$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa File: e28dc1da-cf85-3290-ba33-6973d3a63483.roa (raw, json) Hash identifier: U3SyaN7f42RmYZ1rcyvYoCSZ1v7NR9/cIPzO2a/OeuE= Subject key identifier: 0F:F5:48:C2:2B:24:DA:04:D6:AC:03:33:C5:24:4E:C4:F9:B3:6B:A6 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B95A7977A1C9DDC38CB7B5E00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 62651 IP address blocks: 108.171.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:97:7a:1c:9d:dc:38:cb:7b:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=44f4455b-db46-49df-bd71-58ecaf641e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:44:45:b5:e7:24:dc:84:4e:96:08:59:ec: aa:26:b0:2e:e0:96:22:d8:ab:74:e6:82:c7:c2:b1: e2:1c:22:9d:e6:40:c0:e4:ff:57:f1:cd:01:f7:e7: 13:d2:4e:74:dc:80:37:4f:5b:fe:62:7d:4f:49:0e: 41:27:f4:33:29:73:37:95:c4:a5:5f:41:98:bf:ec: 59:9d:18:7f:1d:80:61:2a:44:be:45:89:2e:3d:e8: 53:6c:e7:d3:95:11:3c:e1:8e:79:42:55:de:b3:25: 9e:b3:8e:2e:87:ff:45:a8:9a:44:56:a9:b4:2d:e2: 1d:2e:ba:16:36:59:cc:79:58:75:45:fa:be:1c:ac: ee:06:26:3b:53:7a:c0:57:7b:b4:95:ca:b8:b3:44: a2:de:c7:4d:08:c3:81:30:7f:3c:e2:44:3a:bd:bd: 03:ea:10:2d:9d:23:50:c3:55:56:6b:5e:5a:a5:11: d0:87:f9:37:03:51:96:52:68:d9:06:b6:db:d7:59: db:1f:20:2c:56:9c:ac:36:5f:c3:64:bd:2c:57:eb: 69:fd:c4:c7:98:b1:a0:82:cc:4d:6a:8e:0b:d8:88: d2:09:b9:d7:24:6e:f7:9d:93:fc:87:bd:62:e3:b6: 22:a4:ba:9e:57:c8:85:f4:5a:2a:72:cf:c0:89:f3: 44:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F5:48:C2:2B:24:DA:04:D6:AC:03:33:C5:24:4E:C4:F9:B3:6B:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:0b:c1:26:0f:8c:4f:68:f5:e5:07:7d:00:80:60:8c:39:84: 79:b9:0e:45:50:e5:a2:87:5c:10:ea:7f:c0:83:3c:8b:37:1e: ad:c6:a9:f4:20:00:9e:e0:ca:fc:2c:99:bf:36:a1:a1:16:34: e5:18:9c:c7:a6:4c:eb:c1:dd:dd:bf:3f:2e:6b:89:83:f6:f9: 56:96:70:0f:1c:f3:63:6c:a0:41:1f:a8:28:df:23:64:46:7e: d2:bc:30:27:62:ca:14:5a:50:ae:83:cd:5c:ed:29:39:48:26: 47:fa:63:33:f3:04:83:97:c6:8d:44:2d:f2:36:e1:72:6e:8a: f0:04:52:36:c0:f9:e0:4d:92:b2:04:45:28:a3:9d:bd:aa:9b: 99:26:c5:4c:d3:6c:9a:26:e8:e0:b0:c1:30:66:6f:d8:78:00: 4a:08:f2:23:96:94:11:55:2b:f7:af:82:24:a2:6e:51:f0:d2: 02:f2:f6:ee:18:79:5f:07:a0:b1:be:e5:76:b7:3f:f4:3c:13: 17:1b:94:11:5f:18:0b:4f:e4:ff:bf:c1:06:eb:db:39:6b:6f: 87:92:1e:f4:0a:5a:a2:b1:15:82:02:71:96:5a:d6:40:1d:2a: f9:35:12:04:39:42:35:a3:54:e9:64:dd:0b:15:95:46:1e:08: b4:5e:90:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5d6HJ3cOMt7XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDRmNDQ1NWItZGI0Ni00OWRmLWJkNzEtNThlY2FmNjQxZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mlERbXnJNyETpYIWeyqJrAu4JYi2Kt05oLH wrHiHCKd5kDA5P9X8c0B9+cT0k503IA3T1v+Yn1PSQ5BJ/QzKXM3lcSlX0GYv+xZ nRh/HYBhKkS+RYkuPehTbOfTlRE84Y55QlXesyWes44uh/9FqJpEVqm0LeIdLroW NlnMeVh1Rfq+HKzuBiY7U3rAV3u0lcq4s0Si3sdNCMOBMH884kQ6vb0D6hAtnSNQ w1VWa15apRHQh/k3A1GWUmjZBrbb11nbHyAsVpysNl/DZL0sV+tp/cTHmLGggsxN ao4L2IjSCbnXJG73nZP8h71i47YipLqeV8iF9Foqcs/AifNEzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/1SMIrJNoE1qwDM8UkTsT5s2umMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZTI4ZGMxZGEtY2Y4NS0z MjkwLWJhMzMtNjk3M2QzYTYzNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKtnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQLwSYPjE9o9eUHfQCAYIw5hHm5DkVQ5aKHXBDqf8CDPIs3Hq3GqfQg AJ7gyvwsmb82oaEWNOUYnMemTOvB3d2/Py5riYP2+VaWcA8c82NsoEEfqCjfI2RG ftK8MCdiyhRaUK6DzVztKTlIJkf6YzPzBIOXxo1ELfI24XJuivAEUjbA+eBNkrIE RSijnb2qm5kmxUzTbJom6OCwwTBmb9h4AEoI8iOWlBFVK/evgiSiblHw0gLy9u4Y eV8HoLG+5Xa3P/Q8ExcblBFfGAtP5P+/wQbr2zlrb4eSHvQKWqKxFYICcZZa1kAd Kvk1EgQ5QjWjVOlk3QsVlUYeCLRekGU= -----END CERTIFICATE-----Generated at Wed Oct 22 11:43:13 2025 by rpki-client