$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa File: af9062fc-c2de-328a-89b2-ae470ad5b211.roa (raw, json) Hash identifier: WKPSsaPS0WeH3TghLI9/iiVklwWB5C9+QjtEJ3D2YWI= Subject key identifier: 4F:6F:E1:6D:3C:9C:15:42:1A:09:E4:A2:39:93:ED:71:45:83:D2:EB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F37376F442C5A2E95C63B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 108.177.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:37:6f:44:2c:5a:2e:95:c6:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=9e2b9291-3d76-479b-a28a-82e95567c9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:9d:b8:8e:28:6b:ec:e9:50:7a:a7:26:a9: 26:f0:b8:d6:e5:0e:d7:3a:8e:32:1e:d5:ec:21:82: 39:03:bc:cf:45:2e:e4:72:3d:3e:d8:06:ae:75:ae: 7a:33:69:a6:40:dd:e7:34:31:f7:0f:c1:0c:e8:43: 90:6a:1a:9d:f4:d8:6b:e3:b7:c0:a6:cb:43:30:49: 92:53:51:c8:18:3b:8d:d8:e6:da:9d:d1:b8:75:56: f3:a9:7e:c8:60:ca:52:c3:6a:4b:8c:83:11:95:74: 5d:78:0d:b7:09:7c:a1:ba:88:2d:04:bd:6c:b8:db: 16:8b:16:9e:db:03:35:17:36:2f:b3:56:67:9b:e6: 45:a4:10:6c:80:3d:7c:67:41:12:54:5e:70:9c:e0: 9e:05:1b:c0:e3:53:11:99:b1:a5:ea:12:5b:31:82: eb:53:48:32:bc:f2:53:dc:a4:d2:dd:40:f6:2e:dd: f8:11:48:3c:97:ab:1b:99:b2:ea:af:fd:eb:d5:0b: 48:e0:8e:35:8c:d3:3e:79:af:ae:24:1b:43:58:50: 72:89:07:c1:86:83:68:c6:bd:09:c1:a1:2a:ae:78: 82:ff:40:74:3a:56:73:66:c7:84:2b:1d:e0:2b:09: b9:38:5f:23:fc:d0:a3:b9:d6:0d:af:e2:64:7c:06: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6F:E1:6D:3C:9C:15:42:1A:09:E4:A2:39:93:ED:71:45:83:D2:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:fe:4c:3f:73:f1:96:d2:9e:d7:30:71:e8:6a:b6:bb:98:34: ff:b2:c9:3d:61:d9:ea:4a:e4:a4:5b:fb:41:9a:6b:1c:55:25: 9d:3c:5a:7b:ac:1f:94:fb:da:71:35:7b:46:f6:eb:67:fb:ec: bb:a9:c2:f2:4e:03:24:66:ca:e1:7c:46:41:38:78:66:e0:2c: f3:fa:3e:d2:0a:80:2c:06:b9:84:39:06:0e:4e:ee:1c:2a:89: ba:81:ca:a7:b4:76:79:9f:81:5f:e2:71:ec:de:09:94:1c:16: 09:82:09:c3:39:e8:c7:d5:20:a1:ee:1b:ca:5b:18:d5:9e:88: 12:77:dc:31:64:41:e5:70:ce:36:60:d4:e5:5b:3a:a5:09:9c: 6d:71:dc:5c:b9:c3:9c:6c:13:9b:1a:dc:27:69:4d:e2:83:0f: 3c:33:dc:34:e7:aa:ba:49:6d:bf:f0:53:07:ac:e3:74:3a:54: 8a:ea:90:84:e8:2f:93:d1:34:e4:db:23:65:64:00:1e:2a:91: ce:55:f7:6d:25:2b:f6:73:12:f5:31:18:de:b4:47:46:da:6f: 39:2e:c7:45:dd:23:ab:f6:8a:8d:72:bb:61:b2:e6:93:9e:19: 98:10:6a:8c:0b:b6:09:2c:85:d1:d2:c8:e4:f4:98:a8:37:95: 39:1d:02:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzdvRCxaLpXGOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OWUyYjkyOTEtM2Q3Ni00NzliLWEyOGEtODJlOTU1NjdjOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJyduI4oa+zpUHqnJqkm8LjW5Q7XOo4yHtXs IYI5A7zPRS7kcj0+2Aauda56M2mmQN3nNDH3D8EM6EOQahqd9Nhr47fApstDMEmS U1HIGDuN2ObandG4dVbzqX7IYMpSw2pLjIMRlXRdeA23CXyhuogtBL1suNsWixae 2wM1FzYvs1Znm+ZFpBBsgD18Z0ESVF5wnOCeBRvA41MRmbGl6hJbMYLrU0gyvPJT 3KTS3UD2Lt34EUg8l6sbmbLqr/3r1QtI4I41jNM+ea+uJBtDWFByiQfBhoNoxr0J waEqrniC/0B0OlZzZseEKx3gKwm5OF8j/NCjudYNr+JkfAZpYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9v4W08nBVCGgnkojmT7XFFg9LrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWY5MDYyZmMtYzJkZS0z MjhhLTg5YjItYWU0NzBhZDViMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbLEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKH+TD9z8ZbSntcwcehqtruYNP+yyT1h2epK5KRb+0GaaxxVJZ08Wnus H5T72nE1e0b262f77LupwvJOAyRmyuF8RkE4eGbgLPP6PtIKgCwGuYQ5Bg5O7hwq ibqByqe0dnmfgV/icezeCZQcFgmCCcM56MfVIKHuG8pbGNWeiBJ33DFkQeVwzjZg 1OVbOqUJnG1x3Fy5w5xsE5sa3CdpTeKDDzwz3DTnqrpJbb/wUwes43Q6VIrqkITo L5PRNOTbI2VkAB4qkc5V920lK/ZzEvUxGN60R0babzkux0XdI6v2io1yu2Gy5pOe GZgQaowLtgkshdHSyOT0mKg3lTkdAnk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:34 2025 by rpki-client