf:e7:9f:dd:b6:23:0c:77:e0: f7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8C:80:39:77:E0:19:22:61:5A:7B:14:1F:1B:C8:B5:64:6E:FD:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 107.188.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:98:8f:14:88:3d:56:e3:bf:74:94:68:41:0e:b5:07:bd:d6: 47:92:ca:72:67:ef:25:6e:b4:f1:35:d4:5c:0b:38:a0:75:06: 0c:98:a2:08:d3:55:d9:f8:92:39:cb:92:61:0a:0c:4f:1a:78: d8:c9:03:35:b7:d5:bd:eb:58:f0:18:d6:fa:20:65:f3:5d:cb: 0c:b0:16:47:48:f1:1c:93:c8:7f:fc:f1:6b:95:b3:3b:ad:61: ea:90:99:af:f8:a9:18:40:90:a8:e7:55:d1:8b:a2:6b:19:1a: 77:9b:1c:a7:64:f0:11:e0:87:ad:03:8c:fa:e6:33:dc:2a:1b: b0:e9:f4:22:a4:49:46:e0:6b:9d:aa:66:47:4f:4d:f6:16:b3: ac:2d:c1:4b:b3:6e:43:3a:74:ad:25:e5:84:37:7e:11:78:7d: 94:71:6b:52:5d:dc:8f:c1:97:2d:b5:3e:03:8a:67:db:a9:85: 39:91:ee:25:e2:e0:d3:3d:e7:f1:e7:e7:0c:e3:c2:dd:a1:4e: d9:31:23:0e:c8:4b:b3:9d:35:61:f2:aa:aa:90:77:bd:0b:2b: a7:40:1d:9f:66:09:42:fb:99:56:08:a8:88:a8:8e:7e:6d:7f: b5:a9:e9:14:33:35:e8:d6:68:f5:57:c7:f9:83:6c:89:d6:a5: 88:b8:ed:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTE083Oggc8wEG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk N2UyNWU4ODAtMDRmZi00NmEyLWIwYzYtNGU2ZmUwZmNmNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfzXrW7W9uUKgZG5TWD7Na5qd9svM3Gsy7Uw YEL8o/JT76OBz2WYc0jxsfvcUHUp/iYnBzJAR2pFhyjf/PHIW3LJkk8/OlHaOZPV VptMyifJxLn3dUETvZNnX6IhkseS+GYX2vVmNUF5gBd6w6tah4/7gB8T7/3Exbaw 6Rjf6tZm8CI1uue9N1zjD90qnMyAY17EXX1Lq6SrTOxZGnJ97hxZaziamNiADSES KWE0maDmHgk3LLFkENfAXZDiAK4kIS2ffmckFlAVnwveuktij2J2bNnzKIA1B9eV ZxNuFTWdq5IUkm+aHpdfMf9HCxtzyI6uGha/55/dtiMMd+D3aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+MgDl34BkiYVp7FB8byLVkbv3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTNmZjg2OWMtY2QyZS0z MDZiLWEyNzAtOTcwNzBhMDk3YjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHa7yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECYjxSIPVbjv3SUaEEOtQe91keSynJn7yVutPE11FwLOKB1BgyYogjT Vdn4kjnLkmEKDE8aeNjJAzW31b3rWPAY1vogZfNdywywFkdI8RyTyH/88WuVszut YeqQma/4qRhAkKjnVdGLomsZGnebHKdk8BHgh60DjPrmM9wqG7Dp9CKkSUbga52q ZkdPTfYWs6wtwUuzbkM6dK0l5YQ3fhF4fZRxa1Jd3I/Bly21PgOKZ9uphTmR7iXi 4NM95/Hn5wzjwt2hTtkxIw7IS7OdNWHyqqqQd70LK6dAHZ9mCUL7mVYIqIiojn5t f7Wp6RQzNejWaPVXx/mDbInWpYi47bI= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:44 2025 by rpki-client