$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa File: efbeebc8-e654-325a-9221-7b430f463318.roa (raw, json) Hash identifier: +oSCKvGEDfYnQ6N/A3p5VNTnOTQP0yZLfPeCEKQaPKs= Subject key identifier: 35:27:CD:74:63:6C:F2:3E:D6:EA:74:BB:13:62:CD:50:71:65:20:FD Certificate issuer: /CN=22d4b872-8325-44d1-958d-897bd254f68b Certificate serial: 010D0C9F4328584B25FC385B3EEBFA6B8B451C80 Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 0 IP address blocks: 107.180.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:38:5b:3e:eb:fa:6b:8b:45:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=fc85f180-b27c-4300-97a7-0052ba25d330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:a5:86:c2:d1:31:21:f4:96:9d:e1:54:4e: 41:8b:24:57:9f:60:37:08:45:d4:d2:8e:c8:fc:7a: 1b:ce:47:56:6c:75:52:cd:69:75:85:e0:69:05:08: 70:8e:47:f7:a4:12:65:1c:1f:01:72:5b:53:dd:b9: 56:c7:6f:36:b5:28:28:bc:bc:c3:ef:b9:87:23:f8: b8:36:18:3a:8a:7d:40:84:ea:1d:87:81:1d:44:61: 15:1b:53:ea:3d:b8:fc:ab:76:0e:be:20:a1:1e:75: bf:28:cd:c0:55:5f:15:79:7c:ec:bc:aa:d9:ec:28: 5f:07:23:1e:31:2f:e0:d9:9e:5a:a4:36:a9:66:23: 2c:87:71:fd:dc:53:6c:9f:b3:62:21:d4:69:11:3d: 05:75:0b:41:49:b7:45:ab:c2:fd:2c:d1:c3:97:a2: e8:86:2e:b5:2e:0a:7a:54:0f:44:4d:3b:ca:eb:5a: 21:6c:cf:b0:f0:05:e5:5f:fc:60:8e:fa:a8:77:d1: 43:d4:fa:a1:df:5e:0a:4c:e7:52:52:8c:56:8b:5e: d1:67:dc:87:cf:9a:9d:fe:d7:2f:cb:12:17:3c:d2: bb:74:c7:2e:8b:f0:19:4a:3a:46:74:22:88:76:fb: 0f:96:38:49:35:84:64:f7:ae:56:dd:de:b5:89:71: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:27:CD:74:63:6C:F2:3E:D6:EA:74:BB:13:62:CD:50:71:65:20:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl X509v3 Authority Key Identifier: keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer sbgp-ipAddrBlock: critical IPv4: 107.180.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:fc:88:ac:4b:92:4d:97:9c:74:90:0a:a0:f5:11:38:26:52: 23:4d:6e:cf:6d:ec:3e:55:31:ae:2a:3d:fc:bf:8c:d5:c7:74: 0b:fb:9f:cf:1e:b0:77:82:de:1d:2d:57:d3:93:3b:d9:b6:9b: 94:bf:77:7b:6c:3a:55:42:0b:77:94:41:15:72:d7:3b:4c:0e: d4:e9:64:b0:e9:cd:00:7a:eb:04:1f:b2:25:8d:2a:53:75:30: bf:aa:d2:ee:e5:a9:f3:19:76:7f:6d:f0:98:15:67:c8:6a:bc: 14:03:eb:d8:2b:69:ae:dd:1e:8e:aa:51:3b:85:1d:5e:88:8b: 12:fb:40:1e:fd:eb:9d:cb:e8:77:64:1b:a0:13:e1:a2:d9:a8: 5d:e5:c2:57:60:fb:48:db:bf:e8:8e:60:48:e4:c3:47:fd:14: ce:1d:fb:1f:e4:05:29:7c:71:d7:69:a4:23:f0:02:9b:87:0e: 05:53:ed:55:0d:e3:a8:97:db:0d:71:a3:c1:91:1b:f1:63:e3: 7c:ac:ff:6d:f6:fc:d5:e1:8d:37:b3:61:68:98:c1:27:32:24: 11:b4:eb:88:64:79:61:e4:b2:0e:b2:6e:d8:af:86:cd:8b:26: 46:ea:b5:93:33:2f:58:9a:e4:9a:8f:3b:51:53:e7:86:fd:c3: 5e:9a:31:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DhbPuv6a4tFHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkNGI4NzItODMyNS00NGQxLTk1OGQtODk3YmQyNTRm NjhiMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmM4NWYxODAtYjI3Yy00MzAwLTk3YTctMDA1MmJhMjVkMzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNmlhsLRMSH0lp3hVE5BiyRXn2A3CEXU0o7I /HobzkdWbHVSzWl1heBpBQhwjkf3pBJlHB8BcltT3blWx282tSgovLzD77mHI/i4 Nhg6in1AhOodh4EdRGEVG1PqPbj8q3YOviChHnW/KM3AVV8VeXzsvKrZ7ChfByMe MS/g2Z5apDapZiMsh3H93FNsn7NiIdRpET0FdQtBSbdFq8L9LNHDl6Lohi61Lgp6 VA9ETTvK61ohbM+w8AXlX/xgjvqod9FD1Pqh314KTOdSUoxWi17RZ9yHz5qd/tcv yxIXPNK7dMcui/AZSjpGdCKIdvsPljhJNYRk965W3d61iXG3TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUnzXRjbPI+1up0uxNizVBxZSD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0 Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdiZDI1NGY2OGIvZWZiZWViYzgtZTY1NC0z MjVhLTkyMjEtN2I0MzBmNDYzMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJkNGI4NzItODMyNS00NGQxLTk1 OGQtODk3YmQyNTRmNjhiLzIyZDRiODcyLTgzMjUtNDRkMS05NThkLTg5N2JkMjU0 ZjY4Yi5jcmwwHwYDVR0jBBgwFoAUoesnN2ifyJue4jDjyAXH4u6NjvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdi ZDI1NGY2OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa7SSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI38iKxLkk2XnHSQCqD1ETgmUiNNbs9t7D5VMa4qPfy/jNXHdAv7n88e sHeC3h0tV9OTO9m2m5S/d3tsOlVCC3eUQRVy1ztMDtTpZLDpzQB66wQfsiWNKlN1 ML+q0u7lqfMZdn9t8JgVZ8hqvBQD69graa7dHo6qUTuFHV6IixL7QB79653L6Hdk G6AT4aLZqF3lwldg+0jbv+iOYEjkw0f9FM4d+x/kBSl8cddppCPwApuHDgVT7VUN 46iX2w1xo8GRG/Fj43ys/232/NXhjTezYWiYwScyJBG064hkeWHksg6ybtivhs2L JkbqtZMzL1ia5JqPO1FT54b9w16aMQo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:47:28 2025 by rpki-client