$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15500956-7ded-3d3f-ae50-b5a339fa54e2.roa File: 15500956-7ded-3d3f-ae50-b5a339fa54e2.roa (raw, json) Hash identifier: wnKCa7hHMGsMbfGmhqK1Vubo+FJvxPR+5747jpzIJfc= Subject key identifier: 35:76:5B:A7:5C:4E:8C:91:35:B2:4E:82:46:5E:E7:6F:E1:7D:18:3B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F375E85DF15DFE11F34CCE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15500956-7ded-3d3f-ae50-b5a339fa54e2.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.170.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:5e:85:df:15:df:e1:1f:34:cc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=fb50c16e-abeb-44f4-b370-3610129dbd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:f1:f1:0c:e5:00:81:c9:dc:68:35:98:54: 94:8a:37:ec:3e:48:d0:c1:b5:5b:8c:51:f4:c6:8a: 91:15:38:1d:b8:71:3e:cd:87:03:56:cb:1e:ff:83: 52:dd:f9:28:cb:16:dc:47:88:cb:28:45:14:b1:10: 8f:41:a4:15:39:81:8c:9e:48:0d:c2:48:94:8e:9d: f2:34:08:de:5c:e0:81:a9:2d:63:13:2d:51:f2:e0: 33:a9:88:fc:46:56:38:47:46:46:1c:17:35:7f:d5: 95:b6:ff:58:82:27:dd:3a:cf:07:ec:1d:72:92:2f: f2:9b:f7:ec:21:12:e0:2b:42:1c:5d:1c:be:d7:18: 0d:9a:f5:7b:22:7a:1e:70:bc:f2:5f:f0:c6:70:17: 50:c8:eb:e8:69:c0:7e:fe:06:6f:82:c1:a1:71:45: 40:4f:2c:17:fc:7d:a6:cc:a8:9a:46:6f:28:29:85: 95:0c:9e:11:2a:46:a7:a8:b7:66:c3:bf:17:6e:e4: 3c:02:e0:c6:13:69:25:bc:5e:71:c5:a2:67:fb:b1: 48:1e:4b:90:dd:c2:67:1b:7b:a3:4d:a8:f9:f0:9a: cd:d7:eb:66:ec:12:dc:72:9a:e0:42:6f:46:f2:36: ea:39:85:89:e9:fa:51:2d:aa:af:3b:f1:5c:40:4e: 1e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:76:5B:A7:5C:4E:8C:91:35:B2:4E:82:46:5E:E7:6F:E1:7D:18:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15500956-7ded-3d3f-ae50-b5a339fa54e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:63:b1:b6:e2:8d:89:e1:13:d1:d5:a1:c9:8e:4c:a2:75:15: ca:b4:aa:fb:f2:72:90:13:5e:5b:b4:d0:82:77:23:62:86:b1: b3:e9:3b:20:24:67:b0:20:2f:0d:91:d7:1c:06:72:e7:d3:3a: 1f:79:53:05:f6:ce:73:53:84:49:d2:ec:a0:5d:ca:0b:0f:00: 50:26:a4:73:20:f2:8a:dc:67:cb:99:7e:f4:32:90:e0:7e:88: 95:fb:56:e3:80:be:ea:6b:9a:bd:f1:3d:b3:41:10:71:c1:c1: 77:47:d5:cd:7b:04:99:ff:92:0d:63:9f:69:41:bd:30:18:7b: 93:65:5e:7f:08:57:9c:a5:3e:2f:ca:b3:5f:53:c1:08:3c:f8: 85:d3:5b:e7:cc:39:d0:05:3c:dc:8a:cb:d7:1b:9c:b1:23:3a: 70:cf:ee:5c:c7:ac:89:2e:90:2d:11:4f:32:24:d8:0a:7c:cd: 80:bc:0f:1b:7c:c4:7f:4f:ce:a1:ef:65:68:c1:b0:e0:fb:96: b4:7a:17:67:94:64:30:0a:a9:b9:0e:96:bd:56:e5:ed:87:8d: 60:09:92:28:13:6b:14:1f:f7:40:ee:10:f9:f8:0b:04:6f:64: 44:51:bb:11:2a:69:70:c5:96:0d:63:02:f4:0f:d5:0e:03:40: 11:d0:d9:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN16F3xXf4R80zOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZmI1MGMxNmUtYWJlYi00NGY0LWIzNzAtMzYxMDEyOWRiZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LDx8QzlAIHJ3Gg1mFSUijfsPkjQwbVbjFH0 xoqRFTgduHE+zYcDVsse/4NS3fkoyxbcR4jLKEUUsRCPQaQVOYGMnkgNwkiUjp3y NAjeXOCBqS1jEy1R8uAzqYj8RlY4R0ZGHBc1f9WVtv9YgifdOs8H7B1yki/ym/fs IRLgK0IcXRy+1xgNmvV7InoecLzyX/DGcBdQyOvoacB+/gZvgsGhcUVATywX/H2m zKiaRm8oKYWVDJ4RKkanqLdmw78XbuQ8AuDGE2klvF5xxaJn+7FIHkuQ3cJnG3uj Taj58JrN1+tm7BLccprgQm9G8jbqOYWJ6fpRLaqvO/FcQE4eYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV2W6dcToyRNbJOgkZe52/hfRg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTU1MDA5NTYtN2RlZC0z ZDNmLWFlNTAtYjVhMzM5ZmE1NGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHljsbbijYnhE9HVocmOTKJ1Fcq0qvvycpATXlu00IJ3I2KGsbPpOyAk Z7AgLw2R1xwGcufTOh95UwX2znNThEnS7KBdygsPAFAmpHMg8orcZ8uZfvQykOB+ iJX7VuOAvuprmr3xPbNBEHHBwXdH1c17BJn/kg1jn2lBvTAYe5NlXn8IV5ylPi/K s19TwQg8+IXTW+fMOdAFPNyKy9cbnLEjOnDP7lzHrIkukC0RTzIk2Ap8zYC8Dxt8 xH9PzqHvZWjBsOD7lrR6F2eUZDAKqbkOlr1W5e2HjWAJkigTaxQf90DuEPn4CwRv ZERRuxEqaXDFlg1jAvQP1Q4DQBHQ2Vw= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:57 2025 by rpki-client