$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b0497cb-ea60-3bc1-9905-1e838d3add64.roa File: 9b0497cb-ea60-3bc1-9905-1e838d3add64.roa (raw, json) Hash identifier: XVT7fgpYzl2ojIkyvUi0ccOMCNMYsFh0SsBLF1bK960= Subject key identifier: 73:72:93:BC:DB:26:52:B7:37:0F:93:AC:DF:96:58:FB:5A:A4:5F:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F373A4637B6F20A04926680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b0497cb-ea60-3bc1-9905-1e838d3add64.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.170.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3a:46:37:b6:f2:0a:04:92:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=c88eb78f-a3df-4956-aae8-e06397a1b3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a2:32:af:89:67:2f:45:41:c3:38:ec:e1:e6: 00:0a:7a:81:4d:93:ad:05:62:d7:2c:db:2c:bd:a8: db:ed:9b:19:6f:2a:57:d6:04:15:4f:3b:27:f7:80: 43:1c:06:65:62:8a:fa:ba:35:ff:45:11:91:54:08: e3:2f:28:41:ea:64:c0:eb:b0:7c:5f:e6:97:8f:96: 66:d2:fe:38:72:93:22:1a:41:03:15:00:45:ca:75: e0:e0:fc:38:a3:66:12:0f:41:d0:31:db:e4:73:77: 15:1d:84:a5:c8:2a:eb:de:30:c9:51:3e:af:ba:f8: 20:2a:d6:47:7b:24:ac:d8:cd:93:8b:1b:eb:7c:6e: bc:1a:7d:b0:98:b9:60:25:09:f1:02:24:7f:6d:05: 03:e1:25:3c:06:a0:6b:6a:a8:a2:c9:0b:4a:4a:19: 7c:0f:cb:6a:93:fc:2b:52:2f:09:e4:81:f1:26:30: 84:10:79:86:7e:f4:ee:38:4e:d4:0d:32:8c:31:8e: 5a:69:5a:77:3c:c4:2a:21:20:ac:87:57:3d:17:f7: 2e:a7:14:17:cf:41:63:ec:f2:ff:e0:71:1a:ff:9d: a9:86:89:9f:bd:ba:90:3d:39:42:ac:7a:d7:aa:e8: b8:a6:5c:d0:e7:d8:be:ec:9c:0e:ec:6f:6f:73:51: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:72:93:BC:DB:26:52:B7:37:0F:93:AC:DF:96:58:FB:5A:A4:5F:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b0497cb-ea60-3bc1-9905-1e838d3add64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:74:9c:55:e4:89:cd:7e:28:a2:46:65:da:01:bc:e4:f8:99: e5:b8:ec:e8:5e:a5:6f:74:cf:f4:bf:00:c3:4d:05:b5:94:6f: f2:9f:16:8b:a4:c8:75:d3:63:9c:fe:5e:61:99:f4:55:c7:87: 1e:d4:9e:16:a4:00:df:8d:92:28:ff:dd:fd:f9:6e:20:91:b6: e6:0a:06:77:b1:d0:49:65:54:ce:96:7c:4c:74:c0:ef:3b:7a: 8f:92:42:92:89:79:52:05:90:40:6e:35:02:f8:43:4d:2a:27: 25:3d:dc:1d:e8:6a:24:6c:51:8e:78:39:d4:58:ed:d4:ec:9d: 4e:77:79:9e:a6:a9:67:04:20:50:53:f8:ec:52:56:ba:2c:80: 2b:23:76:0b:50:1b:8e:4a:aa:b9:14:89:a9:3d:f5:06:2b:5a: a0:3a:df:b4:5e:2e:82:bc:99:b3:b1:2c:34:ad:3e:1f:75:44: fb:e6:21:9d:36:61:e5:cb:43:3e:5b:42:0b:d5:a3:5a:ef:3c: fc:96:ec:c1:dd:70:61:b2:d6:af:55:06:77:08:61:bf:18:b7: 30:c3:4c:60:8d:9e:73:f6:ca:7c:60:b6:f6:0b:17:cf:15:b3: 86:94:ef:39:79:4b:7a:8b:99:0e:db:70:12:52:da:55:fc:ef: 22:8a:bd:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzpGN7byCgSSZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Yzg4ZWI3OGYtYTNkZi00OTU2LWFhZTgtZTA2Mzk3YTFiM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Iyr4lnL0VBwzjs4eYACnqBTZOtBWLXLNss vajb7ZsZbypX1gQVTzsn94BDHAZlYor6ujX/RRGRVAjjLyhB6mTA67B8X+aXj5Zm 0v44cpMiGkEDFQBFynXg4Pw4o2YSD0HQMdvkc3cVHYSlyCrr3jDJUT6vuvggKtZH eySs2M2TixvrfG68Gn2wmLlgJQnxAiR/bQUD4SU8BqBraqiiyQtKShl8D8tqk/wr Ui8J5IHxJjCEEHmGfvTuOE7UDTKMMY5aaVp3PMQqISCsh1c9F/cupxQXz0Fj7PL/ 4HEa/52phomfvbqQPTlCrHrXqui4plzQ59i+7JwO7G9vc1HrsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNyk7zbJlK3Nw+TrN+WWPtapF+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWIwNDk3Y2ItZWE2MC0z YmMxLTk5MDUtMWU4MzhkM2FkZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE90nFXkic1+KKJGZdoBvOT4meW47OhepW90z/S/AMNNBbWUb/KfFouk yHXTY5z+XmGZ9FXHhx7UnhakAN+Nkij/3f35biCRtuYKBnex0EllVM6WfEx0wO87 eo+SQpKJeVIFkEBuNQL4Q00qJyU93B3oaiRsUY54OdRY7dTsnU53eZ6mqWcEIFBT +OxSVrosgCsjdgtQG45KqrkUiak99QYrWqA637ReLoK8mbOxLDStPh91RPvmIZ02 YeXLQz5bQgvVo1rvPPyW7MHdcGGy1q9VBncIYb8YtzDDTGCNnnP2ynxgtvYLF88V s4aU7zl5S3qLmQ7bcBJS2lX87yKKvSs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:33 2025 by rpki-client