$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4fecc45-9eff-3171-8529-c205c57b478e.roa File: f4fecc45-9eff-3171-8529-c205c57b478e.roa (raw, json) Hash identifier: 6gL/HFJNQ32sIlX8Ko1tavNhzXudISUR4A8u/nAzqJQ= Subject key identifier: 42:55:6A:48:F5:A6:21:FA:E0:EF:E7:12:F1:1B:2C:17:25:84:C7:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9E631A0B8647EE7233F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4fecc45-9eff-3171-8529-c205c57b478e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33491 IP address blocks: 107.0.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:e6:31:a0:b8:64:7e:e7:23:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=e7c1c894-79a9-4a2a-9d1f-dcfce8cb8a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7c:99:30:75:b9:f3:7f:e9:88:83:7b:95:b2: fc:fb:c8:19:bb:94:f7:a8:6e:eb:de:03:04:3b:0b: 14:fe:58:49:eb:0f:a7:5e:c2:f9:ba:c8:17:b3:9a: 46:de:6c:77:b5:bf:91:b3:b4:21:d2:5f:82:85:27: e7:3e:fa:68:2c:81:ee:40:c2:e5:e9:c8:db:ba:bc: 99:4d:22:e7:88:21:0e:ea:f4:10:3c:c5:f0:7f:fc: 19:11:18:35:8b:bc:79:31:04:90:50:f0:8e:aa:6f: a5:64:43:89:42:d6:c3:ba:06:10:e1:ad:a4:72:d9: 8f:27:0d:38:35:47:65:98:b4:4c:7c:88:54:25:5e: 71:4e:0b:80:0f:dc:b7:2c:99:a6:e6:5d:99:0d:98: b4:ec:55:e0:67:3d:7a:c3:02:39:0a:40:77:97:f1: 4a:39:93:74:1d:d5:82:0f:b4:ee:93:76:ba:e6:75: 23:4d:bf:9f:ca:37:59:35:d7:17:a9:e9:82:a3:06: 06:c7:43:cb:a1:c4:a8:e6:33:ff:c7:a6:1e:01:bf: 5f:3a:f6:54:0b:6f:ef:b8:57:3e:91:c0:17:33:d6: a9:8c:a3:ba:fb:f9:09:87:7e:3e:13:e7:77:2b:64: 25:72:59:82:26:dd:7d:ff:01:ee:07:99:be:66:f2: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:55:6A:48:F5:A6:21:FA:E0:EF:E7:12:F1:1B:2C:17:25:84:C7:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4fecc45-9eff-3171-8529-c205c57b478e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.0.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:66:c6:cf:13:76:c8:ec:1f:c2:6e:d4:99:30:40:1a:9d:11: c6:88:a5:10:59:57:26:3d:d6:ee:c2:96:62:b3:9e:64:4c:15: 63:96:25:44:31:f1:5c:76:2b:30:82:96:ba:55:a4:45:32:3c: f7:1b:2f:6c:9c:d7:a2:52:d2:a9:23:88:7f:38:24:49:c6:39: 3f:29:e5:99:e3:70:ef:d6:27:03:07:ca:73:e0:db:39:97:9f: 8c:3b:be:21:1a:e5:19:22:f1:c9:0f:fb:1f:d6:f1:6b:49:61: 9e:0d:0b:a0:87:af:66:a7:54:fa:1d:1e:2b:5d:4c:0f:ce:79: d0:17:12:48:d8:3f:1d:63:00:d0:b5:f2:34:4b:06:be:c1:8b: 1d:2a:59:c7:c5:36:f4:80:8e:dc:d8:95:b5:d5:64:21:1f:aa: 7e:38:b6:a1:45:4c:8b:41:b0:14:98:28:e1:95:e4:dc:95:cd: a9:64:19:70:5f:c5:0f:ae:a3:47:92:c5:33:5a:0b:f2:e8:4b: 4d:36:aa:d8:81:7c:5e:d2:25:5f:ca:52:ee:a5:2d:09:d6:0b: 98:b6:ab:6a:6f:34:1c:d7:a7:1f:bc:72:af:c2:3e:2a:e5:48: f6:c8:17:a3:88:87:ce:ef:2a:30:e2:d6:2c:38:cb:ae:00:29: f3:f0:dd:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ueYxoLhkfucjP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZTdjMWM4OTQtNzlhOS00YTJhLTlkMWYtZGNmY2U4Y2I4YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XyZMHW583/piIN7lbL8+8gZu5T3qG7r3gME OwsU/lhJ6w+nXsL5usgXs5pG3mx3tb+Rs7Qh0l+ChSfnPvpoLIHuQMLl6cjburyZ TSLniCEO6vQQPMXwf/wZERg1i7x5MQSQUPCOqm+lZEOJQtbDugYQ4a2kctmPJw04 NUdlmLRMfIhUJV5xTguAD9y3LJmm5l2ZDZi07FXgZz16wwI5CkB3l/FKOZN0HdWC D7Tuk3a65nUjTb+fyjdZNdcXqemCowYGx0PLocSo5jP/x6YeAb9fOvZUC2/vuFc+ kcAXM9apjKO6+/kJh34+E+d3K2QlclmCJt19/wHuB5m+ZvIV2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJVakj1piH64O/nEvEbLBclhMdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjRmZWNjNDUtOWVmZi0z MTcxLTg1MjktYzIwNWM1N2I0NzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpmxs8TdsjsH8Ju1JkwQBqdEcaIpRBZVyY91u7ClmKznmRMFWOWJUQx 8Vx2KzCClrpVpEUyPPcbL2yc16JS0qkjiH84JEnGOT8p5ZnjcO/WJwMHynPg2zmX n4w7viEa5Rki8ckP+x/W8WtJYZ4NC6CHr2anVPodHitdTA/OedAXEkjYPx1jANC1 8jRLBr7Bix0qWcfFNvSAjtzYlbXVZCEfqn44tqFFTItBsBSYKOGV5NyVzalkGXBf xQ+uo0eSxTNaC/LoS002qtiBfF7SJV/KUu6lLQnWC5i2q2pvNBzXpx+8cq/CPirl SPbIF6OIh87vKjDi1iw4y64AKfPw3R0= -----END CERTIFICATE-----Generated at Mon Oct 20 23:09:56 2025 by rpki-client