$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8bf6fa15-f167-3b74-9649-fd4bd996644f.roa File: 8bf6fa15-f167-3b74-9649-fd4bd996644f.roa (raw, json) Hash identifier: UG+CDGB4f02p0C5zVJJBhZcqNReQnmJHkQix0Gcrf9c= Subject key identifier: C5:C4:D5:8C:04:F1:5F:96:B6:F5:42:0D:23:0F:2B:FD:36:A9:25:76 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584AE89136079369529AD2708180 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8bf6fa15-f167-3b74-9649-fd4bd996644f.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 108.179.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:36:07:93:69:52:9a:d2:70:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=6bfdcd6f-0f01-41c0-aa3a-6d701835589a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6f:0c:59:c1:0e:82:17:17:a3:2c:6a:48:ee: db:1d:e9:2e:d8:d4:47:6e:da:6f:fc:ee:8e:1b:b2: d0:9e:d4:2f:54:3b:ed:40:45:4e:8d:d2:8b:7f:74: cf:fa:73:24:a4:0c:07:1e:f0:5d:b1:d1:10:d1:b9: 90:75:cf:10:29:0e:6a:ae:21:53:3e:b1:88:df:0c: b6:11:58:3f:3c:cb:47:16:78:f0:f2:e0:de:06:b2: 3e:d3:4e:e3:d3:8a:64:57:55:89:39:a8:4f:21:5c: 70:ca:02:05:f7:2d:b0:11:eb:6f:9f:3c:af:b4:5f: 80:47:70:3b:69:ec:6e:0b:5d:1e:79:35:b3:f7:72: 0b:f3:30:dd:e2:9d:36:e2:a3:ed:04:7a:ce:6e:8f: 7f:d2:53:16:2a:4b:ca:ae:69:51:7e:3e:85:e1:32: 87:54:ac:cb:23:98:c4:7d:ae:15:61:d9:28:4b:4d: 1e:fe:ac:5d:20:14:e5:6e:60:08:b4:f0:87:bf:4f: c3:4b:3a:6b:8d:43:ad:f5:62:a6:d4:bc:56:87:3d: 4b:49:98:31:2d:e2:08:56:83:bc:80:e6:55:41:59: 3a:21:10:4e:59:f8:4f:3f:25:93:84:cf:38:62:5e: 50:5a:88:5a:92:22:8e:c3:da:6c:56:f3:b3:91:88: bc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C4:D5:8C:04:F1:5F:96:B6:F5:42:0D:23:0F:2B:FD:36:A9:25:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8bf6fa15-f167-3b74-9649-fd4bd996644f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 108.179.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fc:98:64:1e:88:7b:56:4e:e0:fb:e0:8d:4d:84:ae:be:12: 7e:09:fe:b1:0d:3c:f8:64:cb:4e:4d:af:af:8e:12:4e:34:94: e6:6a:24:5a:bf:92:33:64:2b:1f:81:c1:a4:fc:34:05:a8:6b: d1:28:dc:f8:e0:36:44:c5:1f:61:49:cb:23:11:a9:ac:73:1c: 25:7c:10:59:df:51:6d:ed:04:71:e6:ec:98:ff:3e:57:9a:b3: 0d:59:f2:6a:c9:e7:56:26:ba:85:90:41:41:c2:08:8b:d2:1b: 22:95:0c:8e:dd:a2:4d:2b:ee:83:28:9b:55:15:0b:fd:38:43: 77:2a:db:8f:c7:39:6c:da:9d:fc:3a:e6:fd:4e:30:eb:e0:0d: 97:b4:7f:57:b1:ea:67:66:80:a3:df:33:73:4a:c2:13:dc:45: c5:bb:cc:05:b2:26:6e:ef:84:c6:03:9e:ff:d0:11:50:8f:4a: 21:f0:3f:50:cc:86:16:30:68:13:f3:19:1d:04:1b:5f:b0:f5: 54:38:50:c7:a6:99:76:4c:f3:e5:74:f2:4b:6d:18:14:d1:4e: 5a:b3:f7:d8:2e:8a:da:e6:22:6d:b1:ef:08:34:ac:a9:3c:67: 0f:3f:fe:fd:f9:e3:c7:f6:b1:a0:b6:09:81:68:91:0d:70:96: fb:a2:42:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTYHk2lSmtJwgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NmJmZGNkNmYtMGYwMS00MWMwLWFhM2EtNmQ3MDE4MzU1ODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW8MWcEOghcXoyxqSO7bHeku2NRHbtpv/O6O G7LQntQvVDvtQEVOjdKLf3TP+nMkpAwHHvBdsdEQ0bmQdc8QKQ5qriFTPrGI3wy2 EVg/PMtHFnjw8uDeBrI+007j04pkV1WJOahPIVxwygIF9y2wEetvnzyvtF+AR3A7 aexuC10eeTWz93IL8zDd4p024qPtBHrObo9/0lMWKkvKrmlRfj6F4TKHVKzLI5jE fa4VYdkoS00e/qxdIBTlbmAItPCHv0/DSzprjUOt9WKm1LxWhz1LSZgxLeIIVoO8 gOZVQVk6IRBOWfhPPyWThM84Yl5QWohakiKOw9psVvOzkYi8JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXE1YwE8V+WtvVCDSMPK/02qSV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvOGJmNmZhMTUtZjE2Ny0z Yjc0LTk2NDktZmQ0YmQ5OTY2NDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf8mGQeiHtWTuD74I1NhK6+En4J/rENPPhky05Nr6+OEk40lOZqJFq/ kjNkKx+BwaT8NAWoa9Eo3PjgNkTFH2FJyyMRqaxzHCV8EFnfUW3tBHHm7Jj/Plea sw1Z8mrJ51YmuoWQQUHCCIvSGyKVDI7dok0r7oMom1UVC/04Q3cq24/HOWzanfw6 5v1OMOvgDZe0f1ex6mdmgKPfM3NKwhPcRcW7zAWyJm7vhMYDnv/QEVCPSiHwP1DM hhYwaBPzGR0EG1+w9VQ4UMemmXZM8+V08kttGBTRTlqz99guitrmIm2x7wg0rKk8 Zw8//v3548f2saC2CYFokQ1wlvuiQkg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:28:48 2025 by rpki-client