$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa File: 33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa (raw, json) Hash identifier: 0WKh8DMxstzsOICrMs6dhVzHJTFMXvtz3dZf+VVEr8o= Subject key identifier: 18:DC:01:03:AA:03:32:5D:B3:16:BE:D9:32:30:76:F5:82:22:32:BB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBF4E30F4C2BC52A95F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 108.177.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:bf:4e:30:f4:c2:bc:52:a9:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=640dd8eb-e8ac-45c8-9aad-4870d420269d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d8:3f:8a:b6:e1:14:1b:fd:5d:bf:e7:31:ec: 33:ee:cd:57:5c:69:2e:c9:5d:78:e3:6a:a3:d7:2b: fa:de:3d:64:a9:70:00:a2:41:74:55:42:b1:76:d7: ab:10:74:3d:e9:91:77:c6:0f:4d:04:58:6f:ba:af: 5f:5f:38:24:dd:c0:27:df:6d:6a:cf:a4:d5:ae:4b: 35:ca:6c:04:b3:2c:16:dc:88:fa:df:ec:0d:73:cf: 90:2c:c8:79:45:38:43:29:0a:70:94:6f:14:e3:97: d9:e3:5a:b1:64:ad:75:cf:83:2c:06:c6:07:ab:dd: 6b:a9:10:aa:9d:4c:4f:b3:c6:12:54:ae:a4:60:ef: 1a:12:87:72:4c:51:c6:e7:7d:be:8c:5b:c6:8e:91: 12:67:81:5d:e5:16:0f:a5:49:e4:cc:06:2a:38:28: 16:06:27:38:9a:83:7f:7b:f1:7e:37:d4:b4:14:c4: f7:b1:e6:11:8c:cd:45:7f:d3:60:11:89:ed:30:a6: b9:26:15:92:5c:23:4b:0d:b1:2a:20:5e:2e:8d:86: bd:b8:44:89:cc:2a:92:5a:05:6c:78:49:0f:57:6c: 52:87:25:37:60:f9:5b:09:01:c0:08:bf:d9:60:e3: df:f1:65:a6:e3:6b:55:dd:bb:96:15:9a:2f:2e:d0: aa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DC:01:03:AA:03:32:5D:B3:16:BE:D9:32:30:76:F5:82:22:32:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:46:98:f0:32:1e:e1:d4:7b:3e:b9:7e:8d:25:31:a0:a5:61: 63:59:64:4c:ce:1d:0c:e4:8e:ba:05:2a:10:a5:ab:16:8e:6b: 70:f9:dd:ff:d8:41:05:05:fb:f9:6f:c9:50:b6:48:1f:be:43: 61:67:5b:bb:04:8e:3a:8f:b2:2f:d7:df:a5:89:38:43:72:72: 9d:c0:9e:27:98:b1:d0:d2:a7:2f:4f:f8:cb:dd:ad:59:dd:b3: c0:09:3a:8e:7c:be:25:35:87:37:32:a4:10:c2:c3:1c:86:7b: d1:9f:b7:e2:29:33:e6:32:37:4e:50:12:20:b8:67:b7:da:f1: 92:b9:97:a6:63:b1:84:f1:bc:21:5a:d7:5b:c0:1b:eb:6c:f7: fe:0e:fd:75:15:c7:af:f5:65:9e:a4:ef:9b:8c:13:1e:bc:1d: 2d:4a:30:e2:e7:c2:00:06:be:63:0b:a2:c0:2c:c6:f8:0a:c7: 93:ef:d2:d0:13:8d:ce:ba:d7:74:f1:4e:db:3f:f9:93:bd:2c: a9:a9:97:62:e8:50:4c:3a:ef:18:d4:5e:e9:94:a5:98:13:9b: 34:c4:5c:7f:e6:f6:24:22:3a:b8:36:0f:ea:9a:ca:dd:59:b0: c6:44:cb:ce:a9:87:79:cb:f6:cc:1c:47:34:3c:de:4f:a8:e9: e9:cb:81:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L9OMPTCvFKpXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NjQwZGQ4ZWItZThhYy00NWM4LTlhYWQtNDg3MGQ0MjAyNjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9g/irbhFBv9Xb/nMewz7s1XXGkuyV1442qj 1yv63j1kqXAAokF0VUKxdterEHQ96ZF3xg9NBFhvuq9fXzgk3cAn321qz6TVrks1 ymwEsywW3Ij63+wNc8+QLMh5RThDKQpwlG8U45fZ41qxZK11z4MsBsYHq91rqRCq nUxPs8YSVK6kYO8aEodyTFHG532+jFvGjpESZ4Fd5RYPpUnkzAYqOCgWBic4moN/ e/F+N9S0FMT3seYRjM1Ff9NgEYntMKa5JhWSXCNLDbEqIF4ujYa9uESJzCqSWgVs eEkPV2xShyU3YPlbCQHACL/ZYOPf8WWm42tV3buWFZovLtCqgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjcAQOqAzJdsxa+2TIwdvWCIjK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzNmNThhODctODFmNi0z ZTVhLThmZGQtMDA5N2VjMTk2ZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpGmPAyHuHUez65fo0lMaClYWNZZEzOHQzkjroFKhClqxaOa3D53f/Y QQUF+/lvyVC2SB++Q2FnW7sEjjqPsi/X36WJOENycp3AnieYsdDSpy9P+MvdrVnd s8AJOo58viU1hzcypBDCwxyGe9Gft+IpM+YyN05QEiC4Z7fa8ZK5l6ZjsYTxvCFa 11vAG+ts9/4O/XUVx6/1ZZ6k75uMEx68HS1KMOLnwgAGvmMLosAsxvgKx5Pv0tAT jc6613TxTts/+ZO9LKmpl2LoUEw67xjUXumUpZgTmzTEXH/m9iQiOrg2D+qayt1Z sMZEy86ph3nL9swcRzQ83k+o6enLgaA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:44 2025 by rpki-client