$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa File: d8acef3d-fb29-33d5-b657-56e7f8e32298.roa (raw, json) Hash identifier: aF0ceHmjDCYtFQasXzRGFqAJPg31uSDYkSXHxNRCnbk= Subject key identifier: 10:8A:F4:90:4C:DA:BF:AD:AA:01:4C:71:03:56:D1:23:85:14:9E:87 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F3773549045AD06ECB84340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 108.177.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:73:54:90:45:ad:06:ec:b8:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=eb2e103b-1e16-4fae-a444-a0d9e0a14e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:37:1c:9c:38:f0:bf:c0:84:bf:d1:3c:67:03: b0:4f:a7:64:fa:45:0c:71:62:ee:c1:d6:5a:34:6e: fc:d9:9b:90:85:03:53:64:13:a2:b3:89:4f:23:42: 18:11:23:7a:30:93:c2:95:e3:50:9c:6a:e5:54:ce: 8b:68:94:ba:bf:ee:86:74:7c:5b:4f:c0:92:19:87: 3d:fc:84:02:2a:a2:15:22:ad:d6:3d:b6:fe:41:ff: b0:a2:05:72:b2:59:66:40:0e:11:37:d2:8b:da:e0: a4:f9:63:66:de:79:cb:37:26:83:2e:dc:bc:f5:d3: 30:dd:f0:06:89:77:78:22:1d:18:61:f8:9b:cb:02: 71:58:a2:0d:3d:92:5f:97:2c:e2:1d:59:89:56:fb: a7:4d:5a:06:1a:fe:cd:48:84:d0:38:01:33:c2:e8: 9c:74:fc:97:54:51:b2:0d:5b:b1:5c:55:21:5d:a4: b8:ef:bf:be:59:ed:c5:3b:99:c6:61:95:b6:7c:8e: ea:e7:79:eb:0d:d0:e2:38:03:42:4b:8a:63:d3:fe: d9:6a:f3:eb:f9:0d:c2:c0:a7:ec:1c:ae:18:db:3c: c1:dc:73:a6:7d:0e:4a:34:b7:8b:94:e2:54:6e:7b: a8:9e:d9:1d:4d:0e:2f:ea:d7:55:89:d7:d3:33:6b: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8A:F4:90:4C:DA:BF:AD:AA:01:4C:71:03:56:D1:23:85:14:9E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2c:a9:42:69:f1:8a:41:05:7b:ae:c4:b8:76:3f:92:b2:b2: 41:35:51:f7:c5:df:c9:cb:79:24:cb:9a:db:69:db:31:f3:c5: b9:37:21:18:ae:41:dd:9c:fc:f6:0b:ea:86:44:a3:a0:eb:aa: f8:92:c3:22:62:10:eb:f2:6c:c2:50:3c:f9:a1:0a:18:7f:21: 11:ab:c6:20:86:ed:fb:e4:fc:03:dd:bd:d9:52:1b:9c:5b:32: 79:d0:07:52:a7:1c:fa:da:36:16:c9:4b:b2:8b:d7:8d:fc:cc: c3:3b:40:a5:c5:47:e7:38:8f:4e:59:27:9c:1c:77:48:bd:06: 51:98:ec:74:63:0c:f0:57:f2:aa:00:bb:a8:2a:cb:37:f0:55: 5e:23:7c:a8:ff:f2:c4:78:04:ca:96:cd:a6:51:7b:be:b2:e6: fe:a5:e4:7f:55:a0:e7:b5:79:db:f8:75:69:6c:01:5b:c4:c9: 21:a1:3a:c8:ad:90:16:eb:03:2e:ea:07:a9:83:94:e0:52:b9: e1:e4:25:14:89:ab:0c:a4:a2:8f:64:c2:0e:30:62:98:1e:1d: 83:e3:ab:d4:b9:e6:87:8b:ac:00:35:d5:48:01:e9:aa:d4:5b: 11:1c:aa:5a:90:b8:79:05:7f:ac:ba:97:a1:83:67:69:67:a0: 0e:66:b4:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3NUkEWtBuy4Q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZWIyZTEwM2ItMWUxNi00ZmFlLWE0NDQtYTBkOWUwYTE0ZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizccnDjwv8CEv9E8ZwOwT6dk+kUMcWLuwdZa NG782ZuQhQNTZBOis4lPI0IYESN6MJPCleNQnGrlVM6LaJS6v+6GdHxbT8CSGYc9 /IQCKqIVIq3WPbb+Qf+wogVysllmQA4RN9KL2uCk+WNm3nnLNyaDLty89dMw3fAG iXd4Ih0YYfibywJxWKINPZJflyziHVmJVvunTVoGGv7NSITQOAEzwuicdPyXVFGy DVuxXFUhXaS477++We3FO5nGYZW2fI7q53nrDdDiOANCS4pj0/7ZavPr+Q3CwKfs HK4Y2zzB3HOmfQ5KNLeLlOJUbnuontkdTQ4v6tdVidfTM2u4LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCK9JBM2r+tqgFMcQNW0SOFFJ6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhhY2VmM2QtZmIyOS0z M2Q1LWI2NTctNTZlN2Y4ZTMyMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEsqUJp8YpBBXuuxLh2P5KyskE1UffF38nLeSTLmttp2zHzxbk3IRiu Qd2c/PYL6oZEo6DrqviSwyJiEOvybMJQPPmhChh/IRGrxiCG7fvk/APdvdlSG5xb MnnQB1KnHPraNhbJS7KL1438zMM7QKXFR+c4j05ZJ5wcd0i9BlGY7HRjDPBX8qoA u6gqyzfwVV4jfKj/8sR4BMqWzaZRe76y5v6l5H9VoOe1edv4dWlsAVvEySGhOsit kBbrAy7qB6mDlOBSueHkJRSJqwykoo9kwg4wYpgeHYPjq9S55oeLrAA11UgB6arU WxEcqlqQuHkFf6y6l6GDZ2lnoA5mtJ4= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:02 2025 by rpki-client