$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa File: 4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa (raw, json) Hash identifier: OnvW7ejaTHwN+8NUDuKBsB8pIMrKbJdPx1h1ARKpv+w= Subject key identifier: C0:E7:C1:FC:02:F5:9F:5A:CB:84:5E:3D:73:90:23:EE:97:8E:EB:D0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F375C02654672CAC7F9D680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.170.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:5c:02:65:46:72:ca:c7:f9:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=ad3a4395-9eaf-43f1-94b2-73a80876806e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:7e:89:20:52:7f:5a:68:d8:01:e0:82:e6: 85:45:a8:e3:ea:65:f5:79:b3:cb:eb:6f:a6:b9:1e: c0:65:b7:61:96:f4:18:ea:81:9b:f6:78:6a:70:04: 5f:43:34:f0:6a:01:5f:52:ed:a5:ae:66:0c:bd:cc: 91:11:01:58:18:5f:2f:d9:f1:cc:64:9f:7d:62:ee: 31:78:14:eb:f5:f1:c1:fd:fd:88:dc:d8:39:86:1f: ab:32:32:f5:60:ec:38:d3:62:68:f0:29:e9:dd:37: 66:87:8d:a9:c3:74:a7:fd:d3:ff:40:05:54:0b:c1: e4:ce:25:90:51:6e:44:4f:ac:5c:94:a6:08:e4:a3: 1a:7d:ad:9e:af:dd:7e:8a:c3:ab:58:3b:26:bd:d5: 0f:c4:76:f4:d6:f1:7f:ca:7e:14:3f:60:d6:47:34: fc:d7:3a:1f:78:be:1b:d0:92:95:45:4c:8a:b1:6e: 9b:34:5e:11:1c:1f:83:31:8f:72:f6:73:18:f0:cf: 50:4c:30:81:c2:2f:65:47:32:ed:d9:f5:eb:30:5c: 91:44:eb:8f:28:86:12:8c:82:eb:cd:9d:12:bf:9c: aa:58:4c:f1:44:a6:37:ac:97:df:86:4a:3b:cb:a2: de:e1:24:9c:c6:2f:cd:2d:1e:ed:6f:27:13:e5:5b: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E7:C1:FC:02:F5:9F:5A:CB:84:5E:3D:73:90:23:EE:97:8E:EB:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c3:80:40:01:5c:59:8c:d3:5c:37:74:c3:b4:c0:96:5e:14: d5:17:e1:da:e1:e7:57:6e:98:f5:80:50:30:a1:70:5c:bb:63: 65:07:7e:cb:b7:39:8b:21:d4:fb:d7:61:b1:13:66:b5:82:91: f8:16:7d:30:f8:05:c7:07:8b:82:0d:e0:8d:9e:09:d9:49:55: 57:36:75:6f:53:91:81:f3:dd:02:6c:f6:e0:60:07:bf:74:ca: 2b:59:d1:bb:25:02:66:1c:b8:7c:78:08:e0:c6:d1:dc:59:72: 79:ab:a7:66:ce:bb:df:89:8e:ee:f9:6a:e9:05:db:3a:d7:b7: 6c:89:ff:be:25:33:1a:c2:0e:06:2b:eb:60:41:e3:21:f1:d9: 96:1a:f3:68:bf:d8:9e:aa:39:9b:c8:c7:cb:da:c3:42:62:a4: 84:56:83:a7:24:14:b4:85:91:1d:dc:03:84:ca:5b:34:0f:b7: 0a:1d:10:ab:68:2b:0d:3d:e8:bd:cd:c4:95:4e:8c:ba:8e:b2: ca:90:b2:d1:90:a5:57:bb:0b:a2:f2:15:3c:09:76:40:2d:3a: e5:63:05:67:46:de:9c:ae:b3:21:e4:0c:36:b1:06:5c:57:b9: e8:18:24:6b:17:fd:64:8d:64:04:4b:a8:8d:9a:d1:33:3b:22: b9:31:bb:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN1wCZUZyysf51oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YWQzYTQzOTUtOWVhZi00M2YxLTk0YjItNzNhODA4NzY4MDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRp+iSBSf1po2AHgguaFRajj6mX1ebPL62+m uR7AZbdhlvQY6oGb9nhqcARfQzTwagFfUu2lrmYMvcyREQFYGF8v2fHMZJ99Yu4x eBTr9fHB/f2I3Ng5hh+rMjL1YOw402Jo8Cnp3Tdmh42pw3Sn/dP/QAVUC8HkziWQ UW5ET6xclKYI5KMafa2er91+isOrWDsmvdUPxHb01vF/yn4UP2DWRzT81zofeL4b 0JKVRUyKsW6bNF4RHB+DMY9y9nMY8M9QTDCBwi9lRzLt2fXrMFyRROuPKIYSjILr zZ0Sv5yqWEzxRKY3rJffhko7y6Le4SScxi/NLR7tbycT5VtGjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDnwfwC9Z9ay4RePXOQI+6XjuvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGQ1ZmIyMzQtNGIwZC0z NzViLTg4MzAtZjZhNTUwYmExYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDDgEABXFmM01w3dMO0wJZeFNUX4drh51dumPWAUDChcFy7Y2UHfsu3 OYsh1PvXYbETZrWCkfgWfTD4BccHi4IN4I2eCdlJVVc2dW9TkYHz3QJs9uBgB790 yitZ0bslAmYcuHx4CODG0dxZcnmrp2bOu9+Jju75aukF2zrXt2yJ/74lMxrCDgYr 62BB4yHx2ZYa82i/2J6qOZvIx8vaw0JipIRWg6ckFLSFkR3cA4TKWzQPtwodEKto Kw096L3NxJVOjLqOssqQstGQpVe7C6LyFTwJdkAtOuVjBWdG3pyusyHkDDaxBlxX uegYJGsX/WSNZARLqI2a0TM7Irkxu0w= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:09 2025 by rpki-client