$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa File: 5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa (raw, json) Hash identifier: XILHj2L7EZXmE1GJvOiV0Wgt7PdJ+bkkm7q3sGKItj0= Subject key identifier: 64:70:FC:05:BE:C5:E3:46:A2:9A:1F:F8:D6:16:3E:77:8B:EE:C9:CA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F3771A25928D41F8BEE5BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.170.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:71:a2:59:28:d4:1f:8b:ee:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=f788396f-eb58-45fb-b951-795258ec649c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:56:26:01:72:d9:96:3a:b3:de:72:28:d6: 25:b7:ad:0b:85:20:28:b2:d5:53:5f:c9:be:b1:1e: c1:ab:89:10:82:94:e2:47:97:0b:46:ff:b9:16:6e: 66:2c:ff:12:54:bb:78:e8:36:8b:5d:8d:33:fe:ee: 5a:37:d7:2d:49:ae:79:1b:21:e4:25:3a:57:6a:f0: 9e:b8:74:eb:f5:46:cc:75:85:2c:0e:e0:16:34:cd: f1:1f:1f:ed:66:55:f0:a4:91:f7:9a:3c:76:10:e1: 68:e2:62:cf:70:13:c4:a4:1b:97:14:3c:be:81:8c: 58:82:d6:3d:ea:50:04:f9:2e:cb:fa:aa:2a:bb:0c: 05:a4:d7:b5:63:73:be:df:0d:28:b2:88:dc:34:fe: aa:66:d4:e8:91:d6:ca:c3:3d:78:d7:4d:c5:aa:77: 06:52:c5:9b:f2:93:cb:12:19:89:0d:7a:20:4b:09: 04:22:dd:b6:9e:83:51:91:fd:13:dc:b2:44:36:5b: d4:7a:66:5c:f8:f7:50:9b:8f:3c:fd:83:b5:6a:ff: d2:4a:f8:8a:a9:77:31:60:d3:61:05:7c:80:66:63: 14:be:41:fe:11:52:81:ba:3e:b9:d3:4e:30:3a:cf: 93:e3:19:70:5e:97:bd:99:2f:de:33:c3:25:66:bf: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:70:FC:05:BE:C5:E3:46:A2:9A:1F:F8:D6:16:3E:77:8B:EE:C9:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:64:51:fa:ae:f6:8b:04:26:74:f7:44:f4:8d:74:d7:7e:94: 3a:32:a3:10:60:44:f4:d3:a9:1e:09:42:1c:98:7d:4d:23:0d: d8:6b:6e:1b:ab:d2:c4:79:a9:fa:e3:d3:0d:5e:23:8d:04:11: 99:8b:1d:12:15:c2:a8:e5:a5:e2:b3:51:a6:b7:0d:97:83:8d: d0:6f:8c:30:0f:e1:4d:6c:b5:de:d9:3c:b3:9e:cc:16:dd:e3: 28:25:8a:86:ff:bd:34:bf:42:42:ec:d1:2b:b5:3b:ee:cd:2d: 20:2c:79:fe:1f:de:65:bd:1e:84:ce:9a:c8:54:31:16:79:d1: ad:6b:5a:2c:54:8e:d2:19:0e:61:98:22:57:11:f9:66:66:13: 53:69:5b:dd:15:aa:c0:20:7f:d1:d3:0c:b8:18:05:c4:2b:dd: 28:1b:fb:04:d2:bb:98:b6:22:b6:4b:ad:60:8e:a8:48:b2:3b: 83:75:9b:08:9d:b7:bb:cd:c5:4a:44:ba:89:4b:bc:de:3e:bc: aa:74:3f:96:72:0e:0a:d6:88:3d:63:8e:4a:12:0f:47:f2:4b: f5:a4:f7:82:a3:ea:ab:7b:58:88:3c:4d:9f:21:e3:c0:84:17: ab:f0:b1:98:96:30:d8:d2:43:76:25:15:8c:c8:b1:b3:32:9d: 16:fb:0b:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3GiWSjUH4vuW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Zjc4ODM5NmYtZWI1OC00NWZiLWI5NTEtNzk1MjU4ZWM2NDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq5WJgFy2ZY6s95yKNYlt60LhSAostVTX8m+ sR7Bq4kQgpTiR5cLRv+5Fm5mLP8SVLt46DaLXY0z/u5aN9ctSa55GyHkJTpXavCe uHTr9UbMdYUsDuAWNM3xHx/tZlXwpJH3mjx2EOFo4mLPcBPEpBuXFDy+gYxYgtY9 6lAE+S7L+qoquwwFpNe1Y3O+3w0osojcNP6qZtTokdbKwz14103FqncGUsWb8pPL EhmJDXogSwkEIt22noNRkf0T3LJENlvUemZc+PdQm488/YO1av/SSviKqXcxYNNh BXyAZmMUvkH+EVKBuj65004wOs+T4xlwXpe9mS/eM8MlZr/r8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRw/AW+xeNGopof+NYWPneL7snKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWRlZGIwMjctMmNkOS0z ZjdkLWJkZjktMDdkM2NmNTk5ZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKraMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9kUfqu9osEJnT3RPSNdNd+lDoyoxBgRPTTqR4JQhyYfU0jDdhrbhur 0sR5qfrj0w1eI40EEZmLHRIVwqjlpeKzUaa3DZeDjdBvjDAP4U1std7ZPLOezBbd 4ygliob/vTS/QkLs0Su1O+7NLSAsef4f3mW9HoTOmshUMRZ50a1rWixUjtIZDmGY IlcR+WZmE1NpW90VqsAgf9HTDLgYBcQr3Sgb+wTSu5i2IrZLrWCOqEiyO4N1mwid t7vNxUpEuolLvN4+vKp0P5ZyDgrWiD1jjkoSD0fyS/Wk94Kj6qt7WIg8TZ8h48CE F6vwsZiWMNjSQ3YlFYzIsbMynRb7C6Y= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:58 2025 by rpki-client