$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/c1cde13a-59e5-367d-b803-37082be1c6c7.roa File: c1cde13a-59e5-367d-b803-37082be1c6c7.roa (raw, json) Hash identifier: DGkS+bWlC+1vfHdcLSFj6qf9Qm3UJZ89o9jtPourxqY= Subject key identifier: 63:C0:86:AA:AE:41:9F:F2:94:58:AC:F7:34:3A:D9:21:1C:A8:46:30 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584B583C7C16AD60C75F6B9F85C0 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/c1cde13a-59e5-367d-b803-37082be1c6c7.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 21581 IP address blocks: 108.161.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:7c:16:ad:60:c7:5f:6b:9f:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=7fca3abf-05c6-4452-9015-99131a01b4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:e0:ce:6a:08:07:07:9d:16:a3:1c:f7:14: f6:c4:45:5e:df:33:db:99:20:f3:49:c1:eb:87:40: 84:6f:03:ba:c0:65:d2:e5:44:04:4e:82:3e:52:49: 4f:92:ae:83:70:c6:03:9c:c8:6a:68:ec:e6:7b:70: 08:d4:db:fd:95:7f:a3:b9:3e:ad:83:f3:5c:47:b5: 2b:12:36:96:9a:10:fd:7e:c0:6d:f2:1e:86:4a:d6: b3:69:ce:11:de:85:b3:58:8b:10:80:80:b4:f3:c7: 83:5f:64:d9:1d:64:70:e3:5d:14:ad:bb:9b:84:86: 4d:1b:56:42:f4:de:9d:48:9c:71:b9:a0:4e:72:93: 26:a4:dd:29:0c:f3:1c:81:af:e7:91:62:32:5e:cb: 88:bf:64:f8:54:44:fa:0b:a6:ee:16:8d:e7:37:70: 56:1b:b4:96:9e:ba:ed:84:3b:a6:42:c4:2a:9e:f5: 61:51:7e:d7:81:f1:da:8d:9e:f1:d8:64:49:be:1c: 7d:6f:cb:1d:ae:ae:fb:3f:03:a4:45:dd:8f:15:a0: be:08:c9:ba:e9:25:27:80:e4:0b:36:83:cb:28:d9: 09:8d:e7:29:78:a4:7b:3f:75:fd:14:34:2e:0f:1e: e2:2d:44:7f:7c:01:dd:3f:27:4f:32:10:6c:40:5b: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C0:86:AA:AE:41:9F:F2:94:58:AC:F7:34:3A:D9:21:1C:A8:46:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/c1cde13a-59e5-367d-b803-37082be1c6c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fb:c4:d5:ff:7c:16:95:b5:15:ca:d8:94:66:4d:4c:25:be: 54:79:ad:21:46:48:62:fe:ce:7d:8e:d9:13:33:73:0b:18:6e: 29:ab:11:7a:f7:71:17:a4:30:60:57:94:c2:08:bb:f6:ba:20: 50:d4:a9:fe:5a:ef:65:96:cb:0b:d9:a2:6a:e3:f4:4e:64:c4: 35:c0:18:04:97:84:0f:90:cb:eb:75:a8:b3:6d:dd:e5:0e:15: dd:d0:7a:08:22:bd:e1:7e:33:14:dd:a6:f2:a5:13:18:60:41: 63:2a:2b:e1:01:0d:e6:23:7f:87:69:28:f9:e4:21:1a:2b:86: 84:25:33:8e:26:86:a0:74:ab:3d:d4:96:0a:f4:98:b2:a8:fa: f5:cf:72:4f:4f:9f:43:70:81:cd:d5:bd:63:ed:c1:1a:94:a7: dd:92:c1:ad:f0:96:35:9e:f3:6f:7c:7b:89:c5:68:c9:5d:d0: 22:57:de:52:7f:a0:e4:26:9b:e7:4a:da:8b:24:cb:78:ec:c6: 63:e9:d0:36:03:21:d3:6a:2c:8e:49:4c:4a:87:8e:4c:e5:db: d4:df:4b:6d:88:a2:62:b5:c6:0d:4a:7c:8b:75:37:b5:22:e2: f1:8a:0a:e4:78:cb:c2:88:be:c2:65:a0:84:5a:38:ea:69:4e: b5:82:b5:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPHwWrWDHX2ufhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk N2ZjYTNhYmYtMDVjNi00NDUyLTkwMTUtOTkxMzFhMDFiNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6TgzmoIBwedFqMc9xT2xEVe3zPbmSDzScHr h0CEbwO6wGXS5UQEToI+UklPkq6DcMYDnMhqaOzme3AI1Nv9lX+juT6tg/NcR7Ur EjaWmhD9fsBt8h6GStazac4R3oWzWIsQgIC088eDX2TZHWRw410UrbubhIZNG1ZC 9N6dSJxxuaBOcpMmpN0pDPMcga/nkWIyXsuIv2T4VET6C6buFo3nN3BWG7SWnrrt hDumQsQqnvVhUX7XgfHajZ7x2GRJvhx9b8sdrq77PwOkRd2PFaC+CMm66SUngOQL NoPLKNkJjecpeKR7P3X9FDQuDx7iLUR/fAHdPydPMhBsQFt3lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPAhqquQZ/ylFis9zQ62SEcqEYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvYzFjZGUxM2EtNTllNS0z NjdkLWI4MDMtMzcwODJiZTFjNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL7xNX/fBaVtRXK2JRmTUwlvlR5rSFGSGL+zn2O2RMzcwsYbimrEXr3 cRekMGBXlMIIu/a6IFDUqf5a72WWywvZomrj9E5kxDXAGASXhA+Qy+t1qLNt3eUO Fd3QeggiveF+MxTdpvKlExhgQWMqK+EBDeYjf4dpKPnkIRorhoQlM44mhqB0qz3U lgr0mLKo+vXPck9Pn0Nwgc3VvWPtwRqUp92Swa3wljWe8298e4nFaMld0CJX3lJ/ oOQmm+dK2osky3jsxmPp0DYDIdNqLI5JTEqHjkzl29TfS22IomK1xg1KfIt1N7Ui 4vGKCuR4y8KIvsJloIRaOOppTrWCtYI= -----END CERTIFICATE-----Generated at Fri Oct 10 16:08:05 2025 by rpki-client