$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d18754f8-e364-30d1-91b6-461fc5946ec9.roa File: d18754f8-e364-30d1-91b6-461fc5946ec9.roa (raw, json) Hash identifier: Est0Idj1Su9nCWrSeZ6CWktMapjvhQzBcFo3dAbZfXo= Subject key identifier: AE:A2:47:3F:92:E2:38:9B:25:A5:F7:4C:E1:B3:E2:E7:CD:3E:61:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB93616E33E8CA5ABA9CA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d18754f8-e364-30d1-91b6-461fc5946ec9.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 107.3.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:36:16:e3:3e:8c:a5:ab:a9:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a6deb84e-c943-49e6-96fc-256c5b3fb39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:91:7f:50:3d:a1:99:c2:52:ba:0b:2d:ce:08: 01:fc:60:46:a1:a6:32:67:0f:9b:7c:d8:c6:85:e0: 31:98:ad:0d:f8:fc:f7:76:c1:dc:00:7d:7b:1c:7a: 20:3e:ed:e1:ad:ae:e1:63:20:cd:6e:c0:55:3f:52: d9:78:5f:88:bc:04:1f:d8:da:a4:17:b1:95:93:c9: 03:98:9a:94:94:59:58:e1:74:bd:43:14:6a:a6:96: a2:3b:77:9c:d8:b3:fe:92:52:28:91:54:0e:3d:8c: 69:03:42:81:05:17:ed:e1:d7:b4:f8:90:8e:78:f4: da:cc:e5:05:81:fd:f5:06:49:5d:46:c1:26:01:99: d1:d4:36:57:72:cf:e1:4f:b5:70:c9:66:cc:77:12: a2:30:c8:83:70:a8:0c:a2:6c:c7:7b:15:3d:32:ce: 4e:55:99:5b:60:5a:62:0b:17:35:97:55:6c:ce:3b: 52:bc:09:68:c4:cc:01:a0:f7:64:b9:3e:c3:a9:21: 54:3f:37:c7:f4:69:cc:0e:cf:c8:d2:b8:00:3d:9e: 84:87:d3:bd:79:8a:9d:1e:d8:a6:a6:b3:27:9e:25: b5:1d:be:79:18:fb:95:e3:e2:c0:4b:dc:5d:13:54: a8:cf:a7:fa:16:b9:51:02:d7:18:ef:be:98:72:07: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A2:47:3F:92:E2:38:9B:25:A5:F7:4C:E1:B3:E2:E7:CD:3E:61:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d18754f8-e364-30d1-91b6-461fc5946ec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.3.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:a4:e0:6e:bd:73:d7:64:ef:55:06:bd:04:e1:fc:6a:3e:fa: 93:b9:4b:84:31:a8:f4:0f:0f:2e:3e:2d:78:76:af:1e:92:94: 6d:54:18:0d:cf:cb:14:db:27:4e:d5:2e:65:21:e2:e4:d3:d0: 38:70:11:64:90:27:91:ee:23:c2:b1:6c:eb:0b:27:1a:23:1e: b3:0e:52:1e:de:08:d2:47:1d:71:26:9b:42:2f:16:c3:c1:ee: d5:7f:a4:d0:76:7b:5a:b5:42:10:c0:64:c2:e0:49:53:66:96: 7b:94:9d:d6:6a:8b:07:fc:8a:15:4e:ac:bd:76:3b:13:92:ac: bc:1d:5a:a6:3f:90:4d:c4:37:2d:7b:0e:a0:05:46:7f:2f:f6: b7:61:35:d4:93:a4:89:25:48:08:34:81:b9:d2:32:9d:8f:00: 3c:70:65:84:14:fc:44:05:70:d1:33:90:73:86:7d:f2:c3:96: 96:23:74:b7:97:91:ba:03:52:b3:62:c9:b8:bf:28:16:77:e1: 0f:09:32:d3:75:f8:b6:6a:f7:f3:01:4f:23:4e:ff:9d:2d:e9: 10:c5:a0:75:b4:9b:7b:aa:e9:b1:7f:83:ee:e1:96:11:2f:cd: 84:7e:81:c2:90:6b:1f:37:f4:e5:97:a6:64:aa:62:ec:b2:7c: fa:47:c3:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uTYW4z6MpaupygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTZkZWI4NGUtYzk0My00OWU2LTk2ZmMtMjU2YzViM2ZiMzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJF/UD2hmcJSugstzggB/GBGoaYyZw+bfNjG heAxmK0N+Pz3dsHcAH17HHogPu3hra7hYyDNbsBVP1LZeF+IvAQf2NqkF7GVk8kD mJqUlFlY4XS9QxRqppaiO3ec2LP+klIokVQOPYxpA0KBBRft4de0+JCOePTazOUF gf31BkldRsEmAZnR1DZXcs/hT7VwyWbMdxKiMMiDcKgMomzHexU9Ms5OVZlbYFpi Cxc1l1VszjtSvAloxMwBoPdkuT7DqSFUPzfH9GnMDs/I0rgAPZ6Eh9O9eYqdHtim prMnniW1Hb55GPuV4+LAS9xdE1Soz6f6FrlRAtcY776YcgdWjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6iRz+S4jibJaX3TOGz4ufNPmE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE4NzU0ZjgtZTM2NC0z MGQxLTkxYjYtNDYxZmM1OTQ2ZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGawOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyk4G69c9dk71UGvQTh/Go++pO5S4QxqPQPDy4+LXh2rx6SlG1UGA3P yxTbJ07VLmUh4uTT0DhwEWSQJ5HuI8KxbOsLJxojHrMOUh7eCNJHHXEmm0IvFsPB 7tV/pNB2e1q1QhDAZMLgSVNmlnuUndZqiwf8ihVOrL12OxOSrLwdWqY/kE3ENy17 DqAFRn8v9rdhNdSTpIklSAg0gbnSMp2PADxwZYQU/EQFcNEzkHOGffLDlpYjdLeX kboDUrNiybi/KBZ34Q8JMtN1+LZq9/MBTyNO/50t6RDFoHW0m3uq6bF/g+7hlhEv zYR+gcKQax839OWXpmSqYuyyfPpHw+Q= -----END CERTIFICATE-----Generated at Mon Oct 20 10:56:52 2025 by rpki-client