$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92eb0590-3e0e-3d16-bd14-02f1e2f5b3c0.roa File: 92eb0590-3e0e-3d16-bd14-02f1e2f5b3c0.roa (raw, json) Hash identifier: E68XOBGkIAXwt3YAv6DixsSeqXfxyNOquHe0e/Z9MOI= Subject key identifier: 1E:00:B9:61:61:ED:53:68:C5:A2:82:6D:0B:B7:DA:41:23:11:37:1B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F376AB0C93C1F7ECF6DB280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92eb0590-3e0e-3d16-bd14-02f1e2f5b3c0.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 108.177.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:6a:b0:c9:3c:1f:7e:cf:6d:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=72dce078-00c7-4a7e-8d9f-34061c4119e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1a:d5:c6:bd:ca:8f:01:11:f7:08:14:91:24: 56:b7:c0:c0:0e:b5:ae:2e:d4:56:c0:d0:48:0c:26: 69:35:4a:08:a1:e8:ee:e7:aa:7d:04:50:7a:08:ca: 0e:c8:eb:88:f3:95:51:ec:fa:83:a7:ee:69:02:05: 99:57:53:74:2c:8f:f7:bf:f9:7a:3a:8e:55:92:5a: 87:4f:03:dd:03:02:72:44:8c:ed:54:a2:9c:d8:da: a7:e5:19:b3:9d:7b:71:fc:de:bc:58:f8:cd:4d:7d: 93:e1:b9:e7:df:ab:78:45:97:61:1d:86:51:24:b7: 4e:a6:07:ba:bc:ca:11:05:94:7b:92:09:6c:6a:48: e0:39:f8:50:7f:2b:b6:d9:6b:30:81:43:38:e7:76: 9f:2e:3c:21:02:d7:0c:df:98:8a:d3:5b:bb:6b:6c: 46:36:8b:81:81:ea:15:dc:63:a4:28:7a:b5:40:9c: 2d:1e:ef:a8:92:64:c8:14:47:70:ee:62:71:da:77: a2:f9:c4:17:59:c4:fe:50:1a:ef:26:11:63:23:33: 74:21:f1:58:c3:f5:25:83:07:f5:57:19:08:e7:dc: 48:24:ea:bb:90:0b:91:96:7b:39:1e:38:96:ad:1c: f3:c2:f5:b0:12:0e:4a:e9:7e:ee:2a:32:53:02:2b: 19:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:00:B9:61:61:ED:53:68:C5:A2:82:6D:0B:B7:DA:41:23:11:37:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92eb0590-3e0e-3d16-bd14-02f1e2f5b3c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:77:ce:83:51:9e:d1:78:1e:26:c2:61:92:5c:f7:93:53:04: d1:b4:66:ea:7c:37:2e:b0:1e:9f:91:26:37:a3:00:bd:aa:e5: 2b:fe:28:41:85:a4:5d:11:6e:d2:5b:24:58:f4:75:f2:92:cf: 16:f0:b6:59:da:24:53:f3:79:6c:01:46:6e:6a:c8:ad:62:ce: 3c:94:a4:51:d1:a7:3f:39:86:74:97:9f:eb:af:1b:7b:a8:43: 39:78:ab:8f:c4:80:54:a7:21:06:96:8e:94:74:6b:47:42:53: db:54:0e:da:4d:33:ac:b2:72:27:5b:59:f8:09:06:ce:de:92: 35:d8:1d:c9:ea:94:f8:58:27:28:1e:4c:ec:08:4d:b1:84:9a: 94:69:4d:62:71:87:4a:20:c0:40:00:5a:ad:7b:e7:7b:9a:fd: 3b:f9:97:02:ee:77:0a:a8:0f:60:85:ce:5d:fb:1c:5f:e9:83: 21:8d:4b:2e:f3:e2:0d:c3:cf:ab:2d:82:44:6c:fd:55:34:e0: 8c:f2:d3:9c:71:f7:d5:26:d9:01:f7:0e:ac:83:a6:00:84:81: 97:e9:a0:f2:02:44:d5:35:c9:5a:fa:bc:5d:cc:d0:bd:62:83: 9c:91:e9:3f:ee:20:e1:c1:09:1f:a8:54:f2:c4:b0:41:62:b2: 1f:d3:30:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2qwyTwffs9tsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NzJkY2UwNzgtMDBjNy00YTdlLThkOWYtMzQwNjFjNDExOWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRrVxr3KjwER9wgUkSRWt8DADrWuLtRWwNBI DCZpNUoIoeju56p9BFB6CMoOyOuI85VR7PqDp+5pAgWZV1N0LI/3v/l6Oo5VklqH TwPdAwJyRIztVKKc2Nqn5RmznXtx/N68WPjNTX2T4bnn36t4RZdhHYZRJLdOpge6 vMoRBZR7kglsakjgOfhQfyu22WswgUM453afLjwhAtcM35iK01u7a2xGNouBgeoV 3GOkKHq1QJwtHu+okmTIFEdw7mJx2nei+cQXWcT+UBrvJhFjIzN0IfFYw/Ulgwf1 VxkI59xIJOq7kAuRlns5HjiWrRzzwvWwEg5K6X7uKjJTAisZtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4AuWFh7VNoxaKCbQu32kEjETcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTJlYjA1OTAtM2UwZS0z ZDE2LWJkMTQtMDJmMWUyZjViM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA93zoNRntF4HibCYZJc95NTBNG0Zup8Ny6wHp+RJjejAL2q5Sv+KEGF pF0RbtJbJFj0dfKSzxbwtlnaJFPzeWwBRm5qyK1izjyUpFHRpz85hnSXn+uvG3uo Qzl4q4/EgFSnIQaWjpR0a0dCU9tUDtpNM6yycidbWfgJBs7ekjXYHcnqlPhYJyge TOwITbGEmpRpTWJxh0ogwEAAWq1753ua/Tv5lwLudwqoD2CFzl37HF/pgyGNSy7z 4g3Dz6stgkRs/VU04Izy05xx99Um2QH3DqyDpgCEgZfpoPICRNU1yVr6vF3M0L1i g5yR6T/uIOHBCR+oVPLEsEFish/TMKE= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:33 2025 by rpki-client