$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa File: d4a5e9c1-d838-365f-9553-97009a7b5512.roa (raw, json) Hash identifier: CD7LaOn8yj6x9E30xepQVRY7BOfvQnaHaVggk2gxavY= Subject key identifier: EB:3E:AC:AB:28:0B:67:1F:8E:1E:75:F0:16:6C:3C:0E:4B:51:E8:68 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F3775C5A175272475AACF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.59.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:75:c5:a1:75:27:24:75:aa:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=42f796ff-9252-45e3-8afb-5c3849407ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fe:c9:7a:03:1d:db:d9:be:57:66:01:65:f7: d4:e2:0a:dd:6c:06:cd:45:ca:e1:e1:ce:64:e4:b1: b7:ca:17:d6:53:a0:a8:45:6b:b6:ad:c3:37:69:8a: 84:de:0a:22:9f:3a:fa:45:ab:3e:87:ea:5a:4d:31: cb:68:fd:09:55:97:41:af:26:8e:50:77:de:47:40: 30:15:76:19:a7:bb:f8:cb:d1:02:52:5c:71:04:4f: d3:f0:9d:42:3e:15:30:c0:92:d7:38:46:b6:63:0f: 00:87:16:26:47:02:fa:68:45:15:ca:67:ee:81:5b: 64:28:c1:9b:e7:72:f7:95:a0:26:a4:61:04:2d:85: e4:e9:06:73:80:54:12:08:7f:a2:9b:94:04:1e:f3: 8e:e3:02:c1:93:1d:f4:28:3e:22:e3:73:62:d9:9c: 3b:de:d6:bb:ef:d1:a4:7d:90:05:3d:90:7c:fa:d7: bb:43:8b:7e:85:7e:cb:37:e4:49:af:95:e8:d6:5f: c7:4c:5c:0f:db:ad:e4:0a:a8:b3:39:b0:06:c2:c4: 21:5b:58:a2:b8:41:af:4f:67:3d:41:54:09:9f:71: f9:fe:1a:6f:36:91:b8:80:f8:a2:d7:f0:96:8c:cd: 9d:1f:e1:58:7e:2b:bd:93:0c:26:b2:bf:86:ea:9a: 22:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3E:AC:AB:28:0B:67:1F:8E:1E:75:F0:16:6C:3C:0E:4B:51:E8:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:79:1c:2d:ee:cd:5d:7c:54:49:e9:ad:a1:0f:e2:8b:0e:26: 9f:30:32:de:e7:0f:47:23:aa:c3:06:2a:42:be:d7:6f:e4:94: b1:1a:25:19:35:0c:f1:cf:c4:56:5f:7e:0a:3c:e1:c6:26:10: f4:04:b6:b8:db:e0:e4:0c:ec:cc:1b:12:32:e7:5f:71:79:3e: a4:cf:5b:64:43:ae:d3:da:d9:37:66:51:03:96:b9:5c:ea:fb: 18:e2:65:8f:79:e5:52:d0:c0:0b:11:93:93:c0:9d:65:c4:b5: ea:d6:db:52:2a:28:5f:21:b5:cd:42:41:28:c9:3a:fa:d6:c6: ae:11:c1:63:b5:7b:6d:80:6b:52:06:67:96:cc:e7:e5:e7:ad: 80:ee:fe:3b:84:8c:aa:32:2a:43:8f:e3:17:24:39:0e:76:3b: 9f:5d:d8:a7:9c:da:d6:8c:a9:f1:24:82:4f:45:5d:24:dd:8c: f4:e7:35:de:96:7f:d2:0f:36:19:8c:f8:e1:ff:e7:5a:c4:7b: 72:28:77:28:a7:18:c7:4f:12:50:45:ed:23:3f:53:9a:63:d0: bd:54:3d:b6:3d:94:ea:74:12:d6:1e:2b:a4:50:39:16:2d:4f: 1e:d0:44:c9:98:0d:ba:09:c9:bf:f9:95:3f:c0:dd:9b:d8:dc: ff:8e:1f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3XFoXUnJHWqzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NDJmNzk2ZmYtOTI1Mi00NWUzLThhZmItNWMzODQ5NDA3Y2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP7JegMd29m+V2YBZffU4grdbAbNRcrh4c5k 5LG3yhfWU6CoRWu2rcM3aYqE3goinzr6Ras+h+paTTHLaP0JVZdBryaOUHfeR0Aw FXYZp7v4y9ECUlxxBE/T8J1CPhUwwJLXOEa2Yw8AhxYmRwL6aEUVymfugVtkKMGb 53L3laAmpGEELYXk6QZzgFQSCH+im5QEHvOO4wLBkx30KD4i43Ni2Zw73ta779Gk fZAFPZB8+te7Q4t+hX7LN+RJr5Xo1l/HTFwP263kCqizObAGwsQhW1iiuEGvT2c9 QVQJn3H5/hpvNpG4gPii1/CWjM2dH+FYfiu9kwwmsr+G6poirQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOs+rKsoC2cfjh518BZsPA5LUehoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDRhNWU5YzEtZDgzOC0z NjVmLTk1NTMtOTcwMDlhN2I1NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF5HC3uzV18VEnpraEP4osOJp8wMt7nD0cjqsMGKkK+12/klLEaJRk1 DPHPxFZffgo84cYmEPQEtrjb4OQM7MwbEjLnX3F5PqTPW2RDrtPa2TdmUQOWuVzq +xjiZY955VLQwAsRk5PAnWXEterW21IqKF8htc1CQSjJOvrWxq4RwWO1e22Aa1IG Z5bM5+XnrYDu/juEjKoyKkOP4xckOQ52O59d2Kec2taMqfEkgk9FXSTdjPTnNd6W f9IPNhmM+OH/51rEe3IodyinGMdPElBF7SM/U5pj0L1UPbY9lOp0EtYeK6RQORYt Tx7QRMmYDboJyb/5lT/A3ZvY3P+OHwY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:13:01 2025 by rpki-client