$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7d4b1cd-578b-3c0b-bc95-e24d489403ef.roa File: e7d4b1cd-578b-3c0b-bc95-e24d489403ef.roa (raw, json) Hash identifier: OB/cnhTWEltdEISqoE/LDDfNzcp3D58LCmO2iP3tjEo= Subject key identifier: D2:6F:DA:6D:FB:37:19:AD:64:45:4C:BE:C8:B6:46:4A:26:A1:8D:B6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F376410014EDD48B85CD780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7d4b1cd-578b-3c0b-bc95-e24d489403ef.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.170.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:64:10:01:4e:dd:48:b8:5c:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=fafca6f8-30be-4df1-b3a3-ee025ff4a5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:42:ae:6d:c4:77:d1:16:b5:11:bc:d5:9a:4b: e7:90:1c:ba:ba:8a:ab:17:cb:5d:ca:5b:79:de:7e: 19:1e:a3:5f:25:68:3e:d5:08:c6:40:72:be:de:4e: 86:f4:cb:de:7f:e1:f8:28:09:7c:6e:17:94:f6:78: 67:29:4f:86:f4:f9:5c:3e:8f:92:5c:91:cc:bc:9b: a3:9e:f3:c1:d8:7b:d7:1b:52:f6:8e:ee:4e:87:4c: 7c:b8:78:17:97:f7:d3:70:bd:5a:33:de:26:27:c4: f1:ae:64:05:32:ec:b9:72:9b:fb:bf:5e:49:51:1f: 93:9d:3f:dd:55:28:6c:c2:2d:5b:88:ae:66:e1:9c: b2:28:a4:49:d6:70:86:fa:dc:af:05:74:31:e3:16: c9:44:c2:10:85:46:75:66:af:59:ee:9b:48:7d:da: ed:78:c8:96:2b:b6:04:e5:de:fb:7d:f5:ed:6d:d7: 2c:10:e8:dc:ab:51:ef:19:7a:1f:62:bf:7b:6d:3f: b6:5a:ce:c4:4b:47:34:e0:b7:f0:5d:85:97:1e:89: 89:64:a0:79:5c:26:fd:86:c1:3f:6d:58:4f:cc:f0: cf:09:50:83:ab:2c:2e:d6:1a:6d:ef:07:02:88:ca: 0f:92:12:08:89:b3:ec:c8:11:78:d7:0c:14:b9:24: 34:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6F:DA:6D:FB:37:19:AD:64:45:4C:BE:C8:B6:46:4A:26:A1:8D:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7d4b1cd-578b-3c0b-bc95-e24d489403ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:15:1a:50:68:c7:f6:b5:aa:2c:1a:9d:49:18:19:3d:b2:41: da:37:72:72:25:fd:f7:f1:9f:e2:02:25:c1:e6:d1:75:19:07: 92:48:6b:fa:c9:12:c6:f6:0a:b7:7c:90:2b:a3:13:8b:37:0a: 2a:0c:10:ea:af:71:48:ab:68:b3:9a:c1:a5:97:98:b4:04:a1: 7d:ea:2d:a4:7d:76:ae:c2:16:3d:fa:92:cd:47:1a:b6:a0:b3: e9:ef:f0:cb:e0:0a:9f:7b:a6:7d:97:21:dc:5c:ff:e2:8f:83: 6a:c8:2f:d2:53:01:72:92:2e:50:8d:85:8b:36:43:ba:d9:24: 91:d5:72:80:4d:57:d8:0c:b8:7a:d0:72:c9:96:48:7f:7e:d8: 6b:07:1d:d4:ad:4a:2c:a9:20:08:09:16:95:b2:d4:9b:3c:8d: 3e:9f:76:87:fc:ec:75:fa:ee:f3:e5:2a:d1:d9:8a:48:a8:ed: 49:1d:64:6d:42:0d:3d:c8:e4:42:a5:8f:10:10:f3:08:c7:5a: 71:c5:7b:1e:89:bf:ca:e1:06:0d:8b:07:43:17:ad:cd:e0:bc: 2b:7a:36:46:ba:09:a1:67:b0:83:07:77:ee:ae:04:1a:42:df: d3:34:23:9b:df:be:10:a1:84:56:e0:c5:cf:43:6e:d5:23:4d: ba:72:25:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2QQAU7dSLhc14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZmFmY2E2ZjgtMzBiZS00ZGYxLWIzYTMtZWUwMjVmZjRhNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUKubcR30Ra1EbzVmkvnkBy6uoqrF8tdylt5 3n4ZHqNfJWg+1QjGQHK+3k6G9Mvef+H4KAl8bheU9nhnKU+G9PlcPo+SXJHMvJuj nvPB2HvXG1L2ju5Oh0x8uHgXl/fTcL1aM94mJ8TxrmQFMuy5cpv7v15JUR+TnT/d VShswi1biK5m4ZyyKKRJ1nCG+tyvBXQx4xbJRMIQhUZ1Zq9Z7ptIfdrteMiWK7YE 5d77ffXtbdcsEOjcq1HvGXofYr97bT+2Ws7ES0c04LfwXYWXHomJZKB5XCb9hsE/ bVhPzPDPCVCDqywu1hpt7wcCiMoPkhIIibPsyBF41wwUuSQ0/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJv2m37NxmtZEVMvsi2RkomoY22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTdkNGIxY2QtNTc4Yi0z YzBiLWJjOTUtZTI0ZDQ4OTQwM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEVGlBox/a1qiwanUkYGT2yQdo3cnIl/ffxn+ICJcHm0XUZB5JIa/rJ Esb2Crd8kCujE4s3CioMEOqvcUiraLOawaWXmLQEoX3qLaR9dq7CFj36ks1HGrag s+nv8MvgCp97pn2XIdxc/+KPg2rIL9JTAXKSLlCNhYs2Q7rZJJHVcoBNV9gMuHrQ csmWSH9+2GsHHdStSiypIAgJFpWy1Js8jT6fdof87HX67vPlKtHZikio7UkdZG1C DT3I5EKljxAQ8wjHWnHFex6Jv8rhBg2LB0MXrc3gvCt6Nka6CaFnsIMHd+6uBBpC 39M0I5vfvhChhFbgxc9DbtUjTbpyJQo= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:43 2025 by rpki-client