$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa File: 43f0c32a-4c18-3924-b3cc-013a54cd1812.roa (raw, json) Hash identifier: LOCydLWJjihostPE8LseNOl3YIPGU4Zhjm9GRkK0oTg= Subject key identifier: C4:F5:EA:FB:DB:CF:E9:76:0E:B8:1F:8C:4D:DA:5E:8A:50:2A:39:77 Certificate issuer: /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Certificate serial: 010D0C9F4328584B0FA6B39C96449DEA58847D80 Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 396982 IP address blocks: 108.174.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:b3:9c:96:44:9d:ea:58:84:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=b9f3a8f4-123b-4cc6-a95c-da4b31bdb19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:a3:ba:5e:d6:de:f3:5e:e7:8b:f7:c5:7b: 4b:90:ca:91:49:15:e0:ea:75:a7:98:29:04:70:44: 0b:6c:6b:9f:ef:ad:a6:fa:c5:29:03:bf:50:36:59: 92:ed:80:71:04:dc:03:a7:3c:c0:3c:78:3e:3c:c0: 2f:5c:25:4d:46:d5:0c:7d:5f:fa:c4:ec:8f:e7:7b: c0:b6:2e:8a:03:9b:47:b9:ab:ed:a0:c5:b5:53:a4: ec:66:4b:36:b0:03:37:b8:1b:bd:ee:ee:9e:22:5c: b1:0f:7d:28:e9:d0:1e:87:1a:3d:1a:07:e1:b3:12: 1d:8c:dd:7b:f9:63:a6:16:64:ce:89:a3:91:85:48: 36:ad:c2:e8:96:56:dc:01:6c:12:01:b5:3f:e0:e8: c4:20:23:8e:8d:e6:0d:18:58:d8:9b:e0:9b:1a:70: 31:07:d4:f0:49:d0:70:3c:02:da:39:bd:3d:7e:de: 93:9a:d7:c7:50:51:c0:a6:b6:02:cf:3f:e5:78:17: c6:72:3a:29:a6:82:bc:e8:bb:05:17:c5:41:d4:81: 58:72:ed:6c:5b:61:e9:c2:8f:2a:27:f0:fc:3d:de: 74:cf:c6:a9:6f:a5:bd:a5:51:d9:99:e5:d8:61:8f: 0f:14:3d:6b:43:91:8b:d4:ae:4c:f5:f1:1a:ef:ae: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F5:EA:FB:DB:CF:E9:76:0E:B8:1F:8C:4D:DA:5E:8A:50:2A:39:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl X509v3 Authority Key Identifier: keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer sbgp-ipAddrBlock: critical IPv4: 108.174.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5d:4c:aa:19:cb:29:60:6e:4b:84:00:aa:6d:3b:79:b1:fa: 76:8b:9a:22:e8:ea:54:73:be:57:ae:fc:81:56:c5:e1:28:8c: 0a:89:25:9b:95:61:1c:56:39:1b:40:b9:8f:0b:6f:a7:67:d7: ac:b5:2e:00:46:a3:63:9a:40:b4:a4:14:48:fa:2d:66:4c:b3: d3:4a:bb:e9:ce:51:fe:5e:1d:78:a6:f8:3d:ef:ab:a7:ef:fe: 1b:8e:67:fe:5b:d7:1d:89:ed:e2:44:12:55:db:33:b0:7d:b3: 5c:f3:4d:5a:fa:1f:40:60:02:fa:cc:48:bd:dd:af:1d:8a:56: a5:14:84:48:b5:23:14:bb:f4:4d:94:ff:a9:fb:7f:1b:55:df: 49:10:b0:6e:c2:72:2b:5b:4f:9f:57:b7:50:61:0f:da:aa:ba: f5:d7:f2:2b:74:d3:07:87:5a:23:60:b3:89:81:5e:41:c4:5b: 62:82:31:a3:33:4b:23:a2:59:63:6c:73:a7:8f:cd:7c:ea:c3: 94:de:71:f2:97:15:d1:1b:41:7f:e1:b6:50:13:c9:25:e0:9e: 54:26:a5:1f:98:f0:bd:ba:38:03:9a:bc:c5:5d:9e:2b:28:e0: e4:47:45:61:4a:51:8c:21:20:a3:2a:10:aa:5d:90:b0:b4:7c: a6:ad:f2:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPprOclkSd6liEfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0MzRhYTYtYjY4Zi00MWU3LThkNGItOWM4MzEyNTVm MTFjMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk YjlmM2E4ZjQtMTIzYi00Y2M2LWE5NWMtZGE0YjMxYmRiMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/ajul7W3vNe54v3xXtLkMqRSRXg6nWnmCkE cEQLbGuf762m+sUpA79QNlmS7YBxBNwDpzzAPHg+PMAvXCVNRtUMfV/6xOyP53vA ti6KA5tHuavtoMW1U6TsZks2sAM3uBu97u6eIlyxD30o6dAehxo9GgfhsxIdjN17 +WOmFmTOiaORhUg2rcLollbcAWwSAbU/4OjEICOOjeYNGFjYm+CbGnAxB9TwSdBw PALaOb09ft6TmtfHUFHAprYCzz/leBfGcjoppoK86LsFF8VB1IFYcu1sW2Hpwo8q J/D8Pd50z8apb6W9pVHZmeXYYY8PFD1rQ5GL1K5M9fEa7674hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMT16vvbz+l2DrgfjE3aXopQKjl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjQz NGFhNi1iNjhmLTQxZTctOGQ0Yi05YzgzMTI1NWYxMWMvNDNmMGMzMmEtNGMxOC0z OTI0LWIzY2MtMDEzYTU0Y2QxODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWI0MzRhYTYtYjY4Zi00MWU3LThk NGItOWM4MzEyNTVmMTFjLzliNDM0YWE2LWI2OGYtNDFlNy04ZDRiLTljODMxMjU1 ZjExYy5jcmwwHwYDVR0jBBgwFoAUxEt0dIPMmHr/sBSEs9h6dG0fLGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjQzNGFhNi1iNjhmLTQxZTctOGQ0Yi05Yzgz MTI1NWYxMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxdTKoZyylgbkuEAKptO3mx+naLmiLo6lRzvleu/IFWxeEojAqJJZuV YRxWORtAuY8Lb6dn16y1LgBGo2OaQLSkFEj6LWZMs9NKu+nOUf5eHXim+D3vq6fv /huOZ/5b1x2J7eJEElXbM7B9s1zzTVr6H0BgAvrMSL3drx2KVqUUhEi1IxS79E2U /6n7fxtV30kQsG7CcitbT59Xt1BhD9qquvXX8it00weHWiNgs4mBXkHEW2KCMaMz SyOiWWNsc6ePzXzqw5TecfKXFdEbQX/htlATySXgnlQmpR+Y8L26OAOavMVdniso 4ORHRWFKUYwhIKMqEKpdkLC0fKat8gw= -----END CERTIFICATE-----Generated at Fri Oct 10 17:27:08 2025 by rpki-client