$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2eb7d6d5-498c-3298-9291-2a55eab96cb7.roa File: 2eb7d6d5-498c-3298-9291-2a55eab96cb7.roa (raw, json) Hash identifier: 5MORv+BVCedtjSDHY5nLHVIvC5QMPgQhi3+d8DIYksE= Subject key identifier: 57:4B:10:B4:A8:5D:4B:65:B8:57:70:7C:D2:F2:FE:E0:5A:C5:28:5B Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6CB5862A56893F304AB140 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2eb7d6d5-498c-3298-9291-2a55eab96cb7.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 174 IP address blocks: 107.158.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b5:86:2a:56:89:3f:30:4a:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=64a5c2fd-7e28-45e7-8ac9-01b94e49eafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:82:d0:97:5d:c3:99:28:26:8e:51:69:4c: d1:6d:70:10:d9:7f:fe:93:8e:04:74:09:49:63:1e: fb:f7:84:9e:8a:f3:9d:6d:b3:b7:44:8c:68:26:b6: 52:0d:db:ed:79:03:4a:be:04:c3:6f:3d:a0:df:7d: 69:de:a9:31:c3:43:0a:a0:de:16:2b:80:95:27:8f: 27:64:f8:db:f1:da:65:fd:05:db:f4:91:1f:75:0a: f0:7a:29:ca:c4:0c:dc:14:8a:17:5e:d0:87:3c:27: 2c:54:ac:9b:bc:3c:e5:8d:23:b3:7a:ae:56:f7:2f: 39:4f:4c:dd:7f:5e:01:ea:c9:7c:01:ae:2a:88:49: 4e:2e:d3:79:55:2c:f1:e7:b3:3e:f2:68:d4:60:4c: 80:ac:c8:a5:18:f8:04:73:27:a9:c8:6c:50:ff:05: 66:a5:58:0a:fe:53:00:b2:5b:24:62:cf:c6:af:74: 60:8d:02:75:c3:7a:c4:63:28:3a:0c:27:ae:df:a6: 71:78:8c:a1:b2:e5:0c:7e:75:d0:fe:2b:15:34:23: 8b:74:a8:2c:50:21:c3:fa:9e:50:3d:c8:96:49:96: 69:c3:fb:a7:c5:64:f2:d2:29:e6:38:b7:5d:86:1c: a3:ad:fc:cc:0b:96:79:2e:5a:d3:92:8d:e0:be:cc: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4B:10:B4:A8:5D:4B:65:B8:57:70:7C:D2:F2:FE:E0:5A:C5:28:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2eb7d6d5-498c-3298-9291-2a55eab96cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:13:1e:f0:d3:cf:56:d5:b6:9c:75:40:aa:10:bd:9a:07:80: 1d:7f:67:e4:57:71:d7:19:e7:f0:18:15:0c:34:c9:58:bf:0a: 8d:bb:cb:7c:8a:92:01:98:a6:62:c7:98:88:e7:f0:f7:3c:97: 57:42:a1:10:dd:c4:05:6a:7e:66:4f:00:e4:9a:ad:ab:d3:97: c2:8a:60:84:0e:fd:91:9e:85:6a:68:3c:78:8f:4b:41:b2:a5: 88:a7:92:34:8b:83:12:10:c0:53:9b:b8:51:66:55:b3:c5:24: 1d:a6:cf:58:80:c3:8e:ab:1b:8a:3e:eb:3a:d1:c8:a5:b9:96: fa:2d:4c:d1:44:24:e0:6c:17:0c:fa:cc:d1:2a:13:0d:65:ab: ee:5c:ee:63:f8:aa:76:fd:6d:71:61:24:48:0e:4d:aa:0c:9d: ed:cf:b6:c1:e5:f3:18:84:89:1e:10:64:71:41:e8:6a:52:ba: 67:8e:1e:a3:08:bc:e1:43:53:e5:a9:7a:4d:77:cf:9e:94:c2: 18:b2:9a:68:ac:eb:ac:b5:ab:21:7a:de:c0:2d:77:dc:f1:39: 27:5c:09:74:ad:5f:d2:d4:06:e8:72:7e:d1:60:3e:b3:c5:19: df:9c:9b:ba:46:8c:3f:a3:b8:a0:4d:77:25:e3:1a:27:fb:ec: 60:94:e3:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLWGKlaJPzBKsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NjRhNWMyZmQtN2UyOC00NWU3LThhYzktMDFiOTRlNDllYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJGC0Jddw5koJo5RaUzRbXAQ2X/+k44EdAlJ Yx7794SeivOdbbO3RIxoJrZSDdvteQNKvgTDbz2g331p3qkxw0MKoN4WK4CVJ48n ZPjb8dpl/QXb9JEfdQrweinKxAzcFIoXXtCHPCcsVKybvDzljSOzeq5W9y85T0zd f14B6sl8Aa4qiElOLtN5VSzx57M+8mjUYEyArMilGPgEcyepyGxQ/wVmpVgK/lMA slskYs/Gr3RgjQJ1w3rEYyg6DCeu36ZxeIyhsuUMfnXQ/isVNCOLdKgsUCHD+p5Q PciWSZZpw/unxWTy0inmOLddhhyjrfzMC5Z5LlrTko3gvszxiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdLELSoXUtluFdwfNLy/uBaxShbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMmViN2Q2ZDUtNDk4Yy0z Mjk4LTkyOTEtMmE1NWVhYjk2Y2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUTHvDTz1bVtpx1QKoQvZoHgB1/Z+RXcdcZ5/AYFQw0yVi/Co27y3yK kgGYpmLHmIjn8Pc8l1dCoRDdxAVqfmZPAOSaravTl8KKYIQO/ZGehWpoPHiPS0Gy pYinkjSLgxIQwFObuFFmVbPFJB2mz1iAw46rG4o+6zrRyKW5lvotTNFEJOBsFwz6 zNEqEw1lq+5c7mP4qnb9bXFhJEgOTaoMne3PtsHl8xiEiR4QZHFB6GpSumeOHqMI vOFDU+Wpek13z56Uwhiymmis66y1qyF63sAtd9zxOSdcCXStX9LUBuhyftFgPrPF Gd+cm7pGjD+juKBNdyXjGif77GCU43s= -----END CERTIFICATE-----Generated at Wed Oct 8 15:39:42 2025 by rpki-client