$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d3b96607-9b94-316f-8f50-ede5c640b815.roa File: d3b96607-9b94-316f-8f50-ede5c640b815.roa (raw, json) Hash identifier: CGIVU1Cjr1cahwkfv1l4Rjnyqx41HkewZWWgdwNEN/A= Subject key identifier: E3:FE:E4:3A:46:ED:A0:7A:2E:B8:E1:E4:62:B8:8B:F1:B0:0B:E8:37 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584B2496D0C270AB98A4F2F2C700 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d3b96607-9b94-316f-8f50-ede5c640b815.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 5769 IP address blocks: 107.171.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d0:c2:70:ab:98:a4:f2:f2:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=fbe3f17d-6c5d-4ff1-b8ca-319cf17769a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c7:2e:c6:3b:eb:fc:54:d4:da:9c:5f:cc:ec: 79:5e:ec:32:ac:25:bd:76:42:2a:f7:84:71:85:3d: a3:c2:d6:a1:49:80:ca:34:38:e7:2d:d5:ec:e2:0e: 70:e9:d2:9b:3a:fd:73:2b:41:ca:58:a8:73:84:07: 92:af:ff:67:bd:e7:87:0b:23:ce:55:69:93:27:2f: b6:f5:ce:ff:e3:29:4f:19:2c:a2:24:1f:b0:a7:8f: 4b:89:b1:8a:fc:a3:f0:92:10:8a:ed:6f:4b:55:c7: be:b6:ad:2a:b1:94:df:2c:67:19:81:44:f5:66:5e: 2d:68:b6:4e:02:8d:24:a4:8b:08:f5:28:98:5f:33: 74:45:b7:68:f0:52:9f:bf:32:eb:47:b1:9f:48:d8: 31:c6:f4:a4:d0:a5:36:2b:c8:08:cb:ad:2b:d9:5e: b0:78:56:b0:51:02:1f:04:fa:9b:7c:46:ec:fe:52: a1:54:f3:ef:eb:c9:6f:48:cb:5c:10:12:a9:c5:34: 50:c9:8b:a3:68:b1:ea:9f:f4:26:f1:f7:f5:a8:56: 05:c5:2d:a2:56:89:b9:a9:eb:89:56:b7:ce:e0:34: 4f:50:02:16:2c:31:08:ce:65:b9:57:06:e3:4e:32: 27:42:29:06:9a:8a:d5:e1:88:e7:32:25:45:59:6f: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FE:E4:3A:46:ED:A0:7A:2E:B8:E1:E4:62:B8:8B:F1:B0:0B:E8:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d3b96607-9b94-316f-8f50-ede5c640b815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 107.171.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f4:7f:27:36:e5:f1:f3:cf:60:23:d9:78:94:c5:c7:a0:29: 5e:f0:0f:49:67:17:7e:fd:8f:bf:c9:e9:20:47:26:84:39:b4: 6c:49:cf:ab:56:92:e7:fc:9f:7f:e0:32:12:af:7d:e0:7b:07: 44:27:ec:f2:03:e0:51:c8:e0:80:f1:9c:99:ef:d4:40:a5:bb: 97:4f:c4:9f:70:05:43:10:1a:a8:eb:d2:d6:e5:e3:65:8e:fe: 1e:5e:9d:db:a2:5a:81:bf:d4:66:1a:47:6b:36:35:c0:5d:a1: 6d:ec:2d:8a:0c:a7:b2:78:cf:ed:b0:f4:0a:69:a4:59:7b:3f: 11:9b:9d:ef:44:42:4c:eb:38:a7:51:f2:43:1d:26:c0:26:48: 79:5b:14:46:2c:72:2d:e6:74:29:5b:18:8f:59:dc:78:1d:c7: 05:57:12:c6:99:55:6b:f7:99:5d:ac:a9:96:1e:c0:df:67:1e: c2:36:36:d0:84:e6:2d:34:44:5d:b0:f7:cd:d1:a5:37:97:79: 96:b2:5d:28:0b:59:5e:32:2d:84:85:cd:14:b9:f9:cf:c7:90: af:75:5f:84:e4:ca:ba:67:64:37:12:df:90:c6:a5:a7:6f:3d: 8f:5e:8f:9e:b2:44:66:24:d2:16:cb:29:9a:d7:43:83:17:fa: aa:8e:94:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltDCcKuYpPLyxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmJlM2YxN2QtNmM1ZC00ZmYxLWI4Y2EtMzE5Y2YxNzc2OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48cuxjvr/FTU2pxfzOx5XuwyrCW9dkIq94Rx hT2jwtahSYDKNDjnLdXs4g5w6dKbOv1zK0HKWKhzhAeSr/9nveeHCyPOVWmTJy+2 9c7/4ylPGSyiJB+wp49LibGK/KPwkhCK7W9LVce+tq0qsZTfLGcZgUT1Zl4taLZO Ao0kpIsI9SiYXzN0Rbdo8FKfvzLrR7GfSNgxxvSk0KU2K8gIy60r2V6weFawUQIf BPqbfEbs/lKhVPPv68lvSMtcEBKpxTRQyYujaLHqn/Qm8ff1qFYFxS2iVom5qeuJ VrfO4DRPUAIWLDEIzmW5VwbjTjInQikGmorV4YjnMiVFWW8ahwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP+5DpG7aB6Lrjh5GK4i/GwC+g3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvZDNiOTY2MDctOWI5NC0z MTZmLThmNTAtZWRlNWM2NDBiODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHa6uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/0fyc25fHzz2Aj2XiUxcegKV7wD0lnF379j7/J6SBHJoQ5tGxJz6tW kuf8n3/gMhKvfeB7B0Qn7PID4FHI4IDxnJnv1EClu5dPxJ9wBUMQGqjr0tbl42WO /h5enduiWoG/1GYaR2s2NcBdoW3sLYoMp7J4z+2w9ApppFl7PxGbne9EQkzrOKdR 8kMdJsAmSHlbFEYsci3mdClbGI9Z3HgdxwVXEsaZVWv3mV2sqZYewN9nHsI2NtCE 5i00RF2w983RpTeXeZayXSgLWV4yLYSFzRS5+c/HkK91X4TkyrpnZDcS35DGpadv PY9ej56yRGYk0hbLKZrXQ4MX+qqOlEQ= -----END CERTIFICATE-----Generated at Thu Sep 18 05:47:50 2025 by rpki-client