$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa File: cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa (raw, json) Hash identifier: Qi3VBuIZs9XvqFD4DVbGPiSFFQelR9J1jCKtF9aeQbo= Subject key identifier: C5:A6:50:BC:DF:A2:E4:36:26:7D:BB:7C:02:D3:52:41:40:29:AE:7D Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584B583C7CA05B6A852830B64340 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 21581 IP address blocks: 108.161.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:7c:a0:5b:6a:85:28:30:b6:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=7e3e65b5-0376-4a45-bd06-c7854747051f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:2c:4a:7e:39:eb:cd:72:0d:a0:54:95:4e: 00:d7:a3:f6:e0:93:d9:27:9c:43:b9:be:03:35:e4: a2:3f:50:22:b9:08:8c:9c:ff:67:14:99:e3:15:4a: af:5d:96:ad:e3:5c:37:fb:ce:0e:8a:ae:80:6c:3c: a7:0f:83:0d:d9:b6:a7:af:bf:b2:ea:11:d7:2f:0a: d3:42:32:41:eb:ec:b4:50:36:52:e2:7a:02:86:eb: 5a:82:40:2f:20:be:37:e1:2c:e0:10:c6:e7:dd:74: 1e:c7:ba:e1:e1:4c:a2:07:69:12:ee:e3:14:f4:0c: ce:81:d1:19:ea:11:12:87:e3:2c:4d:c4:6e:c0:c1: b1:75:18:eb:d6:c1:d8:de:37:cb:b5:34:28:95:58: 80:a0:66:45:26:eb:73:ae:01:2b:35:0f:5c:18:50: 3b:09:40:39:f7:f9:48:a5:79:55:ee:1d:06:dc:db: 00:dd:8c:24:9f:2a:34:d6:08:4c:02:52:f9:a8:28: da:ff:67:fb:85:1c:a2:77:ec:bb:3e:26:6c:fa:b7: c5:4c:56:9b:1e:65:f6:7f:35:45:db:f6:19:15:05: 10:bb:1a:8a:ee:55:ce:71:a1:88:94:63:b7:45:86: 51:73:a0:bd:e7:a0:f9:ba:83:c2:d3:db:0a:6a:bb: c4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A6:50:BC:DF:A2:E4:36:26:7D:BB:7C:02:D3:52:41:40:29:AE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d8:a0:90:09:89:cf:b8:a2:7f:89:3e:ae:f0:1f:8d:16:d0: 13:e3:a5:50:8c:e0:70:ee:41:d7:24:ad:01:06:9f:8a:46:39: 54:9a:54:a9:b6:67:18:a1:9f:62:83:14:c1:cd:bd:f3:41:e2: ca:a5:2a:fb:73:1c:5c:87:bd:48:97:54:5d:13:25:60:0a:9d: 54:8b:67:61:4d:37:e8:b0:5b:a8:f2:5b:77:73:bb:34:fc:ef: fc:b4:83:3a:8a:2e:6d:59:59:54:b9:7c:8a:2c:16:f6:2c:61: 03:cb:b2:c1:d9:9f:3b:49:cb:c6:04:0f:72:76:c0:19:73:47: 93:c0:2a:7b:cf:7b:5b:9a:50:13:0a:25:d7:d3:19:f1:11:f6: 3a:77:02:74:85:2c:77:3b:02:ca:4b:7f:65:73:35:66:f9:59: 29:95:ce:9c:93:1a:41:75:91:20:94:24:f1:eb:7a:d9:e5:66: 76:1e:65:ce:74:e7:98:75:80:30:4f:f0:9c:a0:7e:29:46:c4: e2:17:23:a1:c4:bf:ac:6a:cf:4e:41:d5:54:1c:ba:72:95:04: 25:e0:ad:77:59:2e:c4:f9:d0:87:a8:07:c0:fb:59:0a:9d:8d: a2:0a:6e:1a:ed:c5:55:2e:b1:91:c4:2f:12:c0:d9:0a:54:bc: 00:0f:9f:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPHygW2qFKDC2Q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk N2UzZTY1YjUtMDM3Ni00YTQ1LWJkMDYtYzc4NTQ3NDcwNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc4sSn45681yDaBUlU4A16P24JPZJ5xDub4D NeSiP1AiuQiMnP9nFJnjFUqvXZat41w3+84Oiq6AbDynD4MN2banr7+y6hHXLwrT QjJB6+y0UDZS4noChutagkAvIL434SzgEMbn3XQex7rh4UyiB2kS7uMU9AzOgdEZ 6hESh+MsTcRuwMGxdRjr1sHY3jfLtTQolViAoGZFJutzrgErNQ9cGFA7CUA59/lI pXlV7h0G3NsA3Ywknyo01ghMAlL5qCja/2f7hRyid+y7PiZs+rfFTFabHmX2fzVF 2/YZFQUQuxqK7lXOcaGIlGO3RYZRc6C956D5uoPC09sKarvEkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWmULzfouQ2Jn27fALTUkFAKa59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvY2YxMmU2NTgtOWRkNS0z OWYyLWJmNzAtYzBhNDgzNzVkOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrYoJAJic+4on+JPq7wH40W0BPjpVCM4HDuQdckrQEGn4pGOVSaVKm2 Zxihn2KDFMHNvfNB4sqlKvtzHFyHvUiXVF0TJWAKnVSLZ2FNN+iwW6jyW3dzuzT8 7/y0gzqKLm1ZWVS5fIosFvYsYQPLssHZnztJy8YED3J2wBlzR5PAKnvPe1uaUBMK JdfTGfER9jp3AnSFLHc7AspLf2VzNWb5WSmVzpyTGkF1kSCUJPHretnlZnYeZc50 55h1gDBP8JygfilGxOIXI6HEv6xqz05B1VQcunKVBCXgrXdZLsT50IeoB8D7WQqd jaIKbhrtxVUusZHELxLA2QpUvAAPn6Q= -----END CERTIFICATE-----Generated at Fri Oct 10 16:08:06 2025 by rpki-client