$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa File: c844993d-f4dd-313b-b5c9-8354c562e673.roa (raw, json) Hash identifier: BnT/61sknmjBknHcM0wrZr2q5W2WIw5BCTVt/XH3rSk= Subject key identifier: 41:D7:12:82:A5:78:FB:9F:41:7F:CD:0F:C2:F9:75:01:A9:B5:98:7D Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F4328584BAEC7C2089D47344178F67120 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 22925 IP address blocks: 107.181.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c2:08:9d:47:34:41:78:f6:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=fc964b9b-a0e7-4285-a2b9-652a6a4ad9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:8c:a6:f2:d4:36:2f:84:f9:e7:45:f8:e5: 09:e7:70:a1:0b:91:4a:63:99:88:26:db:24:14:0c: 81:56:a1:81:6d:77:b1:5e:40:b6:1d:ac:34:56:de: 08:19:82:b7:19:4b:9c:35:7f:d5:02:e0:ea:25:5a: d1:48:51:39:70:52:53:98:1a:e9:6d:16:44:71:b4: 0c:6b:19:12:5e:3c:75:f0:16:4a:3d:4e:00:77:f2: 90:29:14:31:30:43:d4:17:61:67:40:9e:17:7e:ca: a8:12:ff:60:92:f6:3c:71:a8:76:c1:ab:55:02:76: 52:39:f4:16:b2:73:a2:f8:cc:4b:08:87:f5:7d:bd: 37:89:2c:33:d8:38:2a:48:d4:6c:b2:fd:36:1c:43: ad:c1:c1:4f:a3:c8:02:5c:3e:41:14:75:d4:44:83: f7:0a:ce:19:db:a8:9b:b2:d9:f1:35:ea:71:d9:a1: 96:00:0a:9b:ad:0f:6b:c3:1d:ca:39:4d:1b:bd:fc: 4e:9c:a7:85:8c:1d:e6:04:07:21:62:c6:55:fe:3a: 17:27:cf:16:bf:d5:42:98:85:22:9c:de:e0:b4:7e: bc:98:c9:71:de:97:4c:ac:ce:13:90:45:08:51:7e: 33:d7:f0:7d:06:f8:e6:41:47:c3:97:72:b6:43:63: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D7:12:82:A5:78:FB:9F:41:7F:CD:0F:C2:F9:75:01:A9:B5:98:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 107.181.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:7c:ac:29:f2:5c:35:0d:86:38:91:04:05:12:c0:c1:8a:88: e9:b3:0c:f3:36:88:d8:46:bf:51:1c:bf:ad:08:c6:f4:16:b6: 29:17:84:72:e3:da:ee:d7:59:04:4c:2d:08:a5:01:39:03:d2: c9:9e:b8:f6:ef:a5:88:b0:33:3f:3d:be:35:d1:46:b3:94:45: 23:dc:16:d7:c6:07:be:b1:05:1b:e6:22:af:ac:8a:55:89:06: 3a:ca:eb:96:4b:2f:93:94:63:3f:72:c5:d9:27:95:8e:13:1b: 80:01:d1:e7:5c:ed:eb:79:49:65:38:43:c5:bd:bc:d8:57:29: aa:da:db:4f:a0:94:ae:4b:6a:09:d4:1a:64:f7:d0:4e:e3:03: da:fb:46:8d:b8:c2:b9:f4:1a:46:c4:1f:a8:e4:10:49:bb:35: 0b:eb:0a:87:d0:61:12:61:98:45:ac:59:f5:3b:1f:84:4e:93: 5d:ea:d1:d9:b5:fe:50:b6:4d:b5:60:c6:48:52:5b:db:8d:8c: a5:22:2a:23:ff:de:69:fc:fa:69:e3:1f:51:ad:81:d5:82:6a: 54:fa:fd:55:14:3c:50:d4:e0:6b:37:e3:b7:a1:6a:59:bd:9b: 1f:db:78:17:fd:93:48:f5:21:1e:34:aa:37:e2:68:13:3f:89: 8c:32:e3:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8IInUc0QXj2cSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZmM5NjRiOWItYTBlNy00Mjg1LWEyYjktNjUyYTZhNGFkOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSOMpvLUNi+E+edF+OUJ53ChC5FKY5mIJtsk FAyBVqGBbXexXkC2Haw0Vt4IGYK3GUucNX/VAuDqJVrRSFE5cFJTmBrpbRZEcbQM axkSXjx18BZKPU4Ad/KQKRQxMEPUF2FnQJ4XfsqoEv9gkvY8cah2watVAnZSOfQW snOi+MxLCIf1fb03iSwz2DgqSNRssv02HEOtwcFPo8gCXD5BFHXURIP3Cs4Z26ib stnxNepx2aGWAAqbrQ9rwx3KOU0bvfxOnKeFjB3mBAchYsZV/joXJ88Wv9VCmIUi nN7gtH68mMlx3pdMrM4TkEUIUX4z1/B9BvjmQUfDl3K2Q2MNLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHXEoKlePufQX/ND8L5dQGptZh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvYzg0NDk5M2QtZjRkZC0z MTNiLWI1YzktODM1NGM1NjJlNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa7VgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp8rCnyXDUNhjiRBAUSwMGKiOmzDPM2iNhGv1Ecv60IxvQWtikXhHLj 2u7XWQRMLQilATkD0smeuPbvpYiwMz89vjXRRrOURSPcFtfGB76xBRvmIq+silWJ BjrK65ZLL5OUYz9yxdknlY4TG4AB0edc7et5SWU4Q8W9vNhXKara20+glK5LagnU GmT30E7jA9r7Ro24wrn0GkbEH6jkEEm7NQvrCofQYRJhmEWsWfU7H4ROk13q0dm1 /lC2TbVgxkhSW9uNjKUiKiP/3mn8+mnjH1GtgdWCalT6/VUUPFDU4Gs347ehalm9 mx/beBf9k0j1IR40qjfiaBM/iYwy41c= -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:26 2025 by rpki-client