$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70ac09e-f6fd-3f0e-9860-de7c7c57daf5.roa File: f70ac09e-f6fd-3f0e-9860-de7c7c57daf5.roa (raw, json) Hash identifier: r7ENa3E+eBa3yOpbXqzjKF75yomRsoj/HuGnmSrEFrY= Subject key identifier: 24:C3:81:1F:5A:04:9D:94:18:1D:9A:45:91:D8:16:B0:A7:79:F4:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F37609D78A3247D1327B3C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70ac09e-f6fd-3f0e-9860-de7c7c57daf5.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.170.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:60:9d:78:a3:24:7d:13:27:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=4c228d36-a10c-41dc-bdbe-4ea1b819173e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:18:2d:7d:89:0f:55:42:57:9b:f2:90:1f: 5a:05:2d:43:d8:ba:f6:77:82:a8:25:fe:56:b8:5c: e8:8e:7f:a2:ce:59:78:1f:d7:a0:81:3b:07:61:26: 7d:d1:f6:00:ee:5d:09:30:ee:1e:66:25:5e:23:b3: ba:29:45:3e:60:c3:3a:63:86:78:fc:72:42:d6:81: 2b:79:77:18:24:4c:d8:df:f2:e3:cd:11:4d:68:1e: 4b:c7:1a:22:8b:dd:f2:7c:bd:f6:43:6b:50:c4:40: 37:2f:ed:0a:4a:a1:60:4c:94:00:12:90:46:c5:1d: 1a:d9:03:b4:55:7e:99:6d:90:ea:c4:8c:38:8b:54: d2:89:f7:9f:4c:8e:4a:10:46:e8:69:d5:d5:4f:f4: ea:35:6d:20:d1:3d:9b:06:76:ee:a8:52:0e:d9:ab: d7:35:fa:70:5e:27:bf:e1:e6:de:aa:42:7f:0b:c2: d7:e8:bc:c0:ea:f5:a6:d0:d2:13:da:65:2a:e0:c3: 27:46:83:73:73:19:da:a2:a4:46:aa:95:1e:b6:11: 44:08:88:30:8b:9e:30:66:4d:6b:12:1c:b5:16:82: aa:d8:e7:0d:a3:56:a9:97:32:31:b2:d1:db:f7:53: e1:1a:ae:aa:77:6a:af:ba:40:99:f9:7e:66:8b:4e: 06:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C3:81:1F:5A:04:9D:94:18:1D:9A:45:91:D8:16:B0:A7:79:F4:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70ac09e-f6fd-3f0e-9860-de7c7c57daf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:41:4e:60:16:97:1b:58:22:90:40:6d:d6:db:61:dd:b4:33: 21:ad:eb:f3:6f:cd:19:49:19:96:03:bc:eb:9c:b4:7a:e8:52: 54:47:53:5e:fb:10:16:09:0a:10:66:24:bf:d9:aa:3a:3a:72: 34:0a:4c:63:4a:ef:f7:ee:7a:7a:3c:e1:a2:7b:66:de:5f:81: 4c:81:ec:15:66:cc:28:e7:c5:75:4e:40:fd:0b:8e:64:0a:55: ea:aa:b6:d9:c3:4a:a7:d1:92:80:36:7f:7e:d2:a0:2e:87:8d: bc:d3:10:3a:b2:ed:13:e5:b5:28:e8:0f:1d:aa:8c:a1:ce:e3: 30:84:47:06:a2:66:83:83:72:e0:d2:6a:6d:8c:09:2d:4f:b7: 6e:1a:c9:dc:07:65:74:d7:a8:58:8d:f2:97:21:62:ce:81:43: 4e:10:0d:22:42:d7:41:81:60:b2:02:59:70:1a:c3:90:c0:a5: 27:09:18:65:c2:f2:c6:43:48:90:fc:dc:0e:24:3a:7d:a0:5c: 1b:36:8f:aa:db:30:e3:03:35:dc:ed:fd:28:e4:41:a7:3d:77: b5:15:d6:fa:86:16:d5:da:91:50:26:bc:ad:8b:29:ca:f1:bc: 8b:3a:39:60:af:8d:4a:bc:14:8f:28:59:c0:7c:07:8f:c8:9b: 3b:66:3f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2CdeKMkfRMns8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NGMyMjhkMzYtYTEwYy00MWRjLWJkYmUtNGVhMWI4MTkxNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfgYLX2JD1VCV5vykB9aBS1D2Lr2d4KoJf5W uFzojn+izll4H9eggTsHYSZ90fYA7l0JMO4eZiVeI7O6KUU+YMM6Y4Z4/HJC1oEr eXcYJEzY3/LjzRFNaB5Lxxoii93yfL32Q2tQxEA3L+0KSqFgTJQAEpBGxR0a2QO0 VX6ZbZDqxIw4i1TSifefTI5KEEboadXVT/TqNW0g0T2bBnbuqFIO2avXNfpwXie/ 4ebeqkJ/C8LX6LzA6vWm0NIT2mUq4MMnRoNzcxnaoqRGqpUethFECIgwi54wZk1r Ehy1FoKq2OcNo1aplzIxstHb91PhGq6qd2qvukCZ+X5mi04GUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTDgR9aBJ2UGB2aRZHYFrCnefR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjcwYWMwOWUtZjZmZC0z ZjBlLTk4NjAtZGU3YzdjNTdkYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJBTmAWlxtYIpBAbdbbYd20MyGt6/NvzRlJGZYDvOuctHroUlRHU177 EBYJChBmJL/Zqjo6cjQKTGNK7/fueno84aJ7Zt5fgUyB7BVmzCjnxXVOQP0LjmQK VeqqttnDSqfRkoA2f37SoC6HjbzTEDqy7RPltSjoDx2qjKHO4zCERwaiZoODcuDS am2MCS1Pt24aydwHZXTXqFiN8pchYs6BQ04QDSJC10GBYLICWXAaw5DApScJGGXC 8sZDSJD83A4kOn2gXBs2j6rbMOMDNdzt/SjkQac9d7UV1vqGFtXakVAmvK2LKcrx vIs6OWCvjUq8FI8oWcB8B4/ImztmPzw= -----END CERTIFICATE-----Generated at Fri Oct 17 10:49:32 2025 by rpki-client