$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2dadf1d2-4523-346c-963f-5eee805f84a5.roa File: 2dadf1d2-4523-346c-963f-5eee805f84a5.roa (raw, json) Hash identifier: oCntV5AiRuqJAaGCPt0y1R4klyPnYAq9LyAU3yklOII= Subject key identifier: 36:89:73:81:08:45:74:F4:5E:D5:89:81:1E:3C:66:5C:CA:9F:6B:7E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584ADC00FE0C5A1279FDBE867700 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2dadf1d2-4523-346c-963f-5eee805f84a5.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.161.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:00:fe:0c:5a:12:79:fd:be:86:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=dcb80a0e-afb9-4364-8f17-0a187ece157c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fe:a1:a9:e4:83:32:55:63:10:e3:ae:a4:d1: 12:b0:99:5a:88:c4:0d:fb:84:2c:2d:9b:ae:a7:22: a8:7e:2a:c6:f4:57:20:0d:d9:5a:4e:89:37:5b:9f: 50:af:70:53:09:b2:09:19:eb:a0:29:2e:72:a9:e0: 99:53:59:be:63:83:00:1e:87:fc:cc:58:84:08:19: cd:f5:82:3b:10:d3:c8:dd:4e:62:fd:d7:a1:c1:f5: 20:b0:40:ad:6f:b9:99:63:9f:63:3f:eb:10:00:d5: 67:a9:08:2e:8f:ae:df:c9:e9:79:8d:db:42:78:08: 74:fe:a4:c9:62:8a:e4:61:11:7b:cd:fb:4f:4f:11: 5c:db:8a:32:32:d7:76:f0:d2:99:ee:de:e5:5d:ce: 85:0c:28:6e:fa:32:15:78:0f:41:37:57:49:d1:bc: 7f:97:28:f2:24:27:1a:f9:9f:8d:df:53:e2:85:b0: 00:46:c8:30:40:09:bc:02:52:a0:61:f4:f3:e8:44: 2a:e7:e6:9a:d0:ff:91:55:d0:41:42:9b:59:6e:0a: 37:d2:c7:6d:f2:4c:a0:54:b9:96:82:e9:cb:28:d6: 98:98:1a:cc:6d:83:5f:b6:bf:40:77:3b:2f:e9:d0: 03:8d:28:e9:ea:93:fa:1c:99:66:d6:c6:74:d8:c2: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:89:73:81:08:45:74:F4:5E:D5:89:81:1E:3C:66:5C:CA:9F:6B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2dadf1d2-4523-346c-963f-5eee805f84a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d7:db:e6:09:8f:aa:d4:e0:fe:a5:34:ea:25:9a:db:a1:9a: 23:f2:23:c3:16:8f:37:5b:93:39:dc:c3:45:4e:9c:9b:cc:91: fe:21:b6:63:9f:ef:1c:1c:20:94:6e:42:38:c9:37:d3:e0:21: 3f:62:57:57:16:88:84:bb:be:91:a0:c2:85:91:18:03:cc:26: 0d:a2:dc:f4:26:38:d6:07:2a:79:ab:b2:63:6e:c1:4b:c9:7d: ec:3a:55:44:bc:85:87:21:9f:bb:53:54:4e:b1:48:bc:6a:46: e6:80:9d:e0:3d:d0:d6:68:58:a0:a7:ab:a8:ad:28:37:1b:a5: e4:00:fa:16:b4:e4:6b:6d:d2:c4:25:cc:1e:9a:58:a3:5b:e1: c7:35:4e:7f:0c:9a:d0:c5:35:ea:9e:32:93:7e:83:85:6f:d0: a7:2d:39:8c:60:8f:29:cf:26:e4:1d:b7:e6:36:15:61:6d:05: c4:8d:4a:dc:fb:50:f9:6d:6c:06:0f:6c:38:2b:e1:77:51:cf: bf:08:91:ae:08:f8:a1:0d:16:29:3d:ba:9d:62:9c:ff:a2:4f: c9:66:8b:ec:19:2f:66:77:99:69:bf:bd:3c:c3:28:b3:df:5a: 78:77:1e:75:8d:f5:e3:1c:f6:db:46:70:bf:9d:d5:31:23:18: b0:be:d5:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErcAP4MWhJ5/b6GdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk ZGNiODBhMGUtYWZiOS00MzY0LThmMTctMGExODdlY2UxNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv6hqeSDMlVjEOOupNESsJlaiMQN+4QsLZuu pyKofirG9FcgDdlaTok3W59Qr3BTCbIJGeugKS5yqeCZU1m+Y4MAHof8zFiECBnN 9YI7ENPI3U5i/dehwfUgsECtb7mZY59jP+sQANVnqQguj67fyel5jdtCeAh0/qTJ YorkYRF7zftPTxFc24oyMtd28NKZ7t7lXc6FDChu+jIVeA9BN1dJ0bx/lyjyJCca +Z+N31PihbAARsgwQAm8AlKgYfTz6EQq5+aa0P+RVdBBQptZbgo30sdt8kygVLmW gunLKNaYmBrMbYNftr9Adzsv6dADjSjp6pP6HJlm1sZ02MI8+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaJc4EIRXT0XtWJgR48ZlzKn2t+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmRhZGYxZDItNDUyMy0z NDZjLTk2M2YtNWVlZTgwNWY4NGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbX2+YJj6rU4P6lNOolmtuhmiPyI8MWjzdbkzncw0VOnJvMkf4htmOf 7xwcIJRuQjjJN9PgIT9iV1cWiIS7vpGgwoWRGAPMJg2i3PQmONYHKnmrsmNuwUvJ few6VUS8hYchn7tTVE6xSLxqRuaAneA90NZoWKCnq6itKDcbpeQA+ha05Gtt0sQl zB6aWKNb4cc1Tn8MmtDFNeqeMpN+g4Vv0KctOYxgjynPJuQdt+Y2FWFtBcSNStz7 UPltbAYPbDgr4XdRz78Ika4I+KENFik9up1inP+iT8lmi+wZL2Z3mWm/vTzDKLPf Wnh3HnWN9eMc9ttGcL+d1TEjGLC+1co= -----END CERTIFICATE-----Generated at Sat Aug 23 18:38:50 2025 by rpki-client