$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa File: 79befa65-2932-354e-aa3c-9d8fa2f95a14.roa (raw, json) Hash identifier: ABR3DwTozn+I8c+9a2I3wL+KaNqKsmTXg0SAP/ZtYvM= Subject key identifier: 40:54:FA:DA:41:64:C1:BA:88:2A:7D:45:B9:87:CF:A5:E4:32:E8:0A Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584ADECBBF0BADAD275C676A9970 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 8014 IP address blocks: 108.60.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:bf:0b:ad:ad:27:5c:67:6a:99:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=91de441d-3504-411d-b924-dea5e5868bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:03:81:9e:ea:6f:f7:6a:6c:49:9d:54:03: e6:7f:ad:b3:b2:a5:76:57:28:7f:e8:0a:6d:f1:6e: d4:e4:ae:ae:a4:06:0c:73:4c:75:d6:65:4a:7a:12: 7a:ef:ea:6e:86:ba:cd:9f:08:63:b6:00:a3:d9:a5: e7:88:81:e3:7a:af:9a:50:66:7a:8f:06:88:9a:95: d9:39:c1:e0:b0:68:e7:24:ea:52:5c:68:2f:59:ff: fa:96:77:87:6c:45:6c:90:2f:5d:37:e5:40:df:e2: d0:df:50:28:61:ad:18:26:43:b2:f6:b6:8d:46:9c: 8e:1d:95:fd:ec:c4:35:30:4f:84:bb:76:1f:30:33: 39:de:56:ca:80:36:bd:52:aa:86:92:b2:9b:7f:3b: 64:14:fc:c3:e6:82:ea:7e:a8:03:21:13:34:fd:ff: 57:26:17:77:71:d8:35:c0:be:91:c5:4e:19:d8:b3: 6f:f0:cb:c2:a3:95:b0:c3:c9:f8:58:82:86:8f:0a: 15:da:58:a6:1f:db:76:1b:b5:7c:6a:b9:40:6f:95: 8d:fe:97:22:52:5d:5c:85:1f:bf:67:dc:22:3a:f7: 15:cf:86:3e:26:b4:a4:7d:7e:9a:6c:6f:53:20:0a: a3:42:1e:c5:32:0d:42:da:cd:3e:e4:6f:2b:0d:48: b8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:54:FA:DA:41:64:C1:BA:88:2A:7D:45:B9:87:CF:A5:E4:32:E8:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 108.60.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:58:69:3d:a0:08:ab:4b:9d:a2:69:77:9e:0f:08:7c:37:1d: d9:f3:10:45:6c:1e:e8:47:43:8e:09:a2:79:35:fe:f5:1f:e1: a3:35:b0:d9:9d:58:ab:ca:46:10:1b:b2:04:81:ef:57:d7:b1: 43:de:34:92:67:fb:8b:4f:9d:7e:bf:fe:60:5c:7e:e5:a4:e0: 82:a3:8a:6d:04:a1:64:b6:ac:72:2b:e9:b9:68:04:e7:db:69: b7:a1:82:0a:d9:7c:0e:1a:f2:69:c5:1f:6a:66:45:0d:68:de: 49:85:a1:49:a1:e7:76:7d:04:79:d1:20:14:98:6f:9c:bc:19: 2b:e3:53:64:65:9b:54:ab:d5:db:fc:80:61:96:eb:7a:97:87: 7e:14:f0:32:69:64:c8:26:67:0a:3b:04:2b:c2:08:29:51:44: 7e:01:6e:18:7b:71:8b:e8:1b:69:a8:55:d1:7f:d8:c3:dc:a3: b2:fe:46:6a:cd:11:ca:85:cd:af:c2:37:93:7d:fd:de:45:dd: 38:7d:e3:ad:e1:a8:96:43:1c:00:a8:8c:58:f9:c0:b4:86:c6: cf:42:99:79:45:c1:64:4d:b8:f7:a7:b5:39:99:99:ac:c9:a5: fb:e8:4a:29:d7:7c:b8:aa:22:88:5e:8f:50:f6:7c:03:7e:ad: d9:60:e7:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey78Lra0nXGdqmXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk OTFkZTQ0MWQtMzUwNC00MTFkLWI5MjQtZGVhNWU1ODY4YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncgDgZ7qb/dqbEmdVAPmf62zsqV2Vyh/6Apt 8W7U5K6upAYMc0x11mVKehJ67+puhrrNnwhjtgCj2aXniIHjeq+aUGZ6jwaImpXZ OcHgsGjnJOpSXGgvWf/6lneHbEVskC9dN+VA3+LQ31AoYa0YJkOy9raNRpyOHZX9 7MQ1ME+Eu3YfMDM53lbKgDa9UqqGkrKbfztkFPzD5oLqfqgDIRM0/f9XJhd3cdg1 wL6RxU4Z2LNv8MvCo5Www8n4WIKGjwoV2limH9t2G7V8arlAb5WN/pciUl1chR+/ Z9wiOvcVz4Y+JrSkfX6abG9TIAqjQh7FMg1C2s0+5G8rDUi4DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBU+tpBZMG6iCp9RbmHz6XkMugKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvNzliZWZhNjUtMjkzMi0z NTRlLWFhM2MtOWQ4ZmEyZjk1YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDzjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNYaT2gCKtLnaJpd54PCHw3HdnzEEVsHuhHQ44Jonk1/vUf4aM1sNmd WKvKRhAbsgSB71fXsUPeNJJn+4tPnX6//mBcfuWk4IKjim0EoWS2rHIr6bloBOfb abehggrZfA4a8mnFH2pmRQ1o3kmFoUmh53Z9BHnRIBSYb5y8GSvjU2Rlm1Sr1dv8 gGGW63qXh34U8DJpZMgmZwo7BCvCCClRRH4Bbhh7cYvoG2moVdF/2MPco7L+RmrN EcqFza/CN5N9/d5F3Th9463hqJZDHACojFj5wLSGxs9CmXlFwWRNuPentTmZmazJ pfvoSinXfLiqIohej1D2fAN+rdlg5xE= -----END CERTIFICATE-----Generated at Fri Oct 24 00:50:54 2025 by rpki-client