$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa File: d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa (raw, json) Hash identifier: SdiQKNg1LAuEa8P3+lyPHmZqpbp92IwQ2lHs80FIKTs= Subject key identifier: 81:B5:18:90:31:78:4D:E9:52:EB:DE:7E:3E:A0:78:FC:B0:57:B2:34 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F37462534BCF6309F788A40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.170.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:46:25:34:bc:f6:30:9f:78:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=685ec6a6-c76e-47a8-ac1d-bd8bb2e380ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:43:b4:35:63:87:7c:f7:f6:1b:a8:ea:a2:a3: d4:c4:5c:9e:ac:23:39:9f:f2:fb:3c:7a:9c:0e:dd: 86:4a:0e:36:df:4d:9d:3c:76:0f:92:56:00:20:19: aa:15:54:ab:c8:34:90:44:15:a7:10:93:6d:16:a0: 8d:49:c1:d7:28:aa:e2:46:bf:a4:13:a1:a4:3c:42: 8d:43:2c:ff:49:a2:ab:b8:26:e5:b6:b6:ca:e5:1d: 7b:1c:10:3d:c3:fb:1e:28:3b:8a:f7:1f:d2:54:13: 9d:02:f0:24:82:16:a2:20:33:40:2a:58:86:25:24: cd:21:e9:6b:c8:64:a0:19:91:00:ba:00:18:5a:5b: c0:33:9c:41:f5:c7:08:ef:58:23:5c:6e:33:89:2c: 89:de:41:4d:93:aa:a2:74:51:d5:02:f0:e7:d6:70: 64:6d:23:e5:57:07:9b:9d:13:0c:31:9c:9e:22:07: 30:18:b7:5b:ce:b2:33:6f:6b:02:5f:a5:d6:45:f0: 57:ed:b8:1c:23:70:6c:8b:da:4b:2a:82:96:ad:6d: 92:08:58:9a:58:68:8a:65:9d:88:e8:9d:7a:ec:6e: 10:38:d6:6c:03:0f:7c:6f:64:96:40:0c:59:0d:53: 0e:e1:a9:c8:9a:ed:bc:f2:57:de:6c:cd:ee:0f:5e: 16:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B5:18:90:31:78:4D:E9:52:EB:DE:7E:3E:A0:78:FC:B0:57:B2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:72:a9:da:ce:73:7a:5d:85:80:52:65:42:b5:ea:a7:00:6f: 29:15:0f:0a:4d:bd:9f:af:91:3b:91:ae:af:73:0b:7e:6e:ea: 4c:d5:27:70:67:b2:2f:6c:10:c1:07:b5:d8:51:3c:3c:d0:47: be:16:c9:39:48:d3:71:55:84:d8:0b:a8:5a:b9:4c:61:8a:4c: 8a:f8:8b:30:df:7b:b8:1f:33:df:ac:e1:b0:d4:6a:8b:b9:bd: 81:a7:7a:b2:e3:f8:69:24:b1:e9:40:8b:32:09:ba:57:a8:f6: 20:97:33:f4:01:aa:5f:da:40:b9:17:2d:50:78:f2:85:bf:df: 34:92:2a:95:b1:c7:1d:4a:c4:53:93:ac:ea:0e:4f:91:2d:3f: b2:ce:ca:b6:b6:93:19:1c:31:4e:da:62:c3:5e:fb:6f:e5:6f: 5e:7c:48:b6:35:7c:76:6c:c1:68:29:f9:df:01:3d:80:47:42: 3f:4d:2d:cd:03:1a:ca:d7:72:a7:99:31:f1:61:1b:af:f5:5f: 43:61:0c:18:b9:28:2c:25:b7:a8:6f:4a:e1:3f:b3:f5:c4:df: 41:63:8a:1e:84:cd:9c:40:91:c5:38:51:ae:d7:25:7b:75:44: b5:92:65:b5:e7:d8:27:fd:f6:ff:77:67:0e:dd:d0:8a:27:ac: fb:eb:24:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0YlNLz2MJ94ikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Njg1ZWM2YTYtYzc2ZS00N2E4LWFjMWQtYmQ4YmIyZTM4MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0O0NWOHfPf2G6jqoqPUxFyerCM5n/L7PHqc Dt2GSg42302dPHYPklYAIBmqFVSryDSQRBWnEJNtFqCNScHXKKriRr+kE6GkPEKN Qyz/SaKruCbltrbK5R17HBA9w/seKDuK9x/SVBOdAvAkghaiIDNAKliGJSTNIelr yGSgGZEAugAYWlvAM5xB9ccI71gjXG4ziSyJ3kFNk6qidFHVAvDn1nBkbSPlVweb nRMMMZyeIgcwGLdbzrIzb2sCX6XWRfBX7bgcI3Bsi9pLKoKWrW2SCFiaWGiKZZ2I 6J167G4QONZsAw98b2SWQAxZDVMO4anImu288lfebM3uD14WDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIG1GJAxeE3pUuvefj6gePywV7I0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRmZDlhOTEtZWRiMi0z MDI1LWJjNzQtMWEwNTRkNmM2MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1yqdrOc3pdhYBSZUK16qcAbykVDwpNvZ+vkTuRrq9zC35u6kzVJ3Bn si9sEMEHtdhRPDzQR74WyTlI03FVhNgLqFq5TGGKTIr4izDfe7gfM9+s4bDUaou5 vYGnerLj+GkkselAizIJuleo9iCXM/QBql/aQLkXLVB48oW/3zSSKpWxxx1KxFOT rOoOT5EtP7LOyra2kxkcMU7aYsNe+2/lb158SLY1fHZswWgp+d8BPYBHQj9NLc0D GsrXcqeZMfFhG6/1X0NhDBi5KCwlt6hvSuE/s/XE30Fjih6EzZxAkcU4Ua7XJXt1 RLWSZbXn2Cf99v93Zw7d0IonrPvrJBM= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:41 2025 by rpki-client