$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/03a99281-bba0-34b3-ae41-891078c2a499.roa File: 03a99281-bba0-34b3-ae41-891078c2a499.roa (raw, json) Hash identifier: vAkhS5H9e+7J+ptcBHydFUxIUSrrrExIwi/BLT7WYQY= Subject key identifier: F7:58:BD:F8:E2:33:F0:98:03:59:10:8C:36:94:14:AC:3D:FA:81:89 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B6FF741307640E5BA760F1A00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/03a99281-bba0-34b3-ae41-891078c2a499.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 174 IP address blocks: 107.158.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:41:30:76:40:e5:ba:76:0f:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=d133581d-3820-433f-b6bd-5cfa88f49fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:5c:9c:36:7a:f2:6d:01:30:18:ee:8e:2e: 9a:3d:e1:9f:f3:9e:8a:01:f2:51:3a:4f:c5:d0:c8: d7:9b:15:71:55:94:32:f0:f4:c4:08:1c:d6:ee:d9: 38:61:64:27:a9:2a:75:e9:5f:1a:19:18:29:11:d1: 21:46:be:98:27:8e:66:28:4c:a3:7f:eb:ea:b9:75: 91:47:8d:e1:1b:5d:7a:0f:6e:0b:0a:59:c5:74:a2: a3:2e:2f:9f:a0:88:3a:1b:e7:3f:d1:24:dd:2d:ea: cf:44:12:49:fc:fc:06:0a:88:dc:6d:56:fd:04:ff: 7e:26:c0:8a:96:43:de:64:15:98:3a:75:f1:49:19: 33:d7:32:3a:71:bc:db:f8:4f:1e:6d:ef:ef:de:df: ee:b4:fb:c3:8b:58:bf:e9:64:30:65:ae:89:d1:ae: 79:e3:b7:ca:72:4e:b6:0d:6a:fc:4f:ac:f2:e6:bf: f0:e6:92:7c:c5:35:56:42:fa:ab:bf:b6:1b:aa:d7: 01:08:3a:b9:0e:38:6e:7c:f9:b7:53:af:df:c7:2f: 8a:de:d2:1e:ed:8c:5f:a7:99:1e:bd:d2:ae:bb:b8: 41:6a:12:16:dd:ec:6e:96:58:ac:8d:0b:06:7c:ba: f0:a1:76:59:4e:e1:31:16:14:ad:56:cc:3c:7e:4b: f9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:58:BD:F8:E2:33:F0:98:03:59:10:8C:36:94:14:AC:3D:FA:81:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/03a99281-bba0-34b3-ae41-891078c2a499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:cd:b3:97:4b:43:7d:b2:ca:fb:22:a0:23:d1:0c:ee:e1:91: 6a:26:13:cd:35:1e:2b:42:2d:cf:74:f0:c8:98:44:13:10:65: 48:a4:24:b5:a1:e2:44:9a:cf:fc:6f:eb:e9:fe:0e:1d:85:11: 2d:b4:56:49:8c:c6:94:3c:9a:ff:95:46:eb:8e:71:cd:47:66: 9f:b1:74:17:6b:48:10:6d:58:63:82:3e:22:90:4b:3a:91:e2: 37:bb:6c:e3:ee:e8:35:eb:6f:10:1c:fd:8e:0f:e7:0d:f4:f6: cd:ce:39:91:be:a4:da:32:8f:7b:0a:d6:b9:fa:b3:2c:bb:a2: b6:87:05:fc:0b:2d:24:0a:e9:4c:00:dc:33:ae:7a:bd:86:9c: aa:22:68:bc:6f:24:3a:1c:21:18:d2:98:78:a8:c7:e3:97:f3: 7e:6d:64:f3:40:23:89:f9:9a:78:ee:7e:61:b1:0d:0a:e8:6a: 6e:dd:4d:90:1c:bf:f1:77:cd:ef:32:cf:84:9c:42:15:b4:fc: a7:bf:86:77:17:22:22:cc:89:4c:e7:8a:95:1b:95:1a:bc:f3: 03:ff:b8:fd:fa:87:a4:df:47:02:2f:90:00:df:d9:9e:09:83: 4e:13:2f:1f:1e:2e:a7:09:d0:18:b0:27:06:66:06:87:62:01: 42:83:8e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90EwdkDlunYPGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk ZDEzMzU4MWQtMzgyMC00MzNmLWI2YmQtNWNmYTg4ZjQ5ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc5cnDZ68m0BMBjuji6aPeGf856KAfJROk/F 0MjXmxVxVZQy8PTECBzW7tk4YWQnqSp16V8aGRgpEdEhRr6YJ45mKEyjf+vquXWR R43hG116D24LClnFdKKjLi+foIg6G+c/0STdLerPRBJJ/PwGCojcbVb9BP9+JsCK lkPeZBWYOnXxSRkz1zI6cbzb+E8ebe/v3t/utPvDi1i/6WQwZa6J0a5547fKck62 DWr8T6zy5r/w5pJ8xTVWQvqrv7YbqtcBCDq5DjhufPm3U6/fxy+K3tIe7Yxfp5ke vdKuu7hBahIW3exullisjQsGfLrwoXZZTuExFhStVsw8fkv5PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdYvfjiM/CYA1kQjDaUFKw9+oGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMDNhOTkyODEtYmJhMC0z NGIzLWFlNDEtODkxMDc4YzJhNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHNs5dLQ32yyvsioCPRDO7hkWomE801HitCLc908MiYRBMQZUikJLWh 4kSaz/xv6+n+Dh2FES20VkmMxpQ8mv+VRuuOcc1HZp+xdBdrSBBtWGOCPiKQSzqR 4je7bOPu6DXrbxAc/Y4P5w309s3OOZG+pNoyj3sK1rn6syy7oraHBfwLLSQK6UwA 3DOuer2GnKoiaLxvJDocIRjSmHiox+OX835tZPNAI4n5mnjufmGxDQroam7dTZAc v/F3ze8yz4ScQhW0/Ke/hncXIiLMiUznipUblRq88wP/uP36h6TfRwIvkADf2Z4J g04TLx8eLqcJ0BiwJwZmBodiAUKDji8= -----END CERTIFICATE-----Generated at Wed Oct 8 15:42:51 2025 by rpki-client