$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa File: 9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa (raw, json) Hash identifier: KFCTcry6eswQPI/sDJIV1gCekWbWeH9ONVA4ozfdCC8= Subject key identifier: 79:7B:A0:09:E1:49:5A:AA:2A:98:27:25:F7:94:FA:35:D3:F9:A1:F9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F3771389FEDFDBA314E92A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 108.177.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:71:38:9f:ed:fd:ba:31:4e:92:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=7d4b52a9-2ce2-4992-a0d8-ee5e41ef46b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:fc:ff:78:dd:53:9b:0a:99:a1:14:50:27: 81:cc:9e:62:45:22:11:44:1c:33:92:77:a6:c6:5f: b4:22:5d:27:84:8f:ae:74:fb:20:f8:0c:22:62:70: 9d:31:19:53:9a:03:7f:23:c4:4e:7e:dc:52:eb:e4: e8:36:bc:09:09:fe:7a:a8:9d:d7:c7:e3:af:a7:1a: 82:b2:35:ed:bd:0d:d3:ba:12:8c:e1:46:40:92:b6: ff:bf:b4:e6:87:ab:f0:45:43:75:b3:7d:d4:17:42: 65:ef:18:3c:40:9b:e2:2b:34:0f:ff:30:74:00:95: 94:9b:11:1e:bb:4a:50:cd:04:e3:b5:38:4e:af:c5: ca:34:bc:66:b1:83:02:c3:fa:94:9b:d6:52:aa:0b: 01:7b:71:4e:7c:75:6a:8f:0d:2d:86:f1:b9:4f:fa: e1:9e:a5:cf:16:69:df:1e:6f:a3:0a:a7:f9:77:12: 2a:a4:0f:c9:87:c3:1c:70:fb:4b:88:8c:da:fc:df: 3a:e0:ec:83:97:27:1e:93:0e:a4:b4:c5:7d:b2:d5: c9:ce:3a:d2:4c:62:9b:5a:49:d8:1a:3c:6c:51:6e: a5:ee:83:60:9c:ef:10:20:bc:e5:13:cb:0a:50:23: 2c:77:1e:eb:e6:66:59:21:9c:82:53:eb:15:35:f3: 73:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7B:A0:09:E1:49:5A:AA:2A:98:27:25:F7:94:FA:35:D3:F9:A1:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:09:53:2d:ca:bd:38:98:2e:00:87:ae:21:79:96:b0:08:91: 09:fa:5e:77:16:eb:e5:5b:47:8c:27:20:d7:b9:fa:e3:17:18: cd:d8:7b:6c:f6:ad:79:fe:4b:4e:af:5e:f7:4d:94:e7:e6:56: f8:77:ec:19:a0:85:64:58:7b:83:4a:cd:3d:99:af:fb:e0:f8: 65:99:a7:5a:95:a0:e8:59:f3:b0:83:ed:82:d5:50:e2:bf:ff: 6d:0f:c5:54:5b:95:81:e0:62:c0:6f:8d:2a:aa:7a:a5:ed:1a: e9:54:1d:84:99:98:ed:ce:23:98:3a:a9:d0:02:76:1e:f2:8a: da:3c:81:35:de:df:94:90:70:d7:5c:49:29:72:d0:17:96:80: f6:de:8b:bd:0e:0a:cf:7a:1a:54:6c:08:b1:ca:2c:90:29:65: a7:26:d3:17:3e:28:64:c0:c2:b4:e8:b2:3c:ed:a6:aa:6a:60: e1:d8:f6:88:cd:7a:aa:e7:6a:83:ea:a1:ba:e8:e4:d9:11:5a: a8:fb:f9:e3:b5:2f:8e:40:b9:dc:bd:b5:a5:4e:cc:5b:82:ce: e9:a7:05:de:22:39:7a:0c:1a:57:bd:1d:d5:1d:c6:da:f7:07: 76:13:a1:b0:e7:7a:f0:f7:be:59:8d:52:14:d6:69:04:45:31: 10:3a:81:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3E4n+39ujFOkqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk N2Q0YjUyYTktMmNlMi00OTkyLWEwZDgtZWU1ZTQxZWY0NmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlb8/3jdU5sKmaEUUCeBzJ5iRSIRRBwzknem xl+0Il0nhI+udPsg+AwiYnCdMRlTmgN/I8ROftxS6+ToNrwJCf56qJ3Xx+OvpxqC sjXtvQ3TuhKM4UZAkrb/v7Tmh6vwRUN1s33UF0Jl7xg8QJviKzQP/zB0AJWUmxEe u0pQzQTjtThOr8XKNLxmsYMCw/qUm9ZSqgsBe3FOfHVqjw0thvG5T/rhnqXPFmnf Hm+jCqf5dxIqpA/Jh8MccPtLiIza/N864OyDlycekw6ktMV9stXJzjrSTGKbWknY GjxsUW6l7oNgnO8QILzlE8sKUCMsdx7r5mZZIZyCU+sVNfNzowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHl7oAnhSVqqKpgnJfeU+jXT+aH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWI1Y2ZhMzMtZmMwNS0z NGFhLWIxYjktYmZlOGE3ZDBlMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0JUy3KvTiYLgCHriF5lrAIkQn6XncW6+VbR4wnINe5+uMXGM3Ye2z2 rXn+S06vXvdNlOfmVvh37BmghWRYe4NKzT2Zr/vg+GWZp1qVoOhZ87CD7YLVUOK/ /20PxVRblYHgYsBvjSqqeqXtGulUHYSZmO3OI5g6qdACdh7yito8gTXe35SQcNdc SSly0BeWgPbei70OCs96GlRsCLHKLJApZacm0xc+KGTAwrTosjztpqpqYOHY9ojN eqrnaoPqobro5NkRWqj7+eO1L45Audy9taVOzFuCzumnBd4iOXoMGle9HdUdxtr3 B3YTobDnevD3vlmNUhTWaQRFMRA6gVU= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:27 2025 by rpki-client