$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ce0ce094-4f4c-3be6-9a20-56a41624e713.roa File: ce0ce094-4f4c-3be6-9a20-56a41624e713.roa (raw, json) Hash identifier: 5OhLXY6dxePsk23paqPQeuV0zS40WcB1Q323FOt3PDs= Subject key identifier: BF:A2:45:84:9A:41:90:06:A6:25:77:C0:65:47:7D:A3:16:88:9A:20 Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce Certificate serial: 010D0C9F4328584B95A7999AEB61728B7E7F4540 Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ce0ce094-4f4c-3be6-9a20-56a41624e713.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 8560 IP address blocks: 108.175.0.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:99:9a:eb:61:72:8b:7e:7f:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d137f0d1-1fb6-40e0-96e7-d0644a6dbb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:9d:90:9d:03:65:81:61:c5:5c:99:d9:09: 11:e9:cf:1d:02:66:11:44:a7:b2:a8:24:b5:8a:b0: f5:ce:01:ad:c6:f2:05:b0:1a:27:06:65:83:70:a4: 67:52:9c:e2:0c:ad:92:75:48:e1:a5:d4:fe:be:2c: 0f:38:dc:10:e8:66:b1:96:73:2a:f2:c4:63:7f:71: 49:79:c6:a0:2a:26:46:4e:55:e8:1f:89:d2:4f:a1: be:8f:63:f4:8e:a8:38:63:77:f6:1c:fa:50:95:db: 38:b4:65:94:43:b0:2e:56:01:1d:06:49:87:f7:b9: 80:b6:f7:10:42:82:29:71:26:be:d4:24:fc:74:29: bb:5c:14:de:b6:8b:6a:a4:f5:55:5a:cb:24:df:aa: 77:69:a0:16:85:c7:de:a1:b9:64:26:47:45:52:8b: bb:ff:48:67:b6:c4:c3:fd:a0:dc:62:1c:1a:ad:0b: 0c:df:4f:0a:af:16:f8:47:bd:41:4d:ce:b3:39:56: fe:d3:09:65:3a:a2:65:c3:c7:4f:9c:c4:0f:ea:e9: 80:5d:d9:44:79:3a:28:e4:67:e0:b9:a2:ab:58:0c: 4d:2b:73:cb:3c:f2:63:11:bd:cd:71:00:5f:72:9d: 97:04:c0:a3:a3:d6:ce:45:53:27:79:7c:32:36:f3: 19:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A2:45:84:9A:41:90:06:A6:25:77:C0:65:47:7D:A3:16:88:9A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ce0ce094-4f4c-3be6-9a20-56a41624e713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl X509v3 Authority Key Identifier: keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer sbgp-ipAddrBlock: critical IPv4: 108.175.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:eb:7f:12:a8:49:30:3c:01:13:3d:45:5e:2d:ba:ab:00:4b: 8f:1c:92:5a:88:2a:56:43:95:27:48:6f:0e:82:73:9a:d1:5b: 39:e5:0f:2d:04:d3:87:39:9b:5f:3a:45:cf:83:9c:12:6c:19: e9:32:5b:89:f1:e4:06:c1:08:31:c3:16:dd:42:94:93:7f:f7: 50:b1:b0:a7:b0:2b:3d:a3:6d:23:e3:d7:7a:4d:2a:35:13:84: 27:69:45:e9:59:ed:3a:01:5c:d6:8a:e7:dc:3e:6c:c6:45:96: 76:a6:0e:ec:51:01:1e:8f:ec:dc:aa:e4:f4:7e:36:07:2d:7c: 9a:52:47:70:fd:05:8c:c8:50:e7:d7:70:3d:bd:84:57:42:38: 3b:0a:45:86:d5:b4:87:0a:51:fb:26:60:d3:c4:19:68:35:c7: e9:ca:71:c0:fe:38:b1:be:6a:a6:fb:2f:5c:e9:c2:dd:c1:0e: 6a:c5:03:38:14:70:ef:67:74:b1:19:3c:a8:c0:d1:3d:9c:a2: 04:6a:51:a0:cc:90:a1:d4:a3:d8:32:1c:3f:20:ad:d9:89:ef: d6:49:0a:b5:5b:9b:b5:80:89:f3:fe:b5:69:af:d9:bd:c0:56: f0:83:96:7e:26:db:b3:b7:48:fb:4e:b1:c3:d4:32:e4:e9:80: b8:d0:77:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5ma62Fyi35/RUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm MWNlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDEzN2YwZDEtMWZiNi00MGUwLTk2ZTctZDA2NDRhNmRiYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2SdkJ0DZYFhxVyZ2QkR6c8dAmYRRKeyqCS1 irD1zgGtxvIFsBonBmWDcKRnUpziDK2SdUjhpdT+viwPONwQ6GaxlnMq8sRjf3FJ ecagKiZGTlXoH4nST6G+j2P0jqg4Y3f2HPpQlds4tGWUQ7AuVgEdBkmH97mAtvcQ QoIpcSa+1CT8dCm7XBTetotqpPVVWssk36p3aaAWhcfeoblkJkdFUou7/0hntsTD /aDcYhwarQsM308Krxb4R71BTc6zOVb+0wllOqJlw8dPnMQP6umAXdlEeToo5Gfg uaKrWAxNK3PLPPJjEb3NcQBfcp2XBMCjo9bORVMneXwyNvMZ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+iRYSaQZAGpiV3wGVHfaMWiJogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3 OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvY2UwY2UwOTQtNGY0Yy0z YmU2LTlhMjAtNTZhNDE2MjRlNzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1 ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0 MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbK8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbrfxKoSTA8ARM9RV4tuqsAS48cklqIKlZDlSdIbw6Cc5rRWznlDy0E 04c5m186Rc+DnBJsGekyW4nx5AbBCDHDFt1ClJN/91CxsKewKz2jbSPj13pNKjUT hCdpRelZ7ToBXNaK59w+bMZFlnamDuxRAR6P7Nyq5PR+NgctfJpSR3D9BYzIUOfX cD29hFdCODsKRYbVtIcKUfsmYNPEGWg1x+nKccD+OLG+aqb7L1zpwt3BDmrFAzgU cO9ndLEZPKjA0T2cogRqUaDMkKHUo9gyHD8grdmJ79ZJCrVbm7WAifP+tWmv2b3A VvCDln4m27O3SPtOscPUMuTpgLjQd5w= -----END CERTIFICATE-----Generated at Tue Oct 21 16:11:31 2025 by rpki-client