$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa File: 31f66624-a6b9-3acd-938b-89b2386f5b28.roa (raw, json) Hash identifier: fj6bTVOYkPj6FS8ufXWxil5YveXB0qZXz8iEVuYmkx8= Subject key identifier: 91:11:F8:48:98:9C:45:B3:C4:7E:68:4E:94:C6:01:54:A3:80:3B:C6 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584B1AD1882F468138E3A40E6600 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 40788 IP address blocks: 108.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:88:2f:46:81:38:e3:a4:0e:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=2738818e-bfca-4ce8-9da4-cc8ab9a462af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9c:b0:f3:5f:bc:8d:f0:f4:83:68:1e:6a:cf: 01:70:ef:9c:19:b0:66:74:af:d2:93:ba:fe:5e:67: 5a:42:ab:5d:e6:b7:72:3e:30:95:e1:fd:98:3d:94: 56:ac:6c:87:6e:dc:2f:6d:5a:7f:aa:d1:d9:4f:36: ac:3a:ee:c7:5d:24:22:11:f0:57:78:8e:93:7e:d2: c8:db:4b:aa:c9:17:6c:c6:3a:34:cb:0d:1c:24:af: 43:e5:ce:75:a5:6c:87:05:a3:a1:e2:b9:1f:c1:93: 6a:08:38:05:fd:58:14:22:62:d5:60:b9:e7:78:ee: 0b:dc:23:84:f9:a2:ff:da:6c:64:1b:f3:15:b2:b8: 45:2a:34:38:71:2e:e3:26:be:32:47:81:e6:40:1b: e4:ea:46:60:93:7e:d3:51:e6:fe:9a:af:51:d0:c9: 27:cb:c0:67:be:12:30:18:26:b9:bd:a2:c8:79:d0: 45:c6:ea:3d:38:fb:1d:80:a5:8c:17:35:a2:00:74: 0b:66:2b:cb:43:46:e1:38:9e:ee:e9:88:9a:cc:41: a4:99:19:54:32:5b:37:24:72:36:e7:9b:24:03:a6: 84:0c:c1:bb:78:e6:82:9a:11:17:5a:45:46:ce:2d: 60:fd:60:28:18:da:a9:8b:c6:87:0e:1f:cf:f7:5e: 41:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:11:F8:48:98:9C:45:B3:C4:7E:68:4E:94:C6:01:54:A3:80:3B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 108.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:64:8a:63:c8:b7:3f:16:10:d9:e7:ef:a7:9f:a0:9f:a3:54: c1:6e:32:55:f2:15:ae:10:07:94:c9:45:97:80:a8:4c:35:35: fb:4d:23:36:92:f4:44:94:3d:9f:8f:2b:28:8f:29:e8:46:46: 38:1a:27:0d:24:29:9b:f3:be:6a:a1:69:50:dc:d9:77:cd:bc: ac:bf:51:96:e8:d2:b2:22:6a:16:db:28:f6:17:c8:85:40:b3: 4c:1d:67:45:56:4f:c4:a3:aa:b6:f4:9b:02:c7:3b:56:a5:43: 0c:17:a9:c0:9e:33:62:21:c6:45:89:6b:1b:7e:3a:37:df:ab: 6c:d9:b3:99:41:fd:65:08:04:33:2d:6e:3e:16:a9:f5:17:b6: b1:0f:7a:93:aa:49:f1:16:25:dd:c2:67:1f:29:19:99:da:c7: c2:bd:5c:27:14:77:7e:ce:cb:48:de:df:d6:68:1d:7d:17:8c: f7:30:0a:49:91:b4:7a:ff:6d:f2:d6:5b:d0:5a:93:b0:9a:44: f2:51:f1:0a:d4:5d:fd:12:49:e2:7b:81:c8:21:7c:92:5a:af: 90:84:64:fe:f9:ce:30:e3:32:1b:5c:d2:29:16:f8:4b:8b:c1: 7a:69:46:78:57:f5:44:c3:ef:9e:d7:8e:27:7f:5a:9e:bd:4d: 7c:53:26:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0YgvRoE446QOZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MjczODgxOGUtYmZjYS00Y2U4LTlkYTQtY2M4YWI5YTQ2MmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5yw81+8jfD0g2geas8BcO+cGbBmdK/Sk7r+ XmdaQqtd5rdyPjCV4f2YPZRWrGyHbtwvbVp/qtHZTzasOu7HXSQiEfBXeI6TftLI 20uqyRdsxjo0yw0cJK9D5c51pWyHBaOh4rkfwZNqCDgF/VgUImLVYLnneO4L3COE +aL/2mxkG/MVsrhFKjQ4cS7jJr4yR4HmQBvk6kZgk37TUeb+mq9R0Mkny8BnvhIw GCa5vaLIedBFxuo9OPsdgKWMFzWiAHQLZivLQ0bhOJ7u6YiazEGkmRlUMls3JHI2 55skA6aEDMG7eOaCmhEXWkVGzi1g/WAoGNqpi8aHDh/P915BKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJER+EiYnEWzxH5oTpTGAVSjgDvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMzFmNjY2MjQtYTZiOS0z YWNkLTkzOGItODliMjM4NmY1YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbKgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRkimPItz8WENnn76efoJ+jVMFuMlXyFa4QB5TJRZeAqEw1NftNIzaS 9ESUPZ+PKyiPKehGRjgaJw0kKZvzvmqhaVDc2XfNvKy/UZbo0rIiahbbKPYXyIVA s0wdZ0VWT8Sjqrb0mwLHO1alQwwXqcCeM2IhxkWJaxt+Ojffq2zZs5lB/WUIBDMt bj4WqfUXtrEPepOqSfEWJd3CZx8pGZnax8K9XCcUd37Oy0je39ZoHX0XjPcwCkmR tHr/bfLWW9Bak7CaRPJR8QrUXf0SSeJ7gcghfJJar5CEZP75zjDjMhtc0ikW+EuL wXppRnhX9UTD757Xjid/Wp69TXxTJnU= -----END CERTIFICATE-----Generated at Fri Oct 10 17:30:07 2025 by rpki-client