$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa File: 0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa (raw, json) Hash identifier: v0E4ZWcYA7Z5gYuIYh24Dc9/7M0sDcSZdHNOJQX5F1w= Subject key identifier: 81:CD:83:9D:47:E9:7B:26:BC:1D:CD:0E:DE:2A:27:7A:2F:18:7E:13 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6C768256562F3E2EC01400 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 32043 IP address blocks: 107.158.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:76:82:56:56:2f:3e:2e:c0:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=e7a09c15-244f-4c07-ab17-717187302da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:dd:12:75:66:58:9b:16:6d:52:3c:f5:01: cb:f9:16:60:ef:90:58:a0:4d:cc:43:d3:5c:b3:b4: 95:de:fe:d2:cf:fd:61:e3:b5:9f:d0:f6:9c:77:29: b0:c9:79:c3:b2:41:2a:b1:f2:da:0a:99:71:f6:db: cb:dd:47:4b:4c:2b:b5:1f:27:a6:3b:4d:23:56:0a: 0c:b7:b6:97:06:af:3b:22:bf:32:4a:cd:ea:10:03: 00:29:23:b3:31:85:7e:96:8b:86:fb:eb:ad:4e:88: 6a:96:3f:15:88:1a:1d:10:3f:b5:a2:b7:f2:04:50: 41:72:56:6e:43:f1:a5:12:a4:c0:04:d8:39:63:c9: f4:38:eb:15:de:58:1d:4c:9e:b5:54:31:46:8d:0f: 85:0d:f8:25:f4:43:7e:41:6f:ff:27:2e:a8:65:7c: a3:58:3d:9c:1e:da:7d:0f:c8:d8:a7:d9:21:61:2b: 84:cf:72:9c:f7:fa:9f:d8:42:31:67:38:22:7c:0d: b3:4a:1e:34:d2:83:4a:c2:44:b5:e9:a5:77:67:31: 8c:66:27:6d:14:41:d9:5f:5d:72:9f:37:9f:08:c2: f4:b7:eb:bc:68:bc:44:0f:f2:e7:52:18:6a:00:81: 78:14:cf:fe:3d:a1:84:be:3e:0c:1d:21:4d:6e:22: 36:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CD:83:9D:47:E9:7B:26:BC:1D:CD:0E:DE:2A:27:7A:2F:18:7E:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ea:34:e7:dd:01:c9:59:38:49:da:f8:55:3a:b8:a7:f8:be: a4:0b:ee:61:2a:50:ee:3c:71:f2:b2:ef:25:03:eb:d2:9d:78: 69:66:36:ff:b8:9d:68:bd:d4:b6:e7:da:f6:d2:35:ba:e5:d7: d1:a2:de:7a:4d:3a:0b:2e:8e:13:cf:e5:f2:fb:03:6b:cf:5c: 7c:1d:68:b0:58:5e:e3:6e:9a:3c:97:39:d0:79:38:3b:ab:08: fa:66:e9:20:f9:68:0d:79:a0:a5:52:25:b1:2a:c1:49:81:57: 95:9e:dc:ef:b4:6b:5c:cf:a6:a8:44:f2:93:55:6b:a4:5d:49: ab:94:d2:d6:87:97:0c:b8:fe:11:14:b3:3d:38:3a:b0:cb:2a: 78:23:00:17:55:90:96:64:16:84:66:6c:90:61:8f:f6:76:b9: e2:6a:11:f2:8e:10:ec:a5:c1:ad:4f:ee:11:ac:52:64:80:d3: 69:c2:22:3b:85:1f:94:52:e0:86:12:09:58:8d:66:a7:46:1a: 6e:1d:60:40:dd:27:c2:06:3d:ea:e1:92:79:a6:d4:3c:2b:e8: 7e:30:e1:17:ee:bb:b9:2a:16:4f:5d:1b:fb:7a:cf:5d:3d:dc: 09:bb:b6:e1:eb:92:0b:74:2d:d2:38:62:39:a1:95:8c:8c:8a: 7d:68:e2:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHaCVlYvPi7AFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZTdhMDljMTUtMjQ0Zi00YzA3LWFiMTctNzE3MTg3MzAyZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X/dEnVmWJsWbVI89QHL+RZg75BYoE3MQ9Nc s7SV3v7Sz/1h47Wf0PacdymwyXnDskEqsfLaCplx9tvL3UdLTCu1HyemO00jVgoM t7aXBq87Ir8ySs3qEAMAKSOzMYV+louG++utTohqlj8ViBodED+1orfyBFBBclZu Q/GlEqTABNg5Y8n0OOsV3lgdTJ61VDFGjQ+FDfgl9EN+QW//Jy6oZXyjWD2cHtp9 D8jYp9khYSuEz3Kc9/qf2EIxZzgifA2zSh400oNKwkS16aV3ZzGMZidtFEHZX11y nzefCML0t+u8aLxED/LnUhhqAIF4FM/+PaGEvj4MHSFNbiI2CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHNg51H6XsmvB3NDt4qJ3ovGH4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMGFmYjZiNzItYzMyOC0z ZmM0LWFhODctNzU1MGQ1YmY5NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjqNOfdAclZOEna+FU6uKf4vqQL7mEqUO48cfKy7yUD69KdeGlmNv+4 nWi91Lbn2vbSNbrl19Gi3npNOgsujhPP5fL7A2vPXHwdaLBYXuNumjyXOdB5ODur CPpm6SD5aA15oKVSJbEqwUmBV5We3O+0a1zPpqhE8pNVa6RdSauU0taHlwy4/hEU sz04OrDLKngjABdVkJZkFoRmbJBhj/Z2ueJqEfKOEOylwa1P7hGsUmSA02nCIjuF H5RS4IYSCViNZqdGGm4dYEDdJ8IGPerhknmm1Dwr6H4w4Rfuu7kqFk9dG/t6z109 3Am7tuHrkgt0LdI4YjmhlYyMin1o4mo= -----END CERTIFICATE-----Generated at Wed Oct 8 15:42:55 2025 by rpki-client