$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1709c66-bb49-32dc-970e-faa9c3d46b6c.roa File: c1709c66-bb49-32dc-970e-faa9c3d46b6c.roa (raw, json) Hash identifier: h/ViQoGRPMwIc88MUUOyKwKJysuElaf/lyqHlXtxmdg= Subject key identifier: E6:2A:2F:9D:34:FB:7C:43:79:75:34:54:D4:AC:AF:D5:C3:75:3C:15 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4F568B6C07F26B06AA900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1709c66-bb49-32dc-970e-faa9c3d46b6c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 107.3.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:f5:68:b6:c0:7f:26:b0:6a:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c66d4ac2-c024-4c65-bfc9-30b3db01c8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:0e:ca:5a:2e:49:16:c2:c5:eb:64:a2:11: 0e:4c:f7:34:34:b5:0e:40:a0:7c:0b:b1:33:b3:18: 62:31:83:bf:9c:54:d6:34:39:3a:97:5c:17:71:b4: ba:25:8e:58:11:77:4b:b1:dc:2a:d7:8e:d1:6c:d3: c1:5b:07:e8:77:6a:eb:ae:45:7e:5e:6c:2d:8b:0a: e3:44:53:28:49:f2:86:f9:22:b4:65:9a:a7:19:63: 25:4e:71:ae:5e:0c:a5:2e:0b:d8:b4:98:79:ef:5c: 3a:00:23:4b:6d:55:d2:10:bc:6d:db:17:48:64:3b: eb:ca:6b:aa:5a:fa:15:e1:0a:3e:9b:a9:31:bb:04: 3b:56:7d:f4:a9:eb:74:ee:0e:09:04:50:62:e8:01: 92:c4:93:7d:1f:57:f6:8a:68:f4:d2:01:c1:5e:7b: e7:85:80:a7:b5:23:cb:1d:d9:ac:ef:d7:91:f5:9a: 56:84:45:28:f4:ba:30:ad:c3:73:73:6e:d0:3b:28: 60:74:70:17:c6:22:80:79:af:e9:dd:de:72:2f:3f: 00:8c:d3:93:7a:b6:cb:e8:8f:3e:9c:cf:0b:99:25: c8:fb:76:ce:31:6d:21:21:47:7d:35:8a:30:ad:f7: 25:09:ad:ef:49:44:d5:cc:9c:e0:22:52:56:84:ac: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2A:2F:9D:34:FB:7C:43:79:75:34:54:D4:AC:AF:D5:C3:75:3C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1709c66-bb49-32dc-970e-faa9c3d46b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.3.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:15:fa:fb:08:e4:42:3d:61:53:84:ef:4d:a0:6e:8c:3b:aa: f7:e0:f7:2a:d7:b9:62:67:2a:ed:2e:c0:d1:40:8b:92:8a:2a: 28:1c:44:fe:f8:31:32:40:2c:18:44:b0:f4:9e:2f:74:3b:fd: b5:37:fd:5c:8c:77:4c:7d:de:de:c4:78:7f:ae:bd:5e:b2:2a: c9:d1:66:10:c1:2c:00:68:ec:f7:b9:02:d6:26:3e:af:d4:cc: ab:21:1d:f8:4d:6f:6a:91:8c:81:69:4c:2c:9c:54:56:bb:92: 92:6b:29:3b:54:71:80:89:f1:37:94:0e:6c:5b:ad:e0:ee:cb: 3e:b6:ca:81:83:f9:d3:fa:46:20:62:50:1f:e8:82:87:72:cf: e9:17:9b:5a:ab:0d:49:cd:23:09:6d:84:dd:10:38:d9:16:cf: 92:32:f0:43:54:e4:62:ae:98:47:d5:ca:02:f7:44:0b:03:0a: 0b:cf:6a:73:c8:fe:fb:72:c9:81:46:37:1c:b3:bb:d7:dc:af: 2d:54:5d:6a:15:68:d6:8e:d2:a4:f1:56:54:df:a6:40:af:6a: 8e:e4:8f:5f:55:35:bf:38:a5:5e:df:52:d5:44:d7:77:9c:1f: 51:b8:f7:11:43:42:c6:a0:fc:bb:cf:10:8d:0d:52:f6:d9:40: ce:95:06:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxPVotsB/JrBqqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzY2ZDRhYzItYzAyNC00YzY1LWJmYzktMzBiM2RiMDFjOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAgOylouSRbCxetkohEOTPc0NLUOQKB8C7Ez sxhiMYO/nFTWNDk6l1wXcbS6JY5YEXdLsdwq147RbNPBWwfod2rrrkV+Xmwtiwrj RFMoSfKG+SK0ZZqnGWMlTnGuXgylLgvYtJh571w6ACNLbVXSELxt2xdIZDvrymuq WvoV4Qo+m6kxuwQ7Vn30qet07g4JBFBi6AGSxJN9H1f2imj00gHBXnvnhYCntSPL Hdms79eR9ZpWhEUo9LowrcNzc27QOyhgdHAXxiKAea/p3d5yLz8AjNOTerbL6I8+ nM8LmSXI+3bOMW0hIUd9NYowrfclCa3vSUTVzJzgIlJWhKymRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYqL500+3xDeXU0VNSsr9XDdTwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzE3MDljNjYtYmI0OS0z MmRjLTk3MGUtZmFhOWMzZDQ2YjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgV+vsI5EI9YVOE702gbow7qvfg9yrXuWJnKu0uwNFAi5KKKigcRP74 MTJALBhEsPSeL3Q7/bU3/VyMd0x93t7EeH+uvV6yKsnRZhDBLABo7Pe5AtYmPq/U zKshHfhNb2qRjIFpTCycVFa7kpJrKTtUcYCJ8TeUDmxbreDuyz62yoGD+dP6RiBi UB/ogodyz+kXm1qrDUnNIwlthN0QONkWz5Iy8ENU5GKumEfVygL3RAsDCgvPanPI /vtyyYFGNxyzu9fcry1UXWoVaNaO0qTxVlTfpkCvao7kj19VNb84pV7fUtVE13ec H1G49xFDQsag/LvPEI0NUvbZQM6VBrA= -----END CERTIFICATE-----Generated at Sun Aug 24 09:46:15 2025 by rpki-client