$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa File: e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa (raw, json) Hash identifier: yRB49LVHi7g4qo5iuqX2Y1+lLBWWQzFGcpzG3hkQr0Q= Subject key identifier: 2B:3A:31:02:00:73:90:FB:2E:8C:FE:51:C6:A6:77:22:EB:72:65:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F3773BB096B2F8770C52600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.170.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:73:bb:09:6b:2f:87:70:c5:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=51a54597-9baa-4e7a-a67d-c586f6f987c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:67:e1:af:51:46:bc:1e:5e:40:65:bb:de:f4: 07:b6:30:f8:95:ed:66:80:af:0a:76:c7:89:cb:b5: 68:58:5f:fe:33:e8:3b:81:60:b6:41:36:b3:3e:7c: 94:b7:00:f3:ca:c2:02:2e:00:d5:7e:32:33:13:3f: 88:c1:96:cf:00:55:df:a4:95:0a:a2:35:2a:3c:a7: b9:16:c2:db:50:d6:3e:f5:d9:24:b6:53:d8:a1:0c: 79:cb:b6:f5:c9:74:43:1d:9b:26:18:e0:3f:09:40: 3c:56:9d:f5:56:83:7c:1e:dc:23:49:86:c5:3b:f4: a8:d8:92:77:40:e6:ab:8d:58:f3:34:0f:72:65:5c: c3:28:ea:3c:bd:f4:03:6d:e2:13:05:b0:a0:bb:9d: 89:aa:10:64:c3:40:3b:e6:a2:c7:2c:29:4c:7d:c0: c0:cd:b9:8b:b5:d8:d2:61:6e:de:f8:74:d0:49:3b: 58:c6:b9:2c:00:ae:78:b8:a8:eb:4a:bf:a2:d8:35: 89:7d:e8:92:48:ff:c0:5b:ca:0f:2c:0d:f7:30:d3: 0b:14:54:a4:4a:49:36:16:29:ad:2a:0e:24:7f:ef: 75:87:c6:f8:92:a8:4a:3f:31:d8:25:49:4f:00:d5: ac:0b:2e:a5:ac:20:6e:b0:ba:37:a9:3a:ef:8d:d3: 70:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3A:31:02:00:73:90:FB:2E:8C:FE:51:C6:A6:77:22:EB:72:65:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3a:e8:24:77:53:7a:4a:0f:3a:01:dc:72:45:3a:40:81:b6: 23:d7:35:94:d0:5d:b6:6a:18:5e:da:4a:96:66:10:b4:c4:81: 10:af:f6:fe:42:a1:2d:6a:78:18:8d:84:80:84:cd:99:d5:5a: 4f:08:fb:3d:16:c3:a6:64:bc:b3:7a:bd:c5:d5:e0:fb:08:cc: a4:e8:8e:18:28:21:44:cc:1d:f9:ec:93:fd:f7:a7:b6:e4:8f: 04:75:f6:71:c6:4e:00:60:98:f0:eb:65:41:33:b4:06:94:ba: 03:21:ca:38:20:f1:81:b0:ec:83:a8:38:b3:22:ab:96:41:10: 8b:99:9b:36:ac:82:3d:da:a3:4a:73:93:0d:fb:be:d8:07:14: 41:d1:12:22:47:51:5e:4e:12:95:aa:6c:47:93:59:e4:2a:45: 24:00:f3:46:da:03:5c:f1:c0:fd:0f:9b:68:b3:53:30:cb:df: 63:b1:13:b2:98:64:ed:47:41:24:c8:b8:b1:c6:54:0e:52:bb: 71:21:bd:c2:21:0f:28:d6:4f:f1:c5:82:da:57:5e:80:f2:f0: 12:7c:5d:e7:30:49:73:8b:3c:b3:ea:ca:5d:80:b7:d4:f0:04: 19:8f:c9:fd:b6:4a:65:84:6b:97:df:41:49:d1:b8:41:06:da: 1c:53:64:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3O7CWsvh3DFJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NTFhNTQ1OTctOWJhYS00ZTdhLWE2N2QtYzU4NmY2Zjk4N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWfhr1FGvB5eQGW73vQHtjD4le1mgK8KdseJ y7VoWF/+M+g7gWC2QTazPnyUtwDzysICLgDVfjIzEz+IwZbPAFXfpJUKojUqPKe5 FsLbUNY+9dkktlPYoQx5y7b1yXRDHZsmGOA/CUA8Vp31VoN8HtwjSYbFO/So2JJ3 QOarjVjzNA9yZVzDKOo8vfQDbeITBbCgu52JqhBkw0A75qLHLClMfcDAzbmLtdjS YW7e+HTQSTtYxrksAK54uKjrSr+i2DWJfeiSSP/AW8oPLA33MNMLFFSkSkk2Fimt Kg4kf+91h8b4kqhKPzHYJUlPANWsCy6lrCBusLo3qTrvjdNwQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCs6MQIAc5D7Loz+UcamdyLrcmWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTNjMTFiZTYtNWIyYi0z NmJlLWIwZGUtMjAyMWNlY2ZjM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc66CR3U3pKDzoB3HJFOkCBtiPXNZTQXbZqGF7aSpZmELTEgRCv9v5C oS1qeBiNhICEzZnVWk8I+z0Ww6ZkvLN6vcXV4PsIzKTojhgoIUTMHfnsk/33p7bk jwR19nHGTgBgmPDrZUEztAaUugMhyjgg8YGw7IOoOLMiq5ZBEIuZmzasgj3ao0pz kw37vtgHFEHREiJHUV5OEpWqbEeTWeQqRSQA80baA1zxwP0Pm2izUzDL32OxE7KY ZO1HQSTIuLHGVA5Su3EhvcIhDyjWT/HFgtpXXoDy8BJ8XecwSXOLPLPqyl2At9Tw BBmPyf22SmWEa5ffQUnRuEEG2hxTZKA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:03 2025 by rpki-client