$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa File: 5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa (raw, json) Hash identifier: ndSsvkNyNy3nkEO4F0gpA5QpdS8STEUmBzrVIT/3vew= Subject key identifier: F3:55:AE:A1:7A:CE:0F:28:0A:79:EC:F3:54:93:CD:CC:04:E2:F7:6E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F37678434DA646D5E81DA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 108.177.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:67:84:34:da:64:6d:5e:81:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=ce79bc45-3d34-437f-8332-4628a6a09832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:11:99:12:70:87:8b:33:85:80:4a:ce:d4:fd: 28:f6:09:9e:2e:8e:65:61:35:fa:ed:9f:f6:71:c2: e9:16:ed:12:db:f3:54:09:7c:6d:1e:69:ac:d5:67: 6f:b4:b7:84:90:b0:a0:e4:7d:59:c5:9f:72:7a:8c: 20:58:34:4f:a5:db:5b:b6:cc:f4:38:28:9f:4f:5e: fc:20:79:4f:8e:e9:fd:4c:5b:b8:6f:8e:b9:7e:f0: 0e:4c:f7:71:57:4e:90:0e:bd:3b:03:c1:fd:36:8b: 6b:4b:d9:cf:c9:b4:43:59:fd:91:42:33:91:df:15: dc:02:03:d4:08:0b:58:f5:63:ff:7f:1b:61:8a:7a: f2:02:51:b4:12:be:16:11:1f:a1:f5:fd:d0:37:cd: da:8f:43:23:d2:75:cb:ec:67:54:2a:f6:89:2a:ce: ad:c5:79:5c:c2:68:92:84:3f:37:7b:14:67:ba:61: 57:05:9b:90:57:44:14:1a:08:1d:57:0f:69:88:1d: 2b:ef:f8:90:e0:57:f1:ae:71:3c:39:a7:24:a0:d6: 1d:62:30:e2:3b:55:07:60:c9:db:d3:2c:fc:22:35: ab:aa:34:3b:b4:ad:d9:c0:d6:63:43:87:ff:d0:76: 80:10:79:d9:f4:00:ff:f3:bb:50:e9:7a:a8:f0:55: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:55:AE:A1:7A:CE:0F:28:0A:79:EC:F3:54:93:CD:CC:04:E2:F7:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:54:f3:52:67:33:04:2d:b9:60:5d:f5:63:54:e6:92:10:ae: 67:46:85:78:3d:c3:9e:1f:04:69:c1:c7:39:8d:fa:b3:65:32: 55:08:2a:7c:64:1a:e1:8a:22:44:d9:1d:cb:b8:2a:2e:0e:7f: 94:19:c9:5f:1f:22:b5:25:12:58:46:e5:67:fd:cc:ed:66:14: c3:4f:4f:7c:21:8b:09:0e:b0:10:50:75:fa:a9:8c:b5:20:ba: 5a:5f:91:d1:2c:c7:2b:92:5e:98:6b:a2:48:4c:34:a7:5f:ee: 0a:ce:86:5d:db:d9:b5:ed:a5:d5:aa:0d:07:72:bb:21:30:45: 98:86:28:47:6f:ca:6a:66:36:ef:74:9f:c8:a1:4e:61:cb:0f: 41:e1:e5:5f:13:de:88:a4:ce:37:e9:8a:46:75:06:7b:bf:88: 6c:07:e7:e1:f0:f5:dc:5e:2c:09:ac:5c:5f:74:4d:38:e8:60: b2:13:d6:af:3e:d5:40:d9:e5:18:36:22:bf:56:45:3c:76:45: 94:8a:46:8c:9c:cc:1d:e2:70:2a:ff:8e:12:66:70:97:69:db: 4e:84:92:3f:b1:4a:b3:7e:91:fd:57:bf:83:18:d8:16:28:08: 55:12:25:0e:81:ee:11:60:d7:6a:c2:f0:10:6c:74:4b:4a:f8: d3:ad:8d:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2eENNpkbV6B2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Y2U3OWJjNDUtM2QzNC00MzdmLTgzMzItNDYyOGE2YTA5ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhGZEnCHizOFgErO1P0o9gmeLo5lYTX67Z/2 ccLpFu0S2/NUCXxtHmms1WdvtLeEkLCg5H1ZxZ9yeowgWDRPpdtbtsz0OCifT178 IHlPjun9TFu4b465fvAOTPdxV06QDr07A8H9NotrS9nPybRDWf2RQjOR3xXcAgPU CAtY9WP/fxthinryAlG0Er4WER+h9f3QN83aj0Mj0nXL7GdUKvaJKs6txXlcwmiS hD83exRnumFXBZuQV0QUGggdVw9piB0r7/iQ4FfxrnE8OackoNYdYjDiO1UHYMnb 0yz8IjWrqjQ7tK3ZwNZjQ4f/0HaAEHnZ9AD/87tQ6Xqo8FVefQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNVrqF6zg8oCnns81STzcwE4vduMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTM2OWZjZGItODIzYS0z ZjdhLWFjYTUtMWNhYmUwMWYxZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtU81JnMwQtuWBd9WNU5pIQrmdGhXg9w54fBGnBxzmN+rNlMlUIKnxk GuGKIkTZHcu4Ki4Of5QZyV8fIrUlElhG5Wf9zO1mFMNPT3whiwkOsBBQdfqpjLUg ulpfkdEsxyuSXphrokhMNKdf7grOhl3b2bXtpdWqDQdyuyEwRZiGKEdvympmNu90 n8ihTmHLD0Hh5V8T3oikzjfpikZ1Bnu/iGwH5+Hw9dxeLAmsXF90TTjoYLIT1q8+ 1UDZ5Rg2Ir9WRTx2RZSKRoyczB3icCr/jhJmcJdp206Ekj+xSrN+kf1Xv4MY2BYo CFUSJQ6B7hFg12rC8BBsdEtK+NOtjbc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:07 2025 by rpki-client