$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa File: bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa (raw, json) Hash identifier: ZeWulveTyPqfwx+7HvdFfYCUvCFPDuiz9L5q/ctYQJM= Subject key identifier: 5B:52:98:39:B0:1D:DB:46:5C:7F:C2:CC:B5:B2:C1:85:77:C8:DE:97 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F3764E1406C46AEA8E543F0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 108.177.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:64:e1:40:6c:46:ae:a8:e5:43:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=a2cd8f26-08a3-4fae-9b43-3cdad9d29342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:25:a6:d7:45:51:c2:dd:4e:2a:25:10:f5:f7: a4:2c:56:66:b2:20:b6:5f:8d:d5:3c:26:06:9b:f6: af:77:b5:9b:f8:c9:82:b5:89:9e:03:ba:ca:51:c5: e5:3f:b4:96:2d:30:a9:8f:85:e0:7c:7a:01:f4:a3: 75:a0:2f:5f:9e:05:08:70:ab:c0:bb:75:71:63:bc: 78:01:33:7d:97:8b:b7:a7:61:9d:07:65:05:27:f8: d0:d7:6f:57:2c:59:12:f0:31:cc:66:90:e0:19:37: 2d:e3:f9:76:b1:0e:86:60:69:37:36:b4:d4:25:a3: 11:b7:0e:53:4f:fa:b6:72:26:65:80:0e:06:11:b9: ed:45:50:be:05:d8:a0:8f:17:e7:ef:f9:7e:3b:b7: 43:5c:6c:ff:25:a7:e3:72:c8:85:78:b0:09:f8:89: 2d:c8:99:65:f7:8b:b3:af:89:4f:fb:b0:60:66:f9: 2a:a1:0d:ac:e0:b0:8e:4d:5e:71:c9:e8:6c:d0:56: 0b:c2:0f:fa:b8:c2:7e:7f:f8:74:49:e8:45:40:16: ab:45:29:21:70:dd:25:f4:90:d3:f9:f1:28:15:35: 58:79:70:40:86:f5:21:fa:a1:2b:02:9f:55:73:ec: 2e:fe:9c:20:48:d6:97:ea:d1:3f:2b:8b:83:6b:46: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:52:98:39:B0:1D:DB:46:5C:7F:C2:CC:B5:B2:C1:85:77:C8:DE:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:73:57:a5:92:aa:e8:3b:c7:ce:92:f0:26:6f:dc:24:a7:26: 6b:5c:65:9a:2c:aa:51:7b:10:4e:58:bc:1d:a8:73:9a:1b:0c: 3b:0a:f8:58:9c:70:6e:29:59:3a:80:bd:39:79:41:80:1b:01: db:a4:e6:25:64:b4:f9:03:39:6c:d3:fa:e7:c8:d8:40:03:d8: 94:d5:ac:3a:46:18:50:af:ec:73:8a:64:81:ab:fe:47:e3:41: 18:e3:6e:4b:aa:4e:1d:17:bf:57:79:b2:31:2d:4e:68:b6:1d: 2a:b3:b0:bc:16:50:6d:bc:eb:22:20:77:16:f4:e1:15:a9:5e: 9c:ac:84:6a:63:e8:71:20:c5:44:d9:5b:c5:ce:4c:62:33:17: eb:83:16:f4:15:87:16:94:80:b9:53:7c:c6:e9:db:7e:40:40: ce:06:15:cb:4b:b1:4f:64:12:5b:c9:b3:b0:a3:b7:55:57:6f: 0d:a7:3f:e9:57:9c:e5:3f:e4:13:9c:e8:47:8d:1d:ed:8e:f5: be:50:01:42:af:94:cc:80:95:6d:25:a5:94:48:a4:2e:d0:5f: d4:a0:3e:b7:ca:29:a2:59:b0:b1:84:cd:2a:6a:6d:bb:17:c8: b7:72:80:29:2e:1b:35:32:dc:9b:5e:f9:78:16:43:58:b8:79: 3b:1d:0c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2ThQGxGrqjlQ/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YTJjZDhmMjYtMDhhMy00ZmFlLTliNDMtM2NkYWQ5ZDI5MzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSWm10VRwt1OKiUQ9fekLFZmsiC2X43VPCYG m/avd7Wb+MmCtYmeA7rKUcXlP7SWLTCpj4XgfHoB9KN1oC9fngUIcKvAu3VxY7x4 ATN9l4u3p2GdB2UFJ/jQ129XLFkS8DHMZpDgGTct4/l2sQ6GYGk3NrTUJaMRtw5T T/q2ciZlgA4GEbntRVC+Bdigjxfn7/l+O7dDXGz/JafjcsiFeLAJ+IktyJll94uz r4lP+7BgZvkqoQ2s4LCOTV5xyehs0FYLwg/6uMJ+f/h0SehFQBarRSkhcN0l9JDT +fEoFTVYeXBAhvUh+qErAp9Vc+wu/pwgSNaX6tE/K4uDa0bMQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtSmDmwHdtGXH/CzLWywYV3yN6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmZhNjY4YjAtYjViMC0z OGE2LWI2Y2UtNTIwYzRhOWQwZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNzV6WSqug7x86S8CZv3CSnJmtcZZosqlF7EE5YvB2oc5obDDsK+Fic cG4pWTqAvTl5QYAbAduk5iVktPkDOWzT+ufI2EAD2JTVrDpGGFCv7HOKZIGr/kfj QRjjbkuqTh0Xv1d5sjEtTmi2HSqzsLwWUG286yIgdxb04RWpXpyshGpj6HEgxUTZ W8XOTGIzF+uDFvQVhxaUgLlTfMbp235AQM4GFctLsU9kElvJs7Cjt1VXbw2nP+lX nOU/5BOc6EeNHe2O9b5QAUKvlMyAlW0lpZRIpC7QX9SgPrfKKaJZsLGEzSpqbbsX yLdygCkuGzUy3Jte+XgWQ1i4eTsdDKU= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:42 2025 by rpki-client