$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8504a7ff-eb45-3e58-b7b0-e600c40fcb3a.roa File: 8504a7ff-eb45-3e58-b7b0-e600c40fcb3a.roa (raw, json) Hash identifier: iM51t6cFI5Pkn0hK89KJ4SuE04Ck5pzTRgbl2dWCrMQ= Subject key identifier: 40:EF:EC:42:48:72:E3:DD:4E:9E:64:96:2A:E9:F9:E8:1F:B8:6F:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A895A2B1212A62D938ADBC Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8504a7ff-eb45-3e58-b7b0-e600c40fcb3a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 107.5.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:95:a2:b1:21:2a:62:d9:38:ad:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=da35445e-197d-4a6e-8791-1cfb0514df64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:14:cd:dc:7c:4c:f3:9c:74:81:17:4a:3c: f3:60:b1:90:e8:34:f1:55:35:94:ec:a3:25:11:f4: a0:98:84:4e:2b:0d:c4:9d:b5:bf:f9:82:73:15:67: 84:82:0c:1e:ad:f6:b7:93:ba:9a:4a:17:39:3d:4a: b2:5c:e6:79:7b:98:18:f3:49:9f:7b:1f:ad:5e:5b: 5f:cd:06:a1:ee:d9:9b:0a:b7:c5:03:68:50:5c:82: d5:98:34:f3:b5:81:a5:a7:9e:7e:c1:e2:ed:4d:dc: d9:56:fa:e0:34:6b:b3:38:56:33:32:5b:52:08:cf: 10:b0:9f:40:a1:d0:0e:c4:6a:85:3c:7a:9c:a2:19: 7d:80:e7:b5:21:f6:37:e3:57:69:2c:0f:b5:1f:48: 1a:03:90:2e:c4:75:1d:ef:55:11:03:97:36:ae:1e: f6:05:a0:2d:50:70:89:ea:f3:12:3b:2b:2a:b6:5b: 02:4a:22:f4:bb:e6:fc:55:d3:bb:ca:c6:da:52:88: c1:0a:ce:6a:bf:71:fe:82:d8:ea:dc:c3:12:da:f1: 6b:f2:9b:b4:5e:d7:be:c5:89:59:e6:54:63:7b:9a: a6:0d:de:c0:9f:13:6a:c6:78:01:a0:18:14:63:55: 81:c5:52:b6:f8:d0:03:55:df:aa:17:62:c4:cd:11: d6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:EC:42:48:72:E3:DD:4E:9E:64:96:2A:E9:F9:E8:1F:B8:6F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8504a7ff-eb45-3e58-b7b0-e600c40fcb3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.5.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:28:06:fd:a3:19:f3:50:5c:e8:73:8d:95:2b:b6:c1:d0:5c: b4:91:59:8b:21:02:ff:77:47:66:c2:0e:13:22:b9:e7:76:ea: 68:d4:db:0c:40:9e:03:bb:78:14:0a:58:88:b3:0e:06:d7:02: be:a8:69:3d:21:2f:61:7f:2e:3b:36:3b:0c:d5:e0:f9:fd:b6: e1:97:2e:44:78:77:b2:32:90:79:ae:f4:bb:80:9d:52:df:4d: c9:86:db:d2:2b:64:ef:c9:f7:03:82:f0:10:5e:4f:b1:0b:56: a0:20:55:84:36:a7:93:37:6c:92:7d:d5:39:1f:ec:41:16:9b: 96:aa:df:bf:d4:82:ee:60:11:e6:f2:8c:dc:c1:0e:85:0d:50: 05:7d:9f:f3:b1:51:3e:91:8b:82:55:07:e0:97:3a:ff:c5:af: 8a:08:32:fd:e0:e3:f8:af:6b:12:0b:a3:bb:00:d6:c9:ff:7a: f1:66:60:d6:79:65:20:11:fa:bd:6b:62:59:1a:ec:eb:15:03: e3:e9:65:07:64:4d:a5:3e:cf:74:ca:0f:0a:a1:9e:15:a9:39: a3:55:f8:35:09:4f:4f:f2:bf:13:9c:3c:2a:77:fe:9a:c9:6a: 5f:94:ac:7c:d0:24:37:7e:30:ba:8f:27:4d:ca:a9:ab:20:2c: cd:1e:73:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqJWisSEqYtk4rbwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZGEzNTQ0NWUtMTk3ZC00YTZlLTg3OTEtMWNmYjA1MTRkZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVIUzdx8TPOcdIEXSjzzYLGQ6DTxVTWU7KMl EfSgmIROKw3EnbW/+YJzFWeEggwerfa3k7qaShc5PUqyXOZ5e5gY80mfex+tXltf zQah7tmbCrfFA2hQXILVmDTztYGlp55+weLtTdzZVvrgNGuzOFYzMltSCM8QsJ9A odAOxGqFPHqcohl9gOe1IfY341dpLA+1H0gaA5AuxHUd71URA5c2rh72BaAtUHCJ 6vMSOysqtlsCSiL0u+b8VdO7ysbaUojBCs5qv3H+gtjq3MMS2vFr8pu0Xte+xYlZ 5lRje5qmDd7AnxNqxngBoBgUY1WBxVK2+NADVd+qF2LEzRHWFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDv7EJIcuPdTp5klirp+egfuG9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODUwNGE3ZmYtZWI0NS0z ZTU4LWI3YjAtZTYwMGM0MGZjYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDawWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMoBv2jGfNQXOhzjZUrtsHQXLSRWYshAv93R2bCDhMiued26mjU2wxA ngO7eBQKWIizDgbXAr6oaT0hL2F/Ljs2OwzV4Pn9tuGXLkR4d7IykHmu9LuAnVLf TcmG29IrZO/J9wOC8BBeT7ELVqAgVYQ2p5M3bJJ91Tkf7EEWm5aq37/Ugu5gEeby jNzBDoUNUAV9n/OxUT6Ri4JVB+CXOv/Fr4oIMv3g4/ivaxILo7sA1sn/evFmYNZ5 ZSAR+r1rYlka7OsVA+PpZQdkTaU+z3TKDwqhnhWpOaNV+DUJT0/yvxOcPCp3/prJ al+UrHzQJDd+MLqPJ03KqasgLM0ec8Y= -----END CERTIFICATE-----Generated at Wed Oct 22 05:39:36 2025 by rpki-client