$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbd2d048-07e5-3fee-ae9a-f5488717c295.roa File: dbd2d048-07e5-3fee-ae9a-f5488717c295.roa (raw, json) Hash identifier: qL5xG9+UAAu9LnkRMZNuJc5aEk9vYdcx2S0Ck9OaHJE= Subject key identifier: AF:42:54:38:F2:F6:D6:37:D1:68:B9:B5:54:A2:05:99:93:70:6A:B0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F3765717639886CD483EC40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbd2d048-07e5-3fee-ae9a-f5488717c295.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 108.177.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:65:71:76:39:88:6c:d4:83:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=f3a85cc7-7985-42d1-a0fc-65946ba2e70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0c:30:9a:56:16:77:bd:79:b0:bf:e0:a1:45: 13:8a:1a:6b:03:ed:53:87:bd:93:40:f7:da:16:89: 68:2f:15:b8:3b:76:dd:13:a1:57:66:2e:ae:95:36: 08:a5:32:0a:d4:b2:b5:94:19:9e:04:43:1a:90:fe: b5:55:a4:d9:57:de:89:93:67:ab:7e:ba:fd:28:72: bb:bf:ec:86:7d:45:60:c5:10:80:07:6b:5a:fc:e9: b2:85:fa:b0:69:70:47:ad:98:35:0f:69:c1:ac:97: 78:0c:c2:0b:cc:a4:c8:79:25:13:d5:f9:81:63:64: 68:d8:e8:00:db:9e:61:6b:b9:8f:6c:b2:c1:bc:3e: cf:f5:b5:41:87:f1:f9:7e:49:b5:93:ad:fd:ce:be: 25:98:5b:4d:22:cd:bf:92:15:a0:f8:03:db:8b:18: cc:85:df:dc:87:a4:8b:ab:87:d1:75:65:0e:14:d6: 17:3b:00:11:88:07:42:51:51:95:f1:55:1d:c5:1e: e9:4d:03:ec:e3:85:72:3f:c1:20:be:cc:7d:80:81: db:33:b2:01:85:f6:e3:e1:cc:dd:89:b4:2d:02:50: 7c:b8:87:84:7a:c0:6d:00:de:9c:20:c9:bc:d7:db: 26:a5:3e:1f:6f:ed:32:09:b2:68:eb:25:ec:bf:ae: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:42:54:38:F2:F6:D6:37:D1:68:B9:B5:54:A2:05:99:93:70:6A:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbd2d048-07e5-3fee-ae9a-f5488717c295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2b:aa:b9:1d:18:23:32:f5:95:b2:a6:8e:c3:37:9b:a4:75: 56:37:b9:42:4d:65:b6:e5:b8:46:33:75:58:b9:c0:bb:c8:79: 21:a3:f1:76:52:67:60:02:c5:d2:27:4b:b2:4f:d1:10:76:d9: cf:29:d4:1e:97:e8:9f:58:6d:b2:29:40:68:17:e3:ed:ab:46: 7e:86:85:51:a2:cc:68:7c:78:e2:ea:8d:64:ed:8c:18:c7:78: 6c:f0:a6:c7:d3:93:c6:b7:61:26:b9:8e:28:1d:7b:bc:15:3d: 2d:a4:8e:c3:69:10:16:16:81:88:ca:28:ba:14:ad:d8:9e:79: 31:76:1a:b9:ea:43:d8:90:93:53:d1:f2:d9:7c:8d:3a:7a:07: 31:51:49:e2:c9:2f:dd:5d:f7:ec:9b:0c:32:ec:48:e5:59:52: 2f:85:df:a0:e0:78:5b:43:6b:76:8d:08:25:a5:54:94:b7:95: 54:fa:e8:4b:6f:c8:86:06:43:2a:1c:0e:55:02:aa:7f:37:0e: da:be:94:5e:44:52:e4:c1:f5:2d:8e:bd:59:a9:c8:14:74:3e: 9a:49:e6:6b:78:d0:00:74:dd:d4:1c:fa:ed:7a:75:84:65:63: 17:9e:0e:3d:99:d9:32:f1:1f:13:f9:36:86:9f:a3:66:56:90: d4:4a:6c:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2VxdjmIbNSD7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZjNhODVjYzctNzk4NS00MmQxLWEwZmMtNjU5NDZiYTJlNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgwwmlYWd715sL/goUUTihprA+1Th72TQPfa FoloLxW4O3bdE6FXZi6ulTYIpTIK1LK1lBmeBEMakP61VaTZV96Jk2erfrr9KHK7 v+yGfUVgxRCAB2ta/OmyhfqwaXBHrZg1D2nBrJd4DMILzKTIeSUT1fmBY2Ro2OgA 255ha7mPbLLBvD7P9bVBh/H5fkm1k639zr4lmFtNIs2/khWg+APbixjMhd/ch6SL q4fRdWUOFNYXOwARiAdCUVGV8VUdxR7pTQPs44VyP8Egvsx9gIHbM7IBhfbj4czd ibQtAlB8uIeEesBtAN6cIMm819smpT4fb+0yCbJo6yXsv67nlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9CVDjy9tY30Wi5tVSiBZmTcGqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGJkMmQwNDgtMDdlNS0z ZmVlLWFlOWEtZjU0ODg3MTdjMjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkrqrkdGCMy9ZWypo7DN5ukdVY3uUJNZbbluEYzdVi5wLvIeSGj8XZS Z2ACxdInS7JP0RB22c8p1B6X6J9YbbIpQGgX4+2rRn6GhVGizGh8eOLqjWTtjBjH eGzwpsfTk8a3YSa5jigde7wVPS2kjsNpEBYWgYjKKLoUrdieeTF2GrnqQ9iQk1PR 8tl8jTp6BzFRSeLJL91d9+ybDDLsSOVZUi+F36DgeFtDa3aNCCWlVJS3lVT66Etv yIYGQyocDlUCqn83Dtq+lF5EUuTB9S2OvVmpyBR0PppJ5mt40AB03dQc+u16dYRl YxeeDj2Z2TLxHxP5Noafo2ZWkNRKbDM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:03 2025 by rpki-client