$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa File: 00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa (raw, json) Hash identifier: CNb5/eWt+jK69jgsdaKngE64s+Jah4xg0m+F7F5ph94= Subject key identifier: 84:AC:8C:09:F5:33:8B:49:26:03:C5:A9:45:24:82:1D:B8:BE:09:A4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E0D37C37A0CD9294570800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:d3:7c:37:a0:cd:92:94:57:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=b17315e6-e3c1-4b0a-8a70-1f0d7e48a8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:c0:00:83:9a:94:b4:84:96:56:cf:98:ea: 95:7d:69:21:5c:4e:01:dc:0a:d1:47:df:ab:70:c9: c9:c1:9a:bf:cf:77:e6:df:d6:0b:1a:ad:cc:58:5c: ae:18:52:4f:01:0a:5a:f4:dc:f5:d5:3b:3f:fe:b7: 73:e5:95:9e:11:d9:c9:4b:64:4c:94:f6:aa:c3:de: a2:2d:eb:76:cf:06:05:0b:9d:84:f5:85:a8:9a:43: 7c:26:d6:ce:0d:12:bf:00:24:86:5a:c2:39:47:9f: 76:04:6a:6a:bc:32:0c:71:29:2f:35:e5:af:13:35: cd:0a:77:8e:e2:21:fa:47:00:6b:d4:49:48:e2:7e: 28:46:23:cd:4f:fe:98:a9:c8:17:9c:bc:5e:36:35: ab:a3:22:f4:6e:77:c3:70:34:dd:b8:ad:b7:58:64: 7c:fa:d1:90:ff:19:0f:ac:48:06:e1:7d:74:32:43: 0b:e2:6b:24:e9:86:9b:21:dc:c4:8d:ee:25:f9:f8: c5:68:28:87:f3:7d:37:49:83:c8:ee:71:25:b5:11: c3:21:bc:6a:a1:50:22:e2:e9:30:b7:41:7b:f7:b0: 3f:10:f7:0c:f1:0f:89:5f:1f:71:1a:cc:7d:ea:8b: 68:e7:f4:60:fd:dc:cf:89:de:96:84:fe:62:7e:8e: bb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AC:8C:09:F5:33:8B:49:26:03:C5:A9:45:24:82:1D:B8:BE:09:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:65:e2:37:43:f0:c3:95:4e:bc:6d:1f:b4:d6:00:7c:e7:8e: 14:8c:d0:61:a3:68:86:1b:4c:57:dd:a2:e3:fb:32:00:7b:ed: 5b:7e:3e:07:54:cd:98:47:49:03:84:9e:e8:a6:ab:8c:c0:52: 79:9a:c0:62:0f:a5:a4:85:a6:9e:e3:4a:a3:e5:92:ae:10:b9: 5e:b7:d0:d9:d6:cd:78:d9:e6:35:e5:a0:67:18:a4:78:93:f8: a5:b4:19:66:06:1e:b0:4e:64:5c:8a:fd:94:66:90:22:76:09: 54:e9:2e:5e:48:77:1b:fc:45:2d:d1:28:f2:7f:41:34:a3:a1: cf:4c:fa:12:f1:15:54:4f:3b:b3:bd:a7:ad:53:90:61:44:37: 0d:4c:97:aa:d7:00:5c:8e:bc:27:66:af:9c:c7:31:7b:b6:5e: 5a:65:34:48:ae:40:0d:47:b2:ff:9c:8f:8a:f6:bd:f4:d3:71: 77:b9:7b:81:bd:06:b3:ae:70:ba:03:3a:9d:ef:ad:d2:e8:cc: 83:54:42:16:f4:7a:ca:72:41:db:1b:95:d1:48:8a:85:c0:30: d3:35:72:16:6a:82:29:6f:8c:13:af:2c:c6:8e:1b:9e:03:97: f8:84:87:26:9b:2e:20:e5:d9:fa:fc:ce:5f:a9:84:66:58:68: 56:68:a7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NN8N6DNkpRXCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YjE3MzE1ZTYtZTNjMS00YjBhLThhNzAtMWYwZDdlNDhhOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRDAAIOalLSEllbPmOqVfWkhXE4B3ArRR9+r cMnJwZq/z3fm39YLGq3MWFyuGFJPAQpa9Nz11Ts//rdz5ZWeEdnJS2RMlPaqw96i Let2zwYFC52E9YWomkN8JtbODRK/ACSGWsI5R592BGpqvDIMcSkvNeWvEzXNCneO 4iH6RwBr1ElI4n4oRiPNT/6YqcgXnLxeNjWroyL0bnfDcDTduK23WGR8+tGQ/xkP rEgG4X10MkML4msk6YabIdzEje4l+fjFaCiH8303SYPI7nEltRHDIbxqoVAi4ukw t0F797A/EPcM8Q+JXx9xGsx96oto5/Rg/dzPid6WhP5ifo678QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISsjAn1M4tJJgPFqUUkgh24vgmkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDBiZmNiNGQtMzFkNC0z Yjg0LTgwNjUtMzhhZTI3YWU4NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhl4jdD8MOVTrxtH7TWAHznjhSM0GGjaIYbTFfdouP7MgB77Vt+PgdU zZhHSQOEnuimq4zAUnmawGIPpaSFpp7jSqPlkq4QuV630NnWzXjZ5jXloGcYpHiT +KW0GWYGHrBOZFyK/ZRmkCJ2CVTpLl5Idxv8RS3RKPJ/QTSjoc9M+hLxFVRPO7O9 p61TkGFENw1Ml6rXAFyOvCdmr5zHMXu2XlplNEiuQA1Hsv+cj4r2vfTTcXe5e4G9 BrOucLoDOp3vrdLozINUQhb0espyQdsbldFIioXAMNM1chZqgilvjBOvLMaOG54D l/iEhyabLiDl2fr8zl+phGZYaFZop2c= -----END CERTIFICATE-----Generated at Sat Aug 23 18:21:46 2025 by rpki-client