$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ca29cc-4e38-3e4f-8af1-e0c5c578c39c.roa File: a7ca29cc-4e38-3e4f-8af1-e0c5c578c39c.roa (raw, json) Hash identifier: U0HMlmI2RXSAcOpTkflhchBAvX96DesLULC/T5jE9XY= Subject key identifier: 1B:21:4E:40:1B:9C:28:D5:78:16:06:E6:5C:E9:CB:5C:61:5A:DA:00 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4F55643B9B551668E0340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ca29cc-4e38-3e4f-8af1-e0c5c578c39c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 107.3.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:f5:56:43:b9:b5:51:66:8e:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0a8a7cb6-9caa-4a2d-8491-e136ce8b908a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:28:e7:88:01:2e:6c:38:d4:3c:aa:b6:65:1c: 07:19:7d:53:02:26:b2:4f:4b:d2:0f:3f:de:21:e7: bb:3b:05:66:e6:91:ad:24:86:a8:45:f4:46:29:39: 77:6c:ad:d1:2e:3d:0b:88:e1:ee:83:e6:2c:63:e6: c7:88:9b:5e:6c:7f:80:a3:dc:58:84:97:c8:69:3f: a5:80:1f:28:cc:ee:ad:50:94:13:5e:04:90:8b:77: c1:05:d2:be:e3:e0:c5:b7:72:16:4c:a1:76:7e:b7: 88:2d:1a:d7:6f:80:f9:a0:db:3f:6a:bd:bb:47:a2: a5:93:d0:4a:21:97:aa:9f:75:03:4c:59:a7:ec:32: 5b:e1:c0:ec:46:bf:79:b9:34:94:2f:be:bd:b4:44: 5c:d5:4f:ae:a0:a3:cf:0d:3b:74:35:1d:2e:fe:ac: 0a:42:35:8b:8a:ba:a4:35:5d:42:75:9f:29:96:2d: 3d:d3:d8:34:d0:6b:08:0a:4c:c7:95:3a:73:f6:43: 1a:0b:d5:03:41:7e:45:a1:25:88:54:8e:8b:40:62: 14:8c:a4:45:e5:84:e2:47:07:44:1f:1f:a0:dc:f1: 7b:c9:37:73:52:8c:43:f7:e5:cd:26:64:a9:43:76: d3:a0:b7:ea:48:c0:ab:12:c6:a9:52:e3:13:b8:df: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:21:4E:40:1B:9C:28:D5:78:16:06:E6:5C:E9:CB:5C:61:5A:DA:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ca29cc-4e38-3e4f-8af1-e0c5c578c39c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.3.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:4a:02:66:71:89:1e:89:ed:de:77:d9:0a:39:8c:f2:52:1e: 02:e7:8a:6b:f4:ed:c0:c2:33:72:8d:d1:7f:d5:ce:dc:d6:b7: 92:05:3f:94:bb:a3:19:89:09:a8:70:50:a9:4c:76:8b:37:36: 64:5b:92:b2:ff:ee:df:81:56:1c:9c:95:e0:eb:e2:79:79:4a: e8:9a:8d:ca:0f:98:e6:25:61:6f:0d:e2:7e:f1:de:2d:1d:5c: dd:32:f8:7b:97:34:8a:d3:61:f6:4f:8c:ba:52:6b:a1:73:7b: ec:37:46:f5:82:1f:42:37:47:36:73:f9:24:6f:b4:27:b0:c5: 95:69:69:15:43:b5:84:51:76:c9:5b:d9:16:9a:78:b0:60:a7: 04:17:45:41:2a:ca:08:8f:3c:c7:0d:d2:6f:98:d9:3b:68:97: 75:14:95:3a:af:20:e5:3b:17:ad:91:b0:83:89:41:fe:ea:eb: 67:98:e2:3b:18:f1:76:b8:92:10:65:b8:7f:9d:66:15:99:1b: 29:a6:e8:6b:92:4a:13:c1:51:08:c4:ae:99:80:6a:e7:d3:fa: da:ea:51:55:0f:ee:2e:b9:d3:bc:84:d8:7d:bc:be:29:3c:0f: 1a:78:f1:f6:d2:33:42:db:b0:a4:34:1d:97:6f:6d:87:81:05: a2:c2:75:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxPVWQ7m1UWaOA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MGE4YTdjYjYtOWNhYS00YTJkLTg0OTEtZTEzNmNlOGI5MDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiijniAEubDjUPKq2ZRwHGX1TAiayT0vSDz/e Iee7OwVm5pGtJIaoRfRGKTl3bK3RLj0LiOHug+YsY+bHiJtebH+Ao9xYhJfIaT+l gB8ozO6tUJQTXgSQi3fBBdK+4+DFt3IWTKF2freILRrXb4D5oNs/ar27R6Klk9BK IZeqn3UDTFmn7DJb4cDsRr95uTSUL769tERc1U+uoKPPDTt0NR0u/qwKQjWLirqk NV1CdZ8pli0909g00GsICkzHlTpz9kMaC9UDQX5FoSWIVI6LQGIUjKRF5YTiRwdE Hx+g3PF7yTdzUoxD9+XNJmSpQ3bToLfqSMCrEsapUuMTuN9WnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBshTkAbnCjVeBYG5lzpy1xhWtoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdjYTI5Y2MtNGUzOC0z ZTRmLThhZjEtZTBjNWM1NzhjMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5KAmZxiR6J7d532Qo5jPJSHgLnimv07cDCM3KN0X/VztzWt5IFP5S7 oxmJCahwUKlMdos3NmRbkrL/7t+BVhycleDr4nl5SuiajcoPmOYlYW8N4n7x3i0d XN0y+HuXNIrTYfZPjLpSa6Fze+w3RvWCH0I3RzZz+SRvtCewxZVpaRVDtYRRdslb 2RaaeLBgpwQXRUEqygiPPMcN0m+Y2Ttol3UUlTqvIOU7F62RsIOJQf7q62eY4jsY 8Xa4khBluH+dZhWZGymm6GuSShPBUQjErpmAaufT+trqUVUP7i6507yE2H28vik8 Dxp48fbSM0LbsKQ0HZdvbYeBBaLCdfk= -----END CERTIFICATE-----Generated at Wed Nov 5 02:09:45 2025 by rpki-client