$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7077a281-f69a-3357-b654-2032d3ec3de2.roa File: 7077a281-f69a-3357-b654-2032d3ec3de2.roa (raw, json) Hash identifier: JFYpRhrEmJUqljOKRprp8qYKM6tK66dQbXxCPoNp30w= Subject key identifier: 53:B7:7D:C0:4C:5F:6A:C5:D1:11:2A:B4:21:6A:46:F2:BF:35:40:06 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F373D4DF21699E4C4F7E680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7077a281-f69a-3357-b654-2032d3ec3de2.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.170.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3d:4d:f2:16:99:e4:c4:f7:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=025d0253-5978-4428-bd24-477e936a20e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:5d:d2:2d:73:42:39:41:34:30:d4:f6:73: 70:ea:68:f9:f5:e8:1c:50:22:9c:17:0e:33:e8:e9: ca:31:a4:b0:e7:e3:51:1d:f2:57:41:f0:1e:71:af: 98:46:b0:a5:7f:06:13:9d:56:b3:e7:89:60:c4:2e: 65:5d:bb:f0:eb:da:65:8b:5c:7f:25:0f:c4:ae:d0: 5f:1f:45:74:ba:5a:b0:52:8a:17:6d:27:1d:1c:3f: f1:8e:8a:82:1a:d0:02:5d:b9:51:40:f3:fc:b2:40: 43:8e:81:1d:fa:db:63:65:f7:31:10:56:da:df:f4: a0:6c:69:06:ab:5f:69:f9:fa:18:9a:da:c7:e6:6e: 6d:ed:b2:3c:9f:fa:16:fa:24:e2:b0:ea:b0:d6:0d: 77:f8:f1:3f:3b:40:c7:f4:8b:56:db:86:3a:b1:eb: bc:25:1b:c8:76:8a:d6:84:5f:8d:48:30:47:9c:2a: 77:d5:78:a5:f4:bd:6e:33:4b:8f:44:67:06:b2:d3: 87:19:9a:b8:19:82:0c:12:e0:d3:bd:d6:1c:12:e5: 2d:d9:ef:13:2c:0e:a5:a4:5b:8b:08:03:b2:d8:ab: af:fe:63:11:f0:ee:6c:9b:4d:fe:04:7f:3b:e5:fc: bc:ba:77:16:26:ed:12:5b:2c:b5:e1:d2:c1:d0:22: 24:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B7:7D:C0:4C:5F:6A:C5:D1:11:2A:B4:21:6A:46:F2:BF:35:40:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7077a281-f69a-3357-b654-2032d3ec3de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:2d:b3:6a:b5:4a:32:2a:39:8d:eb:a4:33:5b:2c:cd:16:d5: ac:b1:06:ec:79:a3:c6:98:22:86:cc:30:7c:4e:c3:80:e1:eb: f5:2c:ca:b3:c2:61:21:1f:7d:d2:c2:0f:2d:3e:ae:42:e0:77: 5c:b5:bc:ff:b9:fb:19:58:66:c8:e1:5a:91:2b:bd:b8:17:c5: 5b:e4:9e:b4:6a:60:a1:50:0e:b5:44:67:20:2c:13:cc:3b:62: a6:8b:4f:ec:95:63:5e:04:54:25:62:00:07:18:0f:fb:7d:63: 29:be:fe:7d:f5:d4:fc:80:cc:19:05:71:eb:58:2d:07:61:3f: 18:55:b9:94:bd:a1:dd:fe:a3:b0:e3:b5:48:61:27:ba:ff:93: 08:cf:68:58:48:74:96:14:0a:34:dc:d4:94:36:00:18:30:8c: df:b4:3e:07:b6:28:67:bf:9f:7a:bf:41:eb:34:34:d4:bd:b8: e8:88:54:95:bb:22:74:f5:d6:57:d6:55:7d:0d:af:c1:6d:fb: 9b:c8:b7:77:c4:a7:75:b9:ca:97:90:4c:45:5c:3c:a4:12:fa: 19:ab:33:35:d8:0c:04:6a:5e:ce:2c:9b:f1:81:1b:51:76:e3: 6f:26:18:7a:6c:a4:3b:30:9f:b9:6f:5f:3b:11:d8:b8:a9:2b: ce:57:bf:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNz1N8haZ5MT35oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MDI1ZDAyNTMtNTk3OC00NDI4LWJkMjQtNDc3ZTkzNmEyMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH1d0i1zQjlBNDDU9nNw6mj59egcUCKcFw4z 6OnKMaSw5+NRHfJXQfAeca+YRrClfwYTnVaz54lgxC5lXbvw69pli1x/JQ/ErtBf H0V0ulqwUooXbScdHD/xjoqCGtACXblRQPP8skBDjoEd+ttjZfcxEFba3/SgbGkG q19p+foYmtrH5m5t7bI8n/oW+iTisOqw1g13+PE/O0DH9ItW24Y6seu8JRvIdorW hF+NSDBHnCp31Xil9L1uM0uPRGcGstOHGZq4GYIMEuDTvdYcEuUt2e8TLA6lpFuL CAOy2Kuv/mMR8O5sm03+BH875fy8uncWJu0SWyy14dLB0CIknQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO3fcBMX2rF0REqtCFqRvK/NUAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA3N2EyODEtZjY5YS0z MzU3LWI2NTQtMjAzMmQzZWMzZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4ts2q1SjIqOY3rpDNbLM0W1ayxBux5o8aYIobMMHxOw4Dh6/UsyrPC YSEffdLCDy0+rkLgd1y1vP+5+xlYZsjhWpErvbgXxVvknrRqYKFQDrVEZyAsE8w7 YqaLT+yVY14EVCViAAcYD/t9Yym+/n311PyAzBkFcetYLQdhPxhVuZS9od3+o7Dj tUhhJ7r/kwjPaFhIdJYUCjTc1JQ2ABgwjN+0Pge2KGe/n3q/Qes0NNS9uOiIVJW7 InT11lfWVX0Nr8Ft+5vIt3fEp3W5ypeQTEVcPKQS+hmrMzXYDARqXs4sm/GBG1F2 428mGHpspDswn7lvXzsR2LipK85Xv8k= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:21 2025 by rpki-client