$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d88c9dd8-6ead-3cdd-88a2-10f8ce6af59c.roa File: d88c9dd8-6ead-3cdd-88a2-10f8ce6af59c.roa (raw, json) Hash identifier: KNAFW394IE0vPryvziLlCHacpS7vHNcMqtuz43ffouM= Subject key identifier: 15:96:59:E1:84:F4:0A:F9:BF:16:18:59:2F:FA:1A:F9:73:7F:4E:90 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6C74BF459950663D26C3E0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d88c9dd8-6ead-3cdd-88a2-10f8ce6af59c.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 32043 IP address blocks: 107.158.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:74:bf:45:99:50:66:3d:26:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=bb6c7788-8512-40a9-bc23-2ce7bcda7f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:0c:cc:10:87:32:bb:12:7d:80:ee:82:a6: ac:bb:2c:99:29:bd:c2:20:7e:25:96:f1:ce:bf:97: 81:80:f0:1b:c1:3b:4f:79:bb:32:e4:3d:ca:c9:28: 37:94:a4:87:35:cb:d5:53:a0:69:09:1e:a4:39:5b: 64:a1:0c:85:04:4f:5a:60:bc:a7:f8:b2:47:77:b0: d9:ca:ce:66:99:2a:04:26:68:ae:96:e3:5f:8d:ac: 16:f4:22:76:a3:c7:73:66:72:b9:cc:ce:8e:e9:84: 3d:b0:6d:d5:00:7e:e9:4a:7e:83:a3:5c:43:d3:b9: bc:0c:6f:d7:ad:de:bd:74:5b:ad:f6:a0:46:2a:b9: 65:ae:2b:d2:6c:3c:fb:33:d8:d6:03:43:95:d9:50: e7:95:08:96:5f:e4:9f:40:c4:ff:d6:6e:87:3f:30: 16:aa:68:19:ac:61:ff:e1:13:bb:32:db:31:5f:c4: 7d:cd:3b:05:21:95:5e:32:44:73:89:c9:dc:c0:da: 7c:51:53:34:11:4d:00:af:fb:ff:a2:a6:e9:3d:d7: 2d:a4:8a:e5:7d:2d:95:c6:81:14:4e:f9:6f:a9:18: 94:29:ae:d4:53:37:c8:d6:38:70:28:57:d1:1e:24: 7e:c5:6a:20:b3:53:4f:a9:98:0f:9b:78:66:9f:d7: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:96:59:E1:84:F4:0A:F9:BF:16:18:59:2F:FA:1A:F9:73:7F:4E:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d88c9dd8-6ead-3cdd-88a2-10f8ce6af59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d7:6f:d8:40:a2:46:d6:ec:e4:94:9f:45:cb:3f:3d:f0:bd: a1:4a:7b:7d:eb:d7:2b:a3:8a:40:14:f7:f1:d2:e3:79:35:01: 1a:4a:9c:b4:ac:2b:3c:ca:4d:66:4b:37:76:ff:d9:40:fe:56: 67:10:a1:35:ee:7a:51:50:ce:78:3f:56:9b:f0:2c:a6:08:fa: b2:7f:5d:64:36:77:56:3e:98:a5:14:e3:f3:c1:ab:51:6b:2a: 52:e0:c3:7a:8b:d5:b0:8f:ed:d1:71:d6:4e:34:92:0d:f1:ba: 4d:3f:f6:0a:bd:30:06:5c:8e:0e:25:31:d2:3b:a0:0c:90:d4: cb:bb:17:c6:89:18:dd:ac:93:b8:71:71:92:7c:70:d8:53:79: 1d:44:72:87:56:6e:47:19:4f:64:81:4f:9a:c6:61:15:ad:ef: d8:7c:8b:42:f9:2f:cd:45:ad:ff:02:02:93:0d:17:1c:2b:e4: 5d:58:40:59:c3:88:24:e7:8c:45:bf:74:fb:ba:a9:e6:a6:bb: 53:ba:70:6c:32:5a:f3:8f:ad:7f:06:f0:95:10:9a:ea:06:21: 56:0d:53:34:b0:4e:64:29:e4:06:b5:2e:48:d7:8c:cc:7e:40: 19:8b:2a:b3:33:8d:91:ae:36:9b:9b:45:f1:77:e8:e2:92:ad: 8a:00:2d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHS/RZlQZj0mw+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YmI2Yzc3ODgtODUxMi00MGE5LWJjMjMtMmNlN2JjZGE3ZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg8MzBCHMrsSfYDugqasuyyZKb3CIH4llvHO v5eBgPAbwTtPebsy5D3KySg3lKSHNcvVU6BpCR6kOVtkoQyFBE9aYLyn+LJHd7DZ ys5mmSoEJmiuluNfjawW9CJ2o8dzZnK5zM6O6YQ9sG3VAH7pSn6Do1xD07m8DG/X rd69dFut9qBGKrllrivSbDz7M9jWA0OV2VDnlQiWX+SfQMT/1m6HPzAWqmgZrGH/ 4RO7MtsxX8R9zTsFIZVeMkRzicncwNp8UVM0EU0Ar/v/oqbpPdctpIrlfS2VxoEU TvlvqRiUKa7UUzfI1jhwKFfRHiR+xWogs1NPqZgPm3hmn9fEiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWWWeGE9Ar5vxYYWS/6Gvlzf06QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDg4YzlkZDgtNmVhZC0z Y2RkLTg4YTItMTBmOGNlNmFmNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa55CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3Xb9hAokbW7OSUn0XLPz3wvaFKe33r1yujikAU9/HS43k1ARpKnLSs KzzKTWZLN3b/2UD+VmcQoTXuelFQzng/VpvwLKYI+rJ/XWQ2d1Y+mKUU4/PBq1Fr KlLgw3qL1bCP7dFx1k40kg3xuk0/9gq9MAZcjg4lMdI7oAyQ1Mu7F8aJGN2sk7hx cZJ8cNhTeR1EcodWbkcZT2SBT5rGYRWt79h8i0L5L81Frf8CApMNFxwr5F1YQFnD iCTnjEW/dPu6qeamu1O6cGwyWvOPrX8G8JUQmuoGIVYNUzSwTmQp5Aa1LkjXjMx+ QBmLKrMzjZGuNpubRfF36OKSrYoALaM= -----END CERTIFICATE-----Generated at Wed Oct 8 15:38:08 2025 by rpki-client