$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa File: aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa (raw, json) Hash identifier: GnXmOgm+GTQG7v3/vYLT6jwqY054OelnItlvgZoqhRs= Subject key identifier: 21:56:66:D2:74:DE:B8:F8:4D:A6:FE:30:F7:E8:B2:43:00:4B:19:04 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584B583CAA525A165EA9AA1B93F0 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 21581 IP address blocks: 108.161.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:aa:52:5a:16:5e:a9:aa:1b:93:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=30c85cc4-76eb-4611-bbaa-493a353a5c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:04:8c:6e:fc:c2:ea:90:81:f5:7a:e5:dd:7b: 01:b8:e0:9a:47:09:d8:22:1d:dd:fd:db:6b:a2:76: c3:d4:6d:3b:ed:53:5a:95:e0:f2:77:fe:d8:88:53: 3d:a5:b6:38:4f:ee:21:c6:3e:65:89:76:84:8a:33: f5:d4:c4:7c:e7:46:33:48:cd:cc:93:47:ab:5d:5e: b5:15:05:51:f5:59:7c:3d:35:3c:b4:db:be:a2:c6: ce:76:81:8e:56:a0:eb:39:d5:81:a1:99:88:47:7a: 13:32:3c:6e:02:3b:cf:75:8d:75:4a:d6:69:dd:9a: 5e:c6:a0:e2:53:22:c5:98:cf:b0:83:94:ee:c6:dd: 25:cf:b2:05:13:b3:ad:8d:f5:27:0b:c1:38:48:e0: f1:a0:a8:82:a2:e7:d2:80:3a:88:fc:61:74:fb:be: fd:ce:fb:f2:e5:74:f7:a8:0f:eb:e3:d5:5a:3a:3d: 2b:b8:c9:49:20:9d:83:cb:ee:5c:8a:cc:6e:28:be: 92:05:15:ca:d6:3a:8f:c7:7e:59:18:6e:b9:54:b8: fb:fb:90:d5:b9:3b:dc:9f:9c:68:9c:04:40:49:68: 66:91:98:09:a9:ff:71:e5:50:d8:58:fb:cd:be:29: 40:3e:ac:de:29:d0:e5:9e:29:d2:4b:ae:57:20:61: e1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:56:66:D2:74:DE:B8:F8:4D:A6:FE:30:F7:E8:B2:43:00:4B:19:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:43:6f:ad:d9:4b:5f:05:bb:c3:ca:9a:c0:3c:50:48:17:14: 94:a9:be:6c:bc:cc:82:79:b3:c6:0c:e8:7a:3f:65:36:66:12: 26:a3:bf:2a:7d:e8:3e:d8:5a:82:1e:b5:b4:46:00:99:ee:7f: 8c:ba:27:b5:8f:c7:08:af:56:e2:de:47:a5:19:a8:82:8f:f4: 2b:a6:24:df:5f:27:ce:84:7f:35:5e:a2:0d:c6:31:0d:0a:d3: e9:ac:02:05:45:b2:df:28:45:43:4f:50:d7:b2:44:68:72:19: 5e:5c:ba:d5:cd:f8:99:8d:25:b0:1e:ab:a1:d2:45:26:c0:d1: bf:80:23:dd:58:08:fc:6d:1c:76:6b:20:f9:89:eb:98:8e:78: 99:df:f4:d1:06:a2:9b:06:39:f8:80:9d:5f:21:46:ad:7d:d0: 46:fe:3a:bb:71:53:a2:3d:09:64:4b:86:ad:55:bc:34:84:3c: d9:c3:3f:4b:40:63:a4:a6:ed:a8:fb:cc:dd:75:dc:4b:2c:a7: da:2e:08:73:f1:91:f1:8c:c1:b4:90:5b:80:f5:80:f8:a5:df: 2d:93:fd:ac:0b:f7:25:43:c2:38:09:d1:02:49:45:a3:04:87: 90:fb:01:05:7c:2e:6e:d0:26:04:a8:52:41:62:1e:ca:7e:c3: 4b:d1:95:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKpSWhZeqaobk/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzBjODVjYzQtNzZlYi00NjExLWJiYWEtNDkzYTM1M2E1YzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwSMbvzC6pCB9Xrl3XsBuOCaRwnYIh3d/dtr onbD1G077VNaleDyd/7YiFM9pbY4T+4hxj5liXaEijP11MR850YzSM3Mk0erXV61 FQVR9Vl8PTU8tNu+osbOdoGOVqDrOdWBoZmIR3oTMjxuAjvPdY11StZp3ZpexqDi UyLFmM+wg5Tuxt0lz7IFE7OtjfUnC8E4SODxoKiCoufSgDqI/GF0+779zvvy5XT3 qA/r49VaOj0ruMlJIJ2Dy+5cisxuKL6SBRXK1jqPx35ZGG65VLj7+5DVuTvcn5xo nARASWhmkZgJqf9x5VDYWPvNvilAPqzeKdDlninSS65XIGHhOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFWZtJ03rj4Tab+MPfoskMASxkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvYWVkOTNiZmEtOTY4Mi0z NzdiLWIyYjYtZDczYzFkMDlmMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZDb63ZS18Fu8PKmsA8UEgXFJSpvmy8zIJ5s8YM6Ho/ZTZmEiajvyp9 6D7YWoIetbRGAJnuf4y6J7WPxwivVuLeR6UZqIKP9CumJN9fJ86EfzVeog3GMQ0K 0+msAgVFst8oRUNPUNeyRGhyGV5cutXN+JmNJbAeq6HSRSbA0b+AI91YCPxtHHZr IPmJ65iOeJnf9NEGopsGOfiAnV8hRq190Eb+OrtxU6I9CWRLhq1VvDSEPNnDP0tA Y6Sm7aj7zN113Essp9ouCHPxkfGMwbSQW4D1gPil3y2T/awL9yVDwjgJ0QJJRaME h5D7AQV8Lm7QJgSoUkFiHsp+w0vRlbw= -----END CERTIFICATE-----Generated at Fri Oct 10 16:10:44 2025 by rpki-client