$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea140b0e-fbec-328e-ad5e-7fce06f11002.roa File: ea140b0e-fbec-328e-ad5e-7fce06f11002.roa (raw, json) Hash identifier: 9wrnIMh4Jvv5+LrwpMoreU5sw8ZvPfN3Zg+joN23uqE= Subject key identifier: 26:58:25:44:32:BC:31:88:DE:CC:04:37:19:22:29:98:00:05:E3:9E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F3773CAC57F31D33B646E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea140b0e-fbec-328e-ad5e-7fce06f11002.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 108.59.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:73:ca:c5:7f:31:d3:3b:64:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=5bb7adab-9e2b-434c-b8f4-34c71ef0b8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:b1:d2:e9:4d:f4:89:7e:15:64:99:98:8e: dd:52:81:de:a0:c8:60:5a:f2:8f:d3:55:20:ac:aa: 34:2d:e5:a4:ee:44:8c:7d:59:b7:7d:d6:dd:61:d1: f8:a8:f2:5a:f0:73:3b:47:1a:5a:f4:07:63:e3:c7: f4:c2:1b:1d:31:10:99:01:5b:e6:83:fb:9f:39:90: 07:03:24:13:62:03:4d:30:b9:5c:b3:ec:31:3d:80: bf:e2:f8:c7:8e:52:93:7b:b6:13:17:9e:a7:5c:29: 61:69:b8:9a:47:78:73:97:95:e0:80:89:41:9b:73: a9:07:30:69:61:82:78:e6:34:00:dd:90:56:51:c1: a0:1a:f3:f6:f2:26:97:97:51:45:bd:6c:cf:05:da: 24:19:9c:0c:e2:23:4d:c9:18:52:5c:39:e6:91:8a: c5:be:d4:0b:40:90:72:89:66:10:bb:95:3b:38:28: 75:a9:06:33:ee:1c:07:5f:45:01:b1:a1:ca:8c:4d: 2f:6a:5d:8b:ae:e3:70:72:38:0f:d9:f0:bb:76:75: 6f:22:08:fb:31:9a:a0:31:02:db:e5:69:42:58:dc: 85:de:33:41:ed:31:b0:33:04:74:77:33:e6:19:fc: ba:78:e8:69:bb:6d:5f:f4:b7:ba:47:60:44:d0:96: 26:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:58:25:44:32:BC:31:88:DE:CC:04:37:19:22:29:98:00:05:E3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea140b0e-fbec-328e-ad5e-7fce06f11002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c3:43:cb:73:b3:94:7b:60:45:e3:79:d1:f5:e6:21:fa:6f: 2f:1f:f7:2a:2e:72:42:7d:56:bd:82:d3:41:94:73:6f:91:46: ac:4d:5e:65:a9:ec:94:aa:d5:69:94:56:4b:d9:e6:e4:8b:c6: bf:60:b3:f0:06:38:41:d8:a4:a1:96:0e:93:40:d5:90:91:30: 95:4d:5b:1d:72:ac:49:76:6a:61:a8:37:ef:9c:b6:11:d2:f2: 33:2c:94:2d:ed:3f:f9:69:60:c7:51:de:bb:34:7e:07:b9:f7: 7d:2d:03:1c:b3:49:c4:50:99:27:bc:a4:f3:fe:fb:11:67:19: c8:1b:f6:da:a3:b3:23:cb:a3:fd:cb:96:65:e9:9c:9b:9c:8e: fd:47:50:05:23:c6:94:24:0e:6e:7c:5c:47:5f:3b:ea:1c:eb: 80:b1:46:84:f3:14:54:02:f9:98:b2:d8:69:5c:b3:2a:93:1a: 97:1d:ca:8a:1f:20:ba:d5:6a:e0:7a:7f:f0:ec:c7:9f:85:f5: 75:02:76:05:c2:cd:ea:d2:9a:2c:27:38:89:8b:70:74:bc:e5: 80:b4:9d:bd:96:19:a9:17:af:cf:5b:fb:bf:cb:65:a3:3c:5f: 50:a0:23:6d:0e:9a:57:ac:70:86:14:cf:e4:e9:72:23:47:b6: d5:f3:fe:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3PKxX8x0ztkbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NWJiN2FkYWItOWUyYi00MzRjLWI4ZjQtMzRjNzFlZjBiOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Kx0ulN9Il+FWSZmI7dUoHeoMhgWvKP01Ug rKo0LeWk7kSMfVm3fdbdYdH4qPJa8HM7Rxpa9Adj48f0whsdMRCZAVvmg/ufOZAH AyQTYgNNMLlcs+wxPYC/4vjHjlKTe7YTF56nXClhabiaR3hzl5XggIlBm3OpBzBp YYJ45jQA3ZBWUcGgGvP28iaXl1FFvWzPBdokGZwM4iNNyRhSXDnmkYrFvtQLQJBy iWYQu5U7OCh1qQYz7hwHX0UBsaHKjE0val2LruNwcjgP2fC7dnVvIgj7MZqgMQLb 5WlCWNyF3jNB7TGwMwR0dzPmGfy6eOhpu21f9Le6R2BE0JYmZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZYJUQyvDGI3swENxkiKZgABeOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWExNDBiMGUtZmJlYy0z MjhlLWFkNWUtN2ZjZTA2ZjExMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/DQ8tzs5R7YEXjedH15iH6by8f9youckJ9Vr2C00GUc2+RRqxNXmWp 7JSq1WmUVkvZ5uSLxr9gs/AGOEHYpKGWDpNA1ZCRMJVNWx1yrEl2amGoN++cthHS 8jMslC3tP/lpYMdR3rs0fge5930tAxyzScRQmSe8pPP++xFnGcgb9tqjsyPLo/3L lmXpnJucjv1HUAUjxpQkDm58XEdfO+oc64CxRoTzFFQC+Ziy2GlcsyqTGpcdyoof ILrVauB6f/Dsx5+F9XUCdgXCzerSmiwnOImLcHS85YC0nb2WGakXr89b+7/LZaM8 X1CgI20OmlescIYUz+TpciNHttXz/tk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:26 2025 by rpki-client