$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/015261bd-8980-3d3d-9c97-e5b14b626bd5.roa File: 015261bd-8980-3d3d-9c97-e5b14b626bd5.roa (raw, json) Hash identifier: I0rDvLJjfSZUz3PDhslc5vkA18LPkQkuC4UH2c3xPrQ= Subject key identifier: 62:70:22:43:40:FC:15:DE:90:D0:AE:B2:5D:EC:43:FE:A4:51:87:D9 Certificate issuer: /CN=bd75a9a0-01bb-458c-8d2d-56a7b32fefeb Certificate serial: 010D0C9F4328584B84E788683F3FF37D1D81B600 Authority key identifier: F4:E9:EE:D1:DC:52:88:37:CF:A1:49:76:C9:6F:19:11:14:63:78:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/015261bd-8980-3d3d-9c97-e5b14b626bd5.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 11851 IP address blocks: 108.174.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:88:68:3f:3f:f3:7d:1d:81:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd75a9a0-01bb-458c-8d2d-56a7b32fefeb Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=cfd90eb4-fbfb-41bb-8617-0c08892073fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:8f:90:39:c4:05:f4:1d:90:be:1e:e1:38: 43:ca:91:4a:43:a6:ae:33:c8:c3:95:2f:f9:54:c9: 3b:54:45:e0:02:77:a5:8b:99:96:31:d2:ee:91:0c: d0:6d:25:df:7f:54:3e:59:65:e1:25:92:ef:7f:8f: 94:42:36:be:e3:01:d9:27:8a:17:d4:34:c2:d8:cc: f1:e6:9b:c3:97:35:df:cd:2c:0b:36:4f:ff:f4:fc: 9b:df:d9:07:e5:68:3a:57:52:5d:e0:21:c0:f0:80: 29:7d:2d:36:b2:1f:fe:1e:30:f8:e1:e6:d2:a7:17: a5:b9:f9:69:ab:32:b8:1c:4d:b5:8c:80:7f:04:f2: de:d9:fd:ab:4b:a6:7d:56:8c:b0:dd:4a:60:6b:de: ca:06:2b:28:3e:ec:9e:b9:6b:f7:44:43:b3:4d:10: b9:d7:f5:71:65:c2:3f:b3:35:a4:19:d9:b0:ed:56: f5:e2:96:e8:a5:40:ce:cf:9f:2f:30:5c:fc:6e:6e: 34:d6:f0:8c:88:60:ba:3a:00:ce:b7:ee:68:ea:3c: db:de:18:87:2e:69:37:96:78:d8:4a:08:52:41:ce: 3d:a2:66:0c:54:b0:0b:ea:e6:c8:a7:00:07:e6:86: 0e:58:aa:4d:fc:1a:f1:60:6b:d1:d5:9c:a7:43:95: 48:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:70:22:43:40:FC:15:DE:90:D0:AE:B2:5D:EC:43:FE:A4:51:87:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/015261bd-8980-3d3d-9c97-e5b14b626bd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.crl X509v3 Authority Key Identifier: keyid:F4:E9:EE:D1:DC:52:88:37:CF:A1:49:76:C9:6F:19:11:14:63:78:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.cer sbgp-ipAddrBlock: critical IPv4: 108.174.