$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4c5e181a-7d8b-36d4-b77d-c213ec290b07.roa File: 4c5e181a-7d8b-36d4-b77d-c213ec290b07.roa (raw, json) Hash identifier: ptaZL5exYJEzzPiB+GBYap6qw3NJnlEwuSJ+B5VxF7Y= Subject key identifier: CB:55:3F:58:96:86:83:C5:15:27:FF:31:ED:E6:CC:24:C9:9C:73:A7 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B0CDC1435165D5898AAD1F527 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4c5e181a-7d8b-36d4-b77d-c213ec290b07.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 22781 IP address blocks: 108.171.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:14:35:16:5d:58:98:aa:d1:f5:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=6cc31c70-4761-417a-9ff3-f38b14172afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:bf:ed:10:ba:91:33:43:2a:f5:d5:ac:6d: dd:1e:00:29:c9:57:4d:80:b5:e0:3d:d7:31:d3:4a: 53:48:60:63:fd:32:79:b1:38:97:dc:33:f8:b0:76: 28:ed:9f:08:10:6c:e4:8d:7f:b3:9f:40:87:70:16: af:56:6b:ea:17:40:b8:84:9f:ae:bf:ec:ed:22:e2: d5:04:91:61:23:6c:dd:3e:c1:7a:c5:92:0c:c0:a3: 94:ad:8f:c2:5c:6a:95:95:3f:a6:aa:1b:7f:16:f9: 17:8f:2e:84:3f:11:a7:2d:29:af:c9:e6:cd:1a:f0: 82:c3:41:93:d5:0b:f3:e3:44:32:fb:9a:30:27:d8: b2:70:63:33:57:71:e7:4b:5b:6f:3f:a7:ca:73:41: 5f:b4:81:52:5c:c2:42:d1:76:02:cd:6d:67:af:ff: 69:3e:3b:5d:50:02:73:66:c4:f4:3f:9b:2b:40:ce: e9:03:95:63:fc:e1:4a:00:09:c9:06:5a:e6:08:40: aa:d6:aa:52:f0:2b:23:7d:38:bf:b2:dd:2a:5f:74: 5a:40:19:d3:bb:a4:ca:db:63:cb:12:b6:04:d7:c5: 65:80:89:03:a6:30:4d:0b:db:be:d2:5b:d4:d1:ea: 1c:c8:04:ed:05:ae:28:50:c9:dd:66:a4:90:7d:b5: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:55:3F:58:96:86:83:C5:15:27:FF:31:ED:E6:CC:24:C9:9C:73:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4c5e181a-7d8b-36d4-b77d-c213ec290b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:11:3f:d9:7c:dd:a2:3c:a5:f7:9a:0f:05:2f:3f:4b:36:3a: 46:fa:38:e8:05:f5:6b:88:23:33:79:a4:b2:78:53:19:5d:13: 2e:39:88:1d:00:8b:e3:e4:37:cb:02:1a:67:be:68:eb:82:07: 10:11:c7:ae:70:23:f1:fa:00:c5:4b:d6:25:4b:39:85:c8:73: 8b:b8:fa:47:e4:f9:03:24:3f:bd:bd:64:ac:d0:2d:40:2b:49: 09:f7:ac:cb:44:2d:b4:93:4d:30:80:47:ca:d8:b1:00:aa:d4: c2:84:c5:13:35:a8:e6:36:0b:f7:cc:d4:86:6c:1c:19:a1:d4: 26:a8:b5:3d:ca:dc:8f:71:7f:ed:0e:d5:c1:35:3c:84:6e:61: 93:31:a4:cb:64:be:cc:76:5a:e6:c0:09:09:a7:8a:26:a0:f3: ec:80:39:5c:c0:71:e2:a7:59:d1:2f:cd:1c:40:7f:6c:30:07: 9b:f5:be:78:1c:af:dc:f3:77:b8:1a:71:9c:95:45:ae:87:0c: c4:14:bd:07:e2:15:76:44:8f:0b:56:49:34:19:e3:64:90:5c: a3:dc:70:41:9d:2c:d2:fc:13:ae:2f:13:0b:49:6d:c2:bb:5e: 41:a3:b2:1d:63:f4:47:ca:49:a9:0e:36:b9:cc:91:98:56:48: f6:05:4e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BQ1Fl1YmKrR9ScwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NmNjMzFjNzAtNDc2MS00MTdhLTlmZjMtZjM4YjE0MTcyYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6K/7RC6kTNDKvXVrG3dHgApyVdNgLXgPdcx 00pTSGBj/TJ5sTiX3DP4sHYo7Z8IEGzkjX+zn0CHcBavVmvqF0C4hJ+uv+ztIuLV BJFhI2zdPsF6xZIMwKOUrY/CXGqVlT+mqht/FvkXjy6EPxGnLSmvyebNGvCCw0GT 1Qvz40Qy+5owJ9iycGMzV3HnS1tvP6fKc0FftIFSXMJC0XYCzW1nr/9pPjtdUAJz ZsT0P5srQM7pA5Vj/OFKAAnJBlrmCECq1qpS8CsjfTi/st0qX3RaQBnTu6TK22PL ErYE18VlgIkDpjBNC9u+0lvU0eocyATtBa4oUMndZqSQfbUTywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtVP1iWhoPFFSf/Me3mzCTJnHOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNGM1ZTE4MWEtN2Q4Yi0z NmQ0LWI3N2QtYzIxM2VjMjkwYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0RP9l83aI8pfeaDwUvP0s2Okb6OOgF9WuIIzN5pLJ4UxldEy45iB0A i+PkN8sCGme+aOuCBxARx65wI/H6AMVL1iVLOYXIc4u4+kfk+QMkP729ZKzQLUAr SQn3rMtELbSTTTCAR8rYsQCq1MKExRM1qOY2C/fM1IZsHBmh1CaotT3K3I9xf+0O 1cE1PIRuYZMxpMtkvsx2WubACQmniiag8+yAOVzAceKnWdEvzRxAf2wwB5v1vngc r9zzd7gacZyVRa6HDMQUvQfiFXZEjwtWSTQZ42SQXKPccEGdLNL8E64vEwtJbcK7 XkGjsh1j9EfKSakONrnMkZhWSPYFTjg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:29 2025 by rpki-client