$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1fac9f3-7a58-33d6-b2b3-7a94861e069a.roa File: f1fac9f3-7a58-33d6-b2b3-7a94861e069a.roa (raw, json) Hash identifier: TLoC/6GjVc9oPTirAZ/xiK6oswO0WNgT1HwVooXKWDY= Subject key identifier: 27:2D:F7:6F:73:D4:81:D3:21:07:9B:07:85:EF:42:12:88:78:2A:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A896559F430297A5D75E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1fac9f3-7a58-33d6-b2b3-7a94861e069a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 107.5.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:96:55:9f:43:02:97:a5:d7:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=51254fa8-05fa-4bf3-bffe-2c85497c1bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:76:8c:fe:e5:aa:cc:49:c8:04:d2:61:ec: 30:52:6d:a9:b0:6f:40:a9:fa:e7:17:bd:11:1c:dc: 56:c5:91:00:c2:a5:d2:dc:3a:d5:84:4f:76:ab:54: 0e:b0:4f:f9:a8:d2:4d:d6:1d:be:85:dd:c6:ba:b9: c3:11:db:42:55:2b:c9:0c:1e:e9:a4:2b:d5:4a:91: 74:ef:d4:d3:20:69:4d:ff:75:17:60:f3:8d:7c:ee: 86:71:1e:5a:8c:40:e3:35:17:c4:7f:30:5b:96:46: 63:56:02:cd:82:09:56:25:f1:78:f4:f6:8a:5f:c8: 61:44:7a:bc:b6:a3:c3:4f:9f:f8:5c:c8:17:39:68: ff:32:72:25:a1:74:cf:fb:3c:e7:1e:de:73:ff:d2: 9a:81:0e:b1:09:31:5c:be:f1:57:e2:17:38:27:91: c7:c4:2d:64:ba:b5:c9:77:02:59:e2:e1:c3:f3:c8: a3:8f:5c:74:19:b0:d6:e2:ce:61:f5:87:db:f1:65: b3:a8:20:43:30:84:13:3d:ee:c2:25:41:c0:cc:a2: 9e:5e:fe:6d:87:f9:98:25:03:01:b8:d6:87:eb:64: c8:16:05:1c:1f:c1:e6:a0:91:1a:6d:a4:53:20:c3: 9b:ac:45:be:39:c5:c1:ff:65:fd:48:5c:c8:03:ec: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2D:F7:6F:73:D4:81:D3:21:07:9B:07:85:EF:42:12:88:78:2A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1fac9f3-7a58-33d6-b2b3-7a94861e069a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.5.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0e:3c:e6:69:32:ee:e5:2f:42:9e:31:8a:69:84:9e:37:e3: 6f:c4:a0:41:41:21:ba:9f:e5:5b:fe:d4:77:32:4e:d5:d9:99: 5a:ac:97:09:f7:3f:cb:39:ad:bf:09:38:c8:3f:d7:59:32:61: e1:ea:5c:07:2a:18:53:2b:85:d8:94:ab:d5:6d:d0:64:15:4b: ca:40:1c:0c:07:a1:1d:f2:75:92:8f:cd:22:d1:71:40:63:9e: 82:fb:20:10:c3:70:79:b8:f3:4d:96:3d:23:36:c7:58:71:69: 55:d8:a4:9e:e0:50:a2:f5:79:89:33:b7:37:b9:49:b7:bc:7e: 84:32:9f:92:02:db:e2:5d:39:a6:a1:ff:8b:f7:82:e3:7e:a3: 36:8d:56:53:7e:a4:9d:c3:e2:1c:6e:9a:d8:1d:0a:f3:e4:f3: a0:53:51:4a:0c:ca:1e:ef:b3:df:94:b1:58:18:24:37:34:2f: 99:20:b9:c5:bd:d4:3a:23:9b:2d:51:a8:e7:82:9c:0c:1f:74: 7a:77:d7:a3:68:9f:72:26:88:ad:5e:35:96:c2:53:21:a5:91: e7:5b:3f:a3:01:69:1a:ac:62:d4:5c:5f:0d:34:a1:71:46:d8: 39:2f:55:aa:79:9d:8d:61:19:bc:dd:f7:da:de:53:0b:65:48: f0:70:33:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqJZVn0MCl6XXXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NTEyNTRmYTgtMDVmYS00YmYzLWJmZmUtMmM4NTQ5N2MxYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT12jP7lqsxJyATSYewwUm2psG9AqfrnF70R HNxWxZEAwqXS3DrVhE92q1QOsE/5qNJN1h2+hd3GurnDEdtCVSvJDB7ppCvVSpF0 79TTIGlN/3UXYPONfO6GcR5ajEDjNRfEfzBblkZjVgLNgglWJfF49PaKX8hhRHq8 tqPDT5/4XMgXOWj/MnIloXTP+zznHt5z/9KagQ6xCTFcvvFX4hc4J5HHxC1kurXJ dwJZ4uHD88ijj1x0GbDW4s5h9Yfb8WWzqCBDMIQTPe7CJUHAzKKeXv5th/mYJQMB uNaH62TIFgUcH8HmoJEabaRTIMObrEW+OcXB/2X9SFzIA+wozwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCct929z1IHTIQebB4XvQhKIeCrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjFmYWM5ZjMtN2E1OC0z M2Q2LWIyYjMtN2E5NDg2MWUwNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawXvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUOPOZpMu7lL0KeMYpphJ4342/EoEFBIbqf5Vv+1HcyTtXZmVqslwn3 P8s5rb8JOMg/11kyYeHqXAcqGFMrhdiUq9Vt0GQVS8pAHAwHoR3ydZKPzSLRcUBj noL7IBDDcHm4802WPSM2x1hxaVXYpJ7gUKL1eYkztze5Sbe8foQyn5IC2+JdOaah /4v3guN+ozaNVlN+pJ3D4hxumtgdCvPk86BTUUoMyh7vs9+UsVgYJDc0L5kgucW9 1Dojmy1RqOeCnAwfdHp316Non3ImiK1eNZbCUyGlkedbP6MBaRqsYtRcXw00oXFG 2DkvVap5nY1hGbzd99reUwtlSPBwM9U= -----END CERTIFICATE-----Generated at Tue Oct 21 21:58:58 2025 by rpki-client