$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa File: aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa (raw, json) Hash identifier: JKCIT68DijUYaEf60+TiW9SrvC5tyRPvtB5wfsx+usg= Subject key identifier: 00:37:9F:36:1D:3B:0F:55:AE:9C:B3:2A:05:3C:8E:EB:0B:3C:1E:0D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F377106C37C670390628F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 108.177.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:71:06:c3:7c:67:03:90:62:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=91dea7ff-378a-4cfb-8693-8686391e2452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:95:ff:39:93:08:5a:e2:f3:09:7e:8f:6a:9a: 0f:a4:43:94:05:67:60:2b:03:12:f0:df:7b:5d:38: 2f:2f:46:39:fd:9d:06:0f:10:28:bb:e0:34:91:9e: ce:3e:ea:93:2f:84:13:b4:e8:dd:9e:93:92:1e:5b: 2b:d3:68:b4:75:f7:80:0a:1a:c2:17:7b:b5:ad:a0: 42:33:65:8c:2e:b8:05:d5:fc:db:56:af:06:95:01: 2c:35:79:90:06:d8:3a:60:3f:87:6e:48:0a:be:74: 36:50:71:8f:37:12:8f:79:8f:d7:87:97:24:3d:f1: ce:e5:1c:c8:15:c1:12:f8:da:19:ee:f9:a7:5f:a7: 53:69:37:65:f1:25:6e:8a:3d:72:f7:41:bf:c4:61: 6f:dc:7c:bd:d9:3a:dd:49:23:44:ef:46:d2:f9:69: 8f:54:1d:90:0b:f3:25:97:9a:16:f1:20:80:de:68: 5e:27:9c:17:83:8e:e6:27:2f:27:03:f5:ac:50:6a: 04:c7:a6:84:7a:6e:33:13:d3:77:62:38:4c:72:57: f1:f7:ba:b3:4e:8d:d9:20:fa:e4:dc:cd:c5:9a:38: 72:c8:46:a0:18:0a:6f:03:cb:8e:fd:87:76:3c:78: 37:bf:55:d7:96:aa:75:df:8c:9c:ee:ae:4c:b5:7e: 09:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:37:9F:36:1D:3B:0F:55:AE:9C:B3:2A:05:3C:8E:EB:0B:3C:1E:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ed:ae:f0:f6:3d:73:1a:04:64:b2:45:f7:af:57:c7:76:b3: 83:5a:8f:57:35:3b:fa:f2:04:d8:45:4d:cd:e8:6d:f5:be:b3: e5:a4:d8:b4:57:f7:2b:b0:a8:5c:21:d9:b3:fd:99:68:18:87: bc:4f:41:f1:ce:e6:cb:ae:26:74:d1:a3:dd:59:95:f8:a7:c4: 33:bc:85:bc:6a:12:5a:9c:d6:a4:3e:e6:d2:77:c7:a7:95:5d: 17:b8:e6:b6:be:e1:37:10:be:51:d8:e1:3b:69:11:d8:21:1b: 93:04:79:37:4a:af:b4:bc:60:e8:50:95:3b:61:4e:df:4e:cc: 39:ac:5b:5b:b3:d5:3f:20:de:29:c4:9e:93:50:bd:25:c9:c0: 63:0a:89:b2:96:f1:94:ce:d1:3a:54:83:14:c2:35:7e:85:41: 29:e2:03:7c:02:6d:59:c7:3f:09:d5:77:ee:e2:a3:1d:92:cc: e2:39:fc:9d:3e:3b:00:4a:e6:f1:c6:7d:88:30:49:af:43:38: 25:9d:d7:f4:09:c6:ab:51:2a:da:e0:f9:b3:14:0f:c7:0b:a5: 88:9b:16:b8:ee:c3:6b:1c:55:e3:97:d1:3b:24:02:0c:98:11: b0:13:b9:f8:d1:75:93:ec:65:57:c1:00:e0:cb:65:ab:e5:22: 6f:a6:a8:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3EGw3xnA5BijwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OTFkZWE3ZmYtMzc4YS00Y2ZiLTg2OTMtODY4NjM5MWUyNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpX/OZMIWuLzCX6PapoPpEOUBWdgKwMS8N97 XTgvL0Y5/Z0GDxAou+A0kZ7OPuqTL4QTtOjdnpOSHlsr02i0dfeAChrCF3u1raBC M2WMLrgF1fzbVq8GlQEsNXmQBtg6YD+HbkgKvnQ2UHGPNxKPeY/Xh5ckPfHO5RzI FcES+NoZ7vmnX6dTaTdl8SVuij1y90G/xGFv3Hy92TrdSSNE70bS+WmPVB2QC/Ml l5oW8SCA3mheJ5wXg47mJy8nA/WsUGoEx6aEem4zE9N3YjhMclfx97qzTo3ZIPrk 3M3FmjhyyEagGApvA8uO/Yd2PHg3v1XXlqp134yc7q5MtX4JTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAA3nzYdOw9VrpyzKgU8jusLPB4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE3YTkxNjgtZDliNS0z ZTNhLWEyYjEtY2UyYTcwNTFjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjtrvD2PXMaBGSyRfevV8d2s4Naj1c1O/ryBNhFTc3obfW+s+Wk2LRX 9yuwqFwh2bP9mWgYh7xPQfHO5suuJnTRo91ZlfinxDO8hbxqElqc1qQ+5tJ3x6eV XRe45ra+4TcQvlHY4TtpEdghG5MEeTdKr7S8YOhQlTthTt9OzDmsW1uz1T8g3inE npNQvSXJwGMKibKW8ZTO0TpUgxTCNX6FQSniA3wCbVnHPwnVd+7iox2SzOI5/J0+ OwBK5vHGfYgwSa9DOCWd1/QJxqtRKtrg+bMUD8cLpYibFrjuw2scVeOX0TskAgyY EbATufjRdZPsZVfBAODLZavlIm+mqMc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:07 2025 by rpki-client