$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa File: fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa (raw, json) Hash identifier: T/eFWxelIcfdUkXNtuRni4Wg/H9CzUKOaYFdBYp3mro= Subject key identifier: E0:38:08:2F:DB:39:D8:C0:17:70:D4:93:AE:46:93:97:87:99:97:0D Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B2066D92DBC34CF110E003C80 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22652 IP address blocks: 173.231.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:d9:2d:bc:34:cf:11:0e:00:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=a63f0bfb-04b7-4f44-9bb9-2cee3749082e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:de:11:34:d5:2f:c3:8b:39:af:c0:4c:58:11: 8d:cb:e2:d4:0b:60:d0:5b:b6:b3:ee:2d:5c:46:2d: 64:49:98:90:14:06:b5:3e:06:50:29:fb:b0:ad:4e: 7a:2e:b7:bb:bc:ef:c1:75:03:f0:02:c0:dc:71:99: 6d:b7:4a:39:7e:8b:1c:7c:f6:ef:17:fe:f2:26:6a: 7a:db:d5:5b:5d:34:89:82:92:a4:e9:59:98:62:2b: 14:4d:95:da:e6:70:fd:9c:6b:01:da:7e:25:63:c7: 16:5b:f6:5e:98:3b:4d:89:a4:b7:83:df:fa:46:ad: 1f:ae:0a:ec:9a:f6:38:5f:c9:bd:25:12:6b:19:09: 7d:54:00:44:eb:c6:0b:f2:ba:f0:1e:89:0c:dc:aa: 58:3a:08:88:b5:04:df:15:b0:ef:ec:21:69:47:59: 8c:e1:0f:88:61:94:35:4b:b3:01:cc:bd:fe:e5:0c: 96:de:b3:65:01:36:00:62:ee:4b:ab:e2:ef:0a:40: b9:59:52:bd:37:96:4c:e6:34:9f:8b:3b:b9:85:85: 19:3b:66:4d:f3:65:42:26:fc:f2:57:cf:31:bb:ad: cc:6d:ee:b4:79:4f:6c:3a:08:be:45:c1:69:2c:2c: 53:a4:7d:ff:4a:39:28:df:78:f7:53:d3:2b:cd:bd: e2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:38:08:2F:DB:39:D8:C0:17:70:D4:93:AE:46:93:97:87:99:97:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.231.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:af:4a:15:15:2e:20:19:5d:b3:45:77:76:aa:e9:a7:26:9f: 01:d1:20:64:c4:1c:6b:44:fe:4c:16:eb:98:d3:c4:46:55:e9: f3:71:44:b6:12:36:55:1d:bd:f6:9c:96:36:51:78:11:53:08: c9:5f:23:ce:e5:a9:e6:2e:01:f7:8c:c6:ea:97:4b:9a:6f:70: 6a:1b:f7:cf:47:2d:7c:d8:38:eb:7b:c3:ce:1c:9f:48:c9:64: f2:90:bd:18:6b:d2:42:17:d6:b0:db:99:1a:d9:4b:b7:dc:70: 71:42:f1:a6:ab:74:e3:48:bf:53:e2:02:60:5e:b6:58:dc:f5: 3f:a8:74:8e:81:79:c8:c8:ab:7e:58:e3:06:57:07:65:3c:f1: 2b:5f:3a:93:61:00:6a:9a:22:07:6c:54:cb:f6:3d:38:ca:b2: 5e:cf:22:89:a3:b7:90:76:9e:aa:77:52:cb:78:ef:62:ee:60: 93:a4:2c:33:88:0a:e5:a9:71:8e:4a:0f:b7:48:69:32:67:52: 60:b2:03:ae:1f:80:37:c1:d3:e9:c1:61:6b:9c:c8:09:89:10: 1e:e7:e0:9c:5f:72:f9:89:92:c2:9f:2c:ee:86:28:17:0f:6c: 05:40:65:b8:c2:be:b3:e4:36:fe:76:0b:f4:d1:83:3b:6e:2c: df:0a:19:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtktvDTPEQ4APIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YTYzZjBiZmItMDRiNy00ZjQ0LTliYjktMmNlZTM3NDkwODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN4RNNUvw4s5r8BMWBGNy+LUC2DQW7az7i1c Ri1kSZiQFAa1PgZQKfuwrU56Lre7vO/BdQPwAsDccZltt0o5foscfPbvF/7yJmp6 29VbXTSJgpKk6VmYYisUTZXa5nD9nGsB2n4lY8cWW/ZemDtNiaS3g9/6Rq0frgrs mvY4X8m9JRJrGQl9VABE68YL8rrwHokM3KpYOgiItQTfFbDv7CFpR1mM4Q+IYZQ1 S7MBzL3+5QyW3rNlATYAYu5Lq+LvCkC5WVK9N5ZM5jSfizu5hYUZO2ZN82VCJvzy V88xu63Mbe60eU9sOgi+RcFpLCxTpH3/Sjko33j3U9Mrzb3i7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA4CC/bOdjAF3DUk65Gk5eHmZcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZmE0NDhhMzctMGEyMS0z NjNlLWJlZjMtMmY5ZWU3ZGM1NjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAredsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqvShUVLiAZXbNFd3aq6acmnwHRIGTEHGtE/kwW65jTxEZV6fNxRLYS NlUdvfacljZReBFTCMlfI87lqeYuAfeMxuqXS5pvcGob989HLXzYOOt7w84cn0jJ ZPKQvRhr0kIX1rDbmRrZS7fccHFC8aardONIv1PiAmBetljc9T+odI6BecjIq35Y 4wZXB2U88StfOpNhAGqaIgdsVMv2PTjKsl7PIomjt5B2nqp3Ust472LuYJOkLDOI CuWpcY5KD7dIaTJnUmCyA64fgDfB0+nBYWucyAmJEB7n4JxfcvmJksKfLO6GKBcP bAVAZbjCvrPkNv52C/TRgztuLN8KGbU= -----END CERTIFICATE-----Generated at Thu Sep 18 19:03:15 2025 by rpki-client