$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c57040a-21fd-373d-8b33-4e16f3470c09.roa File: 3c57040a-21fd-373d-8b33-4e16f3470c09.roa (raw, json) Hash identifier: S5ygMguJpm7sorFDPBpnNOv5r2ypR6Pa0ZGli5kOaKk= Subject key identifier: 91:2D:57:FF:98:F8:E9:7E:22:31:BC:49:33:75:55:5A:6D:8B:02:9D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AD0D6400819FC2A1D9CD46D30 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c57040a-21fd-373d-8b33-4e16f3470c09.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.178.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:40:08:19:fc:2a:1d:9c:d4:6d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=58cba364-cf80-4023-8683-be9864442680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:96:95:25:db:78:36:86:6b:9f:63:19:d0: 99:db:52:cd:13:4c:91:66:98:9c:fe:e0:a3:9f:3f: 81:c7:a9:92:8a:38:66:97:62:ce:da:7b:13:92:ff: 12:89:bc:83:b9:a2:5f:12:fb:aa:c5:ea:8e:e4:bc: fe:f0:57:dd:13:be:8a:40:97:39:7e:8b:3e:9a:de: 44:f2:0b:04:3f:33:d4:30:3e:5d:b6:ba:09:85:2d: df:72:39:7f:c2:08:14:78:53:6c:cc:4a:31:de:4a: 93:ee:b2:e8:35:2c:25:fc:c5:ba:1e:1e:65:eb:e5: 0e:f9:27:55:9d:f4:75:41:95:41:65:c5:82:c2:59: f3:8c:e0:1f:49:7e:0b:14:db:89:74:3a:c2:db:60: 59:0e:42:57:b6:06:68:03:ab:a1:e9:e5:cd:c4:a0: 1a:b9:6f:f4:68:a4:f7:3a:4f:3c:d5:aa:ef:3b:2f: 62:34:74:39:5d:b5:75:3e:92:f5:b9:b1:3e:8d:e9: 9d:d4:3f:de:e9:b9:3a:4c:e5:94:19:a8:95:4d:14: 92:bc:fd:11:dd:9a:1a:63:28:7b:f6:15:ac:c3:60: 69:a7:e1:45:3f:09:c7:85:e4:e6:5a:08:33:d4:dc: 00:69:8d:b0:35:6c:e6:10:4e:ff:00:9f:d7:0e:3f: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2D:57:FF:98:F8:E9:7E:22:31:BC:49:33:75:55:5A:6D:8B:02:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c57040a-21fd-373d-8b33-4e16f3470c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d1:c3:cd:b3:91:69:c9:66:b2:e9:e7:43:dd:8b:d1:84:f1: bd:b6:c2:97:64:d9:57:f6:0b:c3:e1:e4:ec:d4:08:dc:84:10: e0:13:2c:00:b3:87:9e:02:b3:05:b8:cf:00:28:31:d9:0c:aa: 77:7b:ec:47:f0:38:85:9b:4b:6c:54:1a:58:43:3c:f7:7c:95: c0:59:5a:35:f4:33:d3:4e:02:0f:ba:01:5f:39:85:da:cd:d2: bd:2b:dc:c8:ba:44:b5:dc:d4:a0:c2:61:cb:05:ca:5f:05:a6: 65:74:5d:4d:f3:ee:86:6a:7c:84:03:c9:31:d1:f1:c7:e7:60: d3:24:88:32:d2:09:ac:07:8b:5b:68:14:45:5d:39:1f:9d:ce: d2:b4:f8:02:70:78:64:56:c8:df:f6:fa:f1:55:1d:18:d4:8e: 90:56:e4:67:3c:59:f1:42:ed:35:a4:be:f9:f4:60:25:61:1e: a9:32:ac:92:00:cf:1a:31:c8:ba:db:94:d0:1d:c5:e9:77:05: 8b:9b:3d:e2:89:8a:58:ea:fd:4a:bc:7f:0c:35:bc:92:07:1c: bf:33:1c:a9:da:fe:d2:07:80:4f:89:e5:b0:4e:71:e3:f9:00: fc:19:f6:5b:e9:a6:bb:a3:7f:a4:17:5c:15:aa:95:2d:36:a1: c2:d6:88:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kAIGfwqHZzUbTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NThjYmEzNjQtY2Y4MC00MDIzLTg2ODMtYmU5ODY0NDQyNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCaWlSXbeDaGa59jGdCZ21LNE0yRZpic/uCj nz+Bx6mSijhml2LO2nsTkv8SibyDuaJfEvuqxeqO5Lz+8FfdE76KQJc5fos+mt5E 8gsEPzPUMD5dtroJhS3fcjl/wggUeFNszEox3kqT7rLoNSwl/MW6Hh5l6+UO+SdV nfR1QZVBZcWCwlnzjOAfSX4LFNuJdDrC22BZDkJXtgZoA6uh6eXNxKAauW/0aKT3 Ok881arvOy9iNHQ5XbV1PpL1ubE+jemd1D/e6bk6TOWUGaiVTRSSvP0R3ZoaYyh7 9hWsw2Bpp+FFPwnHheTmWggz1NwAaY2wNWzmEE7/AJ/XDj8x/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEtV/+Y+Ol+IjG8STN1VVptiwKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2M1NzA0MGEtMjFmZC0z NzNkLThiMzMtNGUxNmYzNDcwYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjRw82zkWnJZrLp50Pdi9GE8b22wpdk2Vf2C8Ph5OzUCNyEEOATLACz h54CswW4zwAoMdkMqnd77EfwOIWbS2xUGlhDPPd8lcBZWjX0M9NOAg+6AV85hdrN 0r0r3Mi6RLXc1KDCYcsFyl8FpmV0XU3z7oZqfIQDyTHR8cfnYNMkiDLSCawHi1to FEVdOR+dztK0+AJweGRWyN/2+vFVHRjUjpBW5Gc8WfFC7TWkvvn0YCVhHqkyrJIA zxoxyLrblNAdxel3BYubPeKJiljq/Uq8fww1vJIHHL8zHKna/tIHgE+J5bBOceP5 APwZ9lvpprujf6QXXBWqlS02ocLWiD0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:19:55 2025 by rpki-client