$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa File: 10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa (raw, json) Hash identifier: 3m2JVyi1PBWoM+iP+9vf3GBiYh0tUEkpqRTgcYKF/2I= Subject key identifier: F0:C3:3D:6D:76:3C:6D:32:E6:5F:C0:EA:64:B6:57:22:EF:7A:4C:B5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F373EB701CCF2C314EF6080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.170.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3e:b7:01:cc:f2:c3:14:ef:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=9bf98c33-cfaf-479c-a156-fcfd71b392e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:bb:be:a5:96:a2:b4:78:51:8a:cf:4d:ec: 76:06:fd:b1:9b:30:2b:57:53:f3:15:73:04:41:f3: e9:b1:84:89:e6:ce:1b:c1:d2:01:a8:c2:5c:2e:79: e1:ca:08:bf:07:32:3d:d9:b9:87:17:38:1d:dc:74: c2:05:92:e7:3c:1f:7b:bb:b2:db:ea:84:54:ce:e1: 02:e7:27:2f:e3:fa:00:70:9c:2b:c0:af:ce:74:12: ce:ca:91:ea:e1:5f:72:c0:6c:8f:13:5a:2e:6b:01: b5:e2:0d:93:f4:af:76:5f:50:37:83:27:b6:58:98: 07:2c:c2:46:11:ac:5f:69:4b:9c:f8:74:51:dd:cf: 08:94:5f:93:6c:84:87:d6:0b:8b:36:d5:a4:b0:72: fa:4c:65:78:4e:44:12:78:f4:65:b2:57:0b:2d:73: fc:42:bb:25:32:c1:50:51:de:06:c0:0d:c3:05:a5: 55:f9:b0:f5:2a:d0:af:bf:48:43:dd:f4:f6:3e:a6: 99:4f:3a:e8:23:30:e9:22:7f:56:3b:8f:c6:1a:17: e6:aa:11:c5:25:2e:ab:62:9e:fb:5f:4a:98:93:5c: b4:70:24:01:a0:e7:2a:08:ee:81:f9:31:b1:6d:45: 56:19:30:78:9e:ad:4a:7a:c0:9c:6c:2a:70:8c:d5: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C3:3D:6D:76:3C:6D:32:E6:5F:C0:EA:64:B6:57:22:EF:7A:4C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3d:63:80:16:50:5d:51:a5:ba:3a:61:8d:8b:3f:fd:b5:90: 2a:fe:f5:94:05:79:b1:c0:1a:c3:23:e5:c4:56:ef:3a:77:57: da:0d:5c:bc:93:c8:a2:b4:48:79:1e:5f:f9:a7:6c:bf:71:fa: d7:1e:d0:2e:ec:2f:a4:e2:b2:f5:8f:e5:54:5f:ff:cf:06:6e: 68:45:8b:a5:32:33:8c:a0:63:82:31:44:7d:d3:44:8a:ba:2f: 0c:42:66:32:7a:67:82:3e:24:10:08:95:6c:73:5e:22:d6:7e: 8b:78:da:48:2e:8c:54:28:33:11:f7:d3:4d:e9:10:b2:58:ff: 62:6f:3e:7c:c0:03:69:99:1c:1e:d1:97:84:3d:9b:c4:66:23: 6a:43:70:9b:5b:ef:b1:6d:a7:3a:35:d2:71:8d:d4:f7:5d:bd: 69:c8:2a:43:22:83:79:c6:c1:0e:2e:ec:56:63:20:06:c5:40: 06:16:98:89:53:5b:36:30:8c:09:1b:e3:80:8d:08:cd:d9:f6: 0f:4d:d5:17:4a:fc:b3:ca:1c:bf:14:b7:bc:ae:90:dd:b0:a0: 33:ca:2c:db:a2:2d:e9:42:e1:dd:6b:8f:82:03:94:1a:d2:d5: 59:94:34:28:a1:be:3b:d3:dd:04:8c:42:ab:7d:31:c1:36:93: fd:1c:43:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNz63AczywxTvYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OWJmOThjMzMtY2ZhZi00NzljLWExNTYtZmNmZDcxYjM5MmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyK7vqWWorR4UYrPTex2Bv2xmzArV1PzFXME QfPpsYSJ5s4bwdIBqMJcLnnhygi/BzI92bmHFzgd3HTCBZLnPB97u7Lb6oRUzuEC 5ycv4/oAcJwrwK/OdBLOypHq4V9ywGyPE1ouawG14g2T9K92X1A3gye2WJgHLMJG EaxfaUuc+HRR3c8IlF+TbISH1guLNtWksHL6TGV4TkQSePRlslcLLXP8QrslMsFQ Ud4GwA3DBaVV+bD1KtCvv0hD3fT2PqaZTzroIzDpIn9WO4/GGhfmqhHFJS6rYp77 X0qYk1y0cCQBoOcqCO6B+TGxbUVWGTB4nq1KesCcbCpwjNU5QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDDPW12PG0y5l/A6mS2VyLveky1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTBiOWY1NTItYjlhNC0z Njc2LWJlYWQtNmUxYTdiZWYyOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF89Y4AWUF1Rpbo6YY2LP/21kCr+9ZQFebHAGsMj5cRW7zp3V9oNXLyT yKK0SHkeX/mnbL9x+tce0C7sL6TisvWP5VRf/88GbmhFi6UyM4ygY4IxRH3TRIq6 LwxCZjJ6Z4I+JBAIlWxzXiLWfot42kgujFQoMxH3003pELJY/2JvPnzAA2mZHB7R l4Q9m8RmI2pDcJtb77Ftpzo10nGN1PddvWnIKkMig3nGwQ4u7FZjIAbFQAYWmIlT WzYwjAkb44CNCM3Z9g9N1RdK/LPKHL8Ut7yukN2woDPKLNuiLelC4d1rj4IDlBrS 1VmUNCihvjvT3QSMQqt9McE2k/0cQ/8= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:47 2025 by rpki-client