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:97:80:ce:1c:8d:e4:32:8e:a7:89:1d:4d:37:1b:fc:c1:26: 08:ba:1b:fd:b4:3c:e0:38:b3:56:67:b9:e8:ee:34:d0:5a:f0: 86:13:a5:ce:3d:f3:bc:0e:9d:a0:d8:9a:e4:27:16:d8:d9:51: 1a:ac:31:e3:6a:6c:10:f5:d5:6d:c0:5b:7e:bf:20:9d:67:c9: f0:56:13:7a:40:28:98:23:c6:91:ad:a3:e5:9f:a8:3a:7a:18: 83:a9:38:13:1e:4d:8a:23:f8:cd:81:c8:42:df:6f:68:9d:55: 1a:6f:b2:11:e7:e4:e1:d8:8f:21:9e:14:8d:02:fe:e6:2d:bf: 06:b2:49:74:45:49:da:2c:b2:63:0c:68:15:9e:08:37:49:75: 41:ae:59:ed:ce:bb:f3:77:45:6d:fd:7c:a8:e0:3e:af:90:23: df:94:d0:a8:15:f7:e7:57:60:5a:02:77:1b:15:ef:26:13:6b: be:ac:f5:ec:0d:37:44:0b:0e:d8:49:74:d7:6c:bc:9d:37:44: 0c:36:29:59:07:fe:8a:db:3d:e9:b2:7c:7c:fd:0a:e2:cc:f1: 27:62:44:bd:0e:76:1a:c0:6d:b3:87:b8:8d:c8:14:64:c9:58: 7a:d2:e6:48:f1:a9:cd:07:ca:2c:d6:7d:a5:2a:4f:d9:7e:0f: d1:5f:30:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54hoPz/zfR2BtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ3NWE5YTAtMDFiYi00NThjLThkMmQtNTZhN2IzMmZl ZmViMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk Y2ZkOTBlYjQtZmJmYi00MWJiLTg2MTctMGMwODg5MjA3M2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTCPkDnEBfQdkL4e4ThDypFKQ6auM8jDlS/5 VMk7VEXgAneli5mWMdLukQzQbSXff1Q+WWXhJZLvf4+UQja+4wHZJ4oX1DTC2Mzx 5pvDlzXfzSwLNk//9Pyb39kH5Wg6V1Jd4CHA8IApfS02sh/+HjD44ebSpxeluflp qzK4HE21jIB/BPLe2f2rS6Z9Voyw3Upga97KBisoPuyeuWv3REOzTRC51/VxZcI/ szWkGdmw7Vb14pbopUDOz58vMFz8bm401vCMiGC6OgDOt+5o6jzb3hiHLmk3lnjY SghSQc49omYMVLAL6ubIpwAH5oYOWKpN/BrxYGvR1ZynQ5VI0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJwIkNA/BXekNCusl3sQ/6kUYfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iZDc1 YTlhMC0wMWJiLTQ1OGMtOGQyZC01NmE3YjMyZmVmZWIvMDE1MjYxYmQtODk4MC0z ZDNkLTljOTctZTViMTRiNjI2YmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmQ3NWE5YTAtMDFiYi00NThjLThk MmQtNTZhN2IzMmZlZmViL2JkNzVhOWEwLTAxYmItNDU4Yy04ZDJkLTU2YTdiMzJm ZWZlYi5jcmwwHwYDVR0jBBgwFoAU9Onu0dxSiDfPoUl2yW8ZERRjeGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iZDc1YTlhMC0wMWJiLTQ1OGMtOGQyZC01NmE3 YjMyZmVmZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbK6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+XgM4cjeQyjqeJHU03G/zBJgi6G/20POA4s1ZnuejuNNBa8IYTpc49 87wOnaDYmuQnFtjZURqsMeNqbBD11W3AW36/IJ1nyfBWE3pAKJgjxpGto+WfqDp6 GIOpOBMeTYoj+M2ByELfb2idVRpvshHn5OHYjyGeFI0C/uYtvwaySXRFSdossmMM aBWeCDdJdUGuWe3Ou/N3RW39fKjgPq+QI9+U0KgV9+dXYFoCdxsV7yYTa76s9ewN N0QLDthJdNdsvJ03RAw2KVkH/orbPemyfHz9CuLM8SdiRL0OdhrAbbOHuI3IFGTJ WHrS5kjxqc0HyizWfaUqT9l+D9FfMHI= -----END CERTIFICATE-----Generated at Tue Oct 21 00:01:22 2025 by rpki-client