$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9a7a331-9358-365d-9847-d85d99ad19dc.roa File: b9a7a331-9358-365d-9847-d85d99ad19dc.roa (raw, json) Hash identifier: fZBZQHvDEb8lENZRf+QPNc7vcqUYM5ojT2QWB2/Sqxw= Subject key identifier: 18:91:F4:47:A0:F7:C6:7A:51:B4:CF:0F:64:0C:FF:1B:31:E3:6F:10 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BB192600936D98BB1EFA9E640 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9a7a331-9358-365d-9847-d85d99ad19dc.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 108.178.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:60:09:36:d9:8b:b1:ef:a9:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=79653f09-eac1-4083-8438-5350d6188433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:4e:c5:42:da:fa:4a:de:b5:c6:af:5d:b2: 37:62:15:31:50:51:66:36:ef:e7:74:f5:0c:da:64: b6:24:cf:e6:3e:58:3f:e5:45:06:08:0b:86:be:e7: d8:17:91:c1:99:6c:20:1c:08:30:99:cc:e5:7f:f6: e2:cc:d6:49:72:44:eb:e1:8b:e2:e4:4d:c9:d7:64: 6e:46:89:39:9f:e6:dd:32:75:4d:74:ec:5c:0f:58: 5d:ce:67:79:56:8e:54:4d:50:62:5a:0c:3b:fb:cf: d7:03:64:50:e2:a9:ea:e6:06:e7:9b:8f:6f:96:a2: 64:25:39:1d:a6:17:aa:fc:30:75:1f:ea:5e:4a:25: e9:02:b0:b9:5a:5a:e3:c6:d9:dc:55:1f:77:4d:9d: ec:24:89:6d:7e:f2:12:d5:6f:f7:35:95:f6:2c:5e: 53:8f:80:b8:43:e3:c9:ee:51:8a:40:89:10:8f:21: 4e:67:cd:73:c3:2f:d7:1e:54:31:10:28:c6:ce:8e: dd:b4:57:85:6e:b9:f5:97:f1:3c:3c:98:fc:59:8b: b0:df:cd:50:6f:c3:e3:1e:82:bb:64:48:92:7f:b5: 07:af:81:8b:4e:e8:c2:95:12:db:e3:11:2d:16:6d: 4c:8c:c8:6e:11:ae:c0:e8:7a:21:8c:0d:d1:f1:fd: ff:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:F4:47:A0:F7:C6:7A:51:B4:CF:0F:64:0C:FF:1B:31:E3:6F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9a7a331-9358-365d-9847-d85d99ad19dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:70:d1:50:d5:89:77:13:48:4c:42:b7:a1:0e:0e:81:d7:2c: cd:5f:c6:7c:7e:01:cd:6c:21:25:1a:8e:48:38:c5:02:ea:d5: ab:d4:af:b6:1c:55:bb:7d:c0:f5:ba:e1:80:e0:1c:3a:68:76: 6d:0e:85:6a:10:0f:b1:bc:39:9f:4f:b5:92:3b:1c:10:7f:45: 3c:65:74:5e:98:10:e6:55:ab:0f:92:9b:5f:64:61:4b:d1:1f: 70:83:8a:82:7f:95:c3:2f:7b:0b:57:18:8d:28:2b:19:90:1e: e7:c5:f1:7e:db:70:88:14:d7:1e:93:56:ed:06:2a:18:cd:e0: d5:19:be:47:d2:39:05:ab:a4:7b:e8:44:36:43:e5:fa:87:b7: eb:ff:4c:51:71:e0:6f:34:e4:a3:ad:66:38:43:cd:e0:2a:2b: 16:87:52:07:2d:4d:ee:40:7d:9f:c3:bb:81:47:44:1a:6d:aa: 6b:0b:a0:62:86:e3:26:77:7e:9d:b6:13:8d:68:d7:f6:7e:bf: 8f:83:8f:52:97:55:7b:ad:1b:d4:9b:bf:0f:60:88:af:06:e5: 59:72:8d:bb:c8:e5:a7:12:31:45:67:a3:f8:52:19:54:c9:4b: f1:10:b6:01:15:d2:4d:bb:8d:7c:c1:17:dd:92:86:07:9b:d4: 15:43:21:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmAJNtmLse+p5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk Nzk2NTNmMDktZWFjMS00MDgzLTg0MzgtNTM1MGQ2MTg4NDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnlOxULa+kretcavXbI3YhUxUFFmNu/ndPUM 2mS2JM/mPlg/5UUGCAuGvufYF5HBmWwgHAgwmczlf/bizNZJckTr4Yvi5E3J12Ru Rok5n+bdMnVNdOxcD1hdzmd5Vo5UTVBiWgw7+8/XA2RQ4qnq5gbnm49vlqJkJTkd pheq/DB1H+peSiXpArC5WlrjxtncVR93TZ3sJIltfvIS1W/3NZX2LF5Tj4C4Q+PJ 7lGKQIkQjyFOZ81zwy/XHlQxECjGzo7dtFeFbrn1l/E8PJj8WYuw381Qb8PjHoK7 ZEiSf7UHr4GLTujClRLb4xEtFm1MjMhuEa7A6HohjA3R8f3/8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiR9Eeg98Z6UbTPD2QM/xsx428QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjlhN2EzMzEtOTM1OC0z NjVkLTk4NDctZDg1ZDk5YWQxOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBw0VDViXcTSExCt6EODoHXLM1fxnx+Ac1sISUajkg4xQLq1avUr7Yc Vbt9wPW64YDgHDpodm0OhWoQD7G8OZ9PtZI7HBB/RTxldF6YEOZVqw+Sm19kYUvR H3CDioJ/lcMvewtXGI0oKxmQHufF8X7bcIgU1x6TVu0GKhjN4NUZvkfSOQWrpHvo RDZD5fqHt+v/TFFx4G805KOtZjhDzeAqKxaHUgctTe5AfZ/Du4FHRBptqmsLoGKG 4yZ3fp22E41o1/Z+v4+Dj1KXVXutG9Sbvw9giK8G5VlyjbvI5acSMUVno/hSGVTJ S/EQtgEV0k27jXzBF92Shgeb1BVDIaw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:36 2025 by rpki-client