$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4c71e90-c45a-3390-94ca-0437b1719610.roa File: d4c71e90-c45a-3390-94ca-0437b1719610.roa (raw, json) Hash identifier: h06AQbSlw0r0FcgizClWlV5zcfIfb8zYFXgoHjkuSPM= Subject key identifier: DC:5E:E6:C0:F7:78:C7:74:21:6F:44:22:60:58:F4:0F:E6:A2:7D:A8 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B8917832274A2D66D3108AB40 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4c71e90-c45a-3390-94ca-0437b1719610.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 215595 IP address blocks: 107.158.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:83:22:74:a2:d6:6d:31:08:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=064abdce-3614-485a-816e-b04b35679d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c7:d7:2c:33:4e:75:e3:9d:ac:41:e0:ce:9c: ee:7f:37:ec:3f:cf:d4:ef:3b:83:e2:5f:fa:da:92: 68:60:6f:15:70:d7:9e:84:9f:3c:3f:72:b4:a9:a1: 8b:44:3e:fe:0f:47:f4:5d:8f:34:a7:a0:4b:76:8f: 90:20:f9:9f:09:07:28:2a:bf:7d:c7:e3:64:84:8e: 8f:27:eb:02:94:75:0e:c8:39:3f:93:b2:39:ff:11: e8:af:5b:ed:ab:e7:5d:b7:33:32:48:60:8f:da:1c: cf:ee:f4:94:2a:f9:28:a0:d2:8a:be:85:e4:1e:1a: f1:6e:67:ce:d9:d6:6f:ec:ac:b5:d3:5e:90:5d:f7: 17:6e:da:e0:2e:3e:1f:92:91:2d:17:ca:8e:31:f8: 85:f0:6f:c1:c2:b8:63:ee:5f:3a:87:ab:db:03:3c: 36:19:28:d4:1a:38:52:10:ad:ed:6a:99:b7:aa:45: 0e:89:74:a6:51:fe:da:db:c9:2c:a6:ac:b1:18:a3: bf:b4:1c:aa:5a:fc:12:14:ca:8a:0f:a6:1d:93:f3: f6:0e:a8:ad:c1:06:73:cd:a5:28:2d:d7:2a:eb:69: c0:11:32:9d:cd:79:c2:0a:7e:df:a0:2d:0e:69:d8: 24:5d:19:a0:76:48:7f:8c:39:c8:80:d7:7d:58:e3: 3b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5E:E6:C0:F7:78:C7:74:21:6F:44:22:60:58:F4:0F:E6:A2:7D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4c71e90-c45a-3390-94ca-0437b1719610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ac:b9:39:5b:83:7e:99:f4:85:c0:a2:fd:de:05:ef:35:bb: 60:60:1c:63:9c:9b:74:6b:f6:8b:b9:9f:b9:75:73:d5:c8:1b: ab:e8:b0:81:2e:ec:53:33:38:79:97:c7:e5:df:fe:b1:29:96: 04:78:af:28:9a:33:37:12:e7:23:fe:31:dd:b9:45:2a:4a:28: d1:e9:6a:53:e7:f5:99:81:b6:9f:94:5a:1e:4b:ed:3c:ea:ca: a3:38:4b:3b:8d:1b:02:b4:76:0a:0f:82:79:a2:4d:89:dc:b0: cb:7b:0d:d5:11:4a:9d:f2:4a:02:eb:09:c2:ba:13:b5:ff:39: 4a:d6:8b:b6:fb:21:ac:7f:28:14:f9:15:4d:11:21:0e:37:a1: 9f:ef:01:e8:41:eb:5e:01:1e:f3:06:22:47:af:21:ac:8f:51: fa:ec:6a:03:df:31:d2:e6:32:b2:ff:b2:dd:ea:6d:d6:8c:44: cd:df:0f:64:c1:69:01:c4:25:af:ba:0d:4d:20:66:e1:2b:22: fa:b1:f5:1d:5f:2e:77:23:a4:f9:8b:f2:9f:4e:3e:66:36:f1: 30:d0:55:44:bd:a5:d7:b3:e4:db:a3:f7:32:3b:92:80:4f:af: 4f:19:b4:cf:7f:4f:c7:75:06:61:5c:23:94:40:6b:1c:1b:6b: 8c:2a:fd:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF4MidKLWbTEIq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MDY0YWJkY2UtMzYxNC00ODVhLTgxNmUtYjA0YjM1Njc5ZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cfXLDNOdeOdrEHgzpzufzfsP8/U7zuD4l/6 2pJoYG8VcNeehJ88P3K0qaGLRD7+D0f0XY80p6BLdo+QIPmfCQcoKr99x+NkhI6P J+sClHUOyDk/k7I5/xHor1vtq+ddtzMySGCP2hzP7vSUKvkooNKKvoXkHhrxbmfO 2dZv7Ky1016QXfcXbtrgLj4fkpEtF8qOMfiF8G/Bwrhj7l86h6vbAzw2GSjUGjhS EK3tapm3qkUOiXSmUf7a28kspqyxGKO/tByqWvwSFMqKD6Ydk/P2DqitwQZzzaUo Ldcq62nAETKdzXnCCn7foC0OadgkXRmgdkh/jDnIgNd9WOM7WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxe5sD3eMd0IW9EImBY9A/mon2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDRjNzFlOTAtYzQ1YS0z MzkwLTk0Y2EtMDQzN2IxNzE5NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa56CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHesuTlbg36Z9IXAov3eBe81u2BgHGOcm3Rr9ou5n7l1c9XIG6vosIEu 7FMzOHmXx+Xf/rEplgR4ryiaMzcS5yP+Md25RSpKKNHpalPn9ZmBtp+UWh5L7Tzq yqM4SzuNGwK0dgoPgnmiTYncsMt7DdURSp3ySgLrCcK6E7X/OUrWi7b7Iax/KBT5 FU0RIQ43oZ/vAehB614BHvMGIkevIayPUfrsagPfMdLmMrL/st3qbdaMRM3fD2TB aQHEJa+6DU0gZuErIvqx9R1fLncjpPmL8p9OPmY28TDQVUS9pdez5Nuj9zI7koBP r08ZtM9/T8d1BmFcI5RAaxwba4wq/Rc= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:03 2025 by rpki-client