$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa File: 3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa (raw, json) Hash identifier: p1tlvZ9VZ9lraLkISxJRhWy0KqNBcKiSe5mB+7ms5s0= Subject key identifier: C5:57:CE:5E:35:6A:CF:92:10:F3:F0:5D:37:52:38:EE:CD:FC:DA:4F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F373343D38E13428BA3E340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 108.177.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:33:43:d3:8e:13:42:8b:a3:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=d15e6b9a-6bac-4088-ae4b-b6398bbdb17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:51:04:03:00:98:5c:e1:a5:47:80:24:29:4b: 72:fb:52:e7:4a:ba:7a:31:65:d3:f1:9f:c9:56:c7: 29:28:60:bc:1f:ec:37:83:e1:dd:d8:cf:b2:36:2c: 0d:91:1e:63:e0:60:a1:4f:a8:03:ca:11:b2:aa:04: 7e:8d:d4:b9:d6:f2:6c:0d:bc:8a:2c:4e:9d:22:fd: 82:cf:ce:4e:c5:2b:30:e1:0b:db:41:83:3e:6b:10: e4:ae:5a:41:d6:6d:c9:b9:47:18:68:83:77:fd:b8: 4e:62:fa:f5:3b:73:c8:1b:78:d9:63:4c:3e:10:2b: 05:bc:c5:5d:9f:2a:a2:7b:ff:2b:0d:f9:69:b7:a4: 73:b2:e6:03:77:7b:87:84:5c:44:a8:c5:9c:e8:e6: 05:a1:00:85:28:05:eb:3a:70:87:34:1f:e3:70:c6: ba:ff:fc:f1:d2:93:73:ef:4f:87:05:2a:f0:ae:6e: a9:15:34:6b:5b:f3:f2:30:ec:2c:5b:cd:20:21:b9: bf:2e:fb:ce:37:5f:e5:52:b5:a6:d3:5f:d4:f9:c7: 7a:d5:c9:8a:91:c6:a1:5a:d7:76:e1:b3:cd:85:4d: 9a:1e:7e:75:f4:f7:2f:6e:ae:40:44:5e:e9:0a:30: e4:cb:e2:be:76:ce:77:62:cf:28:ca:0d:83:33:4c: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:57:CE:5E:35:6A:CF:92:10:F3:F0:5D:37:52:38:EE:CD:FC:DA:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:06:0c:0d:f2:59:44:53:80:62:c7:3b:f3:4b:21:1b:a6:2c: b0:85:fe:b9:1c:97:c0:23:9e:bd:56:58:ca:af:74:0e:24:63: 16:75:3d:ad:c9:a8:57:57:fe:0b:ba:2a:b7:02:e7:15:5d:e4: 1a:8c:f3:b0:24:0f:8d:a2:69:72:b4:85:e7:79:a1:74:96:9b: 1a:9d:3e:ae:93:0a:c2:18:04:9d:7c:b0:31:4b:2c:db:2c:86: f0:f5:45:93:fa:1a:bd:e2:27:a2:ba:96:bc:e7:e8:46:c9:89: ec:ff:2e:2e:e2:53:81:10:5e:02:eb:c4:36:2f:69:c6:9d:78: 62:e7:f4:c4:03:04:cd:72:04:fb:89:ed:2e:d7:4e:29:e8:0d: e9:e2:2b:ec:a5:d9:37:d3:fc:ea:e4:b8:b5:73:79:32:14:58: fa:d8:aa:de:59:9b:4f:96:be:8c:82:d5:03:96:d7:48:7e:5a: 58:ea:c1:18:ea:bb:57:f6:a8:26:41:e7:cc:44:7f:dc:6e:c1: 43:3a:b5:7c:83:bf:b9:29:99:42:72:44:cf:77:39:e8:1d:03: 0d:2d:cd:c5:de:c1:91:b2:c7:77:71:a8:eb:76:e5:c9:89:5a: d5:b8:0a:d4:f7:43:e0:87:69:7d:79:50:95:4e:51:57:7e:ca: f4:ce:14:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzND044TQouj40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDE1ZTZiOWEtNmJhYy00MDg4LWFlNGItYjYzOThiYmRiMTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1EEAwCYXOGlR4AkKUty+1LnSrp6MWXT8Z/J VscpKGC8H+w3g+Hd2M+yNiwNkR5j4GChT6gDyhGyqgR+jdS51vJsDbyKLE6dIv2C z85OxSsw4QvbQYM+axDkrlpB1m3JuUcYaIN3/bhOYvr1O3PIG3jZY0w+ECsFvMVd nyqie/8rDflpt6RzsuYDd3uHhFxEqMWc6OYFoQCFKAXrOnCHNB/jcMa6//zx0pNz 70+HBSrwrm6pFTRrW/PyMOwsW80gIbm/LvvON1/lUrWm01/U+cd61cmKkcahWtd2 4bPNhU2aHn519Pcvbq5ARF7pCjDky+K+ds53Ys8oyg2DM0zcgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVXzl41as+SEPPwXTdSOO7N/NpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzkwN2E0YzEtMmFhYi0z YWI5LWIzYWUtOWQxZjcwNGVlNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMGDA3yWURTgGLHO/NLIRumLLCF/rkcl8Ajnr1WWMqvdA4kYxZ1Pa3J qFdX/gu6KrcC5xVd5BqM87AkD42iaXK0hed5oXSWmxqdPq6TCsIYBJ18sDFLLNss hvD1RZP6Gr3iJ6K6lrzn6EbJiez/Li7iU4EQXgLrxDYvacadeGLn9MQDBM1yBPuJ 7S7XTinoDeniK+yl2TfT/OrkuLVzeTIUWPrYqt5Zm0+WvoyC1QOW10h+WljqwRjq u1f2qCZB58xEf9xuwUM6tXyDv7kpmUJyRM93OegdAw0tzcXewZGyx3dxqOt25cmJ WtW4CtT3Q+CHaX15UJVOUVd+yvTOFGA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:13 2025 by rpki-